Audited events
User actions and system responses to these actions create audit records or events in the audit log file. These audit events are logically grouped into audit record types.
Use this table to identify the audit record type that is logged when an event occurs:
| Audited Event | Audit Record Type |
|---|---|
| User successfully authenticated | authentication |
| User authentication failed | authentication |
| Authorization successful | authorization |
| Authorization failure | authorization |
| Command-line processing started | runtime |
| exit command received | runtime |
| Unknown command entered | runtime |
| Message received from drive | runtime |
| Error processing message from drive | runtime |
| Error from message received from drive | runtime |
| Error updating drive table with information received from drive | runtime |
| Error retrieving information from drive table | runtime |
| Error retrieving information from keystore | runtime |
| Error processing certificate from keystore | runtime |
| Error finding private key from keystore | runtime |
| Error computing cryptographic values | runtime |
| Message exchange processed successfully | runtime |
| Message processing started | runtime |
| Command-line processing started | runtime |
| Problem found using cryptographic services | runtime |
| New drive discovered | runtime |
| Error configuring drive to drive table | runtime |
| Successfully started processing messages from drive | runtime |
| Key serving to the drive successful | runtime |
| Drive removed from drive table | resource_management |
| Error removing drive from drive table | resource_management |
| Drive table import successful | resource_management |
| Error importing drive table | resource_management |
| Drive table export successful | resource_management |
| Error exporting drive table | resource_management |
| Drive add to drive table successful | resource_management |
| Error adding drive to drive table | resource_management |
| Drive table modify successful | resource_management |
| Error modifying drive table | resource_management |
| Successful keystore open | resource_management |
| Error opening keystore | resource_management |
| Configuration property changed | configuration_management |
| Error changing configuration property | configuration_management |
| Configuration property deleted | configuration_management |
| Error deleting configuration property | configuration_management |
| Configuration import successful | configuration_management |
| Error importing configuration | configuration_management |
| Configuration export successful | configuration_management |
| Error exporting configuration | configuration_management |
| REST service user logoff due to inactivity | authentication |
| REST user attempting to access REST service without authentication ID | authentication |
| Unauthenticated or logged out REST user attempting to access REST service | authentication |
| REST service user initiated logout | authentication |
| REST service user successfully authenticated | authentication |
| REST service user authentication failed | authentication |
| Date | Change description |
| 31 Aug 2021 | Added an entry for the key serving audited event. |
| 08 Dec 2020 | Initial version. |