Users Guide

Fabric OS Message Reference 25

53-1002929-01

Reading the system messages

The following is a sample Audit event message.

0 AUDIT, 2005/12/10-09:54:03, [SEC-1000], WARNING, SECURITY,

JohnSmith/root/192.0.2.2/Telnet/CLI, Domain A/JohnsSwitch, , Incorrect password

during login attempt.

The fields in the error message are described in Table 5.

TABLE 5 Audit message field description

Variable name Description

Sequence Number The error message position in the log.

Audit flag Identifies the message as an Audit message.

Time Stamp The system time (UTC) when the message was generated on the switch. The

RASLog subsystem will support an internationalized time stamp format

based on the “LOCAL” setting.

Event ID The message module and number. These values uniquely identify each

message in the Fabric OS and reference the cause and actions

recommended in this manual. Note that not all message numbers are used;

there can be gaps in the numeric message sequence.

Severity The severity of the error, which can be one of the following:

• 1 – CRITICAL

• 2 – ERROR

• 3 – WARNING

• 4 – INFO

Event Class The event class, which can be one of the following:

• CFG

• CLI

• FABRIC

• FIRMWARE

• FW

• LS

• MAPS

• RAS

• SECURITY

• ZONE

User ID The user ID.

Role The role of the user ID.

IP address The IP address.

Interface The interface being used.

Application Name The application name being used on the interface.

Admin Domain The Admin Domain, if there is one.

Switch name The defined switch name or the chassis name of the switch depending on

the action; for example, HA messages typically show the chassis name and

This value is truncated if it is over 16 characters in length.

Execute the chassisName command to name the chassis or the switchName

command to rename the logical switch.