By default, Infrastructure Management automatically maintains an audit log of all remote actions that an administrator performs on remote hosts. The audit log uses the following format:
TIME_STAMP LOG_LEVEL IAS_USER OS_USER SUB_TYPE:OBJECT ACTION_ID EXPLANATION
Audit log parameters
Audit log parameter | Description |
---|---|
TIME_STAMP | Month, day, year, hour, minute, and second that the log entry was created. Uses the format mm/dd/yyyy hh:mm:ss |
LOG_LEVEL | The severity level of the logged action. Valid values include:
|
IAS_USER | Current Infrastructure Management user name that has logged on and connected with the BMC ProactivNet Server. |
OS_USER | User name that logs into the remote host's operating system. This is the user name under which the action is run on the remote host. |
SUB_TYPE | The component or application type on the Infrastructure Management administrator is performing the remote action. Infrastructure Management supports the subtypes listed under Supported component or application types. |
OBJECT | User-specified value in the Object slot of the component or application on the which remote action is being run. |
ACTION_ID | Unique ID associated with the remote action. This unique ID is defined in the corresponding actions.xml file stored on the computer where the BMC TrueSight Infrastructure Management Server resides. It is stored under the installationDirectory/server/data/admin/actions directory on the BMC TrueSight Infrastructure Management Server. |
EXPLANATION | A short text description of the logged action. |