action=actioncommand type=typeuser=user]Note that the message value only appears if information for it is available.Audited EventsTable 7-2 describes the events that cause audit records to be created. The table liststhe audit record type that is logged when this event occurs.Table 7-2. Audit record types by audited eventAudited Event Audit Record TypeUser successfully authenticated authenticationUser authentication failed authenticationData successfully sent to other EKM data_synchronizationError sending data to other EKM data_synchronizationsync command processed data_synchronizationError processing sync command data_synchronizationCommand line processing started runtimeexit command received runtimeUnknown command entered runtimeMessage received from drive runtimeError processing message from drive runtimeError from message received from drive runtimeError updating drive table with informationreceived from driveruntimeError retrieving information from drive table runtimeError retrieving information from keystore runtimeError processing certificate from keystore runtimeError finding private key from keystore runtimeError computing cryptographic values runtimeMessage exchange processed successfully runtimeMessage processing started runtimeCommand line processing started runtimeProblem found using cryptographic services runtimeNew drive discovered runtimeError configuring drive to drive table runtimeSuccessfully started processing messagesfrom driveruntimeReceived and processed stopekm command runtimeDrive removed from drive table resource_managementError removing drive from drive table resource_managementDrive table import successful resource_managementError importing drive table resource_managementChapter 7. Audit Records 7-7
