Common Services audit log

Common Services can output audit log information about who performed which operation and when. By default, the audit log output is disabled, but you can enable it and change the properties as needed.

Output destination

The audit log is output to the syslog.

Output items

The following items are output to the audit log.

Location	Item	Description	Example
PRI	Priority	A number that indicates the priority level. This number is converted from the facility value and the log level. The facility value is converted based on the value set for the `CS_PORTAL_AUDIT_FACILITY` property.	`<11>`
HEADER	Date and time	The date and time when the auditing event occurred	`Sep 2 13:15:04`
HEADER	Host name	The name of the host for which the auditing event occurred	`WIN-00ABCD11EFG`
MSG	Process ID	The process ID	`5828`
	Thread ID	The thread ID	`http-nio-8081-exec-2`
	Log level	The log level, such as `ERROR` or `DEBUG`	`ERROR`
	Date and time	The date and time when the audit log was output	`2019-09-02T13:15:04.362+0900`
	Message ID	The message ID	`KAOP91111-E`
	Type of auditing event	The auditing event type, such as `StartStop` or `Authentication`	`Authentication`
	Result of the auditing event	The result of the event, such as whether the event was successful or not	`Success`
	Subject-identifying information	Information such as the user ID or a URI	`User ID=system,URI=/portal`
	Message	The message	`KAOP91111-E Audit Log.`

The auditing event types that are output and their corresponding severity levels are as follows. You can change the properties of the audit log to narrow down the severity levels that are output.

Type of auditing event	Description	Corresponding severity level
`Authentication`	Indicates an auditing event that is related to login or authentication	If the event is successful: `6` If the event fails: `4`
`ConfigurationAccess`	Indicates an auditing event that is related to the creation, referencing, modification, or deletion of a user account or user group	If the event is successful: `6` If the event fails: `3`

Type of auditing event

Description

Corresponding severity level

Authentication

Indicates an auditing event that is related to login or authentication

If the event is successful: 6

If the event fails: 4

ConfigurationAccess

Indicates an auditing event that is related to the creation, referencing, modification, or deletion of a user account or user group

If the event is successful: 6

If the event fails: 3

Auditing events output to the audit log

Common Services outputs the following types of auditing events to the audit log. A message to be output consists of a message ID and message text.

The following shows the message ID format:

prefixNNNNN-x

A message ID consists of the following elements:

prefix

Indicates the component from which the message is output. The prefix of audit log messages is KAOP.

NNNNN

Indicates the serial number of the message. The serial number differs depending on the type.

KAOP9800N: Authentication message
KAOP90NNN: ConfigurationAccess message

x

Indicates the message type. The following shows the message types and their meanings:

E (Error): Message that notifies users of an error that prevents processing from continuing
I (Information): Message that notifies users of information

If the auditing event type is Authentication:

Detailed type	Auditing event	Message
User authentication	Successful login	KAOP98001-I,Authentication,Success,type=LOGIN
	Login error	KAOP98002-E,Authentication,Failed,type=LOGIN_ERROR
	Successful logout	KAOP98001-I,Authentication,Success,type=LOGOUT
	Logout error	KAOP98002-E,Authentication,Failed,type=LOGOUT_ERROR
Profile	Successful account editing	KAOP98001-I,Authentication,Success,type=UPDATE_PROFILE
	Account editing error	KAOP98002-E,Authentication,Failed,type=UPDATE_PROFILE_ERROR
	Successful password change	KAOP98001-I,Authentication,Success,type=UPDATE_PASSWORD
	Password change error	KAOP98002-E,Authentication,Failed,type=UPDATE_PASSWORD_ERROR
For the audit log, message IDs other than those listed in this table are also output from the internal processing of Common Services. Based on the message ID and the type value, determine each event in the auditing log.

If the auditing event type is ConfigurationAccess:

