Viewing audit results for a mail audit task, Querying audit results for a mail audit task – H3C Technologies H3C Intelligent Management Center User Manual
Page 69
60
a001:410:0:1::1/64
An example of a valid IPv6 address entry:
a001:410:0:1::1- a001:410:0:1::100
d.
Select the Destination Port option and enter the destination port number in the format of 21 or
21-100.
e.
Select the Device option and enter a single IPv4 or IPv6 device IP address in the Device field.
The device is the switch, router, or probe that generates flow records.
7.
Click OK.
NOTE:
You must configure the Name and Server fields. You can configure other fields as needed.
Viewing audit results for a mail audit task
Querying audit results for a mail audit task
1.
Access the User Behavior Audit Management page.
2.
Click the Audit icon for the mail audit task for which you want to view audit results.
The audit result page for the mail audit task appears.
For more information about querying audit results for a mail audit task, see "
Viewing the audit result list for a mail audit task
The audit result list for a mail audit task displays the audit results for the audit task in the specified time
range.
If the number of audit result entries exceeds the value of the Max. Displayed Entries for Audit field in the
system parameters configuration, for example, 1000, the list displays only 1000 audit result entries. If
you want to view more audit result entries, click Continue. The list displays the next 1000 audit result
entries each time you click Continue.
The audit result list for a mail audit task displays the following contents:
•
Start Time—Start time of the mail sending.
•
End Time—End time of mail sending.
•
Source—Source IP address of the mail sending.
•
Destination—Destination IP address of mail sending.
•
Port—Port number of the mail sending.
•
Sender—Mail address of the sender.
•
Receiver—Mail address of the receiver.
•
Title—Title of the mail.
•
Device—IP address of the device or probe that generates flow records.
•
Terminal Type—Type of the endpoint used by the access user.
•
Operating System—Operating system of the endpoint used by the access user.