An audit log contains a cluster-wide view of events and changes to Teradata Fabric within a cluster. The audit log is found at /etc/opt/teradata/tdqgm/logs/tdqgm-audit.log and is replicated on all Teradata Fabric Managers in a cluster. The log contains all failed logon attempts and configuration changes. When the log reaches 100MB in size, the audit log is rotated and renamed tdqgm-audit.log.1 for storage. Up to 10 rotated audit log files are kept on disk.
The format for the audit log message is the following:
DATE TIME ACTION RESOURCE_TYPE USER_DETAILS --- RESULT
- DATE – Current date in YYYY-MM-DD format
- TIME – Time of audit record in UTC
- ACTION – The action performed by the user, one of: CREATED, UPDATED, DELETED, or LOGIN
- RESOURCE_TYPE – The type of resource created, updated, or deleted (for example. SYSTEM, CONNECTOR, or FABRIC)
- USER_DETAILS – Contains details about the user that performed the action
- user: The name of the Teradata Fabric Manager user (such as, viewpoint, support)
- address: The IP of the Teradata Fabric client
- endUser: The username of the Viewpoint user, if accessed from Viewpoint
- endUserAddress: The Viewpoint user IP, if accessed from Viewpoint
- manager: The hostname of the manager in the cluster that handled the request
- RESULT – The result of ACTION. If ACTION is CREATED or DELETED, the result contains the created or deleted resource. If ACTION is UPDATED, the result contains the BEFORE and AFTER contents of the resource.