Working with Audit Logs

Note - Supported for Quantum Spark Gateways running R81.10.15 and higher.

Overview

Audit Logs are records for actions on the Quantum Spark appliance, such as login, logout, configuration change (in the appliance settings, in objects, in rules, and so on).

By default, the Quantum Spark appliance saves these Audit Logs only locally.

You can see these local Audit Logs in WebUI > Logs & Monitoring view > Logs section > Audit Logs page.

You can configure the Quantum Spark appliance R81.10.15 or higher to send these local Audit Logs to Quantum Spark Management.

Administrators in Quantum Spark Management can examine these Audit Logs to detect incorrect configuration changes and take corrective actions promptly.

Procedure

1. Connect the applicable Quantum Spark appliances to Quantum Spark Management.

2. On each connected Quantum Spark appliance, enable the export of Audit Logs:

   1. Connect to the command line on the Quantum Spark appliance.

   2. Log in to the Expert mode.

   3. To export the Audit Logs to Quantum Spark Management, run:

      set logs-config send-audit-on-db-change true

   4. To display the Audit Logs on Quantum Spark Management, run:

      set logs-config display-audit-logs true

3. In Quantum Spark Management, examine the Audit Logs:

   1. From the left navigation panel, click Logs & Events.

   2. From top, click the Audits tab.

   3. From the top toolbar:

      • You can select the applicable Quantum Spark appliances.

      • You can select the applicable period.

      • You can search for logs that contain specific information.

      • You can enable or disable the automatic refresh of this page, and perform a manual refresh.

      • You can export the audit logs (in the CSV or JSON format).