HP 3000 Manuals

Logging Formats [ Manager's Guide to MPE/iX Security ] MPE/iX 5.0 Documentation


Manager's Guide to MPE/iX Security

Logging Formats 

MPE/iX writes log records to records in a log file.  The log records can
be accessed and displayed by using the system log analysis utility
(LOGTOOL) or through a user-supplied analysis program.

There are two types of log files used to record system information.
There is the original 100 series format and a newer 200 series format
which has been adopted to acommodate POSIX specifications.  Following is
a description of the formats used by each format:

Format 1## system log record header 

Table 7-3  illustrates the system log record header.

          Table 7-3.  System Log Record Header 

---------------------------------------------------------------------------------------------
|                                             |                                             |
|                   Length,                   |                Field Content                |
|                  in 16-bit                  |                                             |
|                    Words                    |                                             |
|                                             |                                             |
---------------------------------------------------------------------------------------------
|                                             |                                             |
| 1                                           | Record type                                 |
|                                             |                                             |
---------------------------------------------------------------------------------------------
|                                             |                                             |
| 1                                           | Record length                               |
|                                             |                                             |
---------------------------------------------------------------------------------------------
|                                             |                                             |
| 1                                           | PIN                                         |
|                                             |                                             |
---------------------------------------------------------------------------------------------
|                                             |                                             |
| 1                                           | Time stamp date                             |
|                                             |                                             |
---------------------------------------------------------------------------------------------
|                                             |                                             |
| 2                                           | Time stamp time                             |
|                                             |                                             |
---------------------------------------------------------------------------------------------
|                                             |                                             |
| 2                                           | Job type/Job number                         |
|                                             |                                             |
---------------------------------------------------------------------------------------------

Format 1## system log audit trailer 

Table 7-4  illustrates the system log audit trailer.

          Table 7-4.  System Log Audit Trailer 

---------------------------------------------------------------------------------------------
|                                             |                                             |
|                   Length,                   |                Field Content                |
|                  in 16-bit                  |                                             |
|                    Words                    |                                             |
|                                             |                                             |
---------------------------------------------------------------------------------------------
|                                             |                                             |
| 8                                           | User name                                   |
|                                             |                                             |
---------------------------------------------------------------------------------------------
|                                             |                                             |
| 8                                           | Logon group                                 |
|                                             |                                             |
---------------------------------------------------------------------------------------------
|                                             |                                             |
| 8                                           | Account name                                |
|                                             |                                             |
---------------------------------------------------------------------------------------------
|                                             |                                             |
| 8                                           | Job/Session name                            |
|                                             |                                             |
---------------------------------------------------------------------------------------------

The system log audit trailer is currently appended to the following
events:

   *   job termination

   *   process termination

   *   physical mount/dismount

   *   tape labels record

   *   console log

   *   program file event

   *   new commercial spooling

   *   password changes

   *   system logging configuration

   *   RESTORE logging

   *   printer access failure

   *   ACD changes

   *   stream initiation

   *   user logging

   *   process creation

   *   CHGROUP logging

   *   FOPEN logging

Format 2## system log record header 

Format 2## log records have the information normally contained within the
audit trailer incorporated into the main event record.

          Table 7-5.  Format 2## System Log Record Content 

---------------------------------------------------------------------------------------------
|                                             |                                             |
|                   Length,                   |                Field Content                |
|                  in 16-bit                  |                                             |
|                    Words                    |                                             |
|                                             |                                             |
---------------------------------------------------------------------------------------------
|                                             |                                             |
| 1                                           | Record type                                 |
|                                             |                                             |
---------------------------------------------------------------------------------------------
|                                             |                                             |
| 1                                           | Event version                               |
|                                             |                                             |
---------------------------------------------------------------------------------------------
|                                             |                                             |
| 1                                           | Record length                               |
|                                             |                                             |
---------------------------------------------------------------------------------------------
|                                             |                                             |
| 1                                           | PIN                                         |
|                                             |                                             |
---------------------------------------------------------------------------------------------
|                                             |                                             |
| 2                                           | Job type/Job number                         |
|                                             |                                             |
---------------------------------------------------------------------------------------------
|                                             |                                             |
| 2                                           | Time stamp time                             |
|                                             |                                             |
---------------------------------------------------------------------------------------------
|                                             |                                             |
| 1                                           | Time stamp date                             |
|                                             |                                             |
---------------------------------------------------------------------------------------------
|                                             |                                             |
| 1                                           | Login type (If 1, logon name is in the      |
|                                             | format 16-byte user 16-byte acct)           |
|                                             |                                             |
---------------------------------------------------------------------------------------------
|                                             |                                             |
| 18                                          | Logon name                                  |
|                                             |                                             |
---------------------------------------------------------------------------------------------

