Documentation Index
Fetch the complete documentation index at: https://mintlify.com/HewlettPackard/POSH-HPEOneView/llms.txt
Use this file to discover all available pages before exploring further.
Synopsis
Retrieves audit log entries from the HPE OneView appliance, with optional filtering by count, date range, or time span.Syntax
Description
Get-OVAuditLog retrieves audit log records from the HPE OneView appliance, sorted in ascending order by date. Audit log entries capture user actions and system events such as logins, resource changes, and administrative operations.
Filtering options:
- Count: Limits the total number of records returned.
- TimeSpan: Returns records within a rolling window ending at the current time (e.g. the past 7 days).
- Start / End: Returns records within a specific date range. When
-Startis used without-End,-Enddefaults to the current date and time.
-TimeSpan and -Start/-End are mutually exclusive — only one date filter can be active at a time.
Returned entries are typed as HPEOneview.Appliance.AuditLogEntry.
Parameters
Maximum number of audit log records to return. When set to
0 (the default), all matching records are returned.A
TimeSpan that defines a rolling window relative to the current time. For example, [TimeSpan]::FromDays(7) retrieves records from the past 7 days. Mutually exclusive with -Start.The start of the date range filter. Returns records with a timestamp on or after this value. Mutually exclusive with
-TimeSpan.The end of the date range filter. Used with
-Start. Defaults to the current date and time ([DateTime]::Now) when not specified.Specifies the HPE OneView appliance connection(s) to query. Defaults to the default connection from
${Global:ConnectedSessions}. Alias: Appliance.Examples
Example 1: Retrieve all audit log entriesOutput
HPEOneview.Appliance.AuditLogEntry
Each object represents a single audit log record and contains fields such as:
| Property | Description |
|---|---|
date | Timestamp of the event (UTC) |
source | Source of the event (user or system) |
action | The action that was performed |
result | Outcome of the action (e.g. SUCCESS, FAILED) |
objectType | The type of resource affected |
objectUri | The URI of the affected resource |
userName | The user who performed the action |
remoteIpAddress | IP address of the client that triggered the event |