You can configure the NetScaler appliance to keep a log of all the events that are triggered in an authenticated session. Using this information, you can audit state and status information, to see the history for users in chronological order.
To do this, define an audit policy that specifies the following:
- Log type. The logs can be stored remotely (syslog) or locally on the NetScaler appliance (nslog).
- Rule. The conditions on which the logs are stored.
- Action. Details of the log server and other details for creating the log entries.
This audit policy can be configured at different levels: user-level, group-level, AAA virtual server, and global system level. The policies configured at the user-level have the highest priority.