Viewing audit results for a general audit task, Querying audit results for a general audit task – H3C Technologies H3C Intelligent Management Center User Manual
Page 50
41
d.
Select the Source Port and Destination Port options and enter the source and destination port
numbers in the format of 21 or 21-100.
e.
Select the Protocol option and select a protocol type from the Protocol list. Options are
Unlimited, TCP, UDP, ICMP, and IPv6-ICMP.
f.
Select the Application option and select one or more applications. If you select the Application
option, you cannot select the Source Port, Destination Port, and Protocol options.
To select applications:
−
Click Select next to the Application field.
−
In the Query Applications window that appears, enter an application name in the
Application field. This field supports fuzzy matching. Select Not Limited, Yes, or No from
the Pre-Defined list.
−
Click Query.
The application list displays all applications that match the criteria. To clear the criteria,
click Reset. To display all applications, specify no criteria and click Query.
−
In the application list, select one or applications.
You can select up to five applications.
−
Click OK to return to the Add Custom General Audit page.
g.
Select the Device option and enter a single IPv4 or IPv6 device IP address in the Device field.
The device is the switch, router, or probe that generates flow records.
6.
Click OK.
NOTE:
You must configure the Name and Server fields. You can configure other fields as needed.
Viewing audit results for a general audit task
Querying audit results for a general audit task
1.
Access the User Behavior Audit Management page.
2.
Click the Audit icon for the general audit task for which you want to view audit results.
The audit result page for the general audit task appears.
For more information about querying audit results for a general audit task, see "
Viewing the audit result list for a general audit task
The audit result list for a general audit task displays the audit results for the audit task in the specified
time range.
If the number of audit result entries exceeds the value of the Max. Displayed Entries for Audit field in the
system parameters configuration, for example, 1000, the list displays only 1000 audit result entries. If
you want to view more audit result entries, click Continue. The list displays the next 1000 audit result
entries each time you click Continue.