HP XP7 Audit Log User and Reference Guide (H6F56-96001)

Prerequisites
• You must have Audit Log Administrator (View Only) or Audit Log Administrator (View & Modify)
role.
• Ensure that SVP is connected to the FTP server on a LAN.
• Transfer setting to the FTP server must be finished. For how to set, refer to “Automatically
transferring audit log files to FTP servers” (page 27).
To transfer the audit log file to the FTP server:
1. Click Settings > Security > Edit Audit log Settings. Select FTP tab on the Edit Audit Log Settings
window.
2. Click Transfer to Primary Server or Transfer to Secondary Server. A message appears indicating
that the transfer has completed.
Related topics
• “Edit Audit Log Settings wizard” (page 314)
Transferring audit log to syslog servers
If you configure syslog server settings, the audit log will always be transferred to the syslog server
and stored as the syslog files.
You can select either of the following protocols to transfer the audit log to the syslog server. The
output file format is different by the selected protocol.
• TLS1.2/RFC5424
• UDP/RFC3164
NOTE: When you use UDP/RFC3164, consider the characteristics of UDP (User Datagram
Protocol) when designing a network. See RFC3164 (Request for Comments) issued by IETF (Internet
Engineering Task Force) for more details.
NOTE: Keep a list of the items such as the IP address you entered in the Syslog tab on Edit Audit
Log Settings window. You may need to enter them again when an SVP is replaced.
Prerequisites
• You must have Audit Log Administrator (View & Modify) role to configure syslog server settings.
• Make sure the storage system is connected to syslog servers on a LAN.
• Make sure the syslog servers are configured so as to transfer audit logs to the syslog servers.
• The syslog server certificate and the client certificate is required to use TLS1.2/RFC5424. See
HP XP7 Remote Web Console User Guide for details.
CAUTION: If audit logs are transferred before configuring the setting of a syslog server to which
the audit logs are transferred, the logs are not saved on the syslog server and lost. See the user
manual of the syslog server for the details of the syslog server setting.
To transfer audit log files:
1. Click Settings > Security > Edit Audit Log Settings. Select Syslog tab on the Edit Audit Log
Settings window.
2. Select New Syslog Protocol (TLS1.2/RFC5424) or Old Syslog Protocol (UDP/RFC3164).
3. Click Enable the Primary Server.
1. Select IPv4 or IPv6 on Server setting and enter the IP address.
Transferring audit log to syslog servers 29