Siemens RUGGEDCOM ROX II, User Manual

Page: 61 / 798

RUGGEDCOM ROX II
CLI User Guide
Chapter 1
Introduction
Syslog Event Types 15
Section 1.7.2
Syslog Event Types
Two types of syslog events are defined.
Event Type Description
Event Events are authorized activities that can be expected to occur during
routine use.
Alarm Alarms are activities that may indicate unauthorized activity.
Events of either type are stored locally on the device and transmitted automatically to the syslog server when they
occur.
Section 1.7.3
Logged Security Events
The following are security-related event messages that may be generated by RUGGEDCOM ROX II.
Category Event Message Facility Severity
Event
Type
Log
SE_LOCAL_SUCCESSFUL_LOGON audit user: {Username}/
{User ID} assigned to
groups: {User Group
Name}
LOG_AUTH Notice Event Auth.log
audit user:{Username}/0
no such local user
LOG_DAEMON Info Alarm Auth.log SE_LOCAL_UNSUCCESSFUL_LOGON (Invalid
Username)
login failed, reason='No
such local user',
user ipaddr='{User IP
Address}'
LOG_AUTHPRIV Notice Alarm Auth.log
audit user:
{Username}/0 Provided
Invalid Password
LOG_DAEMON Info Alarm Auth.log SE_LOCAL_UNSUCCESSFUL_LOGON (Invalid
Password)
login failed,
reason='Invalid
Password', user
ipaddr='{User IP
Address}'
LOG_AUTHPRIV Notice Alarm Auth.log
audit user: {Username}/
{User ID} assigned to
groups: {User Group
Name}
LOG_AUTH Notice Event Auth.log SE_NETWORK_SUCCESSFUL_LOGON
username:{Username}
usid:{User ID} started
{Context} session from
ip:{IP Address} source-
port:{Port} through
{Protocol} protocol
LOG_AUTH Notice Event auth.log
SE_NETWORK_SUCCESSFUL_LOGON (Netconf) netconf id={Netconf ID}
new ssh session for user
"{Username}" from {IP
Address}
LOG_DAEMON Info Event Auth.log