HP LaserJet Enterprise, HP PageWide Enterprise - HP Security Event Logging Messaging Reference (white paper)

Chapter 2 – Enhanced security event logging 56
<timestamp> - see Table 2-2.
<value> - New setting value.
<old value> - Old setting value.
<user> - Authenticated user who modified the account lockout policy. If an unauthenticated user
modified the account lockout policy, the user key-value pair is not contained within the message.
<client computer IP address> - IP address of the client computer that sent the request to modify
the account lockout policy.
Account lockout policy for remote configuration account
Message:
<device type>: Account Lockout Policy enabled; time="<timestamp>"
account=remote_configuration user="<user>" source_IP="<client computer IP address>"
outcome=success
Interface(s):
EWS, WS*
Syslog severity:
Informational
Explanation:
The account lockout policy for the remote configuration account was enabled.
Variables:
<device type> - see Table 2-2.
<timestamp> - see Table 2-2.
<value> - New setting value.
<old value> - Old setting value.
<user> - Authenticated user who enabled the account lockout policy. If an unauthenticated user
enabled the account lockout policy, the user key-value pair is not contained within the message.
<client computer IP address> - IP address of the client computer that sent the request to enable
the account lockout policy.
Message:
<device type>: Account Lockout Policy disabled; time="<timestamp>"
account=remote_configuration user="<user>" source_IP="<client computer IP address>"
outcome=success
Interface(s):
EWS, WS*
Syslog severity:
Informational
Explanation:
The account lockout policy for the remote configuration account was disabled.
Variables:
<device type> - see Table 2-2.
<timestamp> - see Table 2-2.
<user> - Authenticated user who disabled the account lockout policy. If an unauthenticated user
disabled the account lockout policy, the user key-value pair is not contained within the message.
<client computer IP address> - IP address of the client computer that sent the request to disable
the account lockout policy.
Message:
<device type>: Account Lockout Policy setting modified; time="<timestamp>"
account=remote_configuration item=maximum_login_attempts value="<value>"
old_value="<old value>" user="<user>" source_IP="<client computer IP address>"
outcome=success
Interface(s):
EWS, WS*
Syslog severity:
Informational