topic Re: Audit log forwarding - enabled in HPE OneView

Audit log forwarding - enabled

Pavel_Majorov — Tue, 23 Apr 2019 15:00:48 GMT

Hello!

Updated today to 4.20 for Audit log forwarding. prescribed ip address of the server port. where exactly does the log? Or do we need some settings to do?

Re: Audit log forwarding - enabled

BhaskarV — Wed, 24 Apr 2019 02:33:50 GMT

Hi @Pavel_Majorov

Have you cheked the online help?
On the "Manage Audit Log Forwarding" settings page, click on the "?" on the top right hand side.
Alternatively you can refer to the online help hosted at hpe here:
http://h17007.www1.hpe.com/docs/enterprise/servers/oneview4.2/cic/en/index.html#manage-audit-log-forwarding.html

This page has the pre-requisites for audit log forwarding - UDP port opening on the firewall etc.
Do check and let us know if the feature worked for you.

Regards,
Bhaskar

Re: Audit log forwarding - enabled

Pavel_Majorov — Wed, 24 Apr 2019 07:47:07 GMT

Сonfiguration committed for this link

http://h17007.www1.hpe.com/docs/enterprise/servers/oneview4.2/cic/en/index.html#manage-audit-log-forwarding.html

test submission shows:

Test log entry was forwarded to configured destinations

No messages.

But there is no data on the destination server. sending to windows server 2016. Looking at the event viewer> forwasrded events.

Re: Audit log forwarding - enabled

BhaskarV — Thu, 25 Apr 2019 04:50:33 GMT

Hi @Pavel_Majorov

Do you have rsyslog (or another similar) syslog server installed and configured on Windows?

Regards,
Bhaskar

Re: Audit log forwarding - enabled

Pavel_Majorov — Thu, 25 Apr 2019 07:04:34 GMT

No. thank you. I'll try to install.