Display Oracle ILOM Event or Audit Log

Note:

The IPMI TLS interface (orcltls) interface is supported as of Oracle ILOM firmware version 3.2.8 and later. For a higher level of security, you should always specify the IPMI TLS interface (-I orcltls) when executing Oracle ILOM commands from the IMPItool utility. For more information about using the IPMI TLS interface from Oracle, see these topics:IPMI TLS Service and Interface and Configure IPMI Management Access for Increased Security in Oracle ILOM Security Guide For Firmware Release 5.x.

To display the Oracle ILOM Audit log, type: sunoem cli "show /SP/logs/audit/list"

Example:

$ ipmitool -I [orcltls|lanplus] -H SP_hostname_or_IPaddress -U username -P password

sunoem cli "show /SP/logs/audit/list"

The Audit Log output might look like the following:

Audit
ID     Date/Time                 Class     Type      Severity
-----  ------------------------  --------  --------  --------
12050  Sat Dec 31 20:33:17 2016  Audit     UI        minor
       root : Open Session : object = "/SP/sessions/38701/type" : value =
       "shell" : success
12049  Sat Dec 31 20:31:19 2016  Audit     UI        minor
       root : Close Session : object = "/SP/sessions/38699/type" : value =
       "shell" : success
12048  Sat Dec 31 20:30:57 2016  Audit     UI        minor
       root : Open Session : object = "/SP/sessions/38699/type" : value =
       "shell" : success
12047  Sat Dec 31 20:29:16 2016  Audit     IPMI      minor
       root : Close Session : session ID = 3279888664 : success
12046  Sat Dec 31 20:29:16 2016  Audit     IPMI      minor
       root : Set Session Privilege Level: privilege level = admin : success
12045  Sat Dec 31 20:29:16 2016  Audit     IPMI      minor
       IPMI 2.0 Login Success : User = root, Client IP = #.#.#.#
12044  Sat Dec 31 19:02:28 2016  Audit     IPMI      minor
       root : Close Session : session ID = 3075033282 : success
12043  Sat Dec 31 19:02:28 2016  Audit     IPMI      minor
       root : Set Session Privilege Level: privilege level = admin : success
Paused: press any key to continue, or 'q' to quitSession closed

To display the Oracle ILOM Event log, type: sel list

Example:

$ ipmitool -I [orcltls|lanplus] -H SP_hostname_or_IPaddress -U username -P password

sel list

The Event Log output might look like the following:

 100 | Pre-Init Time-stamp   | Power Unit #0x78 | State Deasserted
 200 | Pre-Init Time-stamp   | Power Supply #0xa2 | Predictive Failure Asserted
 300 | Pre-Init Time-stamp   | Power Supply #0xba | Predictive Failure Asserted
 400 | Pre-Init Time-stamp   | Power Supply #0xc0 | Predictive Failure Asserted
 500 | Pre-Init Time-stamp   | Power Supply #0xb4 | Predictive Failure Asserted
 600 | 04/05/2007 | 12:03:24 | Power Supply #0xa3 | Predictive Failure Deasserted
 700 | 04/05/2007 | 12:03:25 | Power Supply #0xaa | Predictive Failure Deasserted
 800 | 04/05/2007 | 12:03:25 | Power Supply #0xbc | Predictive Failure Deasserted
 900 | 04/05/2007 | 12:03:26 | Power Supply #0xa2 | Predictive Failure Asserted
 a00 | 04/05/2007 | 12:03:26 | Power Supply #0xa8 | Predictive Failure Deasserted
 b00 | 04/05/2007 | 12:03:26 | Power Supply #0xb6 | Predictive Failure Deasserted
 c00 | 04/05/2007 | 12:03:26 | Power Supply #0xbb | Predictive Failure Deasserted
 d00 | 04/05/2007 | 12:03:26 | Power Supply #0xc2 | Predictive Failure Deasserted
 e00 | 04/05/2007 | 12:03:27 | Power Supply #0xb0 | Predictive Failure Deasserted
 f00 | 04/05/2007 | 12:03:27 | Power Supply #0xb5 | Predictive Failure Deasserted
1000 | 04/05/2007 | 12:03:27 | Power Supply #0xba | Predictive Failure Asserted
1100 | 04/05/2007 | 12:03:27 | Power Supply #0xc0 | Predictive Failure Asserted
1200 | 04/05/2007 | 12:03:28 | Power Supply #0xa9 | Predictive Failure Deasserted
1300 | 04/05/2007 | 12:03:28 | Power Supply #0xae | Predictive Failure Deasserted
1400 | 04/05/2007 | 12:03:28 | Power Supply #0xb4 | Predictive Failure Asserted
1500 | 04/05/2007 | 12:03:28 | Power Supply #0xbe | Predictive Failure Deasserted