Display Oracle ILOM Event or Audit Log

Language:

Note - The IPMI TLS interface (orcltls) interface is supported as of Oracle ILOM firmware version 3.2.8 and later. For a higher level of security, you should always specify the IPMI TLS interface (-I orcltls) when executing Oracle ILOM commands from the IMPItool utility. For more information about using the IPMI TLS interface from Oracle, see these topics:IPMI TLS Service and Interface and Configure IPMI Management Access for Increased Security in Oracle ILOM Security Guide Firmware Releases 3.0, 3.1, and 3.2.

To display the Oracle ILOM Audit log, type: sunoem cli "show /SP/logs/audit/list"

Example:

$ ipmitool -I [orcltls|lanplus] -H SP_hostname_or_IPaddress -U username-P password

sunoem cli "show /SP/logs/audit/list"

The Audit Log output might look like the following:

Audit
ID     Date/Time                 Class     Type      Severity
-----  ------------------------  --------  --------  --------
12050  Sat Dec 31 20:33:17 2016  Audit     UI        minor
       root : Open Session : object = "/SP/sessions/38701/type" : value =
       "shell" : success
12049  Sat Dec 31 20:31:19 2016  Audit     UI        minor
       root : Close Session : object = "/SP/sessions/38699/type" : value =
       "shell" : success
12048  Sat Dec 31 20:30:57 2016  Audit     UI        minor
       root : Open Session : object = "/SP/sessions/38699/type" : value =
       "shell" : success
12047  Sat Dec 31 20:29:16 2016  Audit     IPMI      minor
       root : Close Session : session ID = 3279888664 : success
12046  Sat Dec 31 20:29:16 2016  Audit     IPMI      minor
       root : Set Session Privilege Level: privilege level = admin : success
12045  Sat Dec 31 20:29:16 2016  Audit     IPMI      minor
       IPMI 2.0 Login Success : User = root, Client IP = #.#.#.#
12044  Sat Dec 31 19:02:28 2016  Audit     IPMI      minor
       root : Close Session : session ID = 3075033282 : success
12043  Sat Dec 31 19:02:28 2016  Audit     IPMI      minor
       root : Set Session Privilege Level: privilege level = admin : success
Paused: press any key to continue, or 'q' to quitSession closed

To display the Oracle ILOM Event log, type: sel list

Example:

$ ipmitool -I [orcltls|lanplus] -H SP_hostname_or_IPaddress -U username -P password

sel list

The Event Log output might look like the following:

 100 | Pre-Init Time-stamp   | Power Unit #0x78 | State Deasserted
 200 | Pre-Init Time-stamp   | Power Supply #0xa2 | Predictive Failure Asserted
 300 | Pre-Init Time-stamp   | Power Supply #0xba | Predictive Failure Asserted
 400 | Pre-Init Time-stamp   | Power Supply #0xc0 | Predictive Failure Asserted
 500 | Pre-Init Time-stamp   | Power Supply #0xb4 | Predictive Failure Asserted
 600 | 04/05/2007 | 12:03:24 | Power Supply #0xa3 | Predictive Failure Deasserted
 700 | 04/05/2007 | 12:03:25 | Power Supply #0xaa | Predictive Failure Deasserted
 800 | 04/05/2007 | 12:03:25 | Power Supply #0xbc | Predictive Failure Deasserted
 900 | 04/05/2007 | 12:03:26 | Power Supply #0xa2 | Predictive Failure Asserted
 a00 | 04/05/2007 | 12:03:26 | Power Supply #0xa8 | Predictive Failure Deasserted
 b00 | 04/05/2007 | 12:03:26 | Power Supply #0xb6 | Predictive Failure Deasserted
 c00 | 04/05/2007 | 12:03:26 | Power Supply #0xbb | Predictive Failure Deasserted
 d00 | 04/05/2007 | 12:03:26 | Power Supply #0xc2 | Predictive Failure Deasserted
 e00 | 04/05/2007 | 12:03:27 | Power Supply #0xb0 | Predictive Failure Deasserted
 f00 | 04/05/2007 | 12:03:27 | Power Supply #0xb5 | Predictive Failure Deasserted
1000 | 04/05/2007 | 12:03:27 | Power Supply #0xba | Predictive Failure Asserted
1100 | 04/05/2007 | 12:03:27 | Power Supply #0xc0 | Predictive Failure Asserted
1200 | 04/05/2007 | 12:03:28 | Power Supply #0xa9 | Predictive Failure Deasserted
1300 | 04/05/2007 | 12:03:28 | Power Supply #0xae | Predictive Failure Deasserted
1400 | 04/05/2007 | 12:03:28 | Power Supply #0xb4 | Predictive Failure Asserted
1500 | 04/05/2007 | 12:03:28 | Power Supply #0xbe | Predictive Failure Deasserted