Dell PowerVault ME5 Series Administrator's Guide

Audit logs

User login, logout, and actions through all interfaces for both local and LDAP users will be recorded in an audit log that is accessible from Maintenance > Support > Audit Log Activity. For actions that change storage system parameters, the audit log will contain the timestamp, username, and actions that were run as well as the status code returned by that action.

The audit log will include operations performed using the PowerVault Manager, CLI, and FTP/SFTP protocols, but will not contain specific value changes, such as old and new settings.

Audit logs record host IP address information for all interfaces, as well as SNMP SET requests. Each controller maintains its own audit log, and each audit log can contain up to 2MB of data. The system will maintain 2MB of audit log data per controller and the log will wrap once the 2MB limit has been reached.

Audit log data will persist after the restore defaults CLI command is run and is not mirrored to the partner controller. In a failover scenario, the failed controller audit log cannot be retrieved. Audit log data is cleared during factory refurbishment.

When you download controller logs, audit logs will be included. Audit logs are not associated with the managed logs feature.