No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

FusionInsight HD 6.5.0 Administrator Guide 02

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuring Audit Log Dumping

Configuring Audit Log Dumping

Scenarios

The audit logs of FusionInsight Manager are stored in the database by default. If the audit logs are retained for a long time, the disk space of the data directory may be insufficient. To store audit logs to another archive server, administrators can set the required dump parameters to automatically dump these logs. This facilitates the management of audit logs.

If you do not configure the audit log dumping, the system automatically saves the audit logs to a file when the number of audit logs reaches 100,000 pieces. The save path is ${BIGDATA_DATA_HOME} /dbdata_om/dumpData/iam/operatelog on the active management node. The file name format is OperateLog_store_YY_MM_DD_HH_MM_SS.csv. The maximum number of historical audit log files is 50.

Procedure

  1. Log in to FusionInsight Manager.
  2. Choose Audit > Configuration.
  3. Click the switch on the right of Audit Log Dumping Flag.

    By default, Audit Log Dump is disabled. If this parameter is set to , the function is enabled.

  4. Set the dump parameters based on information provided in Table 8-1

    Table 8-1 Audit log dump parameters

    Parameter

    Description

    Value

    SFTP IP

    Specifies the SFTP server for storing dumped audit logs. This parameter is mandatory. You are advised to use the SFTP service based on SSH v2. Otherwise, security risks exist.

    192.168.10.51 (example value)

    SFTP Port

    Specifies the port of the SFTP server for storing dumped audit logs. This parameter is mandatory.

    22 (example value)

    Save Path

    Specifies the path for storing audit logs on the SFTP server. This parameter is mandatory.

    /opt/omm/oms/auditLog (example value)

    SFTP Username

    Specifies the username for logging in to the SFTP server. This parameter is mandatory.

    root (example value)

    SFTP Password

    Specifies the password for logging in to the SFTP server. This parameter is mandatory.

    Root_123 (example value)

    SFTP Public key

    Specifies the public key of the SFTP server. This parameter is optional. You are advised to set the public key of the SFTP server. Otherwise, security risks may exist.

    -

    Dumping Mode

    Specifies the dump mode. This parameter is mandatory.

    • By Quantity: If the number of pieces of logs reaches the value of this parameter (100000 by default), the logs are dumped.
    • By Time: specifies the date when logs are dumped. The dumping frequency is once a year.
    • By Quantity
    • By Time

    Dumping Date

    This parameter is mandatory. It is available when the dump mode is set to By Time. After you select a dump date, the system starts dumping on this date. The logs to be dumped include all the audit logs generated before January 1 00:00 of the current year.

    November 06 (example)

    NOTE:

    If the SFTP public key is empty, the system prompts a security risk message. Determine the security risk, then save the configuration.

  5. Click OK to complete the settings.

    NOTE:
    Key fields in the audit log dump file are as follows:
    • USERTYPE indicates the user type. Value 0 indicates the Human-machine user, and value 1 indicates the Machine-machine user.
    • LOGLEVEL indicates the security level. Value 0 indicates Critical, value 1 indicates Major, value 2 indicates Minor, and value 3 indicates Warning.
    • OPERATERESULT indicates the operation result. Value 0 indicates that the operation is successful, and value 1 indicates that the operation is failed.

Download
Updated: 2019-05-17

Document ID: EDOC1100074522

Views: 7396

Downloads: 12

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next