Exporting syslog server audit logs

You can export a syslog server audit log. Audit logs provide a record for auditing purposes to determine when changes were made to a storage system and by which user. Only informational messages are forwarded to the syslog server.

A user who is defined with an administrator role can export the audit log from two management consoles. The .log file is downloaded in a .zip file. The .zip file can have one or two logs depending on the number of management consoles. After the administrator downloads the .zip file, the contents can be extracted.

Exporting an audit log

On either the Events page or the Users page in the DS8000® Storage Management GUI, click the Export icon and select Export Audit Log. The audit log is exported as a compressed .zip file.

Result
The zip file has the format:
ESSNetworkInterce.yyyy.n.nn.nn.nn.nn.zip
The log has the format of:
IBM-2107-nnnnnnn_auditlog_HMCn.log