Detailed type	Auditing event	Message
User	Successful user creation	KAOP90001-I
	User creation error	KAOP90002-E
	Successful acquisition of a user list	KAOP90003-I
	Error obtaining a user list	KAOP90004-E
	Successful acquisition of information about a specific user	KAOP90005-I
	Error obtaining information about a specific user	KAOP90006-E
	Successful update of information about a specific user	KAOP90007-I
	Error updating information about a specific user	KAOP90008-E
	Successful user deletion	KAOP90009-I
	User deletion error	KAOP90010-E
	Successful acquisition of a list of user groups to which a specific user belongs	KAOP90011-I
	Error obtaining a list of user groups to which a specific user belongs	KAOP90012-E
User group	Successful addition of users to a user group	KAOP90013-I
	Error adding users to a user group	KAOP90014-E
	Successful deletion of users from a user group	KAOP90015-I
	Error deleting users from a user group	KAOP90016-E
	Successful reset of a user password	KAOP90017-I
	Error resetting a user password	KAOP90018-E
	Successful registration of a user group	KAOP90019-I
	Error registering a user group	KAOP90020-E
	Successful acquisition of a user group list	KAOP90021-I
	Error obtaining a user group list	KAOP90022-E
	Successful update of registered information of a user group	KAOP90023-I
	Error updating registered information of a user group	KAOP90024-E
	Successful acquisition of information about a specific user group	KAOP90025-I
	Error obtaining information about a specific user group	KAOP90026-E
	Successful deletion of a user group	KAOP90027-I
	Error deleting a user group	KAOP90028-E
	Successful acquisition of a list of users who belong to a specific user group	KAOP90029-I
	Error obtaining a list of users who belong to a specific user group	KAOP90030-E
	Successful acquisition of a list of roles assigned to a specific user group	KAOP90031-I
	Error obtaining a list of roles assigned to a specific user group	KAOP90032-E
	Successful assignment of roles to a user group	KAOP90033-I
	Error assigning roles to a user group	KAOP90034-E
	Successful deletion of roles assigned to a user group	KAOP90035-I
	Error deleting roles assigned to a user group	KAOP90036-E
	Successful acquisition of a list of roles that can be assigned to a specific user group	KAOP90037-I
	Error obtaining a list of roles that can be assigned to a specific user group	KAOP90038-E
User directory	Successful registration of an Active Directory or LDAP server	KAOP90039-I
	Error registering an Active Directory or LDAP server	KAOP90040-E
	Successful acquisition of an Active Directory or LDAP server list	KAOP90041-I
	Error obtaining an Active Directory or LDAP server list	KAOP90042-E
	Successful acquisition of information about a specific Active Directory or LDAP server	KAOP90043-I
	Error obtaining information about a specific Active Directory or LDAP server	KAOP90044-E
	Successful update of information about an Active Directory or LDAP server	KAOP90045-I
	Error updating information about an Active Directory or LDAP server	KAOP90046-E
	Successful deletion of information about an Active Directory or LDAP server	KAOP90047-I
	Error deleting information about an Active Directory or LDAP server	KAOP90048-E
	Successful synchronization of user groups	KAOP90049-I
	Error synchronizing user groups	KAOP90050-E
	Successful implementation of the connection and authentication tests of an Active Directory server	KAOP90051-I
	Error implementing the connection and authentication tests of an Active Directory server	KAOP90052-E
`setupcommonservice` command of each product	Successful registration of a product	KAOP90053-I
`setupcommonservice` command of each product	Error registering a product	KAOP90054-E
Product	Successful acquisition of a list of products registered in Common Services	KAOP90055-I
	Error obtaining a list of products registered in Common Services	KAOP90056-E
	Successful acquisition of information about a specific product registered in Common Services	KAOP90057-I
	Error obtaining information about a specific product registered in Common Services	KAOP90058-E
	Successful update of registered information of a product	KAOP90059-I
	Error updating registered information of a product	KAOP90060-E
	Successful deletion of a product	KAOP90061-I
	Error deleting a product	KAOP90062-E
	Successful acquisition of configuration information of a specific product registered in Common Services	KAOP90063-I
	Error obtaining configuration information of a specific product registered in Common Services	KAOP90064-E
	Successful acquisition of version information of a specific product registered in Common Services	KAOP90065-I
	Error obtaining version information of a specific product registered in Common Services	KAOP90066-E
	Successful acquisition of status information of a specific product registered in Common Services	KAOP90067-I
	Error obtaining status information of a specific product registered in Common Services	KAOP90068-E
	Successful acquisition of license information of a specific product registered in Common Services	KAOP90069-I
	Error obtaining license information of a specific product registered in Common Services	KAOP90070-E
Data Center	Successful registration of a data center	KAOP90071-I
	Error registering a data center	KAOP90072-E
	Successful acquisition of a data center list	KAOP90073-I
	Error obtaining a data center list	KAOP90074-E
	Successful acquisition of information about a specific data center	KAOP90075-I
	Error obtaining information about a specific data center	KAOP90076-E
	Successful update of registered information of a data center	KAOP90077-I
