Audit Log Messages



Version 5.2.1-5020115686


Identifier

Message

Code

Description

audit_drop

lost %[drops]d %[msgs]s

10001

Unable to deliver audit log(s) to nvlogd, so audit logs dropped

user_command

Command \"%[cmd]s\" result %[result]R

11001

Administrator has run a command

user_command

Command \"%[cmd]s\" result %[result]R

11001

Administrator has run a command

command_err

Command \"%[cmd]s\" failed: %[err]m

11098

command failed in such a way that results can't be transmitted back to the client

login

login

11099

user logged in

logout

logout

11100

user logged out

xact_command

Transaction command \"%[cmd]s\" result %[result]R

11101

Command run as a result of a transaction on a different node

internal_command

Internal command \"%[cmd]s\" result %[result]R

11102

Command run by nvOSd

login_failed

login failed: %[err]s

11103

user unable to login

tacacs_sess_deny

%[tacacs_msg]s

11410

TACACS+ server denied session

tacacs_sess_ok

%[tacacs_msg]s

11411

TACACS+ server authorized session

tacacs_cli_cmd_deny

cmd=%[cmd]s %[tacacs_msg]s

11412

TACACS+ server denied command

tacacs_cli_cmd_deny

cmd=%[cmd]s %[tacacs_msg]s

11412

TACACS+ server denied command

tacacs_cli_cmd_ok

cmd=%[cmd]s %[tacacs_msg]s

11413

TACACS+ server allowed command

tacacs_cli_cmd_ok

cmd=%[cmd]s %[tacacs_msg]s

11413

TACACS+ server allowed command

audit_repeats

Last %[msgs]d message(s) repeated %[times]d time(s)

20004

compress repeated message

mon_command_start

starting command \"%[cmd]s\"

30002

Monitor starting command

mon_command_finished

finished command \"%[cmd]s\" result %[result]R

30003

Command run by nvOS_mon

shell_command

Command \"%[cmd]s\" status %[status]s

33000

shell command

vtysh_command

Command \"%[cmd]s\" result=%[result]d

33001

vtysh command

tacacs_shell_cmd_deny

cmd=%[cmd]s %[tacacs_msg]s

33002

TACACS+ server denied shell command

tacacs_shell_cmd_ok

cmd=%[cmd]s %[tacacs_msg]s

33003

TACACS+ server authorized shell command

tacacs_vtysh_cmd_deny

cmd=%[cmd]s %[tacacs_msg]s

33004

TACACS+ server denied vtysh command

tacacs_vtysh_cmd_ok

cmd=%[cmd]s %[tacacs_msg]s

33005

TACACS+ server authorized vtysh command

it_happened

wow, it happened!

90000

something happened