HP Medical Archive Solution manual Audit Log File Format, Audit Message Format

HPMA Audit Message Reference

Audit Log File Format

The audit log contains individual audit messages in the following format:

1.Date and time stamp (local time) the message was processed at the AMS, followed by the server host name and the string “AMS:”.

2.The message itself, enclosed within square brackets “[]”. The message structure is discussed in the next section on page 6.

The following is the beginning of a sample log file. Messages are

wrapped within the boundaries shown, ending after the ASQN attribute and double closing brackets “]]”. The <CR><LF> characters

at the end of each message are not shown.

Feb 12 02:37:34 an1-a-1 AMS: [AUDT[RSLT(FC32):'DSDN'][AVER(UI32):3][ATYP(FC32):'SYSU'][ATIM(UI64):11081758444743 62][ATID(UI64):9384121014334693630][ANID(UI32):15010119][AMID(FC32):'ARNI'][ASQN(UI 64):0]]

Feb 12 02:37:34 an1-a-1 AMS: [AUDT[SEID(FC32):'RCON'][CNDR(FC32):'OUTB'][SVIP(UI32):1501][DAIP(IP32):14.1.1.13][ SAIP(IP32):14.1.1.19][CNID(UI64):1716307103][RSLT(FC32):'CRFU'][AVER(UI32):3][ATYP( FC32):'ETCF'][ATIM(UI64):1108175844660669][ATID(UI64):5503182624165676149][ANID(UI3 2):15010119][AMID(FC32):'RCON'][ASQN(UI64):1]]

Feb 12 02:37:34 an1-a-1 AMS: [AUDT[SEID(FC32):'RCON'][CNDR(FC32):'OUTB'][SVIP(UI32):1501][DAIP(IP32):14.1.1.15][ SAIP(IP32):14.1.1.19][CNID(UI64):2329159112][RSLT(FC32):'CRFU'][AVER(UI32):3][ATYP( FC32):'ETCF'][ATIM(UI64):1108175854682710][ATID(UI64):7756750787035320318][ANID(UI3 2):15010119][AMID(FC32):'RCON'][ASQN(UI64):2]]

Audit Message Format

Audit messages exchanged within the grid include some standard information common to all messages, and specific content for the event or activity being reported.

Each audit message is logged as a string composed of attribute elements that are:

•Enclosed in square brackets “[ ]”

•Introduced by the string “AUDT”, indicating an audit message

6

HP Medical Archive