HP StorageWorks P9000 Command View Advanced Edition Suite Software 7.1 Administrator Guide (web) (TB581-96050, May 2011)

Audit events and categories of information output to audit logs
In Device Manager and Tiered Storage Manager, the following categories of audit events are output
to audit logs:
• StartStop
• Authentication
• ConfigurationAccess
• AccessControl
• ExternalService
Each audit event is assigned a severity level. You can filter audit log data to be output according to
the severity levels of events.
Table 32 to Table 36 describe the audit log data that can be generated by Device Manager and
Tiered Storage Manager. For details on the audit log data generated by other P9000 Command
View AE Suite products, see the manuals for the relevant products.
Table 32 Audit events that are output to audit logs (when the category is StartStop)
Message IDSeverityAudit eventType description
KAPM00090-I6Successful SSO server start
Start and stop of software KAPM00091-E3Failed SSO server start
KAPM00092-I6SSO server stop
Table 33 Audit events that are output to audit logs (when the category is Authentication)
Message IDSeverityAudit eventType description
KAPM01124-I6Successful login
Administrator or end user authen-
tication
KAPM02450-I6
Successful login (to the external au-
thentication server)
KAPM02291-W4
Failed login (wrong user ID or pass-
word)
KAPM02291-W4
Failed login (logged in as a locked
user)
KAPM02291-W4
Failed login (logged in as a non-exist-
ing user)
KAPM01095-E4Failed login (no permission)
KAPM01125-E4Failed login (authentication failure)
KAPM02451-W4
Failed login (to the external authentic-
ation server)
KAPM08009-I6Successful logout
Settings for logs and alerts106