HP StorageWorks P9000 Reference Manual page 20

Audit log user and reference guide
Hide thumbs Also See for StorageWorks P9000:
Table of Contents

Advertisement

Table 5 Items in the Syslog File (continued)
No.
Item
7
Message identification
8
9
Date, time#2*
10
Detection entity
1 1
Detected location
12
Type of audit event
13
Result of audit event
14
Subject identification
15
Hardware identification
16
Generated location
17
Related information
18
19
20
Agent information
20
Introduction
Description
The serial number of the syslog header information.
No output
The date, time and the time difference between UTC in the format of
"YYYY-MM-DD-Thh:mm:ss.s ± hh:mm."
YYYY: year, MM: month, DD: day.
hh: hour, mm: minute, ss.s: second in one decimal place.
± hh:mm: hours and minute of the time difference. "Z" is displayed instead of "±
hh:mm" when there is no time difference between UTC, such as
"2005- 1 2-26T:23:06:58.0Z."
The detection entity identification character (Storage).
The host name (SVP).
The category name of the event.
StartStop indicates the start or stop of the operating system on the SVP or the
storage system. It also indicates the start or stop of hardware and software.
Failure indicates failures in hardware and software.
LinkStatus indicates link-up or link-down of ports.
ExternalCommunication indicates communications with other external services.
Authentication of RMI, FC-SP, or Remote Web Console.
AccessControl indicates success or failure in accessing resources.
ContentAccess indicates success or failure in accessing files.
ConfigurationAccess indicates setting from Remote Web Console, SVP, host, or
computer using RAID Manager.
AnomalyEvent indicates reached the maximum of the Audit Log, etc.
Maintenance indicates SVP operations.
ExternalService indicates remote maintenance operations via SVP.
Success: Normal end. The operation has ended normally.
Failed: Error (xxxx-yyyy). The operation has ended abnormally.
Failed: Warning (xxxx-yyyy). The operation has partly ended abnormally or was
canceled during the operation.
"xxxx-yyyyy" indicates error codes and it is output only for Remote Web Console
operations.
The user name in the format of "uid=user name."
<system> is output when the category name is "AnomalyEvent" or the encryption
key is created.
<DKCMaintenance> is output for SVP operations.
<Host> is output for commands from host.
The ID (R700) to identify the model name of the product and the serial number divided
by a colon.
No output
The location identification name set by the user in the Syslog window.
No output.
No output.
No output.

Advertisement

Table of Contents
loading

This manual is also suitable for:

Storageworks p9500

Table of Contents