Reference Guide

HPMA Audit Message Reference

HP Medical Archive

Audit Log File Format

The audit log contains individual audit messages in the following

format:

1. Date and time stamp (local time) the message was processed at the

AMS, followed by the server host name and the string “

AMS:”.

2. The message itself, enclosed within square brackets “[]”. The

message structure is discussed in the next section on page 6.

The following is the beginning of a sample log file. Messages are

wrapped within the boundaries shown, ending after the ASQN

attribute and double closing brackets “]]”. The <CR><LF> characters

at the end of each message are not shown.

Audit Message Format

Audit messages exchanged within the grid include some standard

information common to all messages, and specific content for the

event or activity being reported.

Each audit message is logged as a string composed of attribute

elements that are:

• Enclosed in square brackets “[ ]”

• Introduced by the string “AUDT”, indicating an audit message

Feb 12 02:37:34 an1-a-1 AMS:

[AUDT[RSLT(FC32):'DSDN'][AVER(UI32):3][ATYP(FC32):'SYSU'][ATIM(UI64):11081758444743

62][ATID(UI64):9384121014334693630][ANID(UI32):15010119][AMID(FC32):'ARNI'][ASQN(UI

64):0]]

Feb 12 02:37:34 an1-a-1 AMS:

[AUDT[SEID(FC32):'RCON'][CNDR(FC32):'OUTB'][SVIP(UI32):1501][DAIP(IP32):14.1.1.13][

SAIP(IP32):14.1.1.19][CNID(UI64):1716307103][RSLT(FC32):'CRFU'][AVER(UI32):3][ATYP(

FC32):'ETCF'][ATIM(UI64):1108175844660669][ATID(UI64):5503182624165676149][ANID(UI3

2):15010119][AMID(FC32):'RCON'][ASQN(UI64):1]]

Feb 12 02:37:34 an1-a-1 AMS:

[AUDT[SEID(FC32):'RCON'][CNDR(FC32):'OUTB'][SVIP(UI32):1501][DAIP(IP32):14.1.1.15][

SAIP(IP32):14.1.1.19][CNID(UI64):2329159112][RSLT(FC32):'CRFU'][AVER(UI32):3][ATYP(

FC32):'ETCF'][ATIM(UI64):1108175854682710][ATID(UI64):7756750787035320318][ANID(UI3

2):15010119][AMID(FC32):'RCON'][ASQN(UI64):2]]