Skip to Content Information Center

Lexmark MX811

Not your product?

Search the Information Center

Security Audit Log menu

Use	To
Export Log	Enable an authorized user to export the security log. Notes: To export the log from the printer control panel, attach a flash drive to the printer. To export the log from the Embedded Web Server, download the log to a computer.
Delete Log Yes No	Specify whether audit logs are deleted.
Configure Log Enable Audit Yes No Enable Remote Syslog No Yes Remote Syslog Server [256 character string] Remote Syslog Port 1–65535 Remote Syslog Method Normal UDP Stunnel Remote Syslog Facility 0–23 Log full behavior Wrap over oldest entries E‑mail log then delete all entries	Specify how audit logs are configured. Notes: Enable Audit determines if events are recorded in the secure audit log and remote syslog. No is the factory default setting. Enable Remote Syslog determines if logs are sent to a remote server. No is the factory default setting. Remote Syslog Server determines the value used to send logs to the remote syslog server. Remote Syslog Port identifies the port over which the printer transmits logged events to a remote server. Remote Syslog Method identifies the protocol used by the printer to transmit logged events to a remote server. Normal UDP is the factory default setting. Remote Syslog Facility determines the Facility value that the printer uses when sending events to the remote syslog server. 4 is the factory default setting. “Log full behavior” determines how the printer resolves if the log entirely fills its allotted memory. “Wrap over oldest entries” is the factory default setting.

Use

Export Log

Enable an authorized user to export the security log.

Notes:

To export the log from the printer control panel, attach a flash drive to the printer.
To export the log from the Embedded Web Server, download the log to a computer.

Delete Log

Yes

Specify whether audit logs are deleted.

Configure Log

Enable Audit

Yes

Enable Remote Syslog

Yes

Remote Syslog Server

[256 character string]

Remote Syslog Port

1–65535

Remote Syslog Method

Normal UDP

Stunnel

Remote Syslog Facility

0–23

Log full behavior

Wrap over oldest entries

E‑mail log then delete all entries

Specify how audit logs are configured.

Notes:

Enable Audit determines if events are recorded in the secure audit log and remote syslog. No is the factory default setting.
Enable Remote Syslog determines if logs are sent to a remote server. No is the factory default setting.
Remote Syslog Server determines the value used to send logs to the remote syslog server.
Remote Syslog Port identifies the port over which the printer transmits logged events to a remote server.
Remote Syslog Method identifies the protocol used by the printer to transmit logged events to a remote server. Normal UDP is the factory default setting.
Remote Syslog Facility determines the Facility value that the printer uses when sending events to the remote syslog server. 4 is the factory default setting.
“Log full behavior” determines how the printer resolves if the log entirely fills its allotted memory. “Wrap over oldest entries” is the factory default setting.

Use	To
Configure Log (continued) Admin’s e-mail address [256 character string] Digitally sign exports Off On Severity of events to log 0–7 Remote Syslog non-logged events No Yes E-mail log cleared alert No Yes E-mail log wrapped alert No Yes E-mail % full alert No Yes % full alert level 1–99 E-mail log exported alert No Yes E-mail log settings changed alert No Yes Log line endings LF (\n) CR (\r) CRLF (\r\n)	Specify how audit logs are configured. Notes: “Admin’s e‑mail address” determines if administrators are automatically notified of certain log events. This setting can have one or more e‑mail addresses (separated by commas). “Digitally sign exports” determines if the printer automatically signs each exported security log. Off is the factory default setting. “Severity of events to log” records the severity value of each event. 4 is the factory default setting. “Remote Syslog non-logged events” determines if the printer sends events to the remote server that have a severity level greater than the value of the “Severity of events to log” setting. No is the factory default setting. “E-mail log cleared alert” determines if the printer sends an e‑mail to the administrator every time a log is deleted through the printer control panel or EWS. No is the factory default setting. “E-mail log wrapped alert” determines if the printer sends the administrator an e‑mail when log entries are wrapping. No is the factory default setting. “E-mail % full alert” determines if the printer sends the administrator an e‑mail when the log fills a certain amount of its allotted space. No is the factory default setting. “% full alert level” determines if the space occupied by log equals or exceeds the value of the full alert level. 90 is the factory default setting. “E-mail log exported alert” determines if the printer sends the administrator an e‑mail when there is a log exported. No is the factory default setting. “E-mail log settings changed alert” determines if the printer sends the administrator an e‑mail when the value of the Enable Audit Log setting is toggled. No is the factory default setting. “Log line endings” specifies how line endings will be handled in the log file, depending on the operating system in which the file will be parsed or viewed. “LF (\n)” is the factory default setting.

Use

Configure Log (continued)

Admin’s e-mail address

[256 character string]

Digitally sign exports

Off

Severity of events to log

0–7

Remote Syslog non-logged events

Yes

E-mail log cleared alert

Yes

E-mail log wrapped alert

Yes

E-mail % full alert

Yes

% full alert level

1–99

E-mail log exported alert

Yes

E-mail log settings changed alert

Yes

Log line endings

LF (\n)

CR (\r)

CRLF (\r\n)

Specify how audit logs are configured.

Notes:

“Admin’s e‑mail address” determines if administrators are automatically notified of certain log events. This setting can have one or more e‑mail addresses (separated by commas).
“Digitally sign exports” determines if the printer automatically signs each exported security log. Off is the factory default setting.
“Severity of events to log” records the severity value of each event. 4 is the factory default setting.
“Remote Syslog non-logged events” determines if the printer sends events to the remote server that have a severity level greater than the value of the “Severity of events to log” setting. No is the factory default setting.
“E-mail log cleared alert” determines if the printer sends an e‑mail to the administrator every time a log is deleted through the printer control panel or EWS. No is the factory default setting.
“E-mail log wrapped alert” determines if the printer sends the administrator an e‑mail when log entries are wrapping. No is the factory default setting.
“E-mail % full alert” determines if the printer sends the administrator an e‑mail when the log fills a certain amount of its allotted space. No is the factory default setting.
“% full alert level” determines if the space occupied by log equals or exceeds the value of the full alert level. 90 is the factory default setting.
“E-mail log exported alert” determines if the printer sends the administrator an e‑mail when there is a log exported. No is the factory default setting.
“E-mail log settings changed alert” determines if the printer sends the administrator an e‑mail when the value of the Enable Audit Log setting is toggled. No is the factory default setting.
“Log line endings” specifies how line endings will be handled in the log file, depending on the operating system in which the file will be parsed or viewed. “LF (\n)” is the factory default setting.

Was this article helpful?

Security Audit Log menu

Related content