Help banner

Component Strings

The first part of all events logged to Novell® Audit is the component string. The intent of the component string is to facilitate queries across various products and events. For example, using wildcard characters, you can search for all iChain® violations (\ichain\*\violations), all iChain events (\ichain\*), or violations from every logging application (*\violations).

Each logging application has its own set of components. The following sections list the components strings for Novell eDirectory™, NetWare®, and "audit the auditor" events. For information on other component strings, refer to the logging application's product documentation.

 

eDirectory Component Strings

The components for the eDirectory Instrumentation are as follows:

Object

Attribute

Debug

Misc

Agent

Connection

Bindery

Schema

Partition

Replica

Meta

 

For more information on the eDirectory Instrumentation, see "eDirectory Events" in the Novell Audit Administration Guide .

These components are combined with the eDirectory Application Identifier (eDirInst) to form the component strings for all eDirectory events. For example,

eDirInst\Object

eDireInst\Replica

 

NetWare Component Strings

The components for the NetWare Instrumentation are as follows:

File

Directory

Trustee

Volume

Module

Network

Connection

Alert

Server

 

These components are combined with the NetWare Application Identifier (NetWareInst) to form the component strings for all NetWare events. For example,

NetWareInst\File

NetWareInst\Network

 

Audit the Auditor Component Strings

The components for NAudit Instrumentation are as follows:

Generic

License

Authentication

Log

Channel

Configuration

Heartbeat

Engine

These components are combined with the Novell Audit Application Identifier (NsureAuditInst) to form the component strings for all Novell Audit events. For example,

NsureAuditInst\Channel

NsureAuditInst\Log

 

Related Topics

Event Structure

Event Variables

Novell Audit Help

A trademark symbol (®, ™, etc.) denotes a Novell trademark. An asterisk (*) denotes a third-party trademark. For information on trademarks, see Legal Notices.

Close