Log file specifications
The elements used in the auditing log files are extensions to the
Common Base Event (CBE) schema. The types and elements listed below
are available in the auditing log files. Supported action types for
each element are listed in Table 1.
- Action
- Represents the action that is being taken. Each auditable event
supports a different set of possible actions. See Table 1. The Action type contains
the following element:
Table 1. Elements in Action type Element name Element description Always returned in the output Action The action type that is being taken on thedynamic workload broker object. Yes - ObjectInfoList
- Represents a list of dynamic workload broker objects.
The ObjectInfoList type contains the following element:
Table 2. Elements in ObjectInfoList type Element name Element description Always returned in the output objectInfo The class of the object being involved in the action Yes - ObjectInfo
- Represents information about a dynamic workload broker object
in an objectInfoList type or in another objectInfo element.
The ObjectInfo type contains the following elements:
Table 3. Elements in ObjectInfo type Element name Element description Always returned in the output objectClass The class of the object being involved in the action. Yes objectName The name of the dynamic workload broker object. Only if available objectNamespace The namespace of the dynamic workload broker object. Only if available objectType The type of the dynamic workload broker object. Only if available objectAlias The alias of the dynamic workload broker object. Only if available objectIdentifier The unique identifier of the dynamic workload broker object. Only if available objectRole The role of the dynamic workload broker object, if any. For instance a Resource can have the source or destination role in a relationship Only if available objectSubmitterType The type of the component which submitted the operation. The component is one of the following: - Dynamic Workload Broker Console
- Command line
- Dynamic workload broker workstation
- Third party utility
Only if available objectInfo A child objectInfo object. For instance, a relationship is always related to two resources. Only if available - Outcome
- Defines the outcome of a security event. The Outcome type contains
the following elements:
Table 4. Elements in Outcome type Element name Element description Always returned in the output result The status of the event. This information can be used when filtering the information in the log file. Yes failureReason Additional information on the outcome of the operation. Yes, if the operation was unsuccessful. - UserInfoList
- Represents a list of userInfo elements, each
representing the list of users in the delegation chain. The UserInfoList type
contains the following element:
Table 5. Elements in UserInfoList type Element name Element description Always returned in the output objectInfo An array of Information about each user in the delegation chain. The first userInfo element identifies the user which authenticated first. The last userInfo element identifies the user with whose credentials the action is being taken. Yes - UserInfo
- Represents information about a user. Elements of this type return
information about the user involved in the operation being audited.
The UserInfo type contains the following element:
Table 6. Elements in UserInfo type Element name Element description Always returned in the output UserInfo The username provided to dynamic workload broker for authentication. Yes