ATM_ID: B019566C-53A2-11EA-9805-9BD3993DCDB4 MFF: PLANNEDTIMESTAFF: 1 ID: WFAST_Accounting/Testcases/FS_50.001.01_Audit_Log_Events/10345 TESTCASE_HEADLINE: Event ID=32 Audit Log - Service Login Daignostics EventID = 32 UserName Device name Device serial number Completion Status (Success or Failed) GROUP: security FEATURE: security SUB_FEATURE: none INPUT:

Syslog:

  1. Syslog Destination Server details must be configured.
PROCEDURE:

The audit log entry data shall contain the following data for Service Login Diagnostics Event ID = 32: From Table 1: Audit Log Entries found on pages 12 - 21 of the FS 50 001 Audit Log.doc:
1.) Through LUI: Press home button for 5 seconds to activate Service Login Diagnostics screen. Enter Service Login Diagnostics login key (6789).
2.) Once Service Login Diagnostics authorization is complete save the audit log and view the recorded events.
3.) Validate the audit log has an event for a Service Login Diagnostics.
4.) Validate the Service Login Diagnostics event contains the correct event ID; event description and the correct event data.
5.) Validate the Service Login Diagnostics entry data contains the Service Name; Device Name; Device Serial number and Success for Completion Status. 
6.)Through LUI: Press home button for 5 seconds to activate Service Login Diagnostics screen.
7.)Enter invalid Service Login Diagnostics login key (1234).Once Service Login Diagnostics authorization fails save the audit log and view the recorded events

OUTPUT:

The audit log has an event for a below:
Event ID: 32
Description : Service Login Diagnostics
Service name
Device Name
Device Serial Number
Completion Status (Success | Failed)

Sys log Verification using View Events option:

Syslog+CEF format should be displayed as per the Spec (Refer SIEM Integration and Audit Log Events Spec):

PRI number; Timestamp; Device name; CEF:0; Xerox; Device Model; Device Software Version; Device Audit log Event ID; Audit log Event Description; Severity)along with CEF Key Name Mapping.


Note : CSE login to diagnostic mode. If invalid pin for this or event 48 is entered%2c event 32 "failed" will appear. The default "Service name" shall be "Diagnostics Service" for the success case%2c and  "Diagnostics/CSE Service" for the failure case

PROCESS: PRIORITY: 1 TEST_TYPE: automated LOE: RESOURCE_HW: RESOURCE_CONSUMEABLES: RESOURCE_MEDIA: SKILL_SET: basic TEST_CASE_TYPE: testcases TESTCASE_SOURCE: functional_spec SPEC: FS 50.001 Audit Log Events SPEC_VERSION: 18 SPEC_TAG: 50.001.01.035 ATM_OWNER: USWU60000 APPROVE_QE: w5FSZGVJ APPROVED_QE: APPROVE_SE: w5FSZGVJ APPROVED_SE: APPROVE_SPAR: APPROVED_SPAR: ASSOCIATED_TESTCASES: TRAINING: TESTCASE_VERSION: TESTCASE_STATE: TESTCASE_PLATFORM: TESTCASE_PRODUCT: canyon, carroll, carroll_sfp, corvo, corrib, kiska, malawi, mystic, melody_sfp, melody, muckross TESTCASE_APPROVALS: CDATE: 1582176879 MDATE: 1582176879, 1636620033, 1639735298 MUSER: q4BVX0J1, USWU60000, USWU60000 AUTHOR: q4BVX0J1 ATM_MCOMMENTS: Imported from spreadsheet, Procedure and executed Modified, Added Notes in the Expected Result HISTORY: ATM_LOCKED: ATM_REQLINK: 433AAC4C-97F7-11E9-9925-CFADAA3FCFED ATM_REQCOUNT: 1 QA_TEAM: TC_WEIGHTAGE: 1 FILENAME: FILEDESC: FILES: RELEASE: AUTOMATION_GROUP: TC_WORK_LOCATION_CAT: work_from_home_tc AUTOMATION_TC_VALIDATION: PRECONDITION_TO_BE_DONE: ACTION_TO_BE_DONE: TESTCASE_STEPS_ARE_RELATED_TO: REASON_FOR_AUTOMATABLE: CONSTRAINTS_DAR: Imp_98 . NA Done By Previous Analysis DEVELOPMENT_COMPLETE_TIME: PO_SIGNOFF_DATE: COMPLEXITY_PRECONDITIONS: 0 COMPLEXITY_OUTPUT_VALIDATION: non_outliers AUTOMATABLE: yes TESTCASE_MODIFICATION_REQUIRED: no APTEST_UPDATE_STATUS: no TESTCASE_FAMILY: DEVICE_CATEGORY: common COMPETENCY: wfast_accounting APTEST_TRACKING: yes AUTOMATION_CANDIDATE: yes SRT_ANALYZATION: analyzed