HP XP P9000 Audit Log User and Reference Guide

If the log is not received by the syslog server, check whether the IP address and the port number
set matches with the IP address and the port number of the syslog server. If the IP address and the
port number match, check the syslog server setting. See the user’s manual of the syslog server for
the details of the syslog server setting.
Storing audit logs
When storing audit logs, you can temporarily store them on a system disk before storing the logs
in the SVP, or store audit logs directly in the SVP. To prevent possible loss of the audit logs if the
SVP fails, HP recommends that you temporarily store audit logs on a system disk before storing
the logs in the SVP.
If you transfer audit logs directly to an SVP and the SVP has failed, the audit logs might be lost
because the SVP cannot receive the transferred audit logs. Temporarily storing audit logs to a
system disk can reduce the risk of losing them. The audit logs stored to the system disk will be
eventually stored to the SVP.
Prerequisites
• You must have Audit Log Administrator Role View & Modify) role to store audit logs.
• You must create a system disk before you temporarily store an audit log to the SVP via the
system disk.
To configure how to store audit logs:
1. Open the Remote Web Console main window.
2. Click Settings>→Security>→Audit Log Setting. The Audit Log Setting window appears.
3. Click to change to Modify mode.
4. Select one of the following to set the audit log storage method.
• Enable to temporarily store audit logs in a system disk before storing the logs in the SVP.
• Disable to store audit logs directly in the SVP.
5. Click Apply.
6. Click OK.
Storing audit logs 27