HP StorageWorks P9000 - Disk Arrays Reference Manual page 18

Hp storageworks p9000 audit log user and reference guide (av400-96333, january 2011)
Hide thumbs Also See for StorageWorks P9000 - Disk Arrays:
Table of Contents

Advertisement

Table 5 Items in the Syslog File (continued)
No.
Item
7
Message identification
8
9
Date, time#2*
10
Detection entity
1 1
Detected location
12
Type of audit event
13
Result of audit event
14
Subject identification
15
Hardware identification
16
Generated location
17
Related information
18
19
20
Agent information
18
Introduction
Description
The serial number of the syslog header information.
No output
The date, time and the time difference between UTC in the format of
"YYYY-MM-DD-Thh:mm:ss.s ± hh:mm".
YYYY: year, MM: month, DD: day
hh: hour, mm: minute, ss.s: second in one decimal place.
± hh:mm: hours and minute of the time difference. "Z" is displayed instead of "±
hh:mm" when there is no time difference between UTC, such as
"2005- 1 2-26T:23:06:58.0Z".
The detection entity identification character (Storage).
The host name (SVP).
The category name of the event.
StartStop indicates the start or stop of the operating system on the SVP or the
storage system. It also indicates the start or stop of hardware and software.
Failure indicates failures in hardware and software.
LinkStatus indicates link-up or link-down of ports.
ExternalCommunication indicates communications with other external services.
Authentication of RMI, FC-SP, or Remote Web Console.
AcceessControl indicates success or failure in accessing resources.
ContentAccess indicates success or failure in accessing files.
ConfigurationAccess indicates setting from Remote Web Console, SVP, host, or
computer using RAID Manager.
AnomalyEvent indicates reached the maximum of the Audit Log, etc.
Maintenance indicates SVP operations.
ExternalService indicates remote maintenance operations via SVP.
Success: Normal end. The operation has ended normally.
Failed: Error (xxxx-yyyy). The operation has ended abnormally.
Failed: Warning (xxxx-yyyy). The operation has partly ended abnormally or was
canceled during the operation.
"xxxx-yyyyy" indicates error codes and it is output only for Remote Web Console
operations.
The user name in the format of "uid=user name".
<system> is output when the category name is "AnomalyEvent" or the encryption
key is created.
<DKCMaintenance> is output for SVP operations.
<Host> is output for commands from host.
The ID (R700) to identify the model name of the product and the serial number divided
by a colon.
No output
The location identification name set by the user in the Syslog window.
No output.
No output.
No output.

Advertisement

Table of Contents
loading

Table of Contents