| Hello,
These are the answers to your questions (see ">>"):
Logging Directory
From the Browser, I specified /usr/var/mcc/acloc/central_logging/files
Is this correct ?
>> Yes
LOC Filter File
It appears that TeMIP expects you to specify an AC View (.v)
files for this field. If this is so, which AC View one should
specify ?
>> The default file is
>> "/var/mcc/acloc/central_logging/admin/temip_central_loc_filter.v"
>> You can find more information is the "TeMIP Framework Security Adminitration Guide"
>> Chapter "12.1.2 Central LOC Filter" and
>> "Table 12-1: Central LOC Configuration Parameters."
Regards
Jean
===============================
12.1.2 Central LOC Filter
The Central LOC filter specified in the Central LOC con-
figuration file contains information that determines which
commands are logged. You define the Central LOC filter us-
ing the AC language, as for the AC view. The same filter is
used for all the Central LOC sessions on one system.
A system default Central LOC filter is provided with TeMIP
Framework Security. This default Central LOC filter is
initially defined to log non-query commands. As TeMIP
Security System Administrator, you can modify this filter to
provide your own system default Central LOC filter and then
compile it so that your modifications are taken into account.
Refer to Chapter 6 for an example of how to define and com-
pile a LOC filter and Appendix A for a description of the AC
language that you must use to write a LOC filter.
The system default Central LOC filter (created at TeMIP
Framework installation time) is:
/var/mcc/acloc/central_logging/admin/temip_central_loc_filter.r
Its contents are:
! TEMIP SYSTEM DEFAULT CENTRAL LOC FILTER
!
!
! This file must be in /var/mcc/acloc/central_logging/admin with its
! associated compiled LOC filter temip_central_loc_filter.v
!
! The associated compiled LOC filter is used at run time as the
! "active" Central LOC filter when no filter is specified in
! the central LOC configuration file.
!
! This file contains set definitions that could be added in
! the control rule part to filter more verbs. Do it if you are
! a user of the module corresponding to the verb set.
!
! DECLARATIVE PART :
! define the "non-logged" verbs
!
verb set mcc_non_logged_verbs = (show, directory, notify, getevent);
!
! for the Exporter FM
verb set exporter_non_logged_verbs = (show exporting);
!
! for the Historian FM
verb set historian_non_logged_verbs = (show recording);
!
! for all TeMIP applications
verb set temip_non_logged_verbs = (summarize);
!
! for TeMIP Alarm Handling :
verb set alarm_handling_non_logged_verbs = (acknowledge, terminate);
function set alarm_handling_no_logging =
verb set alarm_handling_non_logged_verbs on operation_context * alarm *;
!
! for TeMIP Event Logging
verb set event_logging_non_logged_verbs = (delete);
function set event_logging_no_logging =
verb set event_logging_non_logged_verbs on osi_system * log * log_record *;
!
! for TeMIP Trouble Ticketing
verb set trouble_ticketing_non_logged_verbs =
(set, acknowledge, associate_alarm, dissociate_alarm);
function set trouble_ticketing_no_logging =
verb set trouble_ticketing_non_logged_verbs on tt_context * tt_report *;
!
!
!
! CONTROL RULE part defined is 'DISALLOW ONLY' mode
!
disallow only
verb set mcc_non_logged_verbs on any entity;
verb set exporter_non_logged_verbs on any entity;
verb set historian_non_logged_verbs on any entity;
verb set temip_non_logged_verbs on any entity;
function set alarm_handling_no_logging on any entity;
function set event_logging_no_logging on any entity;
function set trouble_ticketing_no_logging on any entity;
onkong>
The associated compiled Central LOC filter is:
/var/mcc/acloc/central_logging/admin/temip_central_loc_filter.v
These two files are owned by user acloc with protection rwr-
r so that only you, the TeMIP Security System Administrator
can modify them.
============================
Table 12-1: Central LOC Configuration Parameters.
Name Values Default
LOGGING_ ON or OFF OFF
STATUS
The logging status, which determines whether the Central LOC is globally active or
not. The Central LOC is enabled for an Operator if this parameter is ON and the
corresponding parameter in the User Profile is also ON, see Section 11.1.3.
For example (to enable the Central LOC globally):
LOGGING_STATUS: ON
LOGGING_DIR Any full path /var/mcc/acloc/central_logging/files
The logging directory location (the initial Central LOC repository). You can put this
directory (and the fallback directories) in a Network File System (NFS) partition.
This must be done before TeMIP Framework is installed. This disk partition can
be shared by several machines on the network, all using this directory as a Central
LOC repository.
For example:
LOGGING_DIR: /logging_dir
FILTER_FILE Any full path /var/mcc/acloc/central_logging/admin/temip_central_loc_filter.v
The full path to the compiled Central LOC filter. This is applied to the commands to
decide if they are to be logged or not.
For example:
FILTER_FILE: /var/mcc/acloc/central_logging/admin/customized_filter.v
|