Embedded Linux events - DMU801

Device events domain: EmbeddedLinux

Code prefix: el

backup.creation

• Message: The backup {instance} created
• Severity: Informational

• Custom data:

  • instance: Identifier of the backup instance
  • username: User who performed the action

backup.deletion

• Message: The backup {instance} deleted
• Severity: Informational

• Custom data:

  • instance: Identifier of the backup instance
  • username: User who performed the action

backup.download

• Message: The backup {instance} downloaded
• Severity: Informational

• Custom data:

  • instance: Identifier of the backup instance
  • username: User who performed the action

backup.restoration

• Message: The backup {instance} restored
• Severity: Informational

• Custom data:

  • instance: Identifier of the backup instance
  • features: List of the restored features
  • username: User who performed the action

backup.upload

• Message: The backup {instance} uploaded
• Severity: Informational

• Custom data:

  • instance: Identifier of the backup instance
  • username: User who performed the action

devicepairing.controllerPairing

• Message: Device paired to system controller "{controllerCertCn}"
• Severity: Informational

• Custom data:

  • username: User who performed the action
  • controllerIpAddress: IP address of the system controller
  • controllerCertCn: Common Name (CN) field from the system controller certificate

devicepairing.controllerUnpairing

• Message: Device unpaired from system controller "{controllerCertCn}"
• Severity: Informational

• Custom data:

  • controllerIpAddress: IP address of the system controller
  • controllerCertCn: Common Name (CN) field from the system controller certificate

devicestrust.tdmUpdateByController

• Message: Trusted devices manifest (TDM) updated for network "{trustDomainName}"
• Severity: Informational

• Custom data:

  • controllerIpAddress: IP address of the system controller
  • controllerCertCn: Common Name (CN) field from the system controller certificate
  • controllerDomainUid: Unique ID of the system controller domain
  • trustDomainName: Trust domain name
  • trustedDeviceCns: List of trusted devices Common Name (CN) fields in the updated TDM

• Reason:

  The list of TLS device certificates to be trusted by this device has been updated by a system controller. Typically, this happens during device pairing process.

devicestrust.tdmDeletionByController

• Message: Trusted devices manifest (TDM) deleted for network "{trustDomainName}"
• Severity: Informational

• Custom data:

  • controllerIpAddress: IP address of the system controller
  • controllerCertCn: Common Name (CN) field from the system controller certificate
  • trustDomainName: Trust domain name

• Reason:

  The list of TLS device certificates to be trusted by this device has been deleted by a system controller. Typically, this happens during device unpairing process.

firewall.configurationChange

• Message: Firewall configuration changed
• Severity: Informational

• Custom data:

  • username: User who performed the action

firmwareupdate.activation

• Message: Activating firmware
• Severity: Informational

• Custom data:

  • username: User who performed the action

firmwareupdate.installation

• Message: Installing firmware
• Severity: Informational

• Custom data:

  • username: User who performed the action

network.configurationChange

• Message: Network configuration changed
• Severity: Informational

• Custom data:

  • username: User who performed the action

system.factoryResetCompletion

• Message: Factory reset completed
• Severity: Informational

system.rebootRequest

• Message: Reboot requested
• Severity: Informational

• Custom data:

  • username: User who performed the action

system.startup

• Message: System started up; firmware version {firmwareVersion}
• Severity: Informational

• Custom data:

  • firmwareVersion: Current system firmware version

time.manualSystemTimeChange

• Message: System time changed manually from {previousTime} to {currentTime}
• Severity: Informational

• Custom data:

  • previousTime: System time (UTC) before the change in ISO 8601 format YYYY-MM-DDThh:mm:ssZ
  • currentTime: System time (UTC) after the change in ISO 8601 format YYYY-MM-DDThh:mm:ssZ
  • username: User who performed the action

time.synchronizationConfigurationChange

• Message: Time synchronization configuration changed
• Severity: Informational

• Custom data:

  • username: User who performed the action

time.systemTimeSynchronization

• Message: System time synchronized
• Severity: Informational

• Custom data:

  • username: User who performed the action

time.timeZoneChange

• Message: Time zone changed from {previousTimeZone} to {currentTimeZone}
• Severity: Informational

• Custom data:

  • previousTimeZone: Name of the previous time zone as listed in the IANA time zone database
  • currentTimeZone: Name of the current time zone as listed in the IANA time zone database
  • username: User who performed the action

usermgmt.userCreation

• Message: The user {newUser} created
• Severity: Informational

• Custom data:

  • newUser: User who was created
  • username: User who performed the action
  • roles: List of roles that were assigned to the user

usermgmt.userPasswordChange

• Message: Password changed for the user {affectedUser}
• Severity: Informational

• Custom data:

  • affectedUser: User whose password was changed
  • username: User who performed the action

usermgmt.userPropertiesChange

• Message: Properties of the user {affectedUser} changed
• Severity: Informational

• Custom data:

  • affectedUser: User whose properties were modified
  • username: User who performed the action

usermgmt.userRemoval

• Message: The user {removedUser} removed
• Severity: Informational

• Custom data:

  • removedUser: User who was removed
  • username: User who performed the action

usermgmt.userRolesChange

• Message: Roles of the user {affectedUser} changed
• Severity: Informational

• Custom data:

  • affectedUser: User whose roles were changed
  • username: User who performed the action
  • roles: List of roles that were assigned to the user

webui.login

• Message: The user {username} logged in to the web user interface
• Severity: Informational

• Custom data:

  • username: User who logged in
  • origin: Origin of the login, for example client IP address

webui.logout

• Message: The user {username} logged out of the web user interface
• Severity: Informational

• Custom data:

  • username: User who logged out
  • sessionTimeout: Whether the logout was due to session timeout