ATM_ID: B3279742-53A2-11EA-9805-9BD3993DCDB4

MFF:

PLANNEDTIMESTAFF:

ID: WFAST_Accounting/Testcases/FS_50.001.01_Audit_Log_Events/10830

TESTCASE_HEADLINE: Event ID=156
Audit Log - Locked Down Settings

GROUP:

FEATURE:

SUB_FEATURE:

INPUT: <p>Audit log:</p><p>Syslog:<br />
</p>
<ol><li value="1">Syslog Destination Server details must be configured.</li></ol>

PROCEDURE: <p></p>
<ol><li value="1">Navigate to CWIS and Login as admin<br />
</li><li value="2">Install "Lockdown and Remediate Security" key in the Web UI under Feature Installation key</li></ol>

OUTPUT: <p></p><p>The Audit log should contain<br />
Event ID=156<br />\
Description: Lockdown and Remediate Security Enablement<br />
User name<br />
Device Name<br />
Device Serial number<br />
Completion status: (Enabled / Disabled)</p><p>Sys log Verfication using View Events option:</p><p>Syslog+CEF format shoud be displayed as per the Spec (Refer SIEM Integration and Audit Log Events Spec):</p><p>PRI number; Timestamp; Device name; CEF:0; Xerox; Device Model; Device Software Version; Device Audit log Event ID; Audti log Event Description; Severity)along with CEF Key Name Mapping.</p>

PROCESS:

PRIORITY:

TEST_TYPE: automated

LOE:

RESOURCE_HW:

RESOURCE_CONSUMEABLES:

RESOURCE_MEDIA:

SKILL_SET:

TEST_CASE_TYPE: testcases

TESTCASE_SOURCE:

SPEC: FS 50.001 Audit Log Events

SPEC_VERSION: 18

SPEC_TAG: 50.001.01.160

ATM_OWNER:

APPROVE_QE:

APPROVED_QE:

APPROVE_SE:

APPROVED_SE:

APPROVE_SPAR:

APPROVED_SPAR:

ASSOCIATED_TESTCASES:

TRAINING:

TESTCASE_VERSION:

TESTCASE_STATE:

TESTCASE_PLATFORM:

TESTCASE_PRODUCT: canyon, carroll, carroll_sfp, corvo, corrib, kiska, malawi, mystic, melody_sfp, melody, muckross

TESTCASE_APPROVALS:

CDATE: 1582176884

MDATE: 1582176884

MUSER: q4BVX0J1

AUTHOR: q4BVX0J1

ATM_MCOMMENTS: Imported from spreadsheet

HISTORY:

ATM_LOCKED:

ATM_REQLINK: 436FF76C-97F7-11E9-9925-CFADAA3FCFED

ATM_REQCOUNT: 1

QA_TEAM:

TC_WEIGHTAGE:

FILENAME:

FILEDESC:

FILES:

RELEASE:

AUTOMATION_GROUP:

TC_WORK_LOCATION_CAT: work_from_office_tc

DEVICE_CATEGORY: common

CONSTRAINTS_DAR: Imp_98 . NA  Done By Previous Analysis

COMPETENCY: wfast_accounting

APTEST_TRACKING: yes

COMPLEXITY_OUTPUT_VALIDATION: non_outliers

AUTOMATION_CANDIDATE: yes

AUTOMATABLE: yes

SRT_ANALYZATION: analyzed