Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss
DHCP Audit Trail Log - Missing Dates
2 views
Skip to first unread message
AlisonB19
Jan 28, 2004, 2:50:54 PM1/28/04
to
(Novell 5.x, DHCP Server 3.0)
Able to pull Audit Trail Log info for a range of dates -- starting from the
last time the DHCP server was started through the present -- using the
DNS/DHCP Management Console. Specifically, the log starts on 1/8/04 and
ends on 1/28/04. However, there is no data for 1/21/04 - 1/27/04. Why?
Where is the audit trail log data stored? Also, is it possible to obtain
data for dates prior to the last DHCP server startup?
Thanks in advance for any assistance.
Able to pull Audit Trail Log info for a range of dates -- starting from the
last time the DHCP server was started through the present -- using the
DNS/DHCP Management Console. Specifically, the log starts on 1/8/04 and
ends on 1/28/04. However, there is no data for 1/21/04 - 1/27/04. Why?
Where is the audit trail log data stored? Also, is it possible to obtain
data for dates prior to the last DHCP server startup?
Thanks in advance for any assistance.
Brad Doster
Jan 28, 2004, 10:01:45 PM1/28/04
to
Well, I hate to say it, but the audit log has always been flaky, so
much so that I think folks just don't use it. Maybe using DHCPSRVR -D3
which writes a log to SYS:ETC\DHCP\DHCPSRVR.LOG might give you what you
want?
much so that I think folks just don't use it. Maybe using DHCPSRVR -D3
which writes a log to SYS:ETC\DHCP\DHCPSRVR.LOG might give you what you
want?
bd
NSC Volunteer SysOp
www.InsightNetSolutions.net
AlisonB19
Jan 29, 2004, 10:35:55 AM1/29/04
to
Yeah, that might be the way we go from this point on. From what I found,
the audit trail log is in SYS:SYSTEM\CSLIB, along with daily archived log
files. It seems that all of the data is in those files; I can see it when
opening them with Notepad but it's far from presentable format. Also, I can
run "CSAUDIT" on the server console and bring up the current audit trail log
file or even an archive -- but it only displays the date and time for
entries and nothing else, which is not too useful. I guess the only way to
display all of the audit trail log data is with the mgmt. console. If there
was a way to tell the console to look at a specific archive file, that'd be
perfect. Suppose you have an old archive file from a backup. How would you
view it? The mgmt. console only sees current files.
the audit trail log is in SYS:SYSTEM\CSLIB, along with daily archived log
files. It seems that all of the data is in those files; I can see it when
opening them with Notepad but it's far from presentable format. Also, I can
run "CSAUDIT" on the server console and bring up the current audit trail log
file or even an archive -- but it only displays the date and time for
entries and nothing else, which is not too useful. I guess the only way to
display all of the audit trail log data is with the mgmt. console. If there
was a way to tell the console to look at a specific archive file, that'd be
perfect. Suppose you have an old archive file from a backup. How would you
view it? The mgmt. console only sees current files.
"Brad Doster" <b...@NSCSysOps.net> wrote in message
news:VA.000024d...@nscsysops.net...
Brad Doster
Jan 29, 2004, 10:40:56 PM1/29/04
to
Well, I've always considered a blessing if the current file was
displayed correctly, so looking at the archives was never an issue <g>.
Seriously though, AFAIK there is no way to tell the MC to look at the
archives. If you enter a date outside of the proposed range, it
corrects you, telling you to enter a date within the proposed range.
Beyond that I don't know what else to try.
displayed correctly, so looking at the archives was never an issue <g>.
Seriously though, AFAIK there is no way to tell the MC to look at the
archives. If you enter a date outside of the proposed range, it
corrects you, telling you to enter a date within the proposed range.
Beyond that I don't know what else to try.
0 new messages