Exportable audit log entry fields

Audit log entry fields are described in the following table. Because the fields are exportable, the table includes the syslog export field.

Table 1. Exportable audit log entry fields
Field	Syslog export field	Description
Administrator	USER_ORIGINATOR	Administrator who triggered the audit event.
Client IP address	CLIENT_IP_ADDRESS	Address of the client that triggered the audit event.
Component ID	COMP_ID	The identifier of the creator of the log entry.
Creation Time	TIMESTAMP	Log entry creation time.
Elements	OBJECT_NAME	Elements being manipulated in the audit event.
Event ID	EVENT_ID	Event identifier, unique within one sender.
Incident case	INCIDENT_CASE	The Incident case to which the logs or audit events are related.
Information message	INFO_MSG	A description of the log event that further explains the entry.
Operation type	TYPE_DESCRIPTION	Type of action that triggered the audit entry.