If an audit log file is to be transferred to the syslog server, syslog header information is included in the audit log file.
The following table shows the format of audit log files when audit log files are transferred to the syslog server.
| Part | Description | Example | |
|---|---|---|---|
| syslog.PRI | The same priority is set for syslog.PRI and for the audit log header. |
<142> |
|
| syslog.HEADER | The syslog.HEADER includes the date and time when the syslog data was sent. |
Jan 6 09:54:14 localhost ESM local1{3490]:
|
|
| syslog.MSG | Audit log header1, 2 | See Audit log header format (RFC3164-compliant) or Audit log header format (RFC5424-compliant) . The audit log header includes the date and time when the audit event occurred. |
<142> Jan 5 09:54:14 ESM Storage: CELFSS,1.1,13,,2024-01-05T09:54:14.8+09:00,
Storage,ESM,Authentication,Successk,uid,VSP One B24:431234,,Japan-Tokyo,,,,
from=xxx.xxx.xxx.xxx,,,,6,BasicLog,,,
|
| Audit log information | See Audit log information format (Basic information) and Audit log information format (Detailed information) . |
ESM,,[BASE],Logout,,Normal end,Seq.=0000000006 |
|
|
Notes:
|
|||