Fibre Channel (SAN)

Reply
N/A
Posts: 1
Registered: ‎01-15-2010

Log of all / recent alias, zoning changes

Trying to track down detailed alias, zone, zone config, and port changes on a particular switch. Have briefly search through FabricOS 6.2.1 docs and haven't located anything actionable. Port log is not persistant, "errshow" / system logs fairly useless for this sort of thing....

Any help would be greatly appreciated!

Thanks,
Chris

Super Contributor
Posts: 644
Registered: ‎03-01-2007

Re: Log of all / recent alias, zoning changes

clombard,

--->>> Have briefly search through FabricOS 6.2.1 docs and haven't located anything actionable.

Refer please in the Fabric OS Troubleshooting and Diagnostics Guide.

If you are satisfied with the responses please mark as 'Answered'.
If not, just let me know I can see to get more info.
I would appreciated if you rate the threads.

Thank you.

Super Contributor
Posts: 260
Registered: ‎04-09-2008

Re: Log of all / recent alias, zoning changes

Refer the FOS admin guide to configure audit and trackchanges

I'm looking at the FOS admin guide section Audit Log configuration

When managing SANs you may want to audit certain classes of events to ensure that you can view
and generate an audit log for what is happening on a switch, particularly for security-related event
changes. These events include login failures, zone configuration changes, firmware downloads,
and other configuration changes—in other words—critical changes that have a serious effect on the
operation and security of the switch.
and section Track and control switch events
The track changes feature allows you to keep a record of specific changes that may not be
considered switch events, but may provide useful information. The output from the track changes
feature is dumped to the system messages log for the switch. Use the errDump or errShow
command to view the log.
Useful commands - Refer command reference manual
auditcfg --class audit_class
auditcfg --enable |--disable
auditcfg --show
trackchangesset
trackchangesshow
Once set you will get messages such as this
AUDIT, <timestamp>, , INFO, ZONE, <event-initiator-details>,
<event-location>, , Event: <Event Name>, Status: success, Info: <Zone object type>
\"<Zone object member list>\" added to <Zone object set type> \"<Zone object set
name>\".
<timestamp>, , <sequence-number>,, INFO, <system-name>, Config file
change from task:<task>.
You will need fabricwatch for refinement and dialhome of these messages, else find them in errshow and errdump messages.
Also note that enabling these features adds some overhead to your switch processor, hence most companies do not enable these.

Biju Krishnan

TechHelp24

Email: bkrishnan@techhelp24.com

Site: www.techhelp24.com

Super Contributor
Posts: 425
Registered: ‎03-03-2010

Re: Log of all / recent alias, zoning changes

Going forward :

<<Trying to track down detailed alias, zone, zone config, and port changes on a particular switch>>

Run  SAN Health  and you can get all the details in that

Join the Community

Get quick and easy access to valuable resource designed to help you manage your Brocade Network.

vADC is now Pulse Secure
Download FREE NVMe eBook