HP LaserJet Enterprise, HP PageWide Enterprise - HP Security Event Logging Messaging Reference (white paper)

Chapter 2 – Enhanced security event logging 6
Syslog message format
The following is the format of syslog messages:
<##> <device type>: <event summary>; <event details>
Example syslog message:
<134> printer: Device Administrator Password modified; time="2015-Apr-09 11:54 AM (UTC-07:00)"
user="admin" source_IP="10.0.0.7" outcome=success interface=Wired
The following table describes the syslog message format:
Table 2-1 Syslog message format for enhanced security event logging messages
Item
Description
<##>
Encoded syslog severity/facility.
<device type>
Type of device that generated the syslog message. Possible values are:
• printer
• scanner
:
Separates <device type> from the remaining parts of the message.
<event summary>
Summary of the event.
;
Separates <event summary> from the remaining parts of the message.
<event details>
Details of the event. Event details are key-value pairs separated by a single
space.
Common variables within syslog messages
Consult the following table for descriptions of variables contained within all syslog message descriptions.
Table 2-2 Common variables contained within log messages
Variable
Description
<device type>
Type of device that generated the syslog message. Possible values are:
• printer
• scanner
NOTE: printer is used by both single-function and multifunction printers .
<timestamp>
Date and time of the event.
The format of <timestamp> is as follows:
YYYY-MMM-DD HH:MM PE (UTCTZD)
Where:
• YYYY = four-digit year
• MMM = three-letter abbreviation of the month