Filter
Top Products
Security
WorkCentre 6400 Multifunction Printer
System Administrator Guide
79
Audit Log
When the Audit Log feature is enabled, the printer begins recording events that happen on the printer.
You can download the Audit Log as a tab-delimited text file, and review it to find security breaches and
assess the printer’s security.
Enabling Audit Log
Notes:
• Secure HTTP (SSL) must be enabled before you can enable Audit Log. For details, see
Enabling Secure HTTP (SSL) on page 65.
• If your printer is locked, you must log in as a system administrator. For details, see
Accessing CentreWare IS on page 17.
1. In CentreWare IS, click Properties > Security > Audit Log.
2. Click Enabled under Enabling Audit Log on machine.
3. Click Apply.
Saving an Audit Log
Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing
CentreWare IS on page 17.
1. In CentreWare IS, click Properties > Security > Audit Log.
2. Click Save.
3. Right-click the Download Log link and save the compressed auditfile.txt.gz file to your computer.
4. Extract the Auditfile.txt text file, and open it in a spreadsheet application that can read a tab-
delimited text file.
Interpreting the Audit Log
The Audit Log is formatted into ten columns
• Index: Column 1 lists a unique value that identifies the event.
• Date: Column 2 lists the date that the event happened in mm/dd/yy format.
• Time: Column 3 lists the time that the event happened in hh:mm:ss format.
• Event ID: Column 4 lists the type of event. The number corresponds to a unique description. For
details, see Audit Log Event Identification Numbers on page 174.
• Event Description: Column 5 lists an abbreviated description of the type of event. For details, see
Audit Log Event Identification Numbers on page 174.
Notes:
• One audit log entry is recorded for each network destination within a Workflow Scanning
scan job.
• For Server Fax jobs: One audit log entry is recorded for each Server Fax job.
• For Email jobs: One audit log entry is recorded for each SMTP recipient within the job.