How do you retrieve the FSM Adapter Manager Audit log?
2 years ago
Originally Published: 2008-10-02
Article Number
000066720
Applies To
RSA File Security Manager (FSM)
Issue
How do you retrieve the FSM Adapter Manager Audit log?
Resolution

In this case, you are trying to retrieve Adapter Manager Audit but not Adapter level Audit. In Console Log, "Clear event log successful? event occurs when the previous audit data of Administrator is cleared. Adapter Manager Audit of July 7th is displayed but not before that means Administrator has cleared Adapter Manager Audit (Administrator Audit) log by using ?Clear Log? option on July 7th.

Behavior:

In Adapter Manager Audit, Administrator level Audit events are captured.

In Console Log events like SO login, SO logoff, SO creation, SO deletion are captured.

In Adapter Log -> File Servers -> File Log, Operations of SO like connection to host, disconnect from host, encryption, decryption are captured.

Restoring Console Log Backup:

Right-click on console log node ->select open log option -> select Audit log backed up in xml format. Now a new node (Backup Console Log) will be added. Under this node console log events are displayed

Restoring File Log Backup:

Right-click on File log node -> select open log option -> select Audit log backed up in xml format. Now a new node (Backup File Log) will be added. Under this node File log events are displayed.

Note: For object level audit events (Adapter level Audit) in Adapters, connect as SO and click Configured Adapter node and go to Security menu options and click on Audit.