Audit log – HP StorageWorks XP10000 Disk Array User Manual
Page 18
• View: If you have this authority, you can view the operation authority of all user accounts. You
cannot add, change, or delete any user accounts. However, you can change your own password.
• Disable: You cannot view or change the settings of other user accounts. However, you can change
your password and view the operation authorities for your user account.
•
Audit Log Administrator Role (audit log operation authority): The audit log administrator role
provides the authority to download audit log information files and perform syslog-related
operations. You can set the audit log administrator role for the user account with
the user type of storage administrator. For further information on audit log files, see
Downloading the Audit Log File
” on page 101. For details regarding syslog-related operations, see
Checking the Audit Log by Using the Syslog Server (Syslog Pane)
” on page 103. For each user
account, you can specify one of the following parameters for the audit log administrator:
• Modify: If you have this authority, you can download an audit log information file by using the
button for audit log information file download, and configure the FTP servers and transfer the
audit log information file manually by using the Audit Log panel. You can also configure the
syslog servers and download the syslog information file by using the Syslog panel. The operation
authority “Modify” has been set for the user account of user ID “root”.
• View: If you have this authority, you can download an audit log information file by using the
button for audit log information file download. You can also view the settings on the Syslog panel
or the Audit Log panel, and download the syslog information file by using the Syslog panel.
However, you are not allowed to change the setting of the Syslog panel and the Audit Log panel.
You cannot transfer the audit log information file manually by using the Audit Log panel.
• Disable: You have no operation authority for the audit log. You cannot use the audit log
information file download button, and the Syslog pane, and the Audit Log panel.
•
Storage administrator role (storage operation authority): The storage administrator role provides the
authority to perform operations involving product options and the Set Env. pane. For each user
account, you can specify one of the following parameters for the storage administrator:
• Enable: You have authority to perform operations for product options and the Set Env. pane. Only
user accounts for which the storage administrator role authority is set to Enable can be used to set
the details of the operation authority for each product option. The operation authority Enable has
been set for the user account of user ID “user.” Also for the user account with the user ID of “user”,
the Modify authority is set for the operations of all product options.
• Disable: You do not have authority to perform operations for product options or operations
involving the Set Env. pane. For the operation authority for each function, the Modify authority
might be set. However, if Disable is set for the authority of the storage administrator role, the
operation authority for each function also will be disabled.
•
Operation authority for each function: You can set the operation authority for XP Remote Web
Console for functions involving product options. To set the operation authority for functions available
for each user account, set Enable for the authority of the storage administrator role. For each user
account, you can specify one of the following parameters for the operation authority:
• Modify: You can perform the operations by using each function.
• View: You can view the pane for each function. However, you cannot perform the operation.
Audit Log
In the audit log, the history information of the operation performed from Remote Web Console is saved.
Since it is recorded on the audit log who performed what operation when, the audit log can be used to
investigate when an incorrect setup is performed or when a trouble occurs in the XP USP subsystem.
You can view audit log by the following methods:
•
Transferring audit log to FTP servers
•
Transferring audit log to syslog servers
•
Downloading audit log to Remote Web Console computer
You can download two files with different formats to Remote Web Console computer. The file that has the
same format as the audit log transferred to syslog servers is called syslog information file. The file that has
the same format as the audit log transferred to FTP servers is called audit log information file.
18
Overview of XP Remote Web Console Operations