beautypg.com

Auditcfg – Dell POWEREDGE M1000E User Manual

Page 87

background image

Fabric OS Command Reference

59

53-1002746-01

auditCfg

2

auditCfg

Modifies and displays the audit log filter configuration.

SYNOPSIS

auditcfg --class audit_class

auditcfg --enable | --disable

auditcfg --severity severity_level

auditcfg --show

DESCRIPTION

Use this command to configure the audit logging and to display the audit log configuration. This
command allows you to set filters by configuring certain classes, to add or remove any of the classes in
the filter list, to set severity levels for audit messages, and to enable or disable audit filters. Based on the
configuration, certain classes are logged to syslog for auditing. Syslog configuration is required for
logging audit messages. Use the syslogdIpAdd command to add the syslogd server IP address.

NOTES

The MAPS class is for internal use only.

The RAS class is not configurable; its function is to audit the audit log management operations and it is
always enabled internally.

The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in
place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for
details.

OPERANDS

This command has the following operands:

--class

Configures filters for a specified audit class. To add or remove any of the classes
in the filter list, reissue the --class option.

audit_class

Specifies the filters to be configured. Valid values are: 1-ZONE, 2-SECURITY,
3-CONFIGURATION, 4-FIRMWARE, 5-FABRIC, 6-FW (Fabric Watch), and 7-LS
(Logical Switch), 8-CLI, 9-MAPS (internal use only). The filter is specified by its
numeric value. To add more than one filter, the numeric values must be separated
by commas. Spaces are not permitted. This operand is required.

--severity

Sets audit severity level to a specified value. When severity is set, only log
messages of type severity_level and higher are displayed. You cannot enter
multiple severity levels.

severity_level

Valid values are INFO, WARNING, ERROR, and CRITICAL. By default, all
messages are logged. This operand is required.

--enable

Enables all filters. This action enables an existing configuration; it does not
change the configuration.

--disable

Disables all filters.This action disables an existing configuration; it does not
change the configuration.

--show

Displays the current configuration. This operand is optional.