Dell PowerScale: Answers to Common Questions about Audit/Syslog

• 1

  Overview
• 2

  Revisions
• 3

  We value your feedback

• 1

  Can PowerScale track the actions taken by users who have root or admin privileges?

• 1

  Does PowerScale have the capability to track ‘invalid access’ attempts?
• 2

  Invalid access attempt through SSH
• 3

  Invalid access through the protocol
• 4

  Invalid access through the WebUI

• 1

  Can PowerScale track the elevation of privileges?
• 2

  SMB – elevation of privileges through “run as root”
• 3

  NFS – elevation of privileges through “map users to root”
• 4

  CLI – elevation of privileges through “sudo”

• 1

  Can PowerScale track changes, additions, or deletions to individual accounts?
• 2

  Account creation
• 3

  Account modification
• 4

  Account deletion

• 1

  Can PowerScale track the initialization or stopping of audit logs?

• 1

  Can you still track the protocol events when its audit log has been stopped?

• 1

  Will PowerScale capture the creation or deletion of system level objects?

• 1

  Will PowerScale record the changes to time settings on critical systems?

• 1

  Does the PowerScale audit log support parameters such as Date and success/failure?