Monitor the audit logs because they are rolled over periodically to prevent them from getting too large. Download the audit logs periodically to maintain a long-term audit history.

Each user has a unique logging ID per session, enabling you to follow a user’s trail in the audit log. Some actions are performed by the appliance and might not have a logging ID.

A breakdown of an audit entry follows:

Token

Description

 

 

 

 

 

 

 

 

 

 

 

 

Date/time

The date and time of the event

 

 

 

 

 

 

 

 

 

 

Internal component

The unique identifier of an internal component

 

 

 

 

ID

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Reserved

The organization ID. Reserved for internal use

 

 

 

 

 

 

 

 

 

 

User domain

The login domain name of the user

 

 

 

 

 

 

 

 

 

 

 

 

User name/ID

The user name

 

 

 

 

 

 

 

 

 

 

 

 

Session ID

The user session ID associated with the message

 

 

 

 

 

 

 

 

Task ID

The URI of the task resource associated with the message

 

 

 

 

Client host/IP

The client (browser) IP address identifies the client machine that initiated the request

 

 

 

 

Result

The result of the action, which can be one of the following values:

 

 

 

SUCCESS

 

 

 

 

 

 

 

FAILURE

 

 

 

 

 

 

 

SOME_FAILURES

 

 

 

 

 

 

 

CANCELED

 

 

 

 

 

 

 

KILLED

 

 

 

 

 

 

 

 

 

 

Action

A description of the action, which can be one of the following values:

 

 

 

ADD

LIST

UNSETUP

CANCELED

 

MODIFY

ENABLE

DEPLOY

LOGIN

 

DELETE

DISABLE

START

LOGOUT

 

ACCESS

SAVE

DONE

DOWNLOAD_START

 

RUN

SETUP

KILLED

 

 

 

 

Severity

A description of the severity of the event, which can be one of the following values, listed in

 

descending order of importance:

 

 

 

 

 

INFO

 

 

 

 

 

 

 

NOTICE

 

 

 

 

 

 

 

WARNING

 

 

 

 

 

 

 

ERROR

 

 

 

 

 

 

 

ALERT

 

 

 

 

 

 

 

CRITICAL

 

 

 

 

 

 

 

 

Resource category

For REST API category information, see the HP OneView REST API Reference in the online help.

 

 

 

 

 

 

Resource URI/name

The resource URI/name associated with the task

 

 

 

 

 

 

 

 

 

Message

The output message that appears in the audit log

 

 

 

 

 

 

 

 

 

 

 

 

3.7 Understanding the audit log 49