Junos Space. Audit Logs. Release Published: Copyright 2014, Juniper Networks, Inc.

Transcription

1 Junos Space Audit Logs Release 14.1 Published:

2 Juniper Networks, Inc North Mathilda Avenue Sunnyvale, California USA All rights reserved. Juniper Networks, Junos, Steel-Belted Radius, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United States and other countries. The Juniper Networks Logo, the Junos logo, and JunosE are trademarks of Juniper Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice. Junos Space Audit Logs 14.1 All rights reserved. The information in this document is current as of the date on the title page. YEAR 2000 NOTICE Juniper Networks hardware and software products are Year 2000 compliant. Junos OS has no known time-related limitations through the year However, the NTP application is known to have some difficulty in the year END USER LICENSE AGREEMENT The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use with) Juniper Networks software. Use of such software is subject to the terms and conditions of the End User License Agreement ( EULA ) posted at By downloading, installing or using such software, you agree to the terms and conditions of that EULA. ii

3 Table of Contents About the Documentation ix Documentation and Release Notes ix Documentation Conventions ix Documentation Feedback xi Requesting Technical Support xii Self-Help Online Tools and Resources xii Opening a Case with JTAC xii Part 1 Overview Chapter 1 Audit Logs Overview Junos Space Audit Logs Overview Part 2 Configuration Chapter 2 Manage Audit Logs Converting the Audit Log File UTC Timestamp to Local Time in Microsoft Excel Exporting Audit Logs Archiving and Purging Audit Logs Archiving Audit Logs to a Local Server and Purging the Logs from the Database Archiving Audit Logs to a Remote Server and Purging the Logs from the Database Part 3 Administration Chapter 3 Manage Audit Logs Viewing Audit Logs Viewing Audit Log Statistics Part 4 Index Index iii

4 Audit Logs iv

5 List of Figures Part 2 Configuration Chapter 2 Manage Audit Logs Figure 1: Formatting the Local Times Column in Microsoft Excel v

6 Audit Logs vi

7 List of Tables About the Documentation ix Table 1: Notice Icons x Table 2: Text and Syntax Conventions x Part 3 Administration Chapter 3 Manage Audit Logs Table 3: Detailed Audit Logs Information and Audit Log Table Columns Table 4: Audit Log Details for Recurring and Nonrecurring Jobs vii

8 Audit Logs viii

9 About the Documentation Documentation and Release Notes Documentation and Release Notes on page ix Documentation Conventions on page ix Documentation Feedback on page xi Requesting Technical Support on page xii Documentation Conventions To obtain the most current version of all Juniper Networks technical documentation, see the product documentation page on the Juniper Networks website at If the information in the latest release notes differs from the information in the documentation, follow the product Release Notes. Juniper Networks Books publishes books by Juniper Networks engineers and subject matter experts. These books go beyond the technical documentation to explore the nuances of network architecture, deployment, and administration. The current list can be viewed at Table 1 on page x defines notice icons used in this guide. ix

10 Audit Logs Table 1: Notice Icons Icon Meaning Description Informational note Indicates important features or instructions. Caution Indicates a situation that might result in loss of data or hardware damage. Warning Alerts you to the risk of personal injury or death. Laser warning Alerts you to the risk of personal injury from a laser. Tip Indicates helpful information. Best practice Alerts you to a recommended use or implementation. Table 2: Text and Syntax Conventions Table 2 on page x defines the text and syntax conventions used in this guide. Convention Description Examples Bold text like this Represents text that you type. To enter configuration mode, type the configure command: user@host> configure Fixed-width text like this Italic text like this Represents output that appears on the terminal screen. Introduces or emphasizes important new terms. Identifies guide names. Identifies RFC and Internet draft titles. user@host> show chassis alarms No alarms currently active A policy term is a named structure that defines match conditions and actions. Junos OS CLI User Guide RFC 1997, BGP Communities Attribute Italic text like this Represents variables (options for which you substitute a value) in commands or configuration statements. Configure the machine s domain name: [edit] root@# set system domain-name domain-name x

