HP XP20000/XP24000 HP StorageWorks XP24000/XP20000 Audit Log Reference Guide ( - Page 20

2 Audit Log File Format This chapter describes the two types of audit log files and the items included in the files. • "Audit Log Information File" (page 20) • "Syslog Information File" (page 22) Audit Log Information File The audit log information file consists of both basic and detailed information about user logins, logouts and disk array configuration change operations. The detailed information includes an index representing each item and its setting's values. The file contains user ID, SLPR number, date, time, function, operation (any except login in or logout), parameter, result, and sequence number as the basic information. See Table 3 (page 22) for a description of symbols used in the detailed information. Figure 4 (page 20) shows a sample audit log information file: Figure 4 Audit Log Information File Table 2 (page 20) lists the items in the Audit Log Information file. Table 2 Items in Audit Log Information File No. Item 1 Login user ID Explanation The user ID. • When the storage system detects a failure, or the DKA Encryption License Key is created, is output. • is output for SVP operation. • is output for commands from the host. 2 SLPR number The SLPR number. For storage administrators or commands from the host, the number 99 appears. Not output when the operation name is AuditLog and the event name is Create File. 3 Date1 4 Time1 5 Time zone Year, month, and day the audit log was created (YYYYMMDD). Hour, minute, second and millisecond the audit log was created (HH:MM:SS.xxx). The time difference between Universal Time (UT) and the local time appears as HH:MM (HH: hour, MM: minute). 20 Audit Log File Format