5.16 Collecting and Exporting Audit Logs

Scanner system logs and user logs can be collected and saved in the Central Admin Server.

System logs collected in the Central Admin Server are referred to as "audit logs (system)", and user logs as "audit logs (user)". Both types of logs are referred to collectively as "audit logs".

By automatically collecting system logs and user logs in the Central Admin Server, you can record users' past operations.

To view audit logs, export those collected in the Central Admin Server to an arbitrary folder by executing a command.

The status of audit logs collection can be checked in the [Scanner Details] window.

 

Audit log export command

 

Central Admin

Server in

Server

Export audit logs

which

 

 

 

 

audit logs

 

 

are saved

Automatically

Audit logs

Audit logs

collect system

logs/user logs

 

 

 

Computer

 

Scanner Scanner Scanner

Central Admin Console

Check the status of log collection

5.16.1 Collecting Audit Logs

To automatically collect audit logs in the Central Admin Server, enable the audit log collection in the [Scanner Central Admin Server Settings] window. For details, refer to "5.6 Setting the Central Admin Server" (page 245).

The audit logs are managed according to the date on which they are collected in the Central Admin Server. Do not change the Central Admin Server date and time setting to a date that has already passed.

If the audit log is collected, disk space for saving the audit log is required. Refer to the following for estimates of the required disk space.

Under the following conditions, one log per day requires 25 KB.

Power on/off: once, Login/Logout: 20 times, Number of scan operations: 100 times

277