Configuring the audit policy

Use Audit Policy to configure the contents of the audit.

Note: You must be a member of the Security Administrators group to export an audit, and a member of the Storage Administrators group to access the generated log file.

By default, all event types are set to No auditing.

Administrator must be a user who is a member of the Security Administrator group, with Change Security Settings. If you are an administrator without Change Security Settings then you will be able to view but not edit the audit policy.

To configure the security policy, complete these steps.

  1. Log in to Security Console.
  2. Select Audit > Audit Policy.
  3. Click Edit to change the audit policy.
  4. Select the actions that you would like to include in the audit. For example, under Users select Add to include each instance where a new user was added to Security. If no selection is made, then the message No auditing is displayed. You may select zero or more options for each item.

    For example, to define an audit trail to record when users are added and deleted only, select Add and Delete under Users.

    Users
    Select from Add, Edit, Delete and Restore.
    Groups
    Select from Add, Edit, Delete and Restore.
    Function Permissions
    Select from Enable and Disable.
    Action Permissions
    Select from Edit and Reset.
    Miscellaneous Permissions
    Select from Edit and Reset.
    Function Extensions
    Select from Add, Edit and Delete.
    Data Access Groups
    Select from Add, Edit and Delete.
    Authentication Request
    Select from Login.
    Operators
    Select from Clear.
    Audit Policy
    Select from Edit.
    Audit Data
    Select from Archive.
    Import and Export
    Select from Import and Export.
  5. Click Save to save your changes then click Close.