HP LaserJet Enterprise, HP PageWide Enterprise - HP Security Event Logging Messaging Reference (white paper)

Chapter 2 – Enhanced security event logging 29
If JobAcct3 and JobAcc8 are missing in the print job stream, the value of <user> is “Guest.”
<client computer IP address> - IP address of the client computer that sent the print driver job.
Message:
<device type>: Print job completion; time="<timestamp>" job_name=<job name> user="<user>"
source_IP="<client computer IP address>" outcome=canceled
Interface(s):
9100, WS Print, IPP, LPD, FTP
Syslog severity:
Informational
Explanation:
The printing of a print driver job was canceled.
Variables:
<device type> - see Table 2-2.
<timestamp> - see Table 2-2.
<job name> - Value of the PJL JOBNAME attribute that was specified in the print job. This value is
specified in the print job stream by the print driver at job creation time.
<user> - The value of the job attribute JobAcct3, followed by “\” and the value of the job attribute
JobAcct8.
JobAcct3 specifies the domain name, and JobAcct8 specifies the username.
JobAcct3 and JobAcc8 are specified by setting the PJL JOBATTR variable in the print job.
JobAcct3 and JobAcc8 are specified in the print job stream by the print driver at job creation time.
If JobAcct3 and JobAcc8 are missing in the print job stream, the value of <user> is “Guest.”
<client computer IP address> - IP address of the client computer that sent the print driver job.
Message:
<device type>: Print job completion; time="<timestamp>" job_name=”<job name>” user="<user>"
source_IP="<client computer IP address>" outcome=success
Interface(s):
EWS
Syslog severity:
Informational
Explanation:
A print-ready file (.txt, .ps, .pdf, .pcl, .cht, .prn, .tiff, .tif) was printed.
Variables:
<device type> - see Table 2-2.
<timestamp> - see Table 2-2.
<job name> - Name of the job.
<user> - User who submitted print-ready file for printing.
<client computer IP address> - IP address of the client computer that sent the print-ready file.
Message:
<device type>: Print job completion; time="<timestamp>" job_name=<job name> user="<user>"
source_IP="<client computer IP address>" outcome=canceled
Interface(s):
EWS
Syslog severity:
Informational
Explanation:
The printing of a print-ready file (.txt, .ps, .pdf, .pcl, .cht, .prn, .tiff, .tif) was canceled.
Variables:
<device type> - see Table 2-2.
<timestamp> - see Table 2-2.
<job name> - Name of the job.
<user> - User who submitted the print-ready file for printing.