This command uploads the audit log file to the configured SCP server.
Syntax:
auditlogupload scp WORD
where WORD stands for the name of the audit file on the server as per the CLI command.
Note the following:
For NS-series Sensors, when loading the audit log file to the SCP server, the first attempt will be based on SSH public key authentication. If that fails, the Sensor will use password based authentication.
Note
For NS-series Sensors, even if the public key authentication is not configured on the Sensor, the first login attempt will be using the public key. If the SSH public key is not present, a warning message will be displayed and the Sensor will then use password based authentication.
When loading an audit log file on the SCP server, you are prompted for the SCP server credentials. The command succeeds only on providing the correct SCP server credentials.
Note
If the Sensor's SSH public key authentication is successful, you will not be prompted for the SCP server credentials.
When loading an audit log file on the SCP server, the pathname of the file should be absolute.