Audit log information format (Basic information)

Operations configured by the management PC or Maintenance PC

Pattern 1

Execution logs of remote maintenance API

Operations on encryption keys for encrypting stored data

Commands that the storage system received from hosts or computers using CCI

Pattern 2

Operation requests the storage system received from VSP One Block Administrator

Events on encryption keys for encrypting stored data

A

External interface name

• MPC: Logs of Maintenance PC
• ESM: Logs of maintenance utility
• RM AP: Logs of Remote Maintenance Application (RM AP)
• No output for Create File (Event name) of AuditLog (Function name).

• In-band OPEN: Host
• Out-of-band: Computer using CCI or VSP One Block Administrator
• No output for events on encryption keys

B

Task name

• The task name is output to an operation log that is registered in the Web Console tasks.
• No task name is output to an operations log that is not registered in the Web Console tasks.

No output.

C

Function name

The abbreviation of the name of the function performed during the setting operation from RM AP is output.

The name of the maintenance window is output for the setting operation by Maintenance PC.

For the relation between the function and the abbreviation of the output function name, see Management PC and maintenance PC operations.

Commands received from the host are output as follows.

• User Auth: User authentication command
• Config Command: Configuration change command
• CHAP: Device authentication command

"ENC" is output for events on encryption keys.

D

Operation name or event name

The operation name or event name that is unique to each function is output.

For details of the event names, see Events on the storage system.

When the function name is "User Auth", the received command is output as follows.

• Login: Receipt of the login command
• Logout: Receipt of the logout command

No output when commands, except for login or logout, are received.

When the function name is "ENC", the event name is output.

E

Parameter

When the configuration operation includes a parameter setting, the operation parameter is output.

No detailed information is output to the parameter part of the basic information.

No output.

F

Result of operation or receiving commands

The results of the operations are output as follows.

• Normal start: The operation started normally.
• Normal end: The operation ended normally.
• Warning: The operation partly ended abnormally or was aborted.
• Error: The operation ended abnormally.

The results of receiving commands are output as follows.

• Normal start: User authentication or CHAP authentication ended normally, or the event on encryption keys occurs.
• Normal end: User authentication or CHAP authentication ended normally, or the event on encryption keys occurs.
• Error: User authentication or CHAP authentication ended abnormally.
• Accept: Commands from a host are received.
• Reject: Commands from a host are rejected.

G

Serial number

The serial number of stored log information is output.

The serial number ranges from 0000000000 to 4294967295.

When the log information reaches 4,294,967,295 counts, the serial number is reset to 0000000000.