HP StorageWorks P9000 Command View Advanced Edition Suite Software 7.1.1 Administrator Guide (web) (TB581-96065, September 2011)

Description
Item
#1
Host name of the request sender.
request-source-host
Port number of the request sender.
request-source-port-number
Host name of the request destination.
request-destination-host
Port number of the request destination.
request-destination-port-
number
Serial number of operations through the program.
batch-operation-identifier
#2
Fixed to BasicLog or DetailLog.log-data-type-information
Program identification information.
application-identification-
information
Not output. This is a reserved space.
reserved-area
The contents vary according to the audit events.
Characters that cannot be displayed are output as asterisks (*).
For details, see “Message text in audit log data” on page 267.
message-text
#1:
Some items are not output for some audit events.
#2:
When array information in the message text portion of the Tiered Storage Manager audit log is
output, the basic log data indicating the start of the array is output first. Next, detailed log data
is output one line at a time for each element of the array, followed by basic log data indicating
the end of the array.
Output example:
...,i,BasicLog,,,"......NumSD=n, Start SDs"
...,i,DetailLog,,,"SD[1]=(domainId-1,domainName-1)"
...,i,DetailLog,,,"SD[2]=(domainId-2,domainName-2)"
.....
...,i,DetailLog,,,"SD[n]=(domainId-n,domainName-n)"
...,i,BasicLog,,,"EndSDs"
However, when the array length is 1, only basic log data is output, and the detailed log is not
used.
Example of message-portion output for a login audit event:
CELFSS,1.1,0,KAPM01124-I,2006-05-15T14:08:23.1+09:00,HBase-SSO,
management-host,Authentication,Success,uid=system,,,,,,,,,,,,BasicLog,,,
"The login process has completed properly."
Example of message-portion output for a request-received audit event of the Device Manager
server:
Troubleshooting266