When auditing is enabled, audit-related alarms are generated and displayed in the Alarms view of the associated element.
To change the type of alarms displayed in the Alarms view:
In the Explorer pane, select an element.
Click the Alarms tab.
In the toolbar, click the Alarm Selector and select Real-Time or Historical, and Audit Events.
The selector button displays the types of alarms currently displayed in the Alarms view so its label can vary. For example, if audit alarms are currently displayed, the toolbar displays Real-Time: Audit Events.
If the entire description is not visible in the Alarms view, right-click the alarm and select Properties to open the Alarm Properties property page.
HINT:All audit alarms can be viewed from the Administration or Enterprise root elements if they are configured to show alarms. However, before enabling this feature, verify that your machine has enough memory to handle the number of events being audited. If it does, alarms can be enabled for the Administration or Enterprise root elements by editing the formula.custom.properties file.
Deleting alarms in memory does not affect the alarm history. These alarms are not marked as deleted when stored in the Event Data Store.
In addition to the standard alarm columns, the columns listed in Table 6-3 display in the Alarms view.
Table 6-3 Additional Alarm Columns
|
Column |
Description |
|---|---|
|
Element |
The element for which the audit alarm is recorded. |
|
Date/Time |
Identifies the time stamp of the audited event. |
|
Principal |
Identifies the event initiator. If the server initiates the event, the Operations Center server appears. |
|
Subject |
Identifies the target of the event or operation. |
|
Description |
Summarizes the event action. |