Unsolved
This post is more than 5 years old
1 Rookie
•
89 Posts
0
3753
November 18th, 2015 10:00
XtremIO Activity log
Is there a log that reports on the administrative activity for an XtremIO array?
We had a lun become unmapped that no one has claimed to have done and I'd like to review an activity log, if one exists.
Documentation doesn't suggest one and I don't see a cli command that will report on such activity history.
Thanks.
Jim
No Events found!
Kumar_A
2 Intern
•
727 Posts
1
November 21st, 2015 19:00
You can use the < show-events > CLI command to accomplish the task outlined below with a category type of < audit >; show-events category=audit.
We have this command documented on page 430 of the XtremIO User Guide. Specifically, the following entry will be displayed to the terminal based upon the thread owner’s request:
----
294284 2015-11-21 15:09:33 50001 5000100 audit information None None None User: tech, Command: unmap_lun, Arguments: {vol_obj_id=["03504a18a576477e91015322e5aca2ff", "Dave", "4"], tg_obj_id=["f096edff29e84ff7bcd43fcee510098d", "Default", "1"], ig_obj_id=["70971e6a41ae42f7a09e28abcb059def", "LG4-M3", "1"], lun=1, all=False, lm_id=["f25861765c9f40a48450a55e7f8e2504", "4_1_1", "2"], sys_id=["c4ce54e23bec4efb93c46f26b7b0d1e0", "xbrickhpk2-3", "1"]}
-----
A similar message can be seen within the XtremIO GUI on the < Alerts & Events > tab.
JimK513
1 Rookie
•
89 Posts
0
November 23rd, 2015 05:00
so, that returns activities up until 11/17 17:10. I need events from 11/16. I do have dossier logs taken on 11/18 that hopefully captured the data but how would I review them?
Kumar_A
2 Intern
•
727 Posts
0
November 23rd, 2015 13:00
The dossier files are meant to be analyzed by the EMC Support.
Are you saying that you are not able to see any events from a week back?
JimK513
1 Rookie
•
89 Posts
0
November 24th, 2015 06:00
i do have a SR open with EMC and they are reviewing the logs.
when I ran the event query, I only obtained entries up until the 17th, thus was hoping to review the logs in the dossier archive for older date/time events.