ATM_ID: 3BCD4042-D990-11EF-89BE-32C28B77ECE1

MFF:

PLANNEDTIMESTAFF:

ID: WFAST_Accounting/Testcases/FS_50.001.01_Audit_Log_Events/160350

TESTCASE_HEADLINE: EventID=228
The audit log shall record a event for Update (Failed)

GROUP:

FEATURE:

SUB_FEATURE:

INPUT: <p>Audit log:<br />
1.EIP Remote Scan tool should be available.<br />
2.Test procedure should be performed through Admin user only.</p><p>Syslog:<br />
1.Syslog Destination Server details must be configured.</p>

PROCEDURE: <p>1.Launch Registration client and connect to target device.<br />
2.Select any EIP application or Weblet/EIP Authentication App<br />
3.Under Simple View--Click on Generate ID--Disable " Encode/Decode as base64 on Send/Receive"--Enter some value in Application Data field.<br />
4.Click on Update Data action<br />
5.Login to the Web UI as System Administrator<br />
6.Navigate to Security--Logs--Audit Log and download the Audit Log<br />
7.Navigate to Security--Logs--SIEM and download the sysLog<br />
8.Verify the expected result.</p><p>Note:<br />
If the 'DestinationApp 'information is the same as the 'SourceApp' information ,do not log the 'DestinationApp' information.</p>

TEST_COVERED_BY:

OUTPUT: <p>The Audit log should contain:<br />\
EventID: 228<br />\
EventDescription:Update<br />\
Username: Admin<br />\
Interface: WebUI<br />
Device Name<br />
Device Serial Number<br />
IP Address<br />
Operation(Update)<br />
Completion Status(Failed)<br />
Source App Name(if available)<br />
Source App Vendor Name(if available)<br />
Source App Type(if available)<br />
Source App Id(if available)<br />
Source App Dev Id(if available)<br />
(Hashed)UUID of the Configuration Info<br />
Destination App Name(if available)</p><p>SyslogVerificationusingViewEventsoption:</p><p>dvchost=DeviceName<br />
deviceExternalId=DeviceSerialNumber<br />
src=IPAddress<br />
act=Operation<br />
outcome=CompletionStatus<br />
msg=&amp;amp;lt;SourceAppName&amp;amp;gt;+&amp;amp;lt;SourceAppVendorName&amp;amp;gt;+&amp;amp;lt;SourceAppType&amp;amp;gt;+&amp;amp;lt;SourceAppId&amp;amp;gt;+&amp;amp;lt;SourceAppDevId&amp;amp;gt;+(Hashed)&amp;amp;lt;UUID&amp;amp;gt;+&amp;amp;lt</p><p>PRInumber;Timestamp;Devicename;CEF:0;Xerox;DeviceModel;DeviceSoftwareVersion;DeviceAuditlogEventID;AuditlogEventDescription;Severity)alongwithCEFKeyNameMapping.</p><p>50.001.01.269|(FT-34929){DY8.0}|EventID=228|EIP Registration Data M</p>

PROCESS:

PRIORITY:

TEST_TYPE: manual

LOE:

RESOURCE_HW:

RESOURCE_CONSUMEABLES:

RESOURCE_MEDIA:

SKILL_SET:

TEST_CASE_TYPE: testcases

TESTCASE_SOURCE:

SPEC: FS_50.001.01_Audit_Log_Events

SPEC_NUM: 50.001.01

SPEC_VERSION: 124

SPEC_TAG: [50.001.01.269] (FT-33129) {DY 8.5} |EventID=228|EIP Registration Data Modification     

ATM_OWNER:

APPROVE_QE:

APPROVED_QE:

APPROVE_SE:

APPROVED_SE:

APPROVE_SPAR:

APPROVED_SPAR:

ASSOCIATED_TESTCASES:

TRAINING:

TESTCASE_VERSION:

TESTCASE_STATE:

TESTCASE_PLATFORM:

TESTCASE_PRODUCT: canyon, carroll, carroll_sfp, corvo, corrib, kiska, malawi, mystic, melody_sfp, melody, muckross

TESTCASE_FAMILY:

TESTCASE_APPROVALS:

CDATE: 1737639897

MDATE: 1737639897

MUSER: r7HS90RZ

AUTHOR: r7HS90RZ

ATM_MCOMMENTS: Imported from spreadsheet

HISTORY:

ATM_LOCKED:

ATM_REQLINK: 29D4B608-6C1D-11EF-917F-2E379F181ED1

ATM_REQCOUNT: 1

QA_TEAM:

TC_WEIGHTAGE:

FILENAME:

FILEDESC:

FILES:

RELEASE:

COMPETENCY: wfast_accounting

AUTOMATION_GROUP:

TESTCASE_STEPS_ARE_RELATED_TO:

REASON_FOR_AUTOMATABLE:

PRECONDITION_TO_BE_DONE:

ACTION_TO_BE_DONE:

COMMON_FUNCTIONALITY:

COMMONALITY_DETAILS:

CONSTRAINTS_DAR:

DEVELOPMENT_COMPLETE_TIME:

PO_SIGNOFF_DATE:

COMPLEXITY_PRECONDITIONS:

COMPLEXITY_OUTPUT_VALIDATION: non_outliers

AUTOMATABLE:

AUTOMATION_CANDIDATE: no

TESTCASE_MODIFICATION_REQUIRED:

APTEST_UPDATE_STATUS:

DEVICE_CATEGORY: common

TC_WORK_LOCATION_CAT: work_from_office_tc

AUTOMATION_TC_VALIDATION:

SRT_ANALYZATION: analyzed