Categories And Audit Events That Hdlm Can Output To The Audit Log - Hitachi XP P9500 User Manual

AnomalyEvent
The categories of audit log data that can be collected differ depending on the
product. The following sections explain only the categories of audit log data
that can be collected by HDLM. For the categories of audit log data that can
be collected by a product other than HDLM, see the corresponding product
manual.

Categories and Audit Events that HDLM Can Output to the Audit Log

The following table lists and explains the categories and audit events that
HDLM can output to the audit log. The severity is also indicated for each audit
event.
Table 2-10 Categories and Audit Events That Can Be Output to the Audit
StartStop
Category
An event indicating an abnormal state such as exceeding a
threshold, including:
•
•
•
An event indicating an occurrence of abnormal
communication, including:
•
•
Category Explanation
Startup and
termination of
the software
HDLM Functions
Hitachi Dynamic Link Manager User Guide (for Windows(R))
Explanation
Exceeding a network traffic threshold
Exceeding a CPU load threshold
Reporting that the temporary audit log data saved
internally is close to its maximum size limit or that the
audit log files have wrapped back around to the
beginning
A SYN flood attack or protocol violation for a normally
used port
Access to an unused port (such as port scanning)
Log
Audit event
Startup of the
HDLM manager
was successful.
Startup of the
HDLM manager
failed.
The HDLM
manager stopped.
Startup of the
DLMgetras utility
Termination of
the DLMgetras
#2
utility
Severity
Message ID
#1
6 KAPL15401-I
4 KAPL15402-W
6 KAPL15403-I
6 KAPL15060-I
6 KAPL15061-I
2-37