HP StorageWorks P9000 Command View Advanced Edition Suite Software 7.1.1 Administrator Guide (web) (TB581-96065, September 2011)

• Authentication
• ConfigurationAccess
• AccessControl
• ExternalService
Each audit event is assigned a severity level. You can filter audit log data to be output according to
the severity levels of events.
Table 33 to Table 37 describe the audit log data that can be generated by Device Manager and
Tiered Storage Manager. For details on the audit log data generated by other P9000 Command
View AE Suite products, see the manuals for the relevant products.
Table 33 Audit events that are output to audit logs (when the category is StartStop)
Message IDSeverityAudit eventType description
KAPM00090-I6Successful SSO server start
Start and stop of
software
KAPM00091-E3Failed SSO server start
KAPM00092-I6SSO server stop
Table 34 Audit events that are output to audit logs (when the category is Authentication)
Message IDSeverityAudit eventType description
KAPM01124-I6Successful login
Administrator or
end user authentica-
tion
KAPM02450-I6
Successful login (to the external authentication
server)
KAPM02291-W4Failed login (wrong user ID or password)
KAPM02291-W4Failed login (logged in as a locked user)
KAPM02291-W4Failed login (logged in as a non-existing user)
KAPM01095-E4Failed login (no permission)
KAPM01125-E4Failed login (authentication failure)
KAPM02451-W4Failed login (to the external authentication server)
KAPM08009-I6Successful logout
KAPM02292-W4
Automatic account lock (repeated authentication
failure or expiration of account)
Automatic account
lock
Table 35 Audit events that are output to audit logs (when the category is ConfigurationAccess)
Message IDSeverityAudit eventType description
KAPM07230-I6Successful user registration
User registration
(GUI)
KAPM07240-E3Failed user registration
KAPM07231-I6Successful single user deletion
User deletion
(GUI)
KAPM07240-E3Failed single user deletion
Setting up logs and alerts110