Audit message format

Audit messages exchanged within the StorageGRID Webscale system include standard information common to all messages and specific content describing the event or activity being reported.

The following is an example audit message as it might appear in the audit.log file:

2014-07-17T03:50:47.484627
[AUDT:[RSLT(FC32):VRGN][AVER(UI32):10][ATIM(UI64):1405569047484627][ATYP(FC32):SYSU][ANID(UI32):11627225][AMID(FC32):ARNI][ATID(UI64):9445736326500603516][ASQN(UI64):0][ASES(UI64):1405569047484791]]

Each audit message contains a string of attribute elements. The entire string is enclosed in brackets ([ ]), and each attribute element in the string has the following characteristics:

Each element includes an attribute code, a data type, and a value that are reported in this format:

[ATTR(type):value][ATTR(type):value]...
[ATTR(type):value]\n

The number of attribute elements in the message depends on the event type of the message. The attribute elements are not listed in any particular order.

The following list describes the attribute elements: