HP XP7 Audit Log User and Reference Guide (H6F56-96001)

Table 5 Items in the Syslog File (RFC3164-compliant) (continued)
DescriptionItemNo.
If the "DD" is a single digit (for example, 1), it is displayed as " 1" (with a blank
space before "1") and not as "01".
The host name (SVP).Detected location
The detection entity identifier (Storage).Program name
The Unified specification identifier (CELFSS).Unified specification
identification
The revision number of the Unified specification document (1.1).
The serial number of the syslog header information.Message identification
No output
The date, time and the time difference between UTC and the local time in the format
of "YYYY-MM-DD-Thh:mm:ss.s ± hh:mm".
Date, time#2*
• YYYY: year, MM: month, DD: day
• hh: hour, mm: minute, ss.s: second in one decimal place.
• ± hh:mm: hours and minute of the time difference. "Z" is displayed instead of "±
hh:mm" when there is no time difference between UTC and the local time, such
as "2005-12-26T:23:06:58.0Z".
The detection entity identifier (Storage).Detection entity
The host name (SVP).Detected location
The category name of the event.Type of audit event
• Authentication of RMI, FC-SP, or Remote Web Console.
• ConfigurationAccess indicates setting from Remote Web Console, SVP or host.
• Maintenance indicates SVP operations.
• AnomalyEvent indicates reached the maximum of the Audit Log, etc.
• ExternalService indicates remote maintenance operations through SVP.
Result of audit event
• Success: Normal end. The operation has ended normally.
• Failed: Error (xxxx-yyyy). The operation has ended abnormally.
• Failed: Warning (xxxx-yyyy). The operation has partly ended abnormally or was
canceled during the operation.
"xxxx-yyyyy" indicates error codes and it is output only for Remote Web Console
operations.
The user name in the format of "uid=user name".Subject identification
• <system> is output when the category name is AnomalyEvent.
• <DKCMaintenance> is output for SVP operations.
• <Host> is output for commands from host.
The ID (R800) to identify the model name of the product and the serial number divided
by a colon.
Hardware identification
Syslog file format 21