H3C Technologies H3C SecPath F1000-E - Manual (Page 250)

27
# Re-log in to the device as user seclog.
C:/> telnet 1.1.1.1
******************************************************************************
* Copyright (c) 2004-2009 Hangzhou H3C Tech. Co., Ltd. All rights reserved. *
* Without the owner's prior written consent, *
* no decompiling or reverse-engineering shall be allowed. *
******************************************************************************
Login authentication
Username:seclog
Password:
# Display the summary of the security log file.
display security-logfile summary
Security-log is enabled.
Security-log file size quota: 1MB
Security-log file directory: cfa0:/seclog
Alarm-threshold: 80%
Current usage: 0%
Writing frequency: 1 hour 0 min 0 sec
The above information indicates that the directory for saving the security log file is cfa0:/seclog.
# Change the directory where the security log file is saved to cfa0:/securitylog.
mkdir securitylog
.
%Created dir cfa0:/securitylog.
info-center security-logfile switch-directory cfa0:/securitylog/
# Display contents of the security log file buffer.
display security-logfile buffer
%@175 Nov 2 17:02:53:766 2009 Sysname SHELL/4/LOGOUT:
Trap 1.3.6.1.4.1.25506.2.2.1.1.3.0.2: logout from Console
%@176 Nov 2 17:02:53:766 2009 Sysname SHELL/5/SHELL_LOGOUT:Console logged out from con0.
Contents of other logs are omitted here.
The above information indicates that there is still new content in the buffer that has not been saved into
the security log file yet.
# Save the contents of the security log file buffer into the security log file manually.
security-logfile save
Info: Save all the contents in the security log buffer into file
cfa0:/securitylog/seclog.log successfully.
# Display the contents of the security log file.
more securitylog/seclog.log
%@157 Nov 2 16:12:01:750 2009 Sysname SHELL/4/LOGIN:
Trap 1.3.6.1.4.1.25506.2.2.1.1.3.0.1: login from Console
%@158 Nov 2 16:12:01:750 2009 Sysname SHELL/5/SHELL_LOGIN:Console logged in from con0.