Auditcfg – Dell POWEREDGE M1000E User Manual
Page 83
Fabric OS Command Reference
51
53-1001764-02
auditCfg
2
auditCfg
Modifies and displays the audit log filter configuration.
Synopsis
auditcfg --class audit_class
auditcfg --enable |--disable
auditcfg --severity severity_level
auditcfg --show
Description
Use this command to configure the audit logging and to display the audit log configuration. This
command allows you to set filters by configuring certain classes, to add or remove any of the
classes in the filter list, to set severity levels for audit messages, and to enable or disable audit
filters. Based on the configuration, certain classes are logged to syslog for auditing. Syslog
configuration is required for logging audit messages. Use the syslogdIpAdd command to add the
syslogd server IP address.
Note
The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may
be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command
Availability" for details.
Operands
This command has the following operands:
--
class
Configures filters for a specified audit class. To add or remove any of the
classes in the filter list, reissue the --class option.
audit_class
Specifies the filters to be configured. Valid values are: 1-ZONE, 2-SECURITY,
3-CONFIGURATION, 4-FIRMWARE and 5-FABRIC filters. This operand is
required.
--
severity
Sets audit severity level. When severity is set, only log messages of type
severity_level and higher are displayed.
severity_level
Valid values are INFO, WARNING, ERROR, and CRITICAL. By default, all
messages are logged. This operand is required.
--
enable Enables
all
filters.
--
disable
Disables all filters.
--
show
Displays the current configuration. This operand is optional.
Examples
To configure the audit log filter, disable audit logging, and show the configuration:
switch:admin>
auditcfg --class 2,3
Audit filter is configured.
switch:admin>
auditcfg --disable
Audit filter is disabled.