## Client notification of remote login 

The Management Console code records all remote access in a log file. A client can use a DS CLI function to offload this file for audit purposes. The DS CLI function combines the log file that contains all service login information with an IBM enterprise storage server network interface (ESSNI) server audit log file that contains all client user login information to provide the client with a complete audit trail of remote access to a Management Console. 

This on-demand audit log mechanism is sufficient for client security requirements about HMC remote access notification. 

In addition to the audit log, email notifications and SNMP traps also can be configured at the Management Console to send notification in a remote support connection. 

## 15.7 Audit logging 

The DS8880 offers an audit log, It is an unalterable record of all actions and commands that were initiated by users on the storage system through the DS8000 Storage Management graphical user interface (GUI), DS CLI, DS Network Interface (DSNI), or Copy Service Manager. An audit log does not include commands that were received from host systems or actions that were completed automatically by the storage system. The audit logs can be exported and downloaded by the DS CLI or Storage Management GUI. 

The DS CLI offloadauditlog command provides clients with the ability to offload the audit logs to the client’s DS CLI workstation into a directory of their choice, as shown in Example 15-3. 

dscli> offloadauditlog -logaddr smc1 c:\75ZA570_audit.txt Date/Time: November 3, 2015 11:41:56 AM CET IBM DSCLI Version: 7.8.0.376 DS: - CMUC00243I offloadauditlog: Audit log was successfully offloaded from smc1 to c:\75ZA570_audit.txt. 

