HP StorageWorks XP24000 Audit Log User and Reference Guide, v01 (AE131-96003, June 2007)

DescriptionItemNo.
The Unified specification identification character (CELFSS).Unified specification
identification
information
5
The revision number of the Unified specification document (1.1).6
The serial number of the syslog header information.Message
identification
information
7
Message ID. Not displayed because it is not used.8
The date, time and the time difference between UTC (Coordinated Universal
Time) in the format of YYYY-MM-DD-Thh:mm:ss.s ± hh:mm (YYYY: year, MM:
month, DD: day, hh: hour, mm: minute, ss.s: second, hh: hours of the time
difference and mm: minute of the time difference)
Date, time#29
Z is displayed instead of ± hh:mm when there is no time difference between
UTC, such as 2005-12-26T:23:06:58.0Z.
NOTE:
The displayed format for second ss.s represents one decimal place.
The detection entity identification character (Storage).Detection entity10
The host name (SVP).Detected location11
The category name of the event as described in the following example:Type of audit event12
• Authentication. iSCSI login or authentication of RMI (Remote Method
Invocation)
• ConfigurationAccess. Setting from HP XP Remote Web Console or SVP.
• AnomalyEvent. Reached the maximum of the audit log, etc.
• Maintenance. SVP maintenance.
The result of the audit event:Result of the audit
event
13
• Success: Normal end. The operation has ended normally.
• Failed: Error (xxxx-yyyy). The operation has ended abnormally.
• Failed: Warning (xxxx-yyyy). The operation has partly ended abnormally
or was canceled during the operation.
NOTE:
Error codes are described as xxxx-yyyyy. SVP operations do not
output error codes.
The user name in the format of uid=user name.Subject identification
information
14
NOTE:
• When the category name is AnomalyEvent, <system> is output.
• <DKCMaintenance> is output for SVP operation.
The ID (R600) to identify the model name of the product and the serial number
divided by a colon.
Hardware
identification
information
15
NOTE:
R600 refers to the HP StorageWorks XP24000 Disk Array.
XP24000 Audit Log User and Reference Guide 31