Client notification of remote login 15.7 Audit logging The Management Console code records all remote access in a log file. A client can use a  DS CLI function to offload this file for audit purposes. The DS CLI function combines the log  file that contains all service login information with an IBM enterprise storage server network  interface (ESSNI) server audit log file that contains all client user login information to provide  the client with a complete audit trail of remote access to a Management Console. This on-demand audit log mechanism is sufficient for client security requirements about HMC  remote access notification. In addition to the audit log, email notifications and SNMP traps also can be configured at the  Management Console to send notification in a remote support connection. The DS8880 offers an audit log, It is an unalterable record of all actions and commands that  were initiated by users on the storage system through the DS8000 Storage Management  graphical user interface (GUI), DS CLI, DS Network Interface (DSNI), or Copy Service  Manager. An audit log does not include commands that were received from host systems or  actions that were completed automatically by the storage system. The audit logs can be  exported and downloaded by the DS CLI or Storage Management GUI.  The DS CLI  offloadauditlog  command provides clients with the ability to offload the audit  logs to the client’s DS CLI workstation into a directory of their choice, as shown in  Example 15-3.  Example 15-3 DS CLI command to download audit logs dscli>  offloadauditlog -logaddr smc1 c:\75ZA570_audit.txt Date/Time: November 3, 2015 11:41:56 AM CET IBM DSCLI Version: 7.8.0.376 DS: - CMUC00243I offloadauditlog: Audit log was successfully offloaded from smc1 to  c:\75ZA570_audit.txt. Chapter 15. Remote support  485