Log File Format

The logging service provides three categories of log records: application, system, and security. Log records may be informational, or may record data derived from errors or warnings. A standard set of fields are defined for the data that can be presented in logs. Logs do not necessarily use all the fields, however. For example, an informational log may provide a brief message describing an event. An error log may provide a more detailed message.

Some log data fields are required to identify data in the CIM Repository. These fields are properties flagged with a read-only key qualifier in the Solaris_LogRecord class. You cannot set the values of these fields. You can, however, set the values of any of the following fields in your log files:

• Category - Type of log record

• Severity - Severity of conditions that caused data to be written to a log file

• AppName - Name of the application from which the data was obtained

• UserName - Name of the individual who was using the application when log data was generated

• ClientMachineName - Name of the computer on which an incident occurred that generated log data

• ServerMachineName - Name of the server on which an incident occurred that generated log data

• SummaryMessage - Brief message describing the occurrence

• DetailedMessage - Detailed message describing the occurrence

• Data - Context information that applications and providers can present to interpret a log message