5.16 Collecting and Exporting Audit Logs

5.16.2 Exporting Audit Logs

To export audit logs collected in the Central Admin Server, execute "AmExportLog.exe" in the command prompt on the computer installed with the Central Admin Server software.

zCommand storage location

Under the [\AmManager\Bin] folder in the installation folder of the Central Admin Server software

zCommand executable format

AmExportLog -d OutputFolder [-v]

The italic text represents variable character strings.

To show the status of the process, specify -v.

An [AuditLogs] folder is created in the specified output folder. In this [AuditLogs] folder, a folder is created for each date to save audit logs.

The date of a folder corresponds to that of when audit logs are collected in the Central Admin Server. Therefore, the date may differ from that on the scanner when the logs are created.

zFile name format of an output audit log z Audit log (system)

ScannerName_MACAddress_syslog.csv

zAudit log (user)

ScannerName_MACAddress_usrlog.csv

zReturn value

z0 Succeeded

zOther than 0 Failed

zDo not execute this command twice at the same time.

zIf a file name already exists, the existing file will be overwritten.

zWhen exported, audit logs are deleted from the Central Admin Server.

zIf an error occurs while exporting, the audit logs that have been exported are deleted from the Central Admin Server.

278