Difference between revisions of "Retain Audit Log"

From GWAVA Technologies Training
Jump to: navigation, search
(Level 1)
Line 1: Line 1:
  
 
==Level 1==
 
==Level 1==
Retain creates an auditing record of all actions, specified by the user, which are taken on a specific piece of mail. This record is stored in the Audit table within the Retain database as opposed to other logging that Retain components do to actual log files in text format.  Auditing records can be removed automatically after a specified length of time. The variable is set in days. <br>
+
All operations involving the archives are logged. This is for auditing purposes so you may know who did what when. This record is stored in the Audit table within the Retain database as opposed to other logging that Retain components do to actual log files in text format.  Auditing records can be removed automatically after a specified length of time. The variable is set in days.
  
This logging option creates very detailed logs for the options selected, and it is very important to know that if every option is  turned on, the log can become extremely large. It is highly recommended that an expiration date is set for the logs, so that they are automatically removed from the system to avoid filling up your disk space. Selecting all options for logging will affect performance, so that should be kept in mind when choosing options.<br>
+
This logging option creates very detailed logs for the options selected, and it is very important to know that if every option is  turned on, the log can become extremely large. It is highly recommended that an expiration date is set for the logs, so that they are automatically removed from the system to avoid filling up your disk space. Selecting all options for logging will affect performance, so that should be kept in mind when choosing options.
  
All of the options are self explanatory; however, many questions arise in regards to the "Audited" option. When this is checked, every action in the "Audit" screen in the RetainServer interface is recorded.<br>
+
Accessing the audit log requires the "Access Audit Log" administrative right. Ordinary users cannot access their audit logs, unless you grant the "Access Personal Audit Log" right, in which case they can find the audit log on a per-message basis under the Properties tab of a message.  
  
The contents of the audit log can be printed; however, a good DBA would know how to export the contents of the Audit table in the database to a file as well.
+
===Audit Log===
 +
To view the system audit trail, log into the RetainServer web interface and select "Audit Log" under the Overview section in the left-hand navigation pane.
 +
 
 +
:<b>1.</b> Enter your search criteria (what part of the log do you want to see?)
 +
:<b>2.</b> Set a date range.
 +
:<b>3.</b> Click Search.
 +
 
 +
The results appear below. This may be printed. If you have rights, you may click on the Action link to open the message.
 +
 
 +
An auditor does not automatically get the rights to READ messages in mailboxes that are not assigned to them.
 +
 
 +
===Server Configuration | Logging | Auditing===
 +
All but one of the options are self explanatory.  The one option that generates questions is "Audited".  When this is checked, every action in the "Audit" screen in the RetainServer interface is recorded.
  
 
==Level 2==
 
==Level 2==

Revision as of 01:42, 6 March 2014

Contents

Level 1

All operations involving the archives are logged. This is for auditing purposes so you may know who did what when. This record is stored in the Audit table within the Retain database as opposed to other logging that Retain components do to actual log files in text format. Auditing records can be removed automatically after a specified length of time. The variable is set in days.

This logging option creates very detailed logs for the options selected, and it is very important to know that if every option is turned on, the log can become extremely large. It is highly recommended that an expiration date is set for the logs, so that they are automatically removed from the system to avoid filling up your disk space. Selecting all options for logging will affect performance, so that should be kept in mind when choosing options.

Accessing the audit log requires the "Access Audit Log" administrative right. Ordinary users cannot access their audit logs, unless you grant the "Access Personal Audit Log" right, in which case they can find the audit log on a per-message basis under the Properties tab of a message.

Audit Log

To view the system audit trail, log into the RetainServer web interface and select "Audit Log" under the Overview section in the left-hand navigation pane.

1. Enter your search criteria (what part of the log do you want to see?)
2. Set a date range.
3. Click Search.

The results appear below. This may be printed. If you have rights, you may click on the Action link to open the message.

An auditor does not automatically get the rights to READ messages in mailboxes that are not assigned to them.

Server Configuration | Logging | Auditing

All but one of the options are self explanatory. The one option that generates questions is "Audited". When this is checked, every action in the "Audit" screen in the RetainServer interface is recorded.

Level 2

Go to Server Configuration

Personal tools
Namespaces

Variants
Actions
Home
Exchange
GroupWise
JAVA
Linux
MTK
Retain
GW Monitoring and Reporting (Redline)
GW Disaster Recovery (Reload)
GW Forensics (Reveal)
GWAVA
Secure Messaging Gateway
GW Mailbox Management (Vertigo)
Windows
Other
User Experience
Toolbox
Languages
Toolbox