Re: change to server configuration (60 Views)
Reply
Frequent Advisor
Bertram Fukuda
Posts: 86
Registered: ‎11-30-2009
Message 1 of 3 (81 Views)

change to server configuration

If someone makes a change to the server configuration via HPSA Web Client, are those changes logged somewhere.  If so, where?  I looked in /var/log/opsware and /var/opt/opsware but couldn't find anything that stuck out.

 

TIA, 
Bert

Please use plain text.
Advisor
FrankS
Posts: 24
Registered: ‎02-18-2011
Message 2 of 3 (60 Views)

Re: change to server configuration

Logs for globale Shell:

See Page 184 Admin guide
The info Global Shell Audit Logs

 

• Shell event logs

• Shell stream logs

• Shell script logs

 

Shell Event Logs

 

The shell event logs contain information about operations that users have performed on

managed servers with the Global Shell. These logs are in the following directory (where

ogfs-host is the name of the server running the OGFS):

 

/var/opt/opsware/ogfs/mnt/audit/event/<ogfs-host>

 

The log file name has the following syntax (where n is the log rotation number):

audit.log.n

For each event, SA writes a single line to an event log file. Each line in the log file contains

the following information about the event:

• Unique ID of the event

• Unique ID of the parent event

• Date of the operation

• ID of the SA user who performed the operation

• Name of the SA user who performed the operation

• Name of the component that generated the audit event

• Version of the SA component that generated the audit event

• Name of the SA feature which generated the audit event

• Name of the operation (action)

• Verbosity level

• Exit status of the event

• ID of the managed server

• Name of the managed server

• Details of the event

The following example shows a single line in an audit event log file:

jdoe@m185:051202182224813:13 jdoe@m185:051202182224790:12

2006/01/28-12:40:19.622 User.Id=2610003 User.Name=jdoe

Hub:1.1 GlobalShell AgentRunTrustedScript 1 OK

Device.Id=10003 Device.Name=m192.dev.opsware.com

ConnectMethod=PUSH RemotePath= RemoteUser=root

ScriptName=__global__.sc_snapshot.sh

ScriptVersion=30b.2.1572 ChangeTime=1128971572

RemoteErrorName=

In this example, the first field is the ID of the event:

jdoe@m185:051202182224813:13

This ID field has the following syntax:

opsware-user@ogfs-host:YYMMDDHHmmssSSS:n

The n at the end of the ID field is a sequence number of the audit event generated in a

session. The ID field matches the name of a shell stream log file.

Please use plain text.
Frequent Advisor
Bertram Fukuda
Posts: 86
Registered: ‎11-30-2009
Message 3 of 3 (50 Views)

Re: change to server configuration

FrankS, 

   Thanks for the reply and great info.  Do you know if I make changes to the configuration via the web browser if that data is captured somewhere.  I'm sure it has to be but just not sure where to look.

 

Thanks,
Bert

Please use plain text.
The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation