Event-specific data

The audit log records data that is specific to a system event in each audit message.

Following the opening [AUDT: container that identifies the message itself, the next set of attributes are items related to the event or action described by the audit message. These attributes are highlighted in the following example:

2014-06-20T00:14:20.424035 [AUDT:[HSID(UI64):1027401556]
[OBNS(CSTR):"UUID"][OBPA(CSTR):"/"][OBNA(CSTR):"DDE2
5220-7049-403D-8B71-B9D884A00864"][CBID(UI64):0x210C9
CFC55EACDC6][UUID(CSTR):"DDE25220-7049-403D-8B71-
B9D884A00864"][RSLT(FC32):SUCS][AVER(UI32):9][ATIM(UI64):
1213920860424035][ATYP(FC32):HHEA][ANID(UI32):12885257][AMID
(FC32):HTGM][ATID(UI64):9771581922913861059][ASQN(UI64):7374
859][ASES(UI64):1213662052895969]]

The event that these attributes describe is identified using the common ATYP element.