The default configuration is determined at SYSGEN. Records that are not
initially used to log information are OFF; records that are enabled by
default are ON. Typically, the system manager sets up and maintains the
system logging configuration (this determines which records will be
logged).  The logging configuration can be altered using the SYSGEN
utility. 

Log Record Types 

Here are the various log record types:

          Table 7-6.  Log Record Types 

----------------------------------------------------------------------------------------------
|               |                                                           |                |
|   Log Type    |                    Record Description                     |     State      |
|               |                                                           |                |
----------------------------------------------------------------------------------------------
|               |                                                           |                |
|      100      | System Logging                                            |       ON       |
|               |                                                           |                |
|      101      | System Up                                                 |       ON       |
|               |                                                           |                |
|      102      | Job Initiation                                            |      OFF       |
|               |                                                           |                |
|      103      | Job Termination                                           |      OFF       |
|               |                                                           |                |
|      104      | Process Termination                                       |      OFF       |
|               |                                                           |                |
|      105      | NM File Close                                             |      OFF       |
|               |                                                           |                |
|      106      | System Shutdown                                           |       ON       |
|               |                                                           |                |
|      107      | Power Failure                                             |       ON       |
|               |                                                           |                |
|      111      | I/O Error                                                 |       ON       |
|               |                                                           |                |
|      112      | Physical Mount/Dismount                                   |      OFF       |
|               |                                                           |                |
|      113      | Logical Mount/Dismount                                    |      OFF       |
|               |                                                           |                |
|      114      | Tape Label                                                |      OFF       |
|               |                                                           |                |
|      115      | Console Log                                               |       ON       |
|               |                                                           |                |
|      116      | Program File Event                                        |       ON       |
|               |                                                           |                |
|      120      | Native Mode Spooling                                      |       ON       |
|               |                                                           |                |
|      127      | Chdir                                                     |      OFF       |
|               |                                                           |                |
|      128      | Process Adoption                                          |      OFF       |
|               |                                                           |                |
|      129      | File Owner Change                                         |      OFF       |
|               |                                                           |                |
|      130      | Architected Interface                                     |      OFF       |
|               |                                                           |                |
|      131      | Additional Processor Launch                               |      OFF       |
|               |                                                           |                |
|      134      | Password Change                                           |      OFF       |
|               |                                                           |                |
|      135      | System Logging Configuration                              |       ON       |
|               |                                                           |                |

|      136      | Restore                                                   |      OFF       |
|               |                                                           |                |
|      137      | Printer Access Failure                                    |      OFF       |
|               |                                                           |                |
|      138      | ACD Change                                                |      OFF       |
|               |                                                           |                |
|      139      | Stream Initiation                                         |      OFF       |
|               |                                                           |                |
|      140      | User Logging                                              |      OFF       |
|               |                                                           |                |
|      141      | Process Creation                                          |      OFF       |
|               |                                                           |                |
|      142      | Security Configuration Changes                            |      OFF       |
|               |                                                           |                |
|      143      | Chgroup                                                   |      OFF       |
|               |                                                           |                |
|      144      | File open                                                 |      OFF       |
|               |                                                           |                |
|      145      | CI Command Logging                                        |      OFF       |
|               |                                                           |                |
|      146      | Maintenance Request                                       |      OFF       |
|               |                                                           |                |
|      148      | UPS Monitor Event Logging                                 |      OFF       |
|               |                                                           |                |
|      150      | Diagnostic Information                                    |       ON       |
|               |                                                           |                |
|      151      | High Priority Machine Check                               |       ON       |
|               |                                                           |                |
|      152      | Low-priority Machine Check                                |       ON       |
|               |                                                           |                |
|      155      | Directory Open/Close Logging                              |      OFF       |
|               |                                                           |                |
|      160      | CM File Close                                             |      OFF       |
|               |                                                           |                |
----------------------------------------------------------------------------------------------



MPE/iX 5.0 Documentation