HP StorageWorks XP Command View Advanced Edition software Device Manager server installation and configuration guide (web version) (T1780-96078, March 2008)
XP Command View AE Suite Common Component
156
Table 5-4 Categories and descriptions
Categories Description
Events indicating that anomalies such as a threshold excess
occurred.
• Excess over network traffic threshold
• Excess over CPU load threshold
• Over-limit pre-notification or wraparound of audit log data
temporarily saved internally
AnomalyEvent
Events indicating that abnormal communication occurred.
• SYN flood attacks to a regularly used port, or protocol
violations
• Access to an unused port (such as port scanning)
Different products generate different types of audit log data. The following sections describe the
audit log data that can be generated by using Device Manager. For details on the audit log data
generated by other products, see the manual for the corresponding product.
5-9-1 Categories of information output to audit logs in
Device Manager
The following table lists the categories of information output to audit logs in Device Manager and the
audit events. Each audit event is assigned a severity level. You can filter audit log data to be output
according to the severity levels of events.
Table 5-5
Categories of information output to audit logs, and audit events
Category Type Description Audit Event Severit
y
Successful SSO server start 6
Failed SSO server start 3
StartStop
Start and stop of software
SSO server stop 6
Successful login 6
Failed login (wrong user ID or
password)
4
Failed login (logged in as a
locked user)
4
Failed login (logged in as a
non-existing user)
4
Failed login (no permission) 4
Failed login (authentication
failure)
4
Authentication
Administrator or end user
authentication
Successful logout 6
Automatic account lock Automatic account lock
(repeated authentication failure
or expiration of account)
4
Exceeded upper limit of single
sign-on requests
4
Successful SSO authentication 6
HP SIM linkage
Failed SSO authentication 4
Successful user registration 6
ConfigurationAccess
User registration
Failed user registration 3