If an audit log file is to be transferred to the syslog server, syslog header information is included in the audit log file.
The following figure shows the format of audit log files when audit log files are transferred to the syslog server.
Part |
Description |
|
---|---|---|
syslog.PRI |
The same priority is set for syslog.PRI and for the audit log header. |
|
syslog.HEADER |
The syslog.HEADER includes the date and time when the syslog data was sent. |
|
syslog.MSG |
Audit log header* |
See Audit log header format (RFC3164-compliant) or Audit log header format (RFC5424-compliant) . The audit log header includes the date and time when the audit event occurred. |
Audit log information |
See Audit log information format (Basic information) and Audit log information format (Detailed information) . |
|
|