Viewing the audit log

Kaspersky IoT Secure Gateway saves events related to system security in the audit log. These events are created by system entities. Each event indicates the name of the source component.

When an event with critical severity occurs, contact the employee responsible for data security in your organization.

To view the audit log:

In the menu in the left part of the web interface page, select the Audit section.

This opens the System security audit section that displays a table containing system security events.

To sort events in the table of the System security audit section:

• To sort by event severity, click the header of the  column.
• To sort by event text, click the header of the Title column.
• To sort by the name of the entity that registered the event, click the header of the Entity column.
• To sort by date and time, click the header of the Date and time column.

To save the audit log to your computer:

1. In the menu in the left part of the web interface page, select the Audit section.
2. In the System security audit section, click the Download all button.

   This opens a window warning you that the audit log will be deleted from Kaspersky IoT Secure Gateway after you save the file.

3. Confirm deletion of the audit log from the system.

   This opens a window that lets you save the audit log to a file.

4. In the window that opens, specify the path for saving the audit log file.

   By default, the audit file is saved with the name audit.csv.

5. Save the file.

To view information about the audit settings:

1. In the menu in the left part of the web interface page, select the Audit section.
2. Move your mouse cursor over the  icon in the upper part of the window.

   This opens a pop-up window containing the following information:

   • Total – current number of entries in the audit log.
   • Capacity – maximum number of entries in the audit log.
   • Policy – audit log maintenance policy.
     • Circular – when the audit log is overfilled, new entries will overwrite old entries.
     • Limited – when the audit log is overfilled, the system stops.