Novell SENTINEL LOG MANAGER 1.0.0.5 - 03-31-2010, Руководство администратора

Страница: 154 / 168

154 Sentinel Log Manager 1.0.0.4 Administration Guide
no
vd
ocx
(e
n)
19
Fe
bru
a
ry
20
10
ProductName pn Indicates the type, vendor and
product code name of the
sensor from which the event
was generated. Y Y Y
Protocol prot The protocol used between the
initiating and target services. Y
RepeatCount rc The number of times the same
event occurred if multiple
occurrences were
consolidated. Y
ReporterHostDomain repdom The domain portion of the
reporter's fully qualified
hostname. Y
ReporterHostName rn The unqualified hostname of
the reporter of the event
(ReporterName). Y
ReporterIP repip The IP address of the reporter,
i.e. the system that delivered
the event to this server. Y
Resource res The resource name.
RetentionPolicyConflic
t rv101 Set to 1 (true) if more than one
retention policy matched this
event but only one was chosen.
(Integer; Stored in DB) Y
SARBOX cv90 Set to 1 if the asset is governed
by Sarbanes-Oxley via an
asset map. (String)
SensorType st The single character
designator for the sensor type
(N, H, O, V, C, W, A, I).
SentinelServiceID src Unique identifier for the
Sentinel service which
generated this event.
Severity sev The normalized severity of the
event (0-5). Y Y
SubResource sres The sub-resource name. Y
TargetDataName fn The name of the data object
(file, database table, directory
object, etc) that was affected by
this event. Y
TargetFunction rv47 Target function. Y
Field Short Name Description Tokenized
Visible in
Basic
View Visible in
Detailed
View