Table 4 Items in the Syslog File
DescriptionItemNo.
The priority according to the following formula, enclosed by brackets (< >):
Priority = 8 x Facility + Severity
Facility is 1 (fixed).
The Severity depends on the type of log information:
4: Error or Warning. Error means the operation has ended abnormally.
Warning means the operation has partly ended abnormally or was canceled
during the operation.
6: Informational. The operation has ended normally.
For example, <12> is displayed for priority when Severity is Error.
Priority1
The date and time in the format of MMM DD HH:mm:SS (MMM: month, DD:
day, HH: hour, mm: minute and SS. second).
If the DD is a single digit (for example, 1), it is displayed as 1 (with a blank
space before 1) and not as 01.
Date, time
1
2
The host name (SVP).Detected location3
The detection entity identification character (Storage).Program name4
The Unified specification identification character (CELFSS).
Unified specification
identification
information
5
The revision number of the Unified specification document (1.1).6
The serial number of the syslog header information.
Message
identification
information
7
Message ID. Not displayed because it is not used.8
The date, time and the time difference between UTC (Coordinated Universal
Time) in the format of YYYY-MM-DD-Thh:mm:ss.s hh:mm (YYYY: year, MM:
month, DD: day, hh: hour, mm: minute, ss.s: second, hh: hours of the time
difference and mm: minute of the time difference)
Z is displayed instead of hh:mm when there is no time difference between
UTC, such as 2005-12-26T:23:06:58.0Z.
The displayed format for second ss.s represents one decimal place.
Date, time#2
1
9
The detection entity identification character (Storage).Detection entity10
The host name (SVP).Detected location11
The category name of the event as described in the following example:
• Authentication. iSCSI login or authentication of RMI (Remote Method Invoc-
ation)
• ConfigurationAccess. Setting from Remote Web Console, SVP, or host.
• AnomalyEvent. Reached the maximum of the audit log, etc.
• Maintenance. SVP maintenance.
Type of audit event12
XP24000/XP20000 Audit Log User and Reference Guide 37