Hitachi Global Link Manager Software Installation and Configuration Guide

If an account is locked because the authentication method was changed
for a user whose password is not set, this information is not recorded in
the audit log.
#2
If an account is unlocked because a password was set for a user, this
information is not recorded in the audit log.
Editing the Environment Settings File for Audit Logs
To generate Global Link Manager audit logs, you must edit the environment
settings file (auditlog.conf). Once the categories of the audit events for
which a log is to be generated are specified for Log.Event.Category in the
environment settings file, audit logs can be generated. Audit logs are output
to the Windows event log file. For details on the event log format, see
Output
Format of the Event Log Files on page 8-14.
Note: Collecting an audit log causes a huge amount of event data to be
output. Make sure that you change the size of the event log file, and save
and archive the generated log files.
The location of the auditlog.conf file is as follows:
Hitachi-Command-Suite-Common-Component-installation-folder\conf\sec
The following table lists and describes the items specified in the
auditlog.conf file.
Table 3-19 Items Specified in the auditlog.conf File
Item Description
Log.Facility
This item is not used, and is ignored if specified.
Log.Event.Category
Specifies the category of the audit events for which a log is
to be generated. To specify multiple categories, use a
comma (,) to separate each category. Do not enter a space
between a comma and the category. By default, the
category is not specified, so if you fail to specify it, the
audit log is not output. For details on the types you can
specify, see
Categories of Information Output to Audit Logs
in Global Link Manager, and Audit Events on page 3-62.
Log.Level
Specifies the severity of the audit events for which a log is
to be generated. Information whose severity is the
specified value or lower will be output. For details on the
audit events output in Global Link Manager, see Categories
of Information Output to Audit Logs in Global Link
Manager, and Audit Events on page 3-62. For details on
the correspondence between the severity levels of audit
events and the types of event log data, see Table 3-19
Correspondence Between the Severity Levels of Audit
Events and the Types of Event Log Data.
The following shows how the event log types correspond to
the audit event severity. For example, if you want to
output error and warning information, specify 4.
• Error: 3
Setting Up Global Link Manager
3-67
Hitachi Global Link Manager Installation and Configuration Guide (Web Version)