Audit Log Data Formats - Hitachi XP P9500 User Manual

Audit Log Data Formats

The following describes the format of audit log data:
Format of audit log data output to syslog:
¢
¢
¢
¢
¢
¢
The following shows the format of message-section and explains its contents.
The format of message-section:
common-identifier , common-specification-revision-number , serial-
number , message-ID , date-and-time , entity-affected , location-
affected , audit-event-type , audit-event-result , subject-ID-for-audit-
event-result , hardware-identification-information , location-
information , location-identification-information , FQDN , redundancy-
identification-information , agent-information , host-sending-request ,
port-number-sending-request , host-receiving-request , port-number-
receiving-request , common-operation-ID , log-type-information ,
application-identification-information , reserved-area , message-text
Up to 950 bytes of text can be displayed for each message-section.
Common identifier
Common specification
revision number
Serial number
Message ID
Date and time
Entity affected
Location affected
Audit event type
Audit event result
Subject ID for audit
event result
2-42
priority
date-and-time
host-name
program-name
[process-ID]
message-section
Table 2-13 Items Output in the Message Section
#
Item
Fixed to CELFSS
Fixed to 1.1
Serial number of the audit log message
Message ID in KAPL15nnn-l format
The date and time when the message was output. This item is
output in the following format:
yyyy - mm - ddThh : mm : ss . s time-zone
Component or process name
Host name
Event type
Event result
Depending on the event, an account ID, process ID, or IP
address is output.
HDLM Functions
Hitachi Dynamic Link Manager User Guide (for Linux(R))
Explanation