Depending on the information on a Web page, the text formats for log entries of Web activity are:
module-name[pid]: web ip uid uname profile R page-name
module-name[pid]: web ip uid uname profile R page-name | button | button-name
module-name[pid]: web ip uid uname profile R page-name | variable-name | value
Web activity command history log format
|
Name
|
Description
|
|
module-name
|
The name of the software module that created the entry in the log
|
|
pid
|
The Linux process ID that created the entry in the log
|
|
web
|
The text string web to indicate a web log entry.
|
|
ip
|
The IP address of the user accessing the server
|
|
uid
|
The ID number of the user establishing the Web session
|
|
uname
|
The login name for the user establishing the Web session.
|
|
profile
|
The access profile number assigned to the user
|
|
R
|
The status of the action:
-
s: the action was a success
-
f: the action was a failure other than for a security reason. The letter f could be followed by a colon and an ASCII error code.
-
v: the action was a failure due to a security violation.
|
|
page-name
|
The name of the page that the user accessed
|
|
button
|
The text string button to indicate that the next value is the button-name.
|
|
button-name
|
The button label as shown on the form
|
|
variable-name
|
The name of the text box, button, or check box on the form
|
|
value
|
The value of the variable name after the change. In instances where the variable name is the name of a check box, the value is checked or unchecked.
|
