HP Synergy audit log format - ci-audit-log

[droodle]

un  3 18:38:04 host ci-audit-log 2019-06-03 18:37:55.673 UTC,logs,,mmacct.root.mds,it547adm,,,,SUCCESS,ADD,INFO,SECURITY,,Audit log forwarding test message.#015
Jun  3 18:38:34 host ci-audit-log 2019-06-03 18:38:29.710 UTC,logs,,mmacct.root.mds,it547adm,,,,SUCCESS,ADD,INFO,SECURITY,,Audit log forwarding test message.#015
Jun  3 19:02:05 host ci-audit-log 2019-06-03 19:02:03.380 UTC,logs,,mmacct.root.mds,it547adm,,,,SUCCESS,ADD,INFO,SECURITY,,Audit log forwarding test message.#015
Jun  3 19:24:26 host ci-audit-log 2019-06-03 19:24:20.884 UTC,logs,,mmacct.root.mds,it547adm,,,,SUCCESS,ADD,INFO,SECURITY,,Audit log forwarding test message.#015

Is there a tech sheet which gives the comma delimited field names for the ci-audit-log anywhere ? 

[Anu_K]

Hi droodle,

I did not find any tech sheet on this.Could you try contacting HPE Synergy Support on this for more details?

[ChrisLynch]

Sorry to getting to this thread late, but here is the format of the file.  We are looking to correct this omission in our user documentation.

timestamp, componentId, orgId, domain, userId, loggingId, taskId, sourceIp, result, action, severity, object, objectDescription, message
2021-07-27 22:11:05.050 UTC,psrm,,Local,administrator,,/rest/tasks/a4890d08-e3be-4364-8a5c-731d14ab3226,,SUCCESS,ADD,INFO,SERVER,/rest/server-hardware/34343738-3036-584D-5133-353536323131,Add server hardware 172.18.33.128
2021-07-27 22:12:07.671 UTC,Authentication,,Local,Administrator,,,16.84.102.16,SUCCESS,LOGIN,INFO,AUTHENTICATION,,Authentication SUCCESS. User "Administrator" logged in successfully from client "16.84.102.16" and directory "LOCAL". [logID "NTA1MpplaKDg5MDI4"]
2021-07-27 22:12:07.715 UTC,Authentication,,Local,Administrator,,,16.84.102.16,SUCCESS,LOGOUT,INFO,AUTHENTICATION,,TERMINATING SESSION
2
2021-07-27 22:31:42.374 UTC,licmgr,,Local,Administrator,,,127.0.0.1,FAILURE,ADD,ERROR,SETTINGS,NO_LICENSE_CAPACITY,ASSIGN_LICENSE_FAILED
2021-07-27 22:32:00.506 UTC,cert,,,psrm,MjQwNzcxNzIwNTgx,,,SUCCESS,ADD,INFO,SETTINGS,,Add server certificate with alias name 172.18.31.40 requested

[JorgePizarro]

Hi,

Can you share a link with the documento describing the log format and content details?

I need to know the multiples descriptions for componentId, result, action, severity, object and objectDescription; 

I need to understand a log from previous activities.

Regards

Jorge 

[Sunitha_Mod]

@JorgePizarro, 

Hello Jorge, 

Thank you for writing to us! 

Since you have posted in an old topic and there is no response yet, I would recommend you to create a new topic using the create "New Discussion" button, so the experts can check and assist you further.