Audit Logs Parent topic

An audit event is created whenever an administrator logs on Deep Edge and makes changes. Audit logs also include events about unsuccessful authentication attempts or invalid access rights.
Log Item Description
Log Time Log date and time
IP Address The client IP address
Admin User The logon account name, if applicable. Default is empty.
Description The content of this event. There are two types of audit logs:
  1. Access records to Deep Edge itself (such as AdminUI or SSH logon) and failed authentication or invalid access to Deep Edge itself
  2. Records about Deep Edge administration

Audit Log Example: Access and Authentication Records

Log Time IP Address Admin User Description
2013-01-27 21:51:03 10.64.44.133 admin Log on account from WebUI successful
2013-01-22 21:53:55 10.64.44.133 admin Log on successful with ssh
2013-01-22 19:45:02 10.64.44.133 admin Log on account from WebUI failed: Invalid user name or password.
2013-01-22 20:51:12 localhost admin Log on successful with ssh
2013-01-22 16:25:21 localhost admin Log on successful with ssh: invalid user name or password
2013-01-22 19:47:02 10.64.68.149 unknown Dropped request: attempt to ping without permit.
2013-01-22 19:48:32 10.64.68.149 unknown Dropped request: attempt to connect HTTPS without permit.
2013-01-22 19:49:02 10.64.68.149 unknown Dropped request: attempt to connect SSH without permit.
2013-01-22 19:50:12 10.64.68.149 unknown Dropped request: SNMP request without permit.
2013-01-28 16:40:33 10.64.68.149 unknown Attempt to ping without permit from eth0
2013-01-28 16:40:06 10.64.68.149 unknown Attempt to connect with ssh without permit from eth0
2013-01-28 16:39:50 10.64.68.149 unknown Attempt to connect with HTTPS without permit from eth0
2013-01-28 16:39:50 10.64.68.149 unknown Attempt to visit with SNMP without permit from eth0

Audit Log Example: Administration Setting Logs

Log Time IP Address Admin User Description
2013-01-25 01:28:13 10.64.44.133 admin NormalUpdate AuSetting from WebUI successful.
2013-01-23 00:34:55 10.64.44.133 admin ForceUpdate AuSetting from WebUI successful.
2013-01-22 23:36:00 10.64.44.133 admin Activate PrSetting from WebUI successful.
2013-01-22 22:13:31 10.64.44.133 admin Set LogSetting from WebUI successful.
2013-01-22 22:03:15 10.64.44.133 admin Apply Policy from WebUI successful.
2013-01-22 22:02:37 10.64.44.133 admin Set SecurityPolicy test from WebUI successful.
2013-01-22 21:56:57 10.64.44.133 admin Set Bridge br0 from WebUI successful.
2013-01-22 21:55:03 10.64.44.133 admin Apply Policy from WebUI successful.
2013-01-22 19:45:02 10.64.44.133 admin Apply Policy from WebUI successful.
2013-01-22 19:43:40 10.64.44.133 admin Set SecurityPolicy test from WebUI successful.
2013-01-22 19:43:24 10.64.44.133 admin Add SecurityPolicy test from WebUI successful.
Related information