HP XP20000/XP24000 Reference Manual page 24

Table 4 Items in the Syslog File (continued)
No. Item
7 Message identification
information
8
9 Date, time#2
10 Detection entity
1 1 Detected location
12 Type of audit event
13 Result of the audit event
14 Subject identification
information
15 Hardware identification
information
16 Generated location
information
17 Related information
18
19
20 Agent information
24 Audit Log File Format
Description
The serial number of the syslog header information.
Message ID. Not displayed because it is not used.
1
The date, time and the time difference between UTC (Coordinated Universal Time)
in the format of YYYY-MM-DD-Thh:mm:ss.s
day, hh: hour, mm: minute, ss.s: second, hh: hours of the time difference and mm:
minute of the time difference)
Z is displayed instead of
such as 2005- 1 2-26T:23:06:58.0Z.
The displayed format for second ss.s represents one decimal place.
The detection entity identification character (Storage).
The host name (SVP).
The category name of the event as described in the following example:
Authentication. iSCSI login or authentication of RMI (Remote Method Invocation)
ConfigurationAccess. Setting from Remote Web Console, SVP, or host.
AnomalyEvent. Reached the maximum of the audit log, etc.
Maintenance. SVP maintenance.
The result of the audit event:
Success: Normal end. The operation has ended normally.
Failed: Error (xxxx-yyyy). The operation has ended abnormally.
Failed: Warning (xxxx-yyyy). The operation has partly ended abnormally or was
canceled during the operation.
Error codes are described as xxxx-yyyyy. SVP operations or commands from the
host do not output error codes.
The user name in the format of uid=user name.
When the category name is AnomalyEvent, or the DKA Encryption License Key is
created, <system> is output.
<DKCMaintenance> is output for SVP operation.
<Host> is output for commands from host.
The ID (R600) to identify the model name of the product and the serial number divided
by a colon.
Not displayed because it is not used.
The location identification name set by the user in the Syslog window.
FQDN. Not displayed because it is not used.
Redundant identification information. Not displayed because it is not used.
Not displayed because it is not used.
hh:mm (YYYY: year, MM: month, DD:
hh:mm when there is no time difference between UTC,