26 hp sim audit log, Configuring the hp sim audit log, Configuring the tool definition files – HP Systems Insight Manager User Manual
Page 141: Configuring the log.properties file, Viewing the audit log, Example audit log
26 HP SIM Audit log
HP SIM logs all
performed by all HP SIM users on all systems. The information is stored in
the Audit Log file on the CMS. Several features of the HP SIM Audit Log are configurable. For
example, you can specify which tools log data and the maximum Audit Log file size. The HP SIM
Audit Log is configured through the log.properties file, and tool logging is enabled or disabled
through the XML tool definition files.
On Windows, the audit log can be found at the <SIM installdir>/logs/mx.log . On
Linux and HP-UX, the audit log can be found at /var/opt/mx/logs/mx.log. These are rolled
over to mx.log.old when the file reaches the maximum default size of 20 MB.
Configuring the HP SIM audit log
Configuring the HP SIM Audit log is performed from the CLI, and you must be signed-in as root or
administrator.
Configuring the tool definition files
The XML tool definition file provides an option to disable logging of SSA and MSA command tools.
The log attribute for the command element specifies whether the results of the command are output
to the HP SIM log file. Command output is logged by default.
Configuring the log.properties file
You might need to create the file and name it log.properties if one does not exist in the
directory. HP SIM uses default values when the file does not exist or when a variable is not defined
in the file.
For Windows, the file is located in <SIM installdir>/logs/mx.log.
For Linux and HP-UX, the file is located in /var/opt/mx/logs/mx.log. This is rolled over to
the mx.log.old file when it reaches the maximum configured size of 20MB.
The file is rolled over to the mx.log.old file when it reaches the maximum configured size of
20MB.
Viewing the audit log
HP SIM logs all tasks performed by all HP SIM users on all systems. The information is stored in
the Audit Log file on the CMS.
NOTE:
You must be signed-in as root or administrator (or any user with administrative rights) to
read the audit log file directly.
Procedure 35 Viewing the HP SIM audit log
1.
Select Tasks & Logs
→View Systems Insight Manager Audit Log. The Audit Log page appears.
2.
Select the log entries you want to view by selecting one of the following options:
•
most recent 40 entries. Select this to view a selectable number of the most recent log
entries. The default is set to view the 40 most recent log entries.
•
from entry " " to entry " ". Select this option to view an indexed range of log entries.
3.
Click View Now. The requested log entries appear.
Example audit log
Example Audit Log: User "partner" runs tool "ls" on cup11.hp.com from cup12.hp.com
from CMS cup12.hp.com
Configuring the HP SIM audit log
141