Safeguard Audit Service Manual (G06.24+, H06.03+)

Audit File Record Formats
Safeguard Audit Service Manual—520480-014
A-15
Primary Audit Record
ZCREATORNUMBER
is, in internal form, the group number, member number corresponding to
the CAID of the subject.
ZCREATORNAME
is, in external form, the group name.member name corresponding to the
CAID of the subject.
ZSYSTEMNUMBER
is, as a 32-bit integer, the system number of the subject. The field is set to -1 if
the subject is an NFS client.
ZSYSTEMNAME
is, as an ASCII string, the name corresponding to ZSYSTEMNUMBER. The
field is set to “NFS” if the subject is an NFS client.
ZAUTHLOCNUMBER
is, as a 32-bit integer, the system number where the user was authenticated.
The value is zero if the system is remote and authentication information is not
available or if the subject is an NFS client.
ZAUTHLOCNAME
is, as an ASCII string, the name corresponding to ZAUTHLOCNUMBER. The
field is blank if the system is remote and authentication information is not
available or if the subject is an NFS client.
ZPROCESSNAME
is the process name or identifier of the subject. The field is set to all blanks if
the subject is an NFS client.
ZSUBSYSTEMID
is the SPI identifier of the subject subsystem.
ZTERMINALNAME
is, in external form, the terminal name of the subject process. If this value is not
available or if the subject is an NFS client, the field is set to all blanks.
ZAUDIT-CREATOR
is an instance of the ZSFG-DDL-GUARD-SUBJECT template that describes the
process that reported the audited event. The fields are the same as those
previously described for ZSUBJECT.