HP LaserJet Enterprise, HP PageWide Enterprise - HP Security Event Logging Messaging Reference (white paper)

Chapter 2 – Enhanced security event logging 91
• Device User
Possible values also include any custom permission sets that have been added.
<permission> - Permission. Possible permissions depend on the protected features supported by
the device and any third-party solutions that have been installed on the device.
<value> - New permission status. Possible permission statuses are:
• access_granted
• access_denied
<old value> - Old permission status. Possible permission statuses are:
• access_granted
• access_denied
<user> - Authenticated user who modified the permission set. If an unauthenticated user modified
the permission set, the user key-value pair is not contained within the message.
<client computer IP address> - IP address of the client computer that sent the request to modify
the permission set.
Message:
<device type>: Permission Set modified; time="<timestamp>" permission_set="<permission set>"
permission=all_permissions value=access_denied old_value=access_granted user=“<user>“
source_IP="<client computer IP address>" outcome=success
Interface(s):
WS*
Syslog severity:
Informational
Explanation:
All permissions were denied to a permission set.
Variables:
<device type> - see Table 2-2.
<timestamp> - see Table 2-2.
<permission set> - Permission set.
<user> - Authenticated user who denied all permissions to the permission set. If an
unauthenticated user denied all permissions to the permission set, the user key-value pair is not
contained within the message.
<client computer IP address> - IP address of the client computer that sent the request to deny all
permissions to the permission set.
Allow users to choose alternate sign-in methods at the product control panel
Message:
<device type>: Sign In and Permission Policy settings modified; time="<timestamp>"
item=allow_users_to_choose_alternate_sign-in_methods value=<value> old_value=<old value>
user="<user> source_IP="<client computer IP address>" outcome=success
Interface(s):
EWS, WS*
Syslog severity:
Informational
Explanation:
The “Allow users to choose alternate sign-in methods at the product control panel” setting was
either enabled or disabled.
Variables:
<device type> - see Table 2-2.
<timestamp> - see Table 2-2.
<value> - New setting value. Possible values are:
• enabled
• disabled
<old value> - Old setting value. Possible values are:
• enabled
• disabled