HP NonStop SSH 544701-014

HP NonStop SSH Reference Manual Monitoring and Auditing • 285
Event
Id
Event
Name
Conditions Pattern Token Values
Failed, error
detail available
"%sessionId: %user@%remoteAddress
%action %object %outcome (error
%error)"
%sessionId: SESSION-LOG-ID
%user: SSH username
%remoteAddress: remote IP
address
%action: ‘subsystem
%object: name of subsystem
%outcome: ‘denied’ or ‘failed’
%error: error detail
Failed, error
detail not
available
"%sessionId: %user@%remoteAddress
%action %object %outcome"
%sessionId: SESSION-LOG-ID
%user: SSH username
%remoteAddress: remote IP
address
%action: ‘subsystem’
%object: name of subsystem
%outcome: ‘denied’ or ‘failed’
5
SftpOpenFi
leEvent
Successful
"%sessionId: %user@%remoteAddress
%action %object %outcome (mode
%mode)"
%sessionId: SESSION-LOG-ID
%user: SSH username
%remoteAddress: remote IP
address
%action: ‘open’
%object: file name
%outcome: ‘granted’
%mode: file open mode (‘read’
or ‘write’)
Failed, error
detail available
"%sessionId: %user@%remoteAddress
%action %object (mode %mode)
%outcome (error %error)"
%sessionId: SESSION-LOG-ID
%user: SSH username
%remoteAddress: remote IP
address
%action: ‘open’
%object: file name
%mode: file open mode (‘read’
or ‘write’)
%outcome: ‘denied’ or ‘failed’
%error: error detail
Failed, error
detail not
available
"%sessionId: %user@%remoteAddress
%action %object %outcome (mode
%mode)"
%sessionId: SESSION-LOG-ID
%user: SSH username
%remoteAddress: remote IP
address
%action: ‘open’
%object: file name
%outcome: ‘denied’ or ‘failed’
%mode: file open mode (‘read’
or ‘write’)
6
SftpTouchF
ileEvent
Successful
"%sessionId: %user@%remoteAddress
%action %object %outcome (mode
%mode)"
%sessionId: SESSION-LOG-ID
%user: SSH username
%remoteAddress: remote IP
address
%action: ‘touch’
%object: file name
%outcome: ‘granted’