11 About the Documentation Table 2: Text and Syntax Conventions (continued) Convention Description Examples Text like this Represents names of configuration statements, commands, files, and directories; configuration hierarchy levels; or labels on routing platform components. To configure a stub area, include the stub statement at the [edit protocols ospf area area-id] hierarchy level. The console port is labeled CONSOLE. < > (angle brackets) Encloses optional keywords or variables. stub <default-metric metric>; (pipe symbol) Indicates a choice between the mutually exclusive keywords or variables on either side of the symbol. The set of choices is often enclosed in parentheses for clarity. broadcast multicast (string1 string2 string3) # (pound sign) Indicates a comment specified on the same line as the configuration statement to which it applies. rsvp { # Required for dynamic MPLS only [ ] (square brackets) Encloses a variable for which you can substitute one or more values. community name members [ community-ids ] Indention and braces ( { } ) ; (semicolon) Identifies a level in the configuration hierarchy. Identifies a leaf statement at a configuration hierarchy level. [edit] routing-options { static { route default { nexthop address; retain; } } } GUI Conventions Bold text like this Represents graphical user interface (GUI) items you click or select. In the Logical Interfaces box, select All Interfaces. To cancel the configuration, click Cancel. > (bold right angle bracket) Separates levels in a hierarchy of menu selections. In the configuration editor hierarchy, select Protocols>Ospf. Documentation Feedback We encourage you to provide feedback, comments, and suggestions so that we can improve the documentation. You can provide feedback by using either of the following methods: Online feedback rating system On any page at the Juniper Networks Technical Documentation site at simply click the stars to rate the content, and use the pop-up form to provide us with information about your experience. Alternately, you can use the online feedback form at xi

12 Audit Logs Send your comments to Include the document or topic name, URL or page number, and software version (if applicable). Requesting Technical Support Technical product support is available through the Juniper Networks Technical Assistance Center (JTAC). If you are a customer with an active J-Care or JNASC support contract, or are covered under warranty, and need post-sales technical support, you can access our tools and resources online or open a case with JTAC. JTAC policies For a complete understanding of our JTAC procedures and policies, review the JTAC User Guide located at Product warranties For product warranty information, visit JTAC hours of operation The JTAC centers have resources available 24 hours a day, 7 days a week, 365 days a year. Self-Help Online Tools and Resources For quick and easy problem resolution, Juniper Networks has designed an online self-service portal called the Customer Support Center (CSC) that provides you with the following features: Find CSC offerings: Search for known bugs: Find product documentation: Find solutions and answer questions using our Knowledge Base: Download the latest versions of software and review release notes: Search technical bulletins for relevant hardware and software notifications: Join and participate in the Juniper Networks Community Forum: Open a case online in the CSC Case Management tool: To verify service entitlement by product serial number, use our Serial Number Entitlement (SNE) Tool: Opening a Case with JTAC You can open a case with JTAC on the Web or by telephone. Use the Case Management tool in the CSC at Call JTAC ( toll-free in the USA, Canada, and Mexico). xii

13 About the Documentation For international or direct-dial options in countries without toll-free numbers, see xiii

14 Audit Logs xiv

15 PART 1 Overview Audit Logs Overview on page 3 1

16 Audit Logs 2

17 CHAPTER 1 Audit Logs Overview Junos Space Audit Logs Overview Junos Space Audit Logs Overview on page 3 The Audit Logs workspace of Junos Space Network Management Platform displays the login history of and tasks initiated by a user. Through this workspace, you can track login history, device-management tasks, services that were provisioned on devices, and so on. The Audit Logs workspace does not record non-user-initiated tasks, such as device driven activities (for example, resynchronization of network elements) and is not designed for debugging purposes. User-initiated changes that are made from the Junos Space CLI are logged but not recorded in audit logs. Administrators can sort and filter audit logs to determine which users performed what actions on what objects at what time. For example, an Audit Log Administrator can use audit log filtering to track the user accounts that were added on a specific date, track configuration changes across a particular type of device, view services that were provisioned on specific devices, or monitor user login and logout activities over time. To use the audit log service to monitor user requests and track changes initiated by users, you must have the Audit Log Administrator role (see Managing Roles Overview). Over time, the Audit Log Administrator archives a large volume of Junos Space Network Management Platform log entries. Such log entries might or might not be reviewed, but they must be retained for a period of time. The Archive/Purge feature helps you manage the volume of log data on Junos Space Network Management Platform, allowing you to archive log files and then purge those log files from the Junos Space Network Management Platform database. For each Archive/Purge operation, the archived log files are saved in a single file in CSV format. The audit logs can be saved to a local server (the server that functions as the active node in the Junos Space Network Management Platform fabric) or a remote network host or media. When you archive data to a local server, the archived log files are saved to the default directory /var/lib/mysql/archive. The Audit Logs Export feature enables you to download audit logs in CSV format so that you can view the audit logs in a separate application or save them on another machine for further use, without purging them from the system. Related Documentation Archiving and Purging Audit Logs on page 9 Viewing Audit Logs on page 15 3

