Product Requirement Portal

Your direct line to Product Management

If you have any questions, please contact: aha.support@ts.fujitsu.com

Remote logging of audit logs via syslog

The ISM server should send sits own* audit log to a syslog server or forwarding to ArcSight SIEM Server.

*"own" means: I.e. only the actions that a user has made on the ISM server via GUI or CLI should be forwarded. So not the event logs of the monitored servers.

A syslog server is running but nor configurable:

# ismadm service show

UNIT FILE STATE

rsyslog.service enabled

  • Wolfgang Brehm
  • Nov 1 2023
  • Will not implement
2 Infrastructure Manager
  • Attach files
  • Thomas Raimar commented
    November 03, 2023 23:36

    Thank you Wolfgang Brehm for this idea and your additional comments.

    It looks like you have found a workaround solution. So we will close this idea.

    Attachments Open full size
  • Wolfgang Brehm commented
    November 02, 2023 12:36

    It can be closed.

    Attachments Open full size
  • Wolfgang Brehm commented
    November 02, 2023 12:35

    We find a solution.

    Define Action Type: Forward Syslog and assign it to a system alaram.

    Attachments Open full size

Related requirements