action=action
command type=type
user=user
]
Note that the message value only appears if information for it is available.
Audited Events
Table 7-2 describes the events that cause audit records to be created. The table lists
the audit record type that is logged when this event occurs.
Table 7-2. Audit record types by audited event
Audited Event Audit Record Type
User successfully authenticated authentication
User authentication failed authentication
Data successfully sent to other EKM data_synchronization
Error sending data to other EKM data_synchronization
sync command processed data_synchronization
Error processing sync command data_synchronization
Command line processing started runtime
exit command received runtime
Unknown command entered runtime
Message received from drive runtime
Error processing message from drive runtime
Error from message received from drive runtime
Error updating drive table with information
received from drive
runtime
Error retrieving information from drive table runtime
Error retrieving information from keystore runtime
Error processing certificate from keystore runtime
Error finding private key from keystore runtime
Error computing cryptographic values runtime
Message exchange processed successfully runtime
Message processing started runtime
Command line processing started runtime
Problem found using cryptographic services runtime
New drive discovered runtime
Error configuring drive to drive table runtime
Successfully started processing messages
from drive
runtime
Received and processed stopekm command runtime
Drive removed from drive table resource_management
Error removing drive from drive table resource_management
Drive table import successful resource_management
Error importing drive table resource_management
Chapter 7. Audit Records 7-7