Appliance audit logs

The appliance generates audit logs so there is always an audit trail to follow.

There are two logs, the audit log and the CLI log.

The appliance logs significant events to the audit log, which is always available to view by using CLI commands (see show audit-log), and on the web UI (click the status icon and select Logs > Audit logs). You can also set up log targets using the audit log category to send this log to another location on the appliance, or to an external central syslog server.

CLI events record the input of commands, not the result or outcome. CLI trace records are generated when a command is issued, irrespective of whether the command is included in the audit trace. The web UI and REST management interface are often a front end to the CLI, particularly for configuration changes, so this category also includes log events for commands that are invoked internally to service these interfaces.