ATM_ID: B019566C-53A2-11EA-9805-9BD3993DCDB4 MFF: PLANNEDTIMESTAFF: 1 ID: WFAST_Accounting/Testcases/FS_50.001.01_Audit_Log_Events/10345 TESTCASE_HEADLINE: Event ID=32 Audit Log - Service Login Daignostics EventID = 32 UserName Device name Device serial number Completion Status (Success or Failed) GROUP: security FEATURE: security SUB_FEATURE: none INPUT:
Syslog:
The audit log entry data shall contain the following data for Service Login Diagnostics Event ID = 32: From Table 1: Audit Log Entries found on pages 12 - 21 of the FS 50 001 Audit Log.doc:
1.) Through LUI: Press home button for 5 seconds to activate Service Login Diagnostics screen. Enter Service Login Diagnostics login key (6789).
2.) Once Service Login Diagnostics authorization is complete save the audit log and view the recorded events.
3.) Validate the audit log has an event for a Service Login Diagnostics.
4.) Validate the Service Login Diagnostics event contains the correct event ID; event description and the correct event data.
5.) Validate the Service Login Diagnostics entry data contains the Service Name; Device Name; Device Serial number and Success for Completion Status.
6.)Through LUI: Press home button for 5 seconds to activate Service Login Diagnostics screen.
7.)Enter invalid Service Login Diagnostics login key (1234).Once Service Login Diagnostics authorization fails save the audit log and view the recorded events
The audit log has an event for a below:
Event ID: 32
Description : Service Login Diagnostics
Service name
Device Name
Device Serial Number
Completion Status (Success | Failed)
Sys log Verification using View Events option:
Syslog+CEF format should be displayed as per the Spec (Refer SIEM Integration and Audit Log Events Spec):
PRI number; Timestamp; Device name; CEF:0; Xerox; Device Model; Device Software Version; Device Audit log Event ID; Audit log Event Description; Severity)along with CEF Key Name Mapping.
Note : CSE login to diagnostic mode. If invalid pin for this or event 48 is entered%2c event 32 "failed" will appear. The default "Service name" shall be "Diagnostics Service" for the success case%2c and "Diagnostics/CSE Service" for the failure case