Audit Log update

Products

• VMware Smart Assurance
• Network Observability

Issue/Introduction

When is the Audit Log updated? How are underlying Smarts domain events processed into Smarts SAM Notifications?

Environment

All Supported Smarts versions

Resolution

The Smarts SAM Audit Log is updated whenever the Smarts SAM domain server receives the notification/event from the underlying domains, using the timestamp of the host on which the Smarts SAM domain was started. 

For example, consider an environment where a Smarts IP APM Domain is an underlying domain to a Smarts SAM domain:

1. Router X goes down in Smarts IP APM and the DOWN event is generated.
2. The Smarts IP Domain forwards the event to Smarts SAM domain server.
3. When the event reaches the Smarts SAM domain server, the event is processed and becomes a Notification.
4. The timestamp indicating when the Smarts SAM server received the Notification (Router X down) is added to the Audit log file.