Checking and Managing Password Change Logs

Scenarios

After a password rule is executed, logs are generated accordingly. You can view the password change details in password logs.

Prerequisites

Your role has the management permission for the Password Rules module. For details about the permissions of each role, see Role.

Viewing Password Change Log Details

1. Log in to your bastion host system.
2. In the navigation pane on the left, choose Policy > Password Rules.
3. Click the Password Log tab page. The password change log list is displayed.
4. Query password logs.

   Quick search: Enter a keyword in the search box and search for password change logs by rule name.

5. Select the password log and click Detail.

   You can view the log content, including the basic information and password change result.

Downloading Password Logs

Download password logs to the local PC. The password logs are saved as a ZIP file.

1. Log in to your bastion host system.
2. In the navigation pane on the left, choose Policy > Password Rules.
3. Click the Password Log tab page. The password change log list is displayed.
4. In the Operation column of the target log, click Download. The configuration dialog box is displayed.

   Table 1 Downloading Password Logs

   Parameter	Description
   Set encryption password	Set an encryption password for the file to be exported. The file exported to the local PC can be opened only after the encryption password is entered. Password rules: The password must contain 8 to 32 characters. Only uppercase letters, lowercase letters, numbers, and special characters (!@$%^-_=+[{}]:,./?~#*) are allowed. At least three of the four character types described above are used.
   User Password	Enter the login password of the current user. The password change logs can be downloaded only after the verification is successful, ensuring the security of the resource account password.

5. Click OK.

Deleting a Password Change Log

1. Log in to your bastion host system.
2. In the navigation pane on the left, choose Policy > Password Rules.
3. Click the Password Log tab page. The password change log list is displayed.
4. Delete password change logs as needed.
   • Deleting a log
     1. In the Operation column of the target log, click Delete.
     2. In the displayed dialog box, click OK.
   • Deleting logs at a time
     1. In the log list, select multiple logs.
     2. Click Delete in the lower left corner.
     3. In the displayed dialog box, click OK.