Introduction to LogsChapter 23 Managing CMS Logs 767Services That Are LoggedAll major components and protocols (or services) of Certificate ManagementSystem log messages to log files. Table 23-2 lists services that are logged by default.If you want to view messages logged by a specific service, you can customize logsettings accordingly. For details, see “Monitoring CMS Logs” on page 779.Audit This log records messages specific to the certificate service—messages such as certificaterequests, certificate renewal and revocation requests, and CRL publication—and enablesyou to detect any unauthorized access or activity. This log is on by default.For more information, see “Configuring CMS Logs” on page 773 and “Monitoring AuditLogs” on page 784.Table 23-2 Services logged by Certificate Management SystemService DescriptionACLs Specifies logged events related to access control lists.Administration Specifies logged events related to this server’s administration activities—thatis, HTTPS communication between the CMS window and CertificateManagement System.All Specifies logged events related to all the services.Authentication Specifies logged events related to this server’s activity with the authenticationmodule.Certificate Authority Specifies logged events related to the Certificate Manager.Database Specifies logged events related to this server’s activity with the internaldatabase.HTTP Specifies logged events related to the HTTP activity of the server.Key Recovery Authority Specifies logged events related to the Data Recovery Manager.LDAP Specifies logged events related to this server’s activity with the LDAPdirectory (used for publishing certificates and CRLs).OCSP Specifies logged events related to OCSP.Others Specifies logged events related to other activities of this server, such ascommand-line utilities and other processes.Registration Authority Specifies logged events related to the Registration Manager.Table 23-1 Types of logs maintained by Certificate Management System (Continued)Log type Description
