SIEM, Vulnerability Scanning, Server Monitoring and Compliance Training for IT Professionals
Table of Contents

Self-Auditing

Self-Auditing is the process of analyzing verbose audit log entries for execution timing and accuracy and administrator and other user activity.

Server Manager includes Self-Auditing features to enable ISSMs and network administrators to verify execution history for accuracy and review updates made by its users.

How it works

Significant activity is logged to the CBSAudit Event Log then log entries consolidated into the centralized log database on an hourly frequency. The following events are logged:

  • Both user and system initiated create, update and delete function calls made to relevant configuration objects.
  • All object assignment function calls.
  • All object enable and disable calls.
  • All executed Actions.
  • Optionally, Report, Template and Auto-Configurator execution started and completed events.

To view the CBSAudit Event Log Consolidation Template

  • From the Explorer View, expand the root Templates node, then expand the CBSAudit Event Log Template Group.
  • Find the Corner Bowl Audit Log template, then right click and select Template Properties. The Template Properties View displays.
  • For more information see: Event Log Consolidation Template
Self-Auditing Event Log Consolidation Template
Self-Auditing Event Log Consolidation Template

To tail the CBSAudit Event Log

  • From the Explorer View, expand the root Hosts node, then find the host Corner Bowl Server Manager is installed.
  • Expand the target host, then expand the Templates node. Find the Corner Bowl Audit Log Template then expand. Right click on the CBSAudit node then select Watch. The Real-Time Event Log Viewer displays and automatically starts tailing the Event Log.

To view the consolidated CBSAudit Event Log

  • From the Explorer View, expand the root Hosts node, then find the host Corner Bowl Server Manager is installed.
  • Expand the target host, then expand the Templates node. Find the Corner Bowl Audit Log Template then expand. Right click on the CBSAudit node then select View. The Event Log Viewer Properties View displays.
  • From the Event Log Viewer Properties View, set any options you would like to apply then click OK. The Event Log Viewer displays then loads targeted consolidated log entries.

To view the Self-Auditing Reports

  • From the Explorer View, expand the root Auditing node.
  • Once expanded, click on one of the following 5 nodes to open the corresponding view:
NodeDescription
Audit Work ItemsSelect this node to manage Audit Work Items.
ReportsFilters the CBSAudit Event Log for all Report activity and configuration updates.
Templates and MonitorsFilters the CBSAudit Event Log for all Monitor activity and Template configuration updates.
Auto-ConfiguratorsFilters the CBSAudit Event Log for all Auto-Configurator activity and configuration updates.
ActionsFilters the CBSAudit Event Log for all Action activity and configuration updates.
Auditing Explorer View nodes
Auditing Explorer View nodes

To modify and schedule the Self-Auditing Reports

  • From the Explorer View, expand the root Reports node, then expand the CBSAudit Event Log Report Group.
  • Find the report you would like to update, then right click and select Properties. The Report Properties View displays.
  • For more information see, Event Log Reports
Self-Auditing Reports
Self-Auditing Reports

To modify the Self-Auditing Report Filters

  • From the Explorer View, expand the root Filters node, then expand the CBSAudit Event Log Filter Group.
  • Find the filter you would like to update, then right click and select Properties. The Filter Properties View displays.
  • For more information see, Filters
Self-Auditing Report Filters
Self-Auditing Report Filters

Related Topics

Audit Work Items

Auditing

Event Log Consolidation Template