	Error updating registered information of a data center	KAOP90078-E
	Successful deletion of a data center	KAOP90079-I
	Error deleting a data center	KAOP90080-E
	Successful acquisition of a list of products registered in a specific data center	KAOP90081-I
	Error obtaining a list of products registered in a specific data center	KAOP90082-E
	Successful registration of products registered in Common Services to a data center	KAOP90083-I
	Error registering products registered in Common Services to a data center	KAOP90084-E
	Successful deletion of products registered in Common Services from a data center	KAOP90085-I
	Error deleting products registered in Common Services from a data center	KAOP90086-E
Password policy	Successful acquisition of the password policy	KAOP90087-I
	Error obtaining the password policy	KAOP90088-E
	Successful update of the password policy	KAOP90089-I
	Error updating the password policy	KAOP90090-E
Warning banner	Successful acquisition of the banner	KAOP90091-I
	Error obtaining the banner	KAOP90092-E
	Successful update of the banner	KAOP90093-I
	Error updating the banner	KAOP90094-E
	Successful preview of the banner	KAOP90095-I
	Error previewing the banner	KAOP90096-E
	Successful acquisition of the banner tag	KAOP90097-I
	Error obtaining the banner tag	KAOP90098-E
Version information	Successful acquisition of version information of Common Services	KAOP90099-I
Version information	Error obtaining version information of Common Services	KAOP90100-E
Access token	Successful acquisition of the access token	KAOP90103-I
	Error obtaining the access token	KAOP90104-E
	Successful acquisition of information about the user who obtained the access token	KAOP90105-I
	Error obtaining information about the user who obtained the access token	KAOP90106-E
Periodic running by a registered product	Successful notification of the status of a linked product	KAOP90109-I
Periodic running by a registered product	Error reporting the status of a linked product	KAOP90110-E
Login	Successful acquisition of the logged-in user's profile	KAOP90111-I
Login	Error obtaining the logged-in user's profile	KAOP90112-E
Login banner	Successful acquisition of the login banner	KAOP90113-I
Login banner	Error obtaining the login banner	KAOP90114-E
Checking the session and token status during use of the GUI	Successful acquisition of the logged-in user status	KAOP90115-I
Checking the session and token status during use of the GUI	Error obtaining the logged-in user status	KAOP90116-E
Product deletion	Error notifying a product of deletion	KAOP90125-W
Kerberos connection settings	Successful acquisition of information about the Kerberos authentication connection	KAOP90126-I
	Error obtaining information about the Kerberos authentication connection	KAOP90127-E
	Successful update of the Kerberos connection settings	KAOP90128-I
	Error updating the Kerberos connection settings	KAOP90129-E
	Successful creation of a Kerberos realm	KAOP90130-I
	Error creating a Kerberos realm	KAOP90131-E
	Successful deletion of a Kerberos realm	KAOP90132-I
	Error deleting a Kerberos realm	KAOP90133-E
	Successful acquisition of information about a specific realm for Kerberos authentication	KAOP90134-I
	Error obtaining information about a specific realm for Kerberos authentication	KAOP90135-E
	Successful acquisition of a list of information about Kerberos authentication realms	KAOP90136-I
	Error obtaining a list of information about Kerberos authentication realms	KAOP90137-E
	Successful update of Kerberos realm information	KAOP90138-I
	Error updating Kerberos realm information	KAOP90139-E
Identity provider	Successful import of metadata	KAOP90172-I
	Error importing metadata	KAOP90173-E
	Successful registration of an identity provider	KAOP90174-I
	Error registering an identity provider	KAOP90175-E
	Successful export of metadata	KAOP90176-I
	Error exporting metadata	KAOP90177-E
	Successful acquisition of an identity provider list	KAOP90178-I
	Error obtaining an identity provider list	KAOP90179-E
	Successful acquisition of information about a specific identity provider	KAOP90180-I
	Error obtaining information about a specific identity provider	KAOP90181-E
	Successful update of registered information of an identity provider	KAOP90182-I
	Error updating registered information of an identity provider	KAOP90183-E
	Successful deletion of an identity provider	KAOP90184-I
	Error deleting an identity provider	KAOP90185-E
Authentication key	Successful acquisition of the authentication key settings	KAOP90186-I
	Error obtaining the authentication key settings	KAOP90187-E
	Successful update of the update interval of the authentication key	KAOP90188-I
	Error updating the update interval of the authentication key	KAOP90189-E
	Successful update of the authentication key	KAOP90190-I
	Error updating the authentication key	KAOP90191-E
User directory	Successful synchronization of all users of an external authentication server	KAOP90192-I
	Error synchronizing all users of an external authentication server	KAOP90193-E
	Successful check of the number of users obtained from an Active Directory or LDAP server	KAOP90196-I
	Error checking the number of users obtained from an Active Directory or LDAP server	KAOP90197-E
Product	Successful acquisition of session information of the product	KAOP90198-I
Product	Error obtaining session information of the product	KAOP90199-E
Session control	Successful acquisition of information about the session settings	KAOP90200-I
	Error obtaining information about the session settings	KAOP90201-E
	Successful update of information about the session settings	KAOP90202-I
	Error updating information about the session settings	KAOP90203-E