VMware ACE Management Server Administrator's Manual page 60

ACE Management Server Administrator's Manual
Table A-1. Log Entry Data (Continued)
Data
Login user name
Affected ACE UID (FK)
Affected package UID (FK)
Affected instance UID (FK)
Affected Policy Set Version
Event category
Event type code (FK)
Session ID
Incoming IP address
Server IP Address
Operation turnaround time
Operation handler name (debug)
Return code text
Message parameters
Previous event UUID to prevent
unauthorized record deletion or insertion
Event record hash with a server key to reveal
modification of the record
ACE, package, and instance UIDs and policy version provide coordinates of the log event in the space of ACE
Server objects. They help link the event with the state of the system. By using database query tools, you can
find all ACE administration events that affected a particular ACE instance from its creation until its deletion.
Not all coordinates are present for all events. For example, if a package expiration date update is logged, the
instance UID field is not set, because all instances within the package are affected.
If immutable data is stored permanently elsewhere in the database, it is not duplicated in the log entry. For
example, when a new policy is published, the complete policy text is not included in the log entry. Instead, its
version number is referenced, so that the complete data of the event can be reconstructed from PolicyDb_
RuntimePolicy and PolicyDb_Access tables if necessary.
N ACE Management Server does not log sensitive data like passwords or encryption keys.
OTE
The event type code is associated with a lookup table PolicyDb_EventType, which contains a text message
template for each type of event, category, and log level of the event. The message can contain %s parameter
placeholders, in which case the Message Parameters field in the log entry contains a tab‐delimited list of
values for these parameters. For example, an instance administration event with type = 4110 has the following
message:
4110 -> "Instance Set Guest Info requested, IP address = %s, MAC address %s, configuration
message \"%s\", machine name \"%s\", configuration status %s"
In this example, the Message Parameters field shows:
10.17.0.3
The resulting parameters replace the %s placeholders in the message template.
60
Description
Auth, AceAdmin, PkgAdmin, PolicyAdmin,
InstAdmin
References PolicyDb_EventType table
Debug
Reserved for future use
Reserved for future use
Time spent in server in ms
Success, failure, specific error
Tab‐separated list
Log integrity
Log integrity
00:0C:29:1A:2B:3C OK ACETest 0
VMware, Inc.