Digipass Plug-In for SBR Administrator Reference - Vasco

Digipass Plug-In for SBR Administrator Reference Audit Messages
16.2 Audit Message Fields
Table 68: Audit Messages Fields
Display Name Description
Area Area of code/functionality in which the audit event occurred. Eg. “Active Directory search”.
Operation Operation being attempted/processed when the audit event occurred.
Error Code Standard error code.
Error Message Fixed error message corresponding to ERROR_CODE.
Error Details Full dump of 'error stack'.
Source Location Location of source of audit message, typically IP address or host name.
Server Location When the server itself is not the source of the audit message, this is the location of the
server (IP/host name).
Client Location When the client itself is not the source of the audit message, this is the location of the client
(IP/host name).
Version Full version string. Eg. “2.5.2.0045”.
Data Source Type of data source. Eg. “File”, “Registry”.
Data Source Location Specific location of data source. Eg. for a File, the path/filename.
Configuration Details Breakdown of configuration settings.
Outcome Outcome of an attempt to do something. Eg. “Success”, “Failure”, “Challenge”.
Reason Generally a short phrase indicating a reason for a failure.
Characteristics Space-separated list of keywords indicating characteristics of interest. Eg. for a connection
attempt, keywords such as “SSL” , “TCP”, “IPv6” may be useful.
User ID UserID. Can be in various formats, unless it refers to a Digipass User Account UserID, when
it must be exact (SAM-Account-Name).
Domain Domain name (FQDN).
Credentials What kind of credential was offered for a connection/login attempt. Eg. “Password”, “None”.
Session ID Session identifier.
Serial No Digipass Serial No.
Application Digipass Application Name.
Request ID Any request identifier(s). Eg. a RADIUS packet ID.
Password Protocol The way in which a password is encoded. Eg. “PAP”, “CHAP”, “MS-CHAP1”, “MS-CHAP2”.
Input Details Breakdown of request parameters/attributes.
Action Intended action to take for a request received. Eg. “Ignore”, “Process”.
Output Details Breakdown of response parameters/attributes.
Policy ID Name of Policy used to handle a request.
Mobile No Mobile phone no. for sending a text message.
From Location from which something is moved. Eg. an Active Directory location.
To Location to which something is moved. Eg. an Active Directory location.
User Link Identification of user to which another user is linked.
Message This is used where something external (eg. the MDC) returns a message for auditing.
Expiration Date Value of an expiry date such as Grace Period.
Quota Value of a quota such as Backup Virtual Digipass Uses Remaining.
Local Authentication Whether Local Authentication was done or not.
Back-End
Authentication
If Back-End Authentication was done, the Back-End Protocol used, otherwise “None”.
© 2006 VASCO Data Security Inc. 175