HP LaserJet Enterprise, HP PageWide Enterprise - HP Security Event Logging Messaging Reference (white paper)

Chapter 2 – Enhanced security event logging 83
Message:
<device type>: Windows Sign In configuration modified; time="<timestamp>" item=
name_retrieve_attribute value="<value>" old_value="<old value>" user="<user>"
source_IP="<client computer IP address>" outcome=success
Interface(s):
EWS, WS*
Syslog severity:
Informational
Explanation:
The “Retrieve the device user’s name using this attribute” setting for Windows Sign In was set,
cleared, or modified.
Variables:
<device type> - see Table 2-2.
<timestamp> - see Table 2-2.
<value> - New setting value.
<old value> - Old setting value.
<user> - Authenticated user who set, cleared, or modified the “Retrieve the device user’s name
using this attribute” setting. If an unauthenticated user modified the Windows Sign In
configuration, the user key-value pair is not contained within the message.
<client computer IP address> - IP address of the client computer that sent the request to set,
clear, or modify the “Retrieve the device user’s name using this attribute” setting.
Message:
<device type>: Windows Sign In configuration modified; time="<timestamp>"
item=reverse_DNS_lookups value="<value>" old_value="<old value>" user="<user>"
source_IP="<client computer IP address>" outcome=success
Interface(s):
EWS, WS*
Syslog severity:
Informational
Explanation:
The “Enable reverse DNS lookups” setting for Windows Sign In was either enabled or disabled.
Variables:
<device type> - see Table 2-2.
<timestamp> - see Table 2-2.
<value> - New setting value. Possible values are:
• enable
• disable
<old value> - Old setting value. Possible values are:
• enable
• disable
<user> - Authenticated user who enabled or disabled the “Enable reverse DNS lookups” setting. If
an unauthenticated user enabled or disabled the “Enable reverse DNS lookups” setting, the user
key-value pair is not contained within the message.
<client computer IP address> - IP address of the client computer that sent the request to enable or
disable the “Enable reverse DNS lookups” setting.
Message:
<device type>: Windows Sign In configuration modified; time="<timestamp>"
item=use_a_secure_connection value="<value>" old_value="<old value>" user="<user>"
source_IP="<client computer IP address>" outcome=success
Interface(s):
EWS, WS*
Syslog severity:
Informational
Explanation:
The “Use a secure connection (SSL)” setting for Windows Sign In was either enabled or disabled.
Variables:
<device type> - see Table 2-2.
<timestamp> - see Table 2-2.