Monitoring CMS Logs764 Netscape Certificate Management System Installation and Setup Guide • May 2002Level. Select a message category that represents the level of logging to filtermessages. For more information, see “Log Levels (Message Categories)” onpage 748.Filename. Select the log file you want to view. Choose Current to view thecurrently active error log file. For more information, see “Log File NamingConventions” on page 750.5. Click Refresh.The table displays the error log entries. The entries are in reverse chronologicalorder, with the most current log placed at the top. Use the scroll arrows on theright edge of the panel to scroll through the log entries.For each entry you see the following details:Source. Indicates CMS component or resource that logged the message.Level. Indicates the severity of the corresponding entry (explained inTable 23-3 on page 748).Date. Indicates the date on which the entry was logged.Time. Indicates the time at which the entry was logged.Details. Provides a brief description of the log.6. To view an entry in its entirety, either double-click it or select the entry andclick View.Monitoring Audit LogsCertificate Management System maintains audit trails for all events—certificaterequests, certificate renewal and revocation requests, CRL publication, and so on.These trails enable you to detect any unauthorized access or activity. The audittrails are logged and maintained in a file in your local file system.If you have installed Certificate Management System on a Windows NT system,you can also configure the server to log audit messages to Windows NT event log.For details, see “Logging to Windows NT Event Log” on page 767.NOTE You should periodically examine and audit the CMS audit log forunusual activity. When examining the log, note in particular the logentries that fall under the Security-Related Events category (theseare labeled Security).
