4.1 Warning (Notifications)

• The alert page is security alert alert and operation(Tasks) And logs.(Cluster Log) It's a key feature to track and record security audit alerts and actions that occur in the system. The administrator can also verify the audit logs and search and analyze the security audit logs collected in real time.
• Security alerts and Proxmox Up to 20 notifications are displayed, and they're updated in real time every minute.
• The check log is updated in real time when there's a change, and you can check the entire log per page, and you can see up to 15 per page.
• Or, It's a new one. You can update it immediately.

Before use

4.1.1 Security alert alert (VirtOn Notification and thanks log page)

• List of security warnings A security alert, like locking a user's account, trying to log in abnormally.
• List of warnings by authorization Security alert list is authorized(role) It looks different depending on the type of the image.
  1. ADMIN And SUPER ADMIN : All users can check security alerts, and the IP blacklist blocking and user locking can be unlocked.
  2. USER and VIEWER A security alert from a logged-in user is the only way to verify.
• Lock and unlock button. You can unlock the account that's locked down immediately if you fail to log in.
• IP blocking Security alerts block suspicious IPs immediately. There are three states in total.
  1. IP blocking : Block suspicious IPs immediately.
  2. It's blocked. It's IP that's already blocked.
  3. Trusted IP It's a trusted IP that's on the whitelist.
• System status alert is in effect. A: A notification when the system audit logs are not stored on the disk or when you're running a saturation response.
  1. Warning alert if you use more than 90% of your disk or less than 100MB
  2. If the remaining capacity is less than 50MB, the "delete" action starts with a notification, and the deletion starts with the oldest compression log until the spare capacity is created.

4.1.2 Thank you logs (VirtOn Notification and thanks log page)

Audit Logis all the activity that a user performs within the system(The act.) It's a legal/security record of evidence about the logins, VM Controls, settings changes, etc. provide transparency to "who, when, where, what did", which is used as tracking data when a security incident occurs. The audit log is stored not only in the DB but also in the backend/logs/audit folder as a log file. The log files are compressed to 20MB or one unit per day and stored for six months if the capacity is not compromised.

• Access to the site Thanks logs are very sensitive information for security. ADMIN And SUPER ADMIN Only authorized administrators can access and consult.
• Main records items :
  1. Time is up. (Timestamp) It's the exact time of the event.
  2. The act. (Action) : Type of work performed(Login, create, delete, modify, and so on.) That's it.
  3. Users and roles (The actors.) The name of the account that did the job and the authorization rating at the time.
  4. Access IP address : The IP address of the client who requested the work.
  5. It's important. It's the importance of the action. (General), MEDIUM (Beware of it.), HIGH (Warning.) It's divided into levels.
  6. Content : The details of the action.
  7. Detail button You can see the details of the log.
• Search and filter : You can search through a large number of logs for users, IP addresses, content, and quickly find the records you want to filter for actions or specific importance.
• List sorting function : The list can sort dates, actions, actors, IP addresses, importance into a row or a drop-down.
• Updates in real time : If you don't need to re-create the screen, a new audit log is created, and it's updated to the top of the list in real time. (15 pages per page.)

• Pagination There are 15 pages per page, five page views, and a convenient swipe button.

• The results. (Status) Successful:(Success) Failure.(Failure) We can see if we can.
• The actors' information You can verify your account name, your role, your IP.
• System information Important: The object(Target) I'm the Tenant. (The default output when implementing multi-tenant is current default) We can verify the information.
• Detailed content and user agent Details and user agent (UA) You can verify the UA, which is the identifying information of the software that performs the work on behalf of the user.

4.1.3 Work (tasks) The power. (Proxmox The warning page.)

TasksIt's run on the server. Individual work(Process) Detailed execution records ofIt shows you all the active actions that take time to start/finish a virtual machine, backup, create snapshots, etc.

• Detailed status check: Work is underway.(Running) Knowledge, success(OK) I've been there, I've been there, I've been there, I've been there.(Error) It tracks the actions in real time, and it can confirm when the actions started and ended.
• Integrated monitoring: In a world where multiple nodes are bound, we can say, "Who is this?"(The actors.) It's a way to get a sense of when, at what node, what you did".
• System event recording: Not only the intended task of the user, but the cluster quorum(Quorum) It also records changes in the system, automatic changes in the node's online/offline status.
• Filtering and searching: You can search for the task, you can filter the current state and node-by-node.
• Set the maximum number of views: You can set the maximum number of visits to the workflow and system logs.
  1. You can set up 50 basic ones and up to 500.
  2. You should be aware that there may be a bug in over 200 settings.
  3. The setup is not a permanent storage value, so it must be reset at the time of caching initialization.

The range of input and output

4.1.4 Cluster log power - (Proxmox The warning page.)

Cluster Logincluding the tasks that occur at the individual nodes, Major events occurring in the cluster system as a wholeIt's an integrated viewer that summarizes the time series, and it's filtered and searched.

4.1.5 Up and down alerts

• The top right menu. When you click on the button, you'll see a security alert and three recent alerts. See all the alerts. When you click the button, you go to the notification page.
• A warning on the right. If a security threat is detected, if an unread alert is detected, it's continuously displayed.
  1. Closed: The warning warning window will be displayed again when the screen is moved until it is read.
  2. Check: Go to the notification page immediately.
• A new warning. If there's a new security warning, the red dot on the top and the warning sign on the bottom won't disappear until you read the alert.

4.1.6 How to solve problems