Management Command Format
If the object category ID is management command (SmLogObjCat_ManagementCommand), the format is:
sm1252sp1
If the object category ID is management command (SmLogObjCat_ManagementCommand), the format is:
ManagementCommandHostNameTimeString"-Username"Event'Description'
Elements in the above format example are described as follows:
- HostNameis the name of the host.
- TimeStringis the timestamp of the occurrence of the event, in the format: [date/month/year:hour:minute:seconddifference_from_GMT]. For example:[27/Jun/2000:11:27:29 -0500]
- UserNameis the name of the user who generated the event.
- Eventis the name of the management command event—namely:FlushAll ChangeDynamicKeysFlushUser ChangePersistentKeyFlushAllUsers ChangeDisabledUserStateFlushAllRealms ChangeUserPassword
- Descriptionis the user DN for management commands that involve a user, such as flush user command, a change disabled user state, and a change password.
Here is an example of a management command event format that was logged when administrator JLewis flushed the user cache for BRoy:
ManagementCommand MyHost [20/Jul/2001:13:26:23 -0500]"- JLewis" FlushUser 'uid=BRoy,ou=HR,o=security.com'