Video Screencast Help

Looking for ESM manager access logs

Created: 20 Sep 2007 • Updated: 21 May 2010 | 3 comments
 
Does the ESM manager have an access log that records logins from the ESM console?
 
 
Jay Johnson
 
Discussion Filed Under:

Comments 3 CommentsJump to latest comment

Tim White's picture
ESM does record audit information about events on each ESM manager.  You can access these logs by right clicking on the manager, and select View Audit Log. 
 
For more information on ESM audit logs please see pages 69-70 of the ESM 6.5 admin guide.
 
TW
Technical Product Manager
Compliance & Security Management Group
Symantec
SlushPump's picture

Yes, we can view the access logs from the ESM console gui.  But I've not found a way to export them or print them, nor can I find how to see those logs using ESM Reporting.    Copy and paste from the gui doesn't work either.

So to do an analysis if access history, I had to re-type the records of interest into a spreadsheet.

Is there some -other- way to get at these logs?

Tim White's picture
The audit log can be accessed directly on the manager:  The file is the manager.txt  located in the /esm/system/<hostname>/ directory on the manager.