IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Audit configuration - How to log user access via LMI

    Posted Thu March 18, 2021 12:40 PM
    Hi guys,
    I need to syslog the access logs on the LMI console.
    I was wondering if just running the configuration:
    Monitor Analysis and Diagnostics -> Logs -> Audit Configuration
    to enable:
    Enable Audit Log
    and
    Enable verbose audit events

    Location of syslog server -> On a remote machine
    and continue to fill in the fields.

    Is this enough to log users who log into the appliance and what actions they do?

    Thanks in advance,
    Claudio


    ------------------------------
    Claudio Laganà
    ------------------------------


  • 2.  RE: Audit configuration - How to log user access via LMI

    Posted Thu March 18, 2021 04:56 PM
    Claudio,
     
    The screen which you mentioned will enable auditing for the AAC runtime - not the LMI.  Which access logs are you hoping to send to a remote syslog server?  If it is the system events (accessible from the LMI under Monitor -> Event Log) you can have these forwarded to a remote syslog server by creating a new destination for the system alerts (accessible from the LMI under System -> System Alerts).
     
    I hope that this helps.
     
     

    Scott A. Exton
    Senior Software Engineer
    Chief Programmer - IBM Security Verify Access

    IBM Master Inventor


    Phone: 61-7-5552-4008
    E-mail: scotte@au1.ibm.com
    1 Corporate Court
    Bundall, QLD 4217
    Australia
     
     





  • 3.  RE: Audit configuration - How to log user access via LMI

    Posted Thu March 18, 2021 05:04 PM
    Hi Scott,
    exact I just need to send the accesses and if possible any changes deployed on the system.
    So I just need to enable System -> System Alerts and I'll get what I need.

    Infinitely thank you,
    Claudio


    ------------------------------
    Claudio Laganà
    ------------------------------