18 Audit Logs Exporting Audit Logs on page 8 4

19 PART 2 Configuration Manage Audit Logs on page 7 5

20 Audit Logs 6

21 CHAPTER 2 Manage Audit Logs Converting the Audit Log File UTC Timestamp to Local Time in Microsoft Excel on page 7 Exporting Audit Logs on page 8 Archiving and Purging Audit Logs on page 9 Converting the Audit Log File UTC Timestamp to Local Time in Microsoft Excel You can unzip an audit log *.gz file and open the extracted *.cvs file as a spreadsheet in Microsoft Excel. In Microsoft Excel, you can convert the entries in the Timestamp column from Coordinated Universal Time (UTC) to local time. To convert UTC time to local time: 1. Retrieve the JunosSpaceAuditLog_date_time_id.csv.gz audit log file from where you archived it. If you archived the file locally, the file is located in /var/lib/mysql/archive. Where date specifies the year, month, and day, in yyyy-mm-dd format Where time specifies military, 24-hour time in hour, minutes, and seconds, in (hh-mm-ss) format Where id is an auto-generated, 13-character random number that uniquely identifies each audit log archive file For example, JunosSpaceAuditLog_ _ _xx...x.csv.gz.. 2. Unzip the audit log *.csv file. 3. Open the audit log *.csv file in Microsoft Excel. 4. To the left of the UTC Time column, insert a new column. 5. Label the column header Local Time. 6. Click the first cell of the new column. 7. Insert the following function: =XX/ Y/24 Where XX is the cell letter and row number where you want to insert the local time conversion function. 7

22 Audit Logs Where Y represents the difference in hours between your local time and the UTC time. 8. Click Enter. The calculated local time appears. 9. Format the local time. Right-click the cell and select Format Cells. The Format Cells dialog box appears. 10. From the Category list, select Date. 11. From the Type list, select a date format that you want. 12. Click OK. The local time and date appears. 13. Copy or apply the cell function and formatting to the rest of the rows in the Local Time column. The rest of the local times appear as shown Figure 1 on page 8. Figure 1: Formatting the Local Times Column in Microsoft Excel 14. If you want to keep the original audit log file, save it with a different filename. Related Documentation Archiving and Purging Audit Logs on page 9 Exporting Audit Logs You can export audit logs without purging them from the system. To export audit logs, you have three options to select from: Export all audit logs. Export audit logs filtered by date range. Export audit logs as displayed in the Audit Log table. On the Audit Log page, you can filter audit logs by using multiple criteria. The criteria you choose determine which audit log data is exported. The filter determines which records appear in the table, and the records in the table are exported. The audit logs are exported as CSV files and are not removed from the database when they are exported. 1. On the Junos Space Network Management Platform user interface, select Audit Logs > Audit Log. The Audit Log page appears. 2. Click the Export Audit Logs icon. The Export Audit Logs page appears. 3. Perform one of the following actions and click Export. To export all logs, select Export all audit logs. The Date and Time selectors are disabled when you select this option. 8

23 Chapter 2: Manage Audit Logs To export logs within a specific duration, select Export audit logs filtered by date range. The Date and Time widget selectors are enabled when you select this option. To export all logs that are currently displayed on the Audit Log page, select Export audit logs currently displayed in View Audit Logs table This is the default selection. For instructions on how to filter audit logs, see Filter Submenus in the Inventory Landing Page section in the Junos Space User Interface Guide. Your browser s Download dialog box appears. 4. You can either open the exported file or save it. Related Documentation Junos Space Audit Logs Overview on page 3 Viewing Audit Log Statistics on page 17 Archiving and Purging Audit Logs on page 9 Archiving and Purging Audit Logs The administrator can archive and then purge all audit logs up to a specified date and time from the Junos Space Network Management Platform database. The administrator can archive audit logs to the local server or a remote server location. The Junos Space Network Management Platform archive file uses the following naming conventions: JunosSpaceAuditLog_date_time_id.csv.gz, where date specifies the year, month, and day, in the yyyy-mm-dd format, time specifies hours, minutes, and seconds, in the hh-mm-ss format, and id is a 13-character random number that uniquely identifies each audit log archive file. This topic includes the following tasks: Archiving Audit Logs to a Local Server and Purging the Logs from the Database on page 9 Archiving Audit Logs to a Remote Server and Purging the Logs from the Database on page 10 Archiving Audit Logs to a Local Server and Purging the Logs from the Database You can archive audit logs to a local server. A local server is the server that functions an active node in the Junos Space fabric. 9

24 Audit Logs To archive Junos Space Network Management Platform audit log files to the local server and then purge the audit logs from the database: 1. On the Junos Space Network Management Platform user interface, select Audit Logs > Audit Log and select the Archive/Purge Logs icon. The Archive/Purge Logs dialog box appears. 2. From the Archive Logs Before list, select a date and time to specify the date up to which all audit logs are to be archived and then purged from the Junos Space Network Management Platform database. You can specify only a date and time in the past. NOTE: If you do not select a date and time from the Archive Logs Before list, Junos Space Network Management Platform archives and then purges from the database all logs generated up to the time that you initiated the operation. 3. From the Archive Mode list, select local to archive the logs locally on the Junos Space server. 4. Schedule the Junos Space Network Management Platform archive and purge operation: Clear the Schedule at a later time check box (the default) to initiate the archive and purge operation when you complete this procedure. Select the Schedule at a later time check box to specify a later start date and time for the archive and purge operation. NOTE: The selected time in the scheduler corresponds to the Junos Space server time but uses the local time zone of the client computer. 5. Click Submit. The Audit Log Archive and Purge confirmation dialog box displays the audit log filename and the location where it will be saved. 6. Click Continue to archive and purge the audit logs. 7. To view job details for the Audit Log archive and purge operation, click the Job ID in the Job Information dialog box; otherwise, click OK to close the dialog box. Archiving Audit Logs to a Remote Server and Purging the Logs from the Database You can archive audit logs to remote network hosts or media. 10

25 Chapter 2: Manage Audit Logs To back up the Junos Space Network Management Platform database to a remote host and then purge those logs from the Junos Space Network Management Platform database: 1. On the Junos Space Network Management Platform user interface, select Audit Logs > Audit Log and select the Archive/Purge Logs icon. The Archive/Purge dialog box appears. 2. From the Archive Logs Before list, select a date and time to specify the date up to which all audit logs are to be archived and then purged from the Junos Space Network Management Platform database. You can select only a date and time from the past. NOTE: If you do not specify a date and time from the Archive Logs Before list, Junos Space Network Management Platform archives and then purges from the database all logs generated up to the time that you initiated the operation. 3. From the Archive Mode list, select remote. 4. In the User field, enter a valid username to access the remote host server. 5. In the Password field, enter a valid password to access the remote host server. 6. In the Confirm Password field, reenter the password you entered in the previous step. 7. In the Machine IP field, enter the IP address of the remote host server. 8. In the Directory field, enter a directory path on the remote host server for the archived log files. NOTE: The directory path must already exist on the remote host server. 9. Schedule the Junos Space Network Management Platform archive and purge operation: Clear the Schedule at a later time check box (the default) to initiate the archive and purge operation when you complete this procedure. Select the Schedule at a later time check box to specify a later start date and time for the archive and purge operation. NOTE: The selected time in the scheduler corresponds to the Junos Space Network Management Platform server time but uses the local time zone of the client computer. 10. Click Submit. The Audit Log Archive and Purge dialog box displays the audit log file location and name and the remote server to which the files are copied. 11. Click Continue to archive and purge the audit logs. 11

26 Audit Logs Junos Space Network Management Platform displays the Audit Log Archive and Purge Job Information dialog box. 12. To view job details for the archive and purge operation, click the Job ID link. 13. Click OK to close the dialog box. Related Documentation Junos Space Audit Logs Overview on page 3 Viewing Audit Logs on page 15 Exporting Audit Logs on page 8 12

