Dell PowerVault TL4000 Dell PowerVault ML6000 Encryption Key Manager User's - Page 95

Audited Events, Audit Record Type

Page 95 highlights

action=action command type=type user=user ] Note that the message value only appears if information for it is available. Audited Events Table 7-2 describes the events that cause audit records to be created. The table lists the audit record type that is logged when this event occurs. Table 7-2. Audit record types by audited event Audited Event Audit Record Type User successfully authenticated authentication User authentication failed authentication Data successfully sent to other EKM data_synchronization Error sending data to other EKM data_synchronization sync command processed data_synchronization Error processing sync command data_synchronization Command line processing started runtime exit command received runtime Unknown command entered runtime Message received from drive runtime Error processing message from drive runtime Error from message received from drive runtime Error updating drive table with information runtime received from drive Error retrieving information from drive table runtime Error retrieving information from keystore runtime Error processing certificate from keystore runtime Error finding private key from keystore runtime Error computing cryptographic values runtime Message exchange processed successfully runtime Message processing started runtime Command line processing started runtime Problem found using cryptographic services runtime New drive discovered runtime Error configuring drive to drive table runtime Successfully started processing messages from drive runtime Received and processed stopekm command runtime Drive removed from drive table resource_management Error removing drive from drive table resource_management Drive table import successful resource_management Error importing drive table resource_management Chapter 7. Audit Records 7-7

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122

action=
action
command type=
type
user=
user
]
Note that the
message
value only appears if information for it is available.
Audited Events
Table 7-2 describes the events that cause audit records to be created. The table lists
the audit record type that is logged when this event occurs.
Table 7-2. Audit record types by audited event
Audited Event
Audit Record Type
User successfully authenticated
authentication
User authentication failed
authentication
Data successfully sent to other EKM
data_synchronization
Error sending data to other EKM
data_synchronization
sync command processed
data_synchronization
Error processing sync command
data_synchronization
Command line processing started
runtime
exit command received
runtime
Unknown command entered
runtime
Message received from drive
runtime
Error processing message from drive
runtime
Error from message received from drive
runtime
Error updating drive table with information
received from drive
runtime
Error retrieving information from drive table
runtime
Error retrieving information from keystore
runtime
Error processing certificate from keystore
runtime
Error finding private key from keystore
runtime
Error computing cryptographic values
runtime
Message exchange processed successfully
runtime
Message processing started
runtime
Command line processing started
runtime
Problem found using cryptographic services
runtime
New drive discovered
runtime
Error configuring drive to drive table
runtime
Successfully started processing messages
from drive
runtime
Received and processed stopekm command
runtime
Drive removed from drive table
resource_management
Error removing drive from drive table
resource_management
Drive table import successful
resource_management
Error importing drive table
resource_management
Chapter 7. Audit Records
7-7