Cooper M3000 Betriebsanweisung PDF herunterladen (Seite 156)

2-116 SPARC Enterprise Mx000 Servers XSCF User’s Guide • December 2010

2.2.9 Audit Administration

Audit administration is used to specify logging of access details, such as which users logged

in to XSCF, their login times, and the operations that they executed. In the server, the default

access audit setting is enabled. The main audit settings include the access audit

enable/disable setting (see

TABLE 2-16) and audit trail management method (see TABLE 2-16).

Collecting Audit Data

The server controls the audit module of XSCF firmware to provide an audit trail. When

related event information is obtained, the XSCF firmware collects audit information as

follows:

1. Audit event data is logged in the form of audit records (see

TABLE 2-16).

2. The audit records are stored in order by date in the local audit files of the XSCF firmware

(see

TABLE 2-16).

3. The audit files are linked and become an audit trail (see

TABLE 2-16).

4. Audit records are thus kept as an audit trail so that the user can refer to the Audit trail (see

viewaudit(8) ).

TABLE 2-16 lists terms used in audit administration.

TABLE 2-16 Audit Administration Terms

Term Description

Audit Function for auditing system access. It is also called auditing.

Audit event Security-related system action that can be audited.

Multiple audit events can be specified with values or names.

(Example: AEV_LOGIN_SSH, LOGIN_SSH, 0, all)

Audit class Group of audit events related to one another.

(Example: Audit events in the login audit class: SSH login, telnet login, https login, logout)

Multiple audit classes can be specified. (Example: ACS_AUDIT, AUDIT, 2, all)

Audit record One audit record is information specifying one audit event. An audit record contains an event,

the event time, and other related information.

Audit records are stored in audit files.

Audit file This is also called an audit log file. One audit file (log file) contains multiple audit records.

1 2 ... 151 152 153 154 155 156 157 158 159 160 161 ... 431 432

Keine Kommentare

Cooper M3000 Betriebsanweisung Seite 156