audit

The audit command is used to enable remote logging of system events and configure the remote audit (syslog) server connection.

Note

The audit command can only be used by an administrator.

audit start
audit stop
audit set parameter=value [parameter=value ...]
audit get [config|stats|all]
audit verify [debug]

Action	Description
start	Establishes a connection from the Makito X Series device to a remote audit server and enables logging to it.
stop	Disables the connection to the remote audit server.
set	Modifies the audit parameters. A series of one or more `parameter=value` pairs can be specified at once. See Parameters below.
get	Displays audit configuration and connection status information. You can specify configuration, statistics, or all information.
verify	Verifies the validity of the TLS connection parameters. Tip Connect to the audit server in verbose mode to help diagnose connection or certificate problems.

Parameter	Default	Description/Values
server	n/a	The server IP address. Enter an IP address in one of the following formats: `fqdn[:port]` `ipv4_addr[:port]` `[ipv6_addr][:port]` Note When configuring an IPv6 server, the address must be enclosed in square brackets. `hostname[:port]`
transport	UDP	The transport protocol, either: `UDP` (User Datagram Protocol): Default UDP port = `514` `TLS` (Transport Layer Security): Default TLS port = `6514`
trusted	All	If transport is TLS, the type of server authentication: `All`: No server authentication `CA-signed`: Root-CA certificate imported `Self-signed`: Fingerprint
fingerprint	n/a	If trusted is self-signed, specify the audit server certificate fingerprint (`md5` or `sha1`): `md5-fingerprint:` `sha1-fingerprint:`

# audit get

Returns audit server configuration information, such as:

Configuration:
 Audit server address  : syslog.example.com:10533
 Transport             : TLS
 Trusted servers       : CA-signed

Related Topics