277
5.16 Collecting and Exporting Audit Logs
Scanner system logs and user logs can be collected and saved in the Central Admin
Server.
System logs collected in the Central Admin Server are referred to as "audit logs (system)",
and user logs as "audit logs (user)". Both types of logs are referred to collectively as "audit
logs".
By automatically collecting system logs and user logs in the Central Admin Server, you
can record users' past operations.
To view audit logs, export those collected in the Central Admin Server to an arbitrary
folder by executing a command.
The status of audit logs collection can be checked in the [Scanner Details] window.
5.16.1 Collecting Audit Logs
To automatically collect audit logs in the Central Admin Server, enable the audit log
collection in the [Scanner Central Admin Server Settings] window. For details, refer to "5.6
Setting the Central Admin Server" (page 245).
Computer
Audit logs
Audit log export command
Central Admin Console
Central Admin
Server
Scanner
Scanner
Scanner
Export audit logs
Audit logs
Check the status of
log collection
Automatically
collect system
logs/user logs
Server in
which
audit logs
are saved
The audit logs are managed according to the date on which they are collected in the
Central Admin Server. Do not change the Central Admin Server date and time
setting to a date that has already passed.
If the audit log is collected, disk space for saving the audit log is required. Refer to
the following for estimates of the required disk space.
Under the following conditions, one log per day requires 25 KB.
Power on/off: once, Login/Logout: 20 times, Number of scan operations: 100 times