HP LaserJet Enterprise, HP PageWide Enterprise - HP Security Event Logging Messaging Reference (white paper)

Chapter 2 Enhanced security event logging 12
<client computer IP address> - IP address of the client computer that sent the user authentication
request.
<interface> - Device networking interface on which the administrator authentication request was
received. Possible values are:
Wired
AP
STA
User sign out
Control panel user sign out
Message:
<device type>: Control Panel session terminated; time="<timestamp>" user="<user>"
outcome=success
Interface(s):
Control panel
Syslog severity:
Informational
Explanation:
The control panel user’s sign-in session was ended.
This message is generated when either the control panel user ends their sign-in session by signing
out or the device ends the control panel user’s sign-in session due to control panel inactivity.
Variables:
<device type> - see Table 2-2.
<timestamp> - see Table 2-2.
<user> - Authentication database, followed by “\” and the authenticated user identity. This is the
user whose session was ended.
EWS user sign out
Message:
<device type>: EWS session terminated; time="<timestamp>" user="<user>" source_IP="<client
computer IP address>" outcome=success
Interface(s):
EWS
Syslog severity:
Informational
Explanation:
The EWS user’s sign-in session was ended.
This message is generated when the EWS user ends their sign-in session by signing out.
Variables:
<device type> - see Table 2-2.
<timestamp> - see Table 2-2.
<user> - Authentication database, followed by “\” and the authenticated user identity. This is the
user whose session was ended.
<client computer IP address> - IP address of the client computer from which the signed-in user
was accessing the EWS.
User account lockout
Device administrator account lockout
Message:
<device type>: Account Entered Lockout Mode; time="<timestamp>" account="Administrator"
outcome=success
Interface(s):
EWS, WS, control panel, telnet
Syslog severity:
Informational
Explanation:
The device administrator account was locked.