27 PART 3 Administration Manage Audit Logs on page 15 13

28 Audit Logs 14

29 CHAPTER 3 Manage Audit Logs Viewing Audit Logs Viewing Audit Logs on page 15 Viewing Audit Log Statistics on page 17 Audit logs are generated for login activity and tasks that are initiated from the Junos Space Network Management Platform and Network Activate, as well as Service Now. The View Audit Logs page displays user-initiated tasks. To view audit logs, you must have Audit Log Administrator privileges. NOTE: Audit logging is not currently supported on Ethernet Design. Junos Space Network Management Platform displays audit logs only in tabular view. For information about how to manipulate inventory page data, see Junos Space User Interface Overview in the Junos Space User Interface Guide. Viewing Audit Log Details The Audit Log Detail dialog box displays information about the task that was logged, including information about the objects affected by the task. To view detailed audit log information, double-click a table row for the audit log entry. If the audit log entry includes a job ID link, click it to open the Job List page, which displays information about the job. If the job is a recurring job, then information about all recurrences of this job is displayed. Click Back to close the Job List page and return to the Audit Log table. Click OK on the Audit Detail dialog box to close it. The fields displayed in the Audit Log table are described in Table 3 on page 15. Table 3: Detailed Audit Logs Information and Audit Log Table Columns Field Description ID 15

30 Audit Logs Table 3: Detailed Audit Logs Information and Audit Log Table Columns (continued) User Name Login ID of the user that initiated the task User IP IP address of the client computer from which the user initiated the task Domain Domain from which a user has initiated jobs Application Name of the application from which the user initiated the task Workspace Name of the workspace from which the user initiated the task Task Name of the task that triggered the audit log Timestamp UTC time in the database that is mapped to the local time zone of the client computer. Result Result of the task that triggered the audit log: Success Job is completed successfully. Failure Job failed and is terminated. Job Scheduled Job is scheduled but has not yet started. Job ID ID of the job-based task.. Click the job ID to view detailed information about the job. To return to the Audit Log page, click the Back link located at the top left. Description Description of the audit log For both recurring and nonrecurring jobs, such as a database backup operation, the following data described in Table 4 on page 16 is displayed when you click the job ID. Table 4: Audit Log Details for Recurring and Nonrecurring Jobs Field Description Name Name of the job Job ID Numerical ID of the job Percent Percentage of job that is completed State State of job execution: SUCCESS Job is completed successfully. FAILURE Job failed and is terminated. IN PROGRESS Job is in progress. CANCELED Job is canceled by the user. Job Type Supported job types. The Junos Space applications determine which job types are supported. In Junos Space 1.4, a recurring job type that is supported is Backup Database. Summary Operations executed for the job 16

31 Chapter 3: Manage Audit Logs Table 4: Audit Log Details for Recurring and Nonrecurring Jobs (continued) Field Description Scheduled Start Time Scheduled start time for the job (specified by a Junos Space user) Actual Start Time When the job actually started End Time When the job actually ended Recurrence Job recurrence interval, start time, and end time Related Documentation Exporting Audit Logs on page 8 Viewing Audit Log Statistics on page 17 Junos Space Audit Logs Overview on page 3 Archiving and Purging Audit Logs on page 9 Backing Up the Junos Space Network Management Platform Database Viewing Audit Log Statistics The Audit Logs workspace statistics page provides two graphs: Audit Log Statistical Graph pie chart and the Top 10 Active Users in 24 Hours graph. The audit log administrator uses these graphs to monitor the Junos Space Network Management Platform tasks. The Audit Log Statistical Graph pie chart displays all tasks that are performed and logged in all Junos Space applications over a specific period of time. You can view Audit Log statistics by task type, user, workspace, and application. NOTE: Audit logging is not currently supported on Ethernet Design. From Network Management Platform 12.1 onward, audit logging is supported on Service Now. The Top 10 Active Users in 24 hours graph displays the top ten Junos Space Network Management Platform users who performed the most number of tasks over 24 hours. The x-axis represents activities that are performed by a single user. Each active session for that user is represented by a bubble on the x-axis. The y-axis represents hours. For example, if a single user performed six active sessions during the last 24 hours, the chart displays six bubbles on the x-axis according to the hours displayed on the y-axis. 17

32 Audit Logs Viewing the Dynamic Audit Log Statistical Graph With the Audit Log Statistical Graph, the audit log administrator can view audit logs by selecting both category and time frame. The category task, user, workarea, or application determines the statistical graph that is displayed. Each slice in the pie represents a task and its usage percentage. The tasks types are listed in a box at the right of the pie chart. Mouse over a slice of the pie to see the number of times that the task is invoked. The time frame specifies the period of time within which to show audit log data. To use the Audit Log Statistical Graph: 1. On the Junos Space Network Management Platform user interface, select Audit Logs. The Audit Logs page appears, which displays Audit Log Statistical Graph and Top 10 Active Users in 24 Hours graph. 2. On the Audit Log Statistical Graph, select a graph category: Task Displays all tasks that are performed. Click each task slice to go to the next-level chart that displays users who performed the selected task. For example, when you click the Login slice, you can view the login activity (or task) of all users for the selected time frame. The graph path indicates where you are located in the GUI. In this example, the GUI displays Overview -> Login as the graph path. Click Overview to go back to the top-level chart. The task name in the path indicates the currently selected path. The graph pertaining to a task is displayed with a username or IP address. User Names By default, displays all users who performed the specific task. Click a user to go to the inventory page filtered by task, user, and selected time frame. IP Addresses Displays all IP addresses where users performed the specific task. Click an IP address to go to the inventory page filtered by task, IP address, and selected time frame. User Displays all users using the system within the time frame. Ten users are displayed per chart. Click Others to go to the next page. Click the previous page link to go back. Workspace Dsplays all workspaces accessed in the time frame. Click a workspace slice to go to the inventory page filtered by workspaces. Application Displays all applications used. Click a pie slice to go to the inventory page filtered by application and selected time frame. 3. Select a time frame in days, weeks, or months to display audit log data in the pie chart for that time period. The default is Days. A time selection description is displayed below the time frame area. Days Displays seven days prior to the selected date. Select single or multiple days. Select multiple days by dragging the cursor along the displayed timeframe. Weeks Displays the past five weeks, from past to most current on the right. Select multiple days by dragging the cursor along the displayed timeframe. 18

33 Chapter 3: Manage Audit Logs Months Displays the past 12 months, from past to most current on the right. Select multiple days by dragging the cursor along the displayed timeframe. The current day, week, or month is highlighted (or selected) by default. 4. Click a slice in the pie chart to view more detailed information. Tasks appear in tabular view by username, user IP address, task, timestamp, results, description, job ID, and level 2 description. See Junos Space User Interface Overview in the Junos Space User Interface Guide for more information about manipulating the table data. 5. On the inventory page, double-click an audit log to view more detailed information. For a job-related log entry, click the link in the Job ID column to view a new table that shows the corresponding job information. In the audit log detail view, if there are multiple affected objects for a log entry, the affected object detail always shows the first object detail. Click any object on the list to change the object detail. If no affected object exists for this log entry, the affected object list is hidden and no object detail is displayed. 6. Click Return to Audit Logs to go back to Audit Log View. Viewing the Top 10 Active Users In 24 Hours Statistics To view the jobs performed by a user in the Top 10 Active Users in 24 Hours graph: 1. In the Top 10 Active Users in 24 Hours graph, double-click a user s bubble for a particular hour. The View Audit Log page displays the jobs performed by that user. Jobs appear by audit log ID, username, user IP address, domain, application, task, timestamp, results, description, and job ID in tabular view. See Junos Space User Interface Overview in the Junos Space User Interface Guide for more information about manipulating the table data. Related Documentation Viewing Audit Logs on page 15 Junos Space Audit Logs Overview on page 3 Archiving and Purging Audit Logs on page 9 Exporting Audit Logs on page 8 19

34 Audit Logs 20

35 PART 4 Index Index on page 23 21

36 Audit Logs 22

37 Index Symbols #, comments in configuration statements...xi ( ), in syntax descriptions...xi < >, in syntax descriptions...xi [ ], in configuration statements...xi { }, in configuration statements...xi (pipe), in syntax descriptions...xi A audit log UTC to local timestamp, converting...7 audit logs archive file, naming conventions...9 archiving and purging...9 archiving to local server...9 archiving to remote server...10 default directory...3 exporting...8 overview...3 tabular view...15 user privileges...15 viewing audit logs table most active users in last 24 hours...19 statistics...17 description...15 job ID...15 task results...15 timestamp...15 audit trails exporting...8 conventions text and syntax...x curly braces, in configuration statements...xi customer support...xii contacting JTAC...xii D documentation comments on...xi F font conventions...x M manuals comments on...xi P parentheses, in syntax descriptions...xi S statistics audit logs...17 support, technical See technical support syntax conventions...x T technical support contacting JTAC...xii W workspace Audit Logs...3 B braces, in configuration statements...xi brackets angle, in syntax descriptions...xi square, in configuration statements...xi C comments, in configuration statements...xi 23

38 Audit Logs 24