HP StorageWorks 1606 Brocade Fabric OS Message Reference v6.3.0 (53-1001338-01 - Page 80

1 Reading a RAS System Message Audit Event Messages Compared to RASLog error messages, messages flagged as AUDIT provide additional user and system-related information of interest for post event auditing and problem determination. Audit event message format: AUDIT, , [], , , ////. /, , The following is a sample audit event message: AUDIT, 2005/12/10-09:54:03, [SEC-1000], WARNING, SECURITY, JohnSmith/root/192.168.132.10/Telnet/CLI, Domain A/JohnsSwitch, , Incorrect password during login attempt. The fields in the error message are described in Table 4. TABLE 4 Audit Message Field Description Example Variable Name Description AUDIT 2005/12/10-09:54:03 [SEC-1000] WARNING SECURITY JohnSmith root 192.168.132.10 Telnet CLI Domain A Audit flag Date and Time Stamp Message Module and Message Number Severity Level Event Class User ID Role IP Address Interface Application Name Admin Domain Identifies the message as an Audit message. The system time (UTC) when the message was generated on the switch. The RASLog subsystem will support an internationalized timestamp format base on the "LOCAL" setting. The message module and number. These values uniquely identify each message in the Fabric OS and reference the cause and actions recommended in this manual. Note that not all message numbers are used; there can be gaps in the numeric message sequence. The severity of the error: 1 = Critical 2 = Error 3 = Warning 4 = Info The event class: Zone Security Configuration Firmware Fabric The user ID. The role of the user ID. The IP address. The interface being used. The application name being used on the interface. The Admin Domain, if there is one. 10 Fabric OS Message Reference 53-1001338-01