Juniper SECURITY THREAT RESPONSE MANAGER 2008.2 R2 - LOG MANAGEMENT ADMINISTRATION GUIDE REV 1 Administration Manual page 14

8 O
VERVIEW
is the date and time of the activity in the format: Month Date
<date_time>
HH:MM:SS.
is the host name of the Console where this activity was logged.
<host name>
is the name of the user that performed the action.
<user>
is the IP address of the user that performed the action.
<IP address>
is the identifier of the Java thread that logged this activity.
(thread ID)
is the high-level category of this activity.
<category>
is the low-level category of this activity.
<sub-category>
is the activity that occurred.
<action>
is the complete record that has changed, if any. This may include a
<payload>
user record or an event rule.
For example:
Nov 6 12:22:31 localhost.localdomain admin@10.100.100.15
(Session) [Authentication] [User] [Login]
Nov 6 12:22:31 localhost.localdomain jsam@10.100.100.15 (0)
[Configuration] [User Account] [Account Modified]
username=james, password=/oJDuXP7YXUYQ, networks=ALL,
email=sam@q1labs.com, userrole=Admin
Nov 13 10:14:44 localhost.localdomain admin@10.100.45.61 (0)
[Configuration] [FlowSource] [FlowSourceModified] Flowsource(
name="tim", enabled="true", deployed="false",
asymmetrical="false", targetQflow=DeployedComponent(id=3),
flowsourceType=FlowsourceType(id=6),
flowsourceConfig=FlowsourceConfig(id=1))
QSTRM Log Management Administration Guide