VMware Cloud Community
vmhyperv
Contributor
Contributor
Jump to solution

Checking security logs in ESXi4.1

Hi everyone,

   We need to check to security logs are enabled or not in  VMware ESXi 4.1.0 build-348481.

As far inESX4.0 we use cat /etc/audit/auditd.conf  to check.

Any help on this will appreciated.

thanks

vmguy

Tags (3)
Reply
0 Kudos
1 Solution

Accepted Solutions
Sreejesh_D
Virtuoso
Virtuoso
Jump to solution

its not abled. Change the value to TRUE and restart management agent.

View solution in original post

Reply
0 Kudos
6 Replies
som94
Enthusiast
Enthusiast
Jump to solution

Hi vmhyperv,

Could you please share your .conf file ?.?

"Life would be so much easier if we only had the source code"
vmhyperv
Contributor
Contributor
Jump to solution

Hi,

Can you please let me know the path for the file.

thanks

vmguy

Reply
0 Kudos
Sreejesh_D
Virtuoso
Virtuoso
Jump to solution

In ESXi 4.1 , check the value for the parameter vmauthd.logEnabled in /etc/vmware/config.

If its TRUE security log is enabled and you can see the logs in  file mentioned for log.vmauthdFileName (default "/var/log/vmware/authd.log" ). By default value will be FALSE.

vmhyperv
Contributor
Contributor
Jump to solution

Thanks for your prompt reply.I will let you know once in office.

thanks

vmguy

Reply
0 Kudos
vmhyperv
Contributor
Contributor
Jump to solution

Hi,

Please find the Screenshot for the authdlog.

thanks

vmguy

Reply
0 Kudos
Sreejesh_D
Virtuoso
Virtuoso
Jump to solution

its not abled. Change the value to TRUE and restart management agent.

Reply
0 Kudos