SNMP audit logging
SNMP audit logging provides logging information about specific TS4500 tape library user actions.
The tape library provides various interfaces that allow a user to configure different library or drive settings, move cartridges within or out of the library, and other actions. In addition, the tape library provides notifications, in the form of SNMP traps, that provide a log of when certain activities take place. With SNMP traps, you have more capabilities for monitoring these activities and the physical security of the library.
SNMP audit logging sends the log information over a TCP/IP local area network to an SNMP manager, just as SNMP traps are sent for library alerts.
The following events are logged:
- Login attempts, whether granted or denied
- Logouts (timeout, logout, or force logout)
- Any configuration change
- Any data or cleaning cartridge move that is initiated from a library user interface
- Any code load operation (library or drive) initiated from a library user interface and not associated with an FRU replacement
- Any prepare or finish service procedure that is initiated from a library user interface, including set storage slot offline or online
- Any drive serial number change not associated with an FRU replacement
- Any drive power cycle that is initiated from a library user interface
- Any node card reset that is initiated from a library user interface
- Door open events
The following information is provided in the logs for each of these events:
- Machine type, model, and serial number of the reporting machine
- The user name that initiated the event
- Level of severity
- Trap ID
- Description of the event