SSH Reference Manual

Event
Id
Event Name Conditions Pattern Token Values
Failed, error
detail not
available
"%sessionId: %user@%remoteAddress
%action %object to %newname
%outcome"
%sessionId: SESSION-LOG-ID
%user: SSH username
%remoteAddress: remote IP
address
%action: ‘rename’
%object: old file name
%newname: new file name
%outcome: ‘denied’ or ‘failed’
12
SftpListDirE
vent
Successful
"%sessionId: %user@%remoteAddress
%action %object %outcome"
%sessionId: SESSION-LOG-ID
%user: SSH username
%remoteAddress: remote IP
address
%action: ‘list’
%object: directory name
%outcome: ‘granted’
Failed, error
detail available
"%sessionId: %user@%remoteAddress
%action %object %outcome (error
%error)"
%sessionId: SESSION-LOG-ID
%user: SSH username
%remoteAddress: remote IP
address
%action: ‘list’
%object: directory name
%outcome: ‘denied’ or ‘failed’
%error: error detail
Failed, error
detail not
available
"%sessionId: %user@%remoteAddress
%action %object %outcome"
%sessionId: SESSION-LOG-ID
%user: SSH username
%remoteAddress: remote IP
address
%action: ‘list’
%object: directory name
%outcome: ‘denied’ or ‘failed’
13
SftpMkDirE
vent
Successful
"%sessionId: %user@%remoteAddress
%action %object %outcome"
%sessionId: SESSION-LOG-ID
%user: SSH username
%remoteAddress: remote IP
address
%action: ‘mkdir’
%object: directory name
%outcome: ‘granted’
Failed, error
detail available
"%sessionId: %user@%remoteAddress
%action %object %outcome (error
%error)"
%sessionId: SESSION-LOG-ID
%user: SSH username
%remoteAddress: remote IP
address
%action: ‘mkdir’
%object: directory name
%outcome: ‘denied’ or ‘failed’
%error: error detail
Failed, error
detail not
available
"%sessionId: %user@%remoteAddress
%action %object %outcome"
%sessionId: SESSION-LOG-ID
%user: SSH username
%remoteAddress: remote IP
address
HP NonStop SSH Reference Manual Monitoring and Auditing • 317