Page History

This object allows you to:

• Enable

• the Platform Audit logs to record all administrative, privileged, and security actions.
• Push the audit logs to a remote server by specifying the following:
  • Remote host IP address
  • Port number
  • Protocol type

When these fields are configured and the state of the object Platform Audit Logs is enabled, the /etc/rsyslog.conf file of the SBC is automatically configured to send the audit logs to the remote server. The SBC automatically adds an Access Control List (ACL) rule to send the audit logs through the application layer to the remote server.

To View and Edit Platform Audit Logs

On SBC main screen, go to All > OAM > Event Log > Platform Audit Logs. The Platform Audit Logs window is displayed.

The following

fields are displayed:

Once enabled, the SBC starts generating Platform Audit Logs.

To view the Platform Audit Logs, execute the following steps:

1. On the SBC main screen, navigate to Troubleshooting > Troubleshooting Tools > Search Audit Logs. The Audit Logs window, containing the Search Audit Logs pane, is displayed.

2. Select the radio button corresponding to Platform Audit Logs option.

   Caption
   0 Figure 1 Platform Audit Logs
   Image Modified

For

more information on the search and filtering tools offered in the Search Audit Logs pane, refer to Troubleshooting Tools - Search Audit Logs.