Format of audit log files when audit log files are transferred to the syslog server

Audit Log User Guide for VSP E Series

Version
93-06-8x
Audience
anonymous
Part Number
MK-97HM85024-17

If an audit log file is to be transferred to the syslog server, syslog header information is included in the audit log file.

The following figure shows the format of audit log files when audit log files are transferred to the syslog server.



Part

Description

syslog.PRI

The same priority is set for syslog.PRI and for the audit log header.

syslog.HEADER

The syslog.HEADER includes the date and time when the syslog data was sent.

syslog.MSG

Audit log header*

See Audit log header format (RFC3164-compliant) or Audit log header format (RFC5424-compliant) . The audit log header includes the date and time when the audit event occurred.

Audit log information

See Audit log information format (Basic information) and Audit log information format (Detailed information) .

*

If the format of the audit log header is RFC3164-compliant, syslog.PRI, syslog.HEADER, and syslog.MSG will be sent in an RFC3164-compliant format.

If the format of the audit log header is RFC5424-compliant, syslog.PRI, syslog.HEADER, and syslog.MSG will be sent in an RFC5424-compliant format.

The following figure shows an example of data when an audit log file is transferred the syslog server.