HP NonStop SSH 544701-014 Reference Manual page 287

Event Event
Id Name
8 SftpWriteFi
leEvent
9 ftpCloseFil
eEvent
HP NonStop SSH Reference Manual
Conditions Pattern
Successful "%sessionId: %user@%remoteAddress
%action %object %outcome"
Failed, error "%sessionId: %user@%remoteAddress
detail available %action %object %outcome (error
%error)"
Failed, error "%sessionId: %user@%remoteAddress
detail not %action %object %outcome"
available
Successful "%sessionId: %user@%remoteAddress
%action %object: size %size,
%bytes_read bytes read, %bytes_written
bytes written"
Failed, error "%sessionId: %user@%remoteAddress
detail available %action %object (%error): size %size,
%bytes_read bytes read, %bytes_written
bytes written"
Failed, error "%sessionId: %user@%remoteAddress
detail not %action %object: size %size,
available %bytes_read bytes read, %bytes_written
bytes written"
Token Values
%sessionId: SESSION-LOG-ID
%user: SSH username
%remoteAddress: remote IP
address
%action: 'write'
%object: file name
%outcome: 'granted'
%sessionId: SESSION-LOG-ID
%user: SSH username
%remoteAddress: remote IP
address
%action: 'write' (remote error) or
'read local file (local error)'
%object: file name
%outcome: 'denied' or 'failed'
%error: error detail
%sessionId: SESSION-LOG-ID
%user: SSH username
%remoteAddress: remote IP
address
%action: 'write' (remote error) or
'read local file (local error)'
%object: file name
%outcome: 'denied' or 'failed'
%sessionId: SESSION-LOG-ID
%user: SSH username
%remoteAddress: remote IP
address
%action: 'close'
%object: file name
%size: file size
%bytes_read: number of bytes
read
%bytes_written: number of bytes
written
%sessionId: SESSION-LOG-ID
%user: SSH username
%remoteAddress: remote IP
address
%action: 'close'
%object: file name
%error: error detail
%size: file size
%bytes_read: number of bytes
read
%bytes_written: number of bytes
written
%sessionId: SESSION-LOG-ID
%user: SSH username
%remoteAddress: remote IP
Monitoring and Auditing • 287