Collecting Audit Log Data - Hitachi XP P9500 User Manual

Collecting Audit Log Data

HDLM and other Hitachi storage-related products provide an audit log
function so that compliance with regulations, security evaluation standards,
and industry-specific standards can be shown to auditors and evaluators. The
following table describes the categories of audit log data that Hitachi storage-
related products can collect.
StartStop
Failure
LinkStatus
ExternalService
Authentication
AccessControl
ContentAccess
Table 2-9 Categories of Audit Log Data that Can Be Collected
Category
An event indicating the startup or termination of
hardware or software, including:
•
•
•
An abnormal hardware or software event, including:
•
•
An event indicating the linkage status between devices:
•
An event indicating the result of communication between
a Hitachi storage-related product and an external service,
including:
•
•
An event indicating that a connection or authentication
attempt made by a device, administrator, or end-user has
succeeded or failed, including:
•
•
•
An event indicating that a resource access attempt made
by a device, administrator, or end-user has succeeded or
failed, including:
•
•
An event indicating that an attempt to access critical data
has succeeded or failed, including:
•
•
HDLM Functions
Hitachi Dynamic Link Manager User Guide (for AIX(R))
Explanation
OS startup and termination
Startup and termination of hardware components
(including micro-program)
Startup and termination of software running on
storage systems, software running on SVPs (service
processors), and Hitachi Command Suite products
Hardware errors
Software errors (such as memory errors)
Link up or link down
Communication with a RADIUS server, LDAP server,
NTP server, or DNS server
Communication with the management server (SNMP)
FC login
Device authentication (FC-SP authentication, iSCSI
login authentication, or SSL server/client
authentication)
Administrator or end-user authentication
Device access control
Administrator or end-user access control
Access to a critical file on a NAS or content access
when HTTP is supported
Access to the audit log file
2-33