HP XP7 Audit Log User and Reference Guide (H6F56-96001)

Table 2 Basic Information in Audit Log File (continued)
File 2 (DKC)File 1 (SVP)ItemNo.
Interface
• In-band OPEN indicates open-system hosts.• RMI AP indicates the log for Remote Web
Console and Remote Method Invocation
Applications such as CVAE.
• In-band MF indicates mainframe system
hosts.
• SVP indicates the log for the SVP.
• Out-of-band indicates hosts through the
SVP.• RM AP indicates the log for Remote
Maintenance Application.
• No output for the event about encryption
keys.
Login user
Name
• A user name is output for commands
received by a command device for
authentication.
• A user name is output for Remote Web
Console, RMI AP or SVP operations.
• <System> is output when the storage
system detects the failure. • <Host> is output for other operations.
• No output for RM AP operations.
• <system> is output for the event about
encryption keys.
Connection
number
• 195 - 706 indicate a connection number
assigned when a command device for
authentication received the command.
• 0 - 161 indicate Remote Web Console or
SVP connection ID.
• 162 - 193 indicate Command View
Advanced Edition Suite and RMI AP
connection ID.
• No output for other operations.
• 194 indicates SMI-S(RMI) connection ID.
• No output for RM AP operations.
• No output when the login user name is
<System>.
No output.Task name specified when a task is
registered. No task name is output when a
Task name
user performs operations using the Remote
Web Console secondary window.
The abbreviation indicating the function that
performed the operation.
• Maintenance window name is output for
SVP operations.
Function name
• User Auth indicates an user authentication
command.
• FC-SP indicates a device authentication
command.
• Config Command indicates a
configuration changing command.
• [ENC] is output for the event about
encryption keys.
The following items are output only when
Function name is User Auth. No output for
other operations.
The operation or event name.Operation or
event name
• Login indicates that a log-in command is
received.
• Logout indicates that a log-out command
is received.
The event name is output when the function
name is [ENC].
No output.Parameters for certain functions.Parameters
Audit log file format 17