Security Management

User Audit Trails

NOTE: The audit file is located in the cam directory. The craft port will allow cat, head, or tail commands in the non-FIPS mode.

NOTE: Audit files can be up to 200k bytes, with the most recent data being located at the end of the file. Use the tail command to display the end of the file. For detailed examination, it is best to upload the file via FTP.

To display the audit file, at the Broadmore > prompt, enter the following commands:

cd cam

tail audit.txt

An example of the output is provided below.

User audit files record the following information for each user action: date

time

online CPU (Q or R) or standby CPU (q or r)

user name

event type

short description of the event

Once the audit.txt file is full, the file is automatically closed, the name is changed to audit_o.txt, in case a SuperUser wants to access the old file via FTP. A new file is then opened named audit.txt and new data is written to that file.

10-14

Broadmore 1750 - Release 4.6

Page 258
Image 258
Carrier Access 1750 user manual Cd cam Tail audit.txt