Safeguard Audit Service Manual (G06.29+, H06.08+, J06.03+)

SAFEART Field Descriptions
Safeguard Audit Service Manual — 520480-031
7 - 12
Secondary Text Area
and the other secondary record contains a representation of the attempted change.
The Outcome field in the primary record indicates whether the attempt succeeded.
The SecondaryRecordType field indicates whether the record represents a before
image. Other possible types of secondary records appear in Table 7-8 on page 7-63.
Secondary Text Area
The text area portion of the secondary record immediately follows the
SecondaryTextAreaType field. The subsystem that reported the event uses the text
area to supply additional information about the event. This information can vary from a
simple command line to a more complex Safeguard protection record. The
SecondaryTextAreaType field specifies the type of information that appears in the
SecondaryTextArea. A complete list of secondary text area types appears in Table 7-9
on page 7-63.
Because information comes from a variety of subsystems and clients, some items that
appear in the text area are variable in format and cannot be selected with SET
WHERE commands. However, you can use SET WHERE commands to select events
when a Safeguard record appears in the text area.
The secondary text area structures generated by the Safeguard subsystem allow you
to select events based on the fields within the text area. The fields contain a prefix to
help you identify the type of Safeguard record that appears in the text area.
Table 7-3. Secondary Text Area Field Prefixes
Field Prefix Safeguard Record SecondaryTextAreaType
Audit Audit pool configuration record AuditPool
Config Safeguard configuration record SfgConfig
Eep Event-exit configuration record EEprocess
Group Group profile record Group
Group Group profile extension GroupprofileExt
Logoff Automatic logoff record Logoff
Lu Terminal definition record LU
PatProt Diskfile-Pattern Protection Record PatternProt
Pattern Diskfile-Pattern Access Record PatternSearch
Prot Protection record (authorization record) Protection
Prot Protection record extension ProtectionExt
User User authentication record UserProfile
User User record extension UserProfileExt