|
#^NetWare Instrumentation^000A^NetWareInst^EN |
||||||||||||
|
# Variables: |
||||||||||||
|
# |
||||||||||||
|
# Syntax: $FV |
||||||||||||
|
# |
||||||||||||
|
# Format (F): |
||||||||||||
|
# T - Time (UTC localized) |
||||||||||||
|
# D - Date (UTC localized) |
||||||||||||
|
# N - Number (32bit unsigned) |
||||||||||||
|
# S - String |
||||||||||||
|
# X - Hexadecimal Number |
||||||||||||
|
# R - RFC822 format date/time |
||||||||||||
|
# I - IPv4 Internet Address (network order) |
||||||||||||
|
# i - IPv4 Internet Address (host order) |
||||||||||||
|
# B - Boolean (Yes/No) |
||||||||||||
|
# b - Boolean (True/False) |
||||||||||||
|
# |
||||||||||||
|
# Value (V): |
||||||||||||
|
# R - Source IP Address |
||||||||||||
|
# C - Platform Agent Date |
||||||||||||
|
# A - Audit Service Date |
||||||||||||
|
# 1 - Numerical value 1 |
||||||||||||
|
# 2 - Numerical value 2 |
||||||||||||
|
# S - Text 1 |
||||||||||||
|
# T - Text 2 |
||||||||||||
|
# O - Component |
||||||||||||
|
# G - Group ID |
||||||||||||
|
# I - Event ID |
||||||||||||
|
# L - Log Level |
||||||||||||
|
# M - MIME Hint |
||||||||||||
|
# X - Data Size |
||||||||||||
|
# D - Data |
||||||||||||
|
# |
||||||||||||
|
#EventID |
Description |
Text1 Title |
Text2 Title |
Value1 Title |
Value1 Type |
Value2 Title |
Value2 Type |
Group Title |
Group Type |
Data Title |
Data Type |
Display Schema |
|
000A |
NetWare |
Novell NetWare OS and Filesystem Events |
|
|
|
|
|
|
|
|
|
|
|
000A0001 |
File Delete |
User |
File |
|
|
Result |
|
|
|
|
|
[$rC] [$SO]: User
$SS deleted file $ST Result $N2\r\n |
|
000A0002 |
File Open |
User |
File |
Rights |
|
Result |
|
Handle |
|
|
|
[$rC] [$SO]: User
$SS opened file $ST with rights $X1 Result $N2\r\n |
|
000A0003 |
File Create |
User |
File |
|
|
Result |
|
|
|
|
|
[$rC] [$SO]: User
$SS created file $ST Result $N2\r\n |
|
000A0004 |
File Create & Open |
User |
File |
Rights |
|
Result |
|
Handle |
|
|
|
[$rC] [$SO]: User
$SS created and opened file $ST with rights $X1 Result $N2\r\n |
|
000A0005 |
File Rename |
User |
Old File |
|
|
Result |
|
Handle |
|
New-Path |
|
[$rC] [$SO]: User
$SS rename file $ST to $SD Result $N2\r\n |
|
000A0006 |
File Close |
User |
|
|
|
Result |
|
Handle |
|
|
|
[$rC] [$SO]: User
$SS closed file (Group:$XG) Result $N2\r\n |
|
000A0007 |
Directory Create |
User |
Directory |
|
|
Result |
|
|
|
|
|
[$rC] [$SO]: User
$SS created directory $ST Result $N2\r\n |
|
000A0008 |
Directory Remove |
User |
Directory |
|
|
Result |
|
|
|
|
|
[$rC] [$SO]: User
$SS removed directory $ST Result $N2\r\n |
|
000A0009 |
Directory Modified |
User |
Directory |
|
|
Result |
|
|
|
|
|
[$rC] [$SO]: User
$SS modified directory $ST Result $N2\r\n |
|
000A000A |
File Salvaged |
User |
File |
|
|
Result |
|
|
|
|
|
[$rC] [$SO]: User
$SS salvaged file $ST Result $N2\r\n |
|
000A000B |
File Purged |
User |
File |
|
|
Result |
|
|
|
|
|
[$rC] [$SO]: User
$SS permanently purged file $ST Result $N2\r\n |
|
000A000C |
Namespace Entry Changed |
User |
File |
Attribute Mask |
|
Result |
|
|
|
New-Name |
|
[$rC] [$SO]: User
$SS changed namespace name for file $ST to $SD Result $N2\r\n |
|
000A000D |
Namespace Modified |
User |
File |
Modification Mask |
|
Result |
|
|
|
|
|
[$rC] [$SO]: User
$SS modified the namespace entry for file $ST Modification mask:$X1 data:$SD
Result $N2\r\n |
|
000A000E |
DOS Info Modified |
User |
File |
Modification Mask |
|
Result |
|
|
|
|
|
[$rC] [$SO]: User
$SS modified the DOS information for file $ST Modification mask:$X1
Result:$N2\r\n |
|
000A000F |
Trustee Added |
User |
File |
Client IP |
i |
Rights |
|
|
|
|
|
[$rC] [$SO]: User
$SS at $i1 added trustee $SD for file $ST rights granted:$X2\r\n |
|
000A0010 |
Trustee Removed |
User |
File |
Client IP |
i |
|
|
|
|
|
|
[$rC] [$SO]: User
$SS at $i1 removed trustee $SD from
file $ST\r\n |
|
000A0011 |
Trustee Modified |
User |
File |
Client IP |
i |
Rights |
|
|
|
|
|
[$rC] [$SO]: User
$SS at $i1 modified the trustee information for file $ST new rights:$X2\r\n |
|
000A0101 |
Volume Mounted |
Volume |
|
|
|
|
|
|
|
|
|
[$rC] [$SO]:
Volume $ST has been mounted\r\n |
|
000A0102 |
Volume Dismounted |
Volume |
|
|
|
|
|
|
|
|
|
[$rC] [$SO]:
Volume $ST has been dismounted\r\n |
|
000A0103 |
Server Down |
Server |
|
|
|
|
|
|
|
|
|
[$rC] [$SO]:
Server $SS has been shut down\r\n |
|
000A0104 |
Module Loaded |
Host |
Module Name |
|
|
|
|
|
|
|
|
[$rC] [$SO]:
Module $ST loaded on server $SS\r\n |
|
000A0105 |
Module Unloaded |
Host |
Module Name |
|
|
|
|
|
|
|
|
[$rC] [$SO]:
Module $ST unloaded on server $SS\r\n |
|
000A0106 |
Connection Cleared |
Host |
User |
Client IP |
i |
|
|
|
|
|
|
[$rC] [$SO]:
Connection for user $ST ($i1) on server $SS cleared\r\n |
|
000A0107 |
Login |
Host |
User |
Client IP |
i |
|
|
|
|
|
|
[$rC] [$SO]: User
$ST ($i1) logged in on server $SS\r\n |
|
000A0108 |
Protocol Bind |
Host |
|
Board |
|
Protocol |
|
|
|
|
|
[$rC] [$SO]:
Server $SS protocol $N1 bound to board $N2\r\n |
|
000A0109 |
Protocol Unbind |
Host |
|
Board |
|
Protocol |
|
|
|
|
|
[$rC] [$SO]: Server
$SS protocol $N1 unbound from board $N2\r\n |
|
000A010A |
NetWare Alert |
Message |
Module |
Class |
|
ID |
|
|
|
|
|
[$rC] [$SO]:
NetWare Alert $SS generated by module $ST Class:$N1 ID:$N2\r\n |