HP LaserJet Enterprise, HP PageWide Enterprise - HP Security Event Logging Messaging Reference (white paper)

Chapter 2 – Enhanced security event logging 54
<user> - Authenticated user who modified the inactivity timeout setting. If an unauthenticated
user modified the inactivity timeout setting, the user key-value pair is not contained within the
message.
<client computer IP address> - IP address of the client computer that sent the request to modify
the inactivity timeout setting.
Message:
<device type>: Control Panel Inactivity Timeout Changed; time="<timestamp>" value=<value>
old_value=<old value> user="<user>" source_IP="<client computer IP address>"
outcome=success
Interface(s):
Control panel
Syslog severity:
Informational
Explanation:
The inactivity timeout setting was modified.
Variables:
<device type> - see Table 2-2.
<timestamp> - see Table 2-2.
<value> - New setting value.
<old value> - Old setting value.
<user> - Authenticated user who modified the inactivity timeout setting. If an unauthenticated
user modified the inactivity timeout setting, the user key-value pair is not contained within the
message.
<client computer IP address> - IP address of the client computer that sent the request to modify
the inactivity timeout setting.
Account policy
Account lockout policy for device administrator account
Message:
<device type>: Account Lockout Policy enabled; time="<timestamp>" account=local_administrator
user="<user>" source_IP="<client computer IP address>" outcome=success
Interface(s):
EWS, WS*
Syslog severity:
Informational
Explanation:
The account lockout policy for the device administrator account was enabled.
Variables:
<device type> - see Table 2-2.
<timestamp> - see Table 2-2.
<user> - Authenticated user who enabled the account policy. If an unauthenticated user enabled
the account lockout policy, the user key-value pair is not contained within the message.
<client computer IP address> - IP address of the client computer that sent the request to enable
the account lockout policy.
Message:
<device type>: Account Lockout Policy disabled; time="<timestamp>"
account=local_administrator user="<user>" source_IP="<client computer IP address>"
outcome=success
Interface(s):
EWS, WS*
Syslog severity:
Informational
Explanation:
The account lockout policy for the device administrator account was disabled.
Variables:
<device type> - see Table 2-2.
<timestamp> - see Table 2-2.