HP XP P9000 Audit Log User and Reference Guide

Table 2 Basic Information in Audit Log File (continued)
File 2 (DKC)File 1 (SVP)ItemNo.
Interface5
• In-band OPEN indicates open-system hosts.• RMI AP indicates the log for Remote
Web Console and Remote Method
Invocation Applications such as HCS.
• In-band MF indicates mainframe system hosts.
• Out-of-band indicates hosts through the SVP.
• SVP indicates the log for the SVP.
• RM AP indicates the log for Remote
Maintenance Application.
Login user
Name
6
• A user name is output for commands received
by a command device for authentication.
• A user name is output for Remote Web
Console, RMI AP or SVP operations.
• •<System> is output when the storage
system detects the failure.
<Host> is output for other operations.
• No output for RM AP operations.
Connection
number
7
• 195 - 706 indicate a connection number
assigned when a command device for
authentication received the command.
• 0 - 161 indicate Remote Web Console
or SVP connection ID.
• 162 - 193 indicate Command View
Advanced Edition Suite and RMI AP
connection ID.
• No output for other operations
• 194 indicates SMI-S (RMI) connection
ID.
• No output for RM AP operations.
• No output when the login user name
is <System>.
No outputTask name specified when a task is
registered. No task name is output when
Task name8
a user performs operations using the
Remote Web Console secondary window.
The abbreviation indicating the function
that performed the operation.
• Maintenance window name is output
for SVP operations.
Function name9
• User Auth indicates a user authentication
command.
• FC-SP indicates a device authentication
command.
• Config Command indicates a configuration
changing command.
The following items are output only when Function
name is User Auth. No output for other
operations.
The operation or event name.Operation or
event name
10
• Login indicates that a log-in command is
received.
• Logout indicates that a log-out command is
received.
No outputParameters for certain functions.Parameters11
The result of the received commands.The result of your operation.Result12
• Normal end. The authentication has ended
normally.
• Normal end. The operation has ended
normally.
• •Error (xxxx-yyyyy). The operation has
ended abnormally.
Error. The authentication has ended
abnormally.
•• Accept. Received the commands from the host.Warning (xxxx-yyyyy). The operation
has partly ended abnormally or was
canceled during the operation.
• Reject. Rejected the commands from the host.
xxxxx-yyyyyy is an error code. xxxxx is a
part code of four or five digits showing
where the error occurs. yyyyyy is a
16 Introduction