HP NonStop SSH 544701-014

290 • Monitoring and Auditing HP NonStop SSH Reference Manual
Event
Id
Event
Name
Conditions Pattern Token Values
14
SftpRmDir
Event
Successful
"%sessionId: %user@%remoteAddress
%action %object %outcome"
%sessionId: SESSION-LOG-ID
%user: SSH username
%remoteAddress: remote IP
address
%action: ‘rmdir’
%object: directory name
%outcome: ‘granted’
Failed, error
detail available
"%sessionId: %user@%remoteAddress
%action %object %outcome (error
%error)"
%sessionId: SESSION-LOG-ID
%user: SSH username
%remoteAddress: remote IP
address
%action: ‘rmdir’
%object: directory name
%outcome: ‘denied’ or ‘failed’
%error: error detail
Failed, error
detail not
available
"%sessionId: %user@%remoteAddress
%action %object %outcome"
%sessionId: SESSION-LOG-ID
%user: SSH username
%remoteAddress: remote IP
address
%action: ‘rmdir’
%object: directory name
%outcome: ‘denied’ or ‘failed’
15
SftpSymlin
kEvent
Successful
"%sessionId: %user@%remoteAddress
%action %object target %link %outcome"
%sessionId: SESSION-LOG-ID
%user: SSH username
%remoteAddress: remote IP
address
%action: ‘symlink’
%object: file name
%link: link name
%outcome: ‘granted’
Failed, error
detail available
"%sessionId: %user@%remoteAddress
%action %object target %link %outcome
(error %error)"
%sessionId: SESSION-LOG-ID
%user: SSH username
%remoteAddress: remote IP
address
%action: ‘symlink’
%object: file name
%link: link name
%outcome: ‘denied’ or ‘failed’
%error: error detail
Failed, error
detail not
available
"%sessionId: %user@%remoteAddress
%action %object target %link %outcome"
%sessionId: SESSION-LOG-ID
%user: SSH username
%remoteAddress: remote IP
address
%action: ‘symlink’
%object: file name
%link: link name
%outcome: ‘denied’ or ‘failed’