B.4 Novell Audit Events

The NAudit Instrumentation logs an event every time the Secure Logging Server loads a Channel, Notification, or Application object. It also logs an event each time a Channel driver fails to load or if there is a bad Heartbeat or Notification configuration. Therefore, by reviewing your system’s Audit the Auditor events, you can determine if your logging server is performing the way you expect.

This section reviews the Novell Audit events that the Novell Audit Instrumentation can log:

Table B-4 Novell Audit Events

EventID

Property Label

Description

10001

Heartbeat Generated

A Heartbeat event was generated.

10002

License Warning

This event was used in past versions of Nsure™ Audit. It is no longer implemented.

10003

Application Container Used

 

10004

Application Allowed

A product instrumentation successfully authenticated with the Secure Logging Server.

10005

Application Failed

A product instrumentation failed to authenticate with the Secure Logging Server. The Secure Logging Server does not log events from any application that fails to authenticate with the server.

10006

Channel Loaded

The designated channel driver successfully loaded on the Secure Logging Server.

10007

Driver Failed

The designated channel driver failed to load on the Secure Logging Server. Therefore, the designated channel is not currently available.

10008

Default Log Channel

Designates the default log channel. This channel functions as the central data store; all system events are logged to this channel.

10009

Log Channel Failed

The designated Channel object failed to load on the Secure Logging Server, so the designated Channel is not currently available.

10010

Notification Loaded

The designated Notification object was successfully loaded on the Secure Logging Server.

10011

Bad Notification

An incorrectly configured notification rule was detected on the designated Notification object.

10012

Heartbeat Loaded

The designated Heartbeat Notification object was successfully loaded on the Secure Logging Server.

10013

Bad Heartbeat

An incorrectly configured heartbeat rule was detected on the designated Heartbeat Notification object.

0001000A

Out of Memory

The central data store is out of space, so the Novell Audit system has shut down.

0001000B

Server Unload Attempt

An attempt was made to unload the Secure Logging Server.

0001000C

Server Unloaded

The Secure Logging Server was successfully unloaded, so the Novell Audit system is not currently functioning.

0001000E

Channel Container Used

 

0001000F

Notification Container Used