Hp Secure Key Manager Manuel d'utilisateur télécharger pdf (Page 222)

Your rotation schedule can be set to automatically rotate logs on a daily, weekly, or monthly basis, at

any time of day. The system maintains these settings for each log type; your Activity and Audit logs,

for example, can adhere to different schedules.

By specifying a maximum log ﬁle size, you can ensure that logs are rotated when they reach a certain

size, regardless of their rotation schedule.

For example, you can schedule that system rotate the Audit Log every Sunday morning at 3:15 or when

the ﬁle size reaches 100 MB, whichever comes ﬁrst.

Log archives

If you do not c

onﬁgure the log transfer feature, old log ﬁles are stored on the SKM. For each type of log,

you can selec

t the maximum number of log ﬁles that can be archived. When that maximum number is

reached, an

y new addition to the log archive will remove the oldest log ﬁle.

For example

, suppose you limit the number of archived System Logs to six and do not enable the log

transfer fe

ature.AftersixSystemLogrotations,thearchiveisfull.ThenexttimeyourotatetheSystemlog,

the oldest

System log ﬁleontheSKMwillberemovedtomakeroomforthelatestSystemlogﬁle.

If you limi

t the number of archived System Logs to six and do enable the log transfer feature, logs that

would norm

ally be deleted are instead sent to the transfer destination.

If you set the number of archived logs to zero, no logs will be archived. Rotated logs will either be deleted

or sent to the transfer destination, depending on your log transfer settings.

IMPORTANT:

The SKM should not be a permanent storage place for log ﬁles. You should transfer those ﬁles to

another l

ocation.

Log transfer

For more information on streaming Activity logs to a remote server, see Syslog Settings.

The SKM acts as a temporary repository for logs; it is not meant to store log ﬁles permanently.We

recommend that you enable the log transfer feature and store your log ﬁles on a log server.

There are four different ways you can transfer a log ﬁleoffofanSKM:SCP,FTP,browserdownload,

and syslog. Because syslog and FTP are not secure protocols, we recommend that you use SCP to

transfer your log ﬁles.

When a log is rotated, if you have conﬁgured a transfer destination for that log, the SKM attempts to

transfer that log ﬁle to the location you have speciﬁed. If the ﬁle transfer fails, the log ﬁle sits in a queue

as the SKM attempts to transfer the ﬁle every two hours until it is successfully transferred. If the SKM

rotates the log before that ﬁle is successfully transferred, the SKM attempts to transfer both the current log

ﬁle and the log ﬁle that previously failed to transfer.

Log File naming convention

When a log ﬁle is transferred off of the SKM, the following naming convention is applied:

Table 115 Log ﬁle naming conventions

Value

Description

log type

Thetypeoflog(e.g.,SystemLog,AuditLog.)

archive number

This number indicates the ﬁle’s place in the log archive on the SKM. 1 indicates

the most recent log ﬁle.

datetime stamp The date and time when the log ﬁle was created.

hostname

ThehostnameoftheSKM.

222

Using the Management Console

1 2 ... 217 218 219 220 221 222 223 224 225 226 227 ... 326 327

Commentaires sur ces manuels

Pas de commentaire

Hp Secure Key Manager Manuel d'utilisateur Page 222

Commentaires sur ces manuels

Produits connexes et manuels pour Stockage Hp Secure Key Manager