HP StorageWorks XP Audit Log reference guide: HP XP12000 Disk Array, HP XP10000 Disk Array, HP 200 Storage Virtualization System (5697-8004, March 2009)

ExplanationItemNo.
The Unified specification identification character (CELFSS).Unified specification
identification informa-
tion
5
The revision number of the Unified specification document (1.1).6
The sequence number of the syslog header information.
Message identifica-
tion information
7
Message ID. Not displayed because it is not used.8
The date, time and the time difference between UTC (Coordinated Universal
Time) in the format of YYYY-MM-DD-Thh:mm:ss.s ± hh:mm (YYYY: year, MM:
month, DD: day, hh: hour, mm: minute, ss.s: second, hh: hours of the time
difference and mm: minute of the time difference)
Z is displayed instead of ± hh:mm when there is no time difference between
UTC, such as 2005-12-26T:23:06:58.0Z.
NOTE:
The displayed format for second ss.s represents one decimal place.
Date, time#29
The detection entity identification character (Storage).Detection entity10
The host name (SVP).Detected location11
The category name of the event as described in the following example:
• Authentication: iSCSI login or authentication of RMI (Remote Method Invoc-
ation)
• ConfigurationAccess: Setting from the XP Remote Web Console or SVP.
• AnomalyEvent: Reached the maximum of the audit log, etc.
• Maintenance. SVP
Type of audit event12
The result of the audit event:
• Success: Normal end. The operation has ended normally.
• Failed: Error(xxxx-yyyy). The operation has ended abnormally.
• Failed: Warning(xxxx-yyyy). The operation has partly ended abnormally
or was canceled during the operation.
NOTE:
xxxx-yyyy indicates the error code.
Result of the audit
event
13
The user name in the format of uid=user name.
NOTE:
<system> is displayed when the category name is AnomalyEvent.
<DKCMaintenance> is output for SVP operation.
Subject identification
information
14
The ID (R500) to identify the model name of the product and the serial number
divided by a colon.
NOTE:
R500 refers to the HP StorageWorks XP12000/XP10000 Disk Array.
Hardware identifica-
tion information
15
Not displayed because it is not used.
Generated location
information
16
XP Audit Log reference guide 35