VTS logs more than just alarm data in its Alarms.log files. Also stored is data related to events concerning security, operator control actions, remote configuration, and the Alarm Dialer system.
What Security Actions Are Logged?
VTS logs events related to security to the alarm history. The following actions will result in an entry in the History alarm list:
• User logs on
• User logs off
• New account added
• Account copied
• Account modified
• Account deleted
• Administrative settings modified
Note: To view the History list, navigate to the Alarm page and click the History button.
What Information Is Logged?
For each security-related event in the History list, the following information is displayed:
• The name of the PC on which the security event occurred (e.g. [WorkstationX])
• The username of the user who was logged on when the security event occurred (e.g. NShannon)
What Format is used in the History List for Security-related Events?
• The Priority for security-related events is always "Event"
• The Area for security-related events is always "Security"
• Workstation names are enclosed in square brackets (e.g. [WorkstationX])
Config.ini labels are used for specific security events (see "VTS Programmer’s Guide: Introduction to Config.ini: Config.ini [LABELS] Section Variables: Customizable Labels Related to the Security Manager ")
An example of a security-related event entry in the History list is displayed below:
Event Priority Time Date Area Message
Event Event 09:57:10 Nov 29 Security [WRKSTNX] JSmith has logged on
Further information about VTS and security is provided in Introduction to the Security Manager.