HP XP20000/XP24000 HP StorageWorks XP24000/XP20000 Audit Log Reference Guide ( - Page 19

Table 1 Audit Log File Components (continued) Component Audit Log Information File Syslog Information File Linefeed Codes CR + LF (Some text editors cannot display these LF codes correctly) File Output Contains login and logout information as well as Contains information released to both the syslog basic and detailed information about settings and audit log information file and information made for each option. Basic information consists released only to the syslog information file. See of information common to each audit log. "Syslog Information File" (page 22) for more Detailed information consists of information about information. the operations of each executed option. This includes an index representing each item and its values. Maximum Line Size 512 bytes 1,024 bytes Maximum 250,000 Number of Lines 250,000 Maximum File Size 122.5 MB 244.6 MB Threshold Once the information stored in the audit log Check Audit Log - Event in the syslog information information file reaches its maximum capacity, file. the starting line of the oldest data begins to be [Audit Log], Over Threshold overwritten with the starting line of the newest data (wrap around). (File has reached 50% of the maximum number When you reach 70% of this threshold, the yellow of lines.) Audit: Warning button appears on the Remote [Audit Log], Over MaxLine Web Console main window. Start downloading the audit log information file at or before this threshold to prevent the old data from being overwritten. (Size of file has reached its maximum number of lines and data is being overwritten.) See #29 in "Items in the Syslog File" (page 23) and "Syslog Information File Monitoring • If an FTP server is specified, the audit log Threshold" (page 26). information file will be transferred to the FTP server when the information stored in the audit log information file reaches the 70% threshold. • If the information stored in the audit log information file exceeds the maximum, and data is being overwritten, the red Audit: Wraparound button appears. • Once you download or transfer the audit log information file, the counter is reset. Do not use the transfer to the FTP server in combination with the manual download. The line counter will reset if the audit log information file is downloaded manually while the transfer to the FTP server is specified, and some information may not be transferred to the FTP server. Therefore, download the file manually only when the transfer to the FTP server is disabled due to a failure of the FTP server, or some other reason. Audit Log File Description 19