Management Command Format

If the object category ID is management command (SmLogObjCat_ManagementCommand), the format is:
casso10
If the object category ID is management command (SmLogObjCat_ManagementCommand), the format is:
ManagementCommand
HostName
TimeString
"-
Username
"
Event
'
Description
'
Elements in the above format example are described as follows:
  • HostName
    is the name of the host.
  • TimeString
    is the timestamp of the occurrence of the event, in the format: [
    date
    /
    month
    /
    year
    :
    hour
    :
    minute
    :
    second
    difference_from_GMT
    ]. For example:
    [27/Jun/2000:11:27:29 -0500]
  • UserName
    is the name of the user who generated the event.
  • Event
    is the name of the management command event—namely:
    FlushAll             ChangeDynamicKeys
    FlushUser            ChangePersistentKey
    FlushAllUsers        ChangeDisabledUserState
    FlushAllRealms       ChangeUserPassword
  • Description
    is the user DN for management commands that involve a user, such as flush user command, a change disabled user state, and a change password.
Here is an example of a management command event format that was logged when administrator JLewis flushed the user cache for BRoy:
ManagementCommand MyHost [20/Jul/2001:13:26:23 -0500] 
"- JLewis" FlushUser 'uid=BRoy,ou=HR,o=security.com'