HP LaserJet Enterprise, HP PageWide Enterprise - HP Security Event Logging Messaging Reference (white paper)

Chapter 2 – Enhanced security event logging 9
<client computer IP address> - IP address of the client computer that sent the request to launch
the remote control-panel.
Message:
<device type>: Logout; time="<timestamp>" reason=<reason> user="<user>" source_IP="<client
computer IP address>" outcome=success
Interface(s):
EWS
Syslog severity:
Informational
Explanation:
Remote control-panel session was ended.
Variables:
<device type> - see Table 2-2.
<timestamp> - see Table 2-2.
<reason> - Reason the session was ended. Possible values are:
• EndedByUser
• EndedByDevice
<user> - User who started the remote control-panel session that was ended.
<client computer IP address> - IP address of the client computer that sent the request to start the
remote control-panel session that was ended.
User authentication
User sign in
EWS sign in
Message:
<device type>: EWS Sign In Authentication; time="<timestamp>" sign-in_method=<sign-in
method> user="<user>" source_IP="<client computer IP address>" outcome=success
Interface(s):
EWS
Syslog severity:
Informational
Explanation:
A user signed in to the device via the EWS.
Variables:
<device type> - see Table 2-2.
<timestamp> - see Table 2-2.
<sign-in method> - Sign-in method that was used to perform authentication. Possible values are:
• local_device
• windows
• ldap
• smartcard
Possible values also include the names of third-party authentication agents installed on the
device.
<user> - Authentication database, followed by “\” and the authenticated user identity.
<client computer IP address> - IP address of the client computer that sent the user authentication
request.
Message:
<device type>: EWS Sign In Authentication; time="<timestamp>" sign-in_method=<sign-in
method> user="<user>" source_IP="<client computer IP address>" outcome=failure
Interface(s):
EWS
Syslog severity:
Warning