Log Descriptions

For Oracle ILOM log descriptions, see the following table.

Log Description

Audit

The audit log tracks all interface-related user actions, such as user logins, user logouts, configuration changes, and password changes. The user interfaces monitored for user actions include the Oracle ILOM web interface, CLI, Fault Management Shell (captive shell), and Restricted shell, as well as SNMP and IPMI client interfaces.

The audit log is helpful for auditing user activity to ensure that no privilege violations have occurred.

Note:

As of Oracle ILOM firmware version 5.1.0, user session login and logout events for all Oracle ILOM user interfaces (web, CLI, and API ) have been moved from the audit log to the session log.

Note:

User login and logout events captured in the audit log prior to Oracle ILOM 5.1.0 will continue to remain in the audit log.

Event

The event log tracks informational, warning, or error messages about a managed device such as the addition or removal of a component or the failure of a component. The event properties recorded in the event log can include: the severity of the event, the event provider (class), and the date and time the event was logged.

The event log is helpful for troubleshooting the system when problems occur. It is also helpful for monitoring the performance of the managed device.

Session

The session log records all login and logout events for a session. Each session log entry notes the user and time stamp associated with the event.

For sessions accessed via the web user interface, login failures are also logged and include the following attributes:

  • Date and time of last failed attempt

  • Number of failed attempts

  • Source IP address

For security reasons, the login failure reason is not included. Also for security concerns, login failures are not logged for sessions accessed via the CLI user interface.

The session log, as of Oracle ILOM 5.1.0, tracks session IDs at the onset of a KVMS or a Serial Redirection user session.

The session log is helpful to manage user access to KVMS and Serial Redirection connections, as well as differentiate between the different user sessions.

Note:

The session log is only available In Oracle ILOM for KVMS or Serial Redirection connections opened on Oracle servers supporting Oracle ILOM 5.1.0 or later.

Syslog

The syslog defines a set of common features for event logging and a protocol for transmitting the log entries to a remote host.

The syslog is helpful if you want to combine events from multiple Oracle ILOM sessions in one place. The entries recorded in the syslog contain all the same information that you would see in the local event log.

Note:

The syslog feature in Oracle ILOM is disabled by default. For instructions on how to configure the syslog properties in Oracle ILOM, refer to the Configuring Alert Notifications, Service Requests, or Remote Logging in Oracle ILOM 5.1 Administrator’s Guide .

System

The top-level system log presents a subset of relevant operational event log entries. Specifically, this log reports subsystem level diagnostic events pertaining to system inventory actions and component health. These events can include power on and off, FRU insertion and removal, as well as health status events, such as service required, warning, or OK.