Setting the maximum log size of the audit log parameters

Question

Hello,

Does someone tell me about the audit log?

First of all, have you ever install a log collector tool like an Alog convertor into some servers to get the audit logs of Celerra?
What size of filesystem does the Celerra have at this time?
What did you set in the maximum log size field?

Could you please tell me about that as a guide?

Best regards,
Yasushi

Rainer_EMC · Answer

Hi,yes - the audit logs are limited in size, since they are (by default) kept in the data mover (or VDM) root file system which is limited in size (128MB).By all means - if you plan to do extensive auditing you should relocate that to a normal bigger data file system.See the 'Using Windows Administrative Tools with Celerra' manual for details. You can find that on Powerlink in Home > Support > Technical Documentation and Advisories > Hardware/Platforms Documentation > Celerra Network Server > Maintenance/Administration as far as external tools to analyze the logs go - as long as they work over the network and use the same interface the Microsoft event viewer does they should work

yasush1 · Answer

Hi,Thanks for your advice.It's helpful.In my case, I created 2 GB filesystem to save the audit logs which is more than 128MB.Therefore, I plan to set 300MB as the maximum log size. I think I can set 2GB as the maximum log size, since the audit logs are saved in the filesystem(2GB).I'd like to know the similar case of above.Do you have any information about the similar case of above?Thanks,Yasushi

Rainer_EMC · Answer

should work - as far as I know your *.evt is binary compatible with the Windows oneI found some other doc that might be helpfull - see attached

Rainer_EMC · Answer

Hi,can you tell us if it worked ?

yasush1 · Answer

Hello,Thank you for your reply.My customer haven't set it yet.I'd like to know the past example of the audit log size.Does no one know about it?

Celerra

Setting the maximum log size of the audit log parameters

Was this post helpful?