HP XP7 Audit Log User and Reference Guide (H6F56-96001)

Table 2 Basic Information in Audit Log File (continued)
File 2 (DKC)File 1 (SVP)ItemNo.
The result of the received commands.The result of your operation.Result
• Normal end. The authentication has ended
normally, or the event about encryption
keys occurs.
• Normal end. The operation has ended
normally.
• Error (xxxx-yyyyy). The operation has
ended abnormally. • Error. The authentication has ended
abnormally.
• Warning (xxxx-yyyyy). The operation has
partly ended abnormally or was canceled
during the operation.
• Accept. Received the commands from the
host.
xxxxx-yyyyyy is an error code. xxxxx is a part
code of four or five digits showing where the
• Reject. Rejected the commands from the
host.
error occurs. yyyyyy is a message ID of four,
five, or six digits. For more information about
error codes, see HP XP7 Remote Web
Console Messages. Note that error codes
"xxxx-yyyyy" appear only for Remote Web
Console operations.
An IP address (IPv4 or IPv6) is output for
Remote Web Console, RMI AP and SVP
Host Identifica-
tion
• A host name is output for commands from
hosts through the SVP.
operations. The IP address may be that of the
• A WWN is output for the FC-SP
authentication.
proxy server or the router depending on the
configuration of the connected network.
• A WWN is output for commands from
open-system hosts.
No output for RM AP operations. No output
when the login user name is <System>.
• A serial number is output for commands
mainframe system hosts.
If both IPv4 and IPv6 are available for
communication between the Remote Web
• If a command comes from other storage
system, the WWN or serial number of the
storage system is output.
Console computer and the SVP, but the
Remote Web Console secondary window
uses IPv4 communication. In this case, IPv4
addresses are output to audit logs.
• No output for the event about encryption
keys.
No output.Application
Identifica-tion
• An internal-use ID is output for open-system
hosts.
• An LPR number is output for mainframe
system hosts.
• 0x0000 is output if a command comes
from other storage system.
• No output for other commands.
No output for the FC-SP authentication,
computers using CCI, hosts using Business
Continuity Manager or the event about
encryption keys.
Same as File 1.The serial number of the saved log
information (0000000000 to 4294967295).
Serial number
When the number reaches 4,294,967,295,
it is reset to 0000000000.
Detailed Information
The indexes and setting values output to the Detailed Information are different for each log. If there
is any item that is not specified while performing the operation or entering the command, either a
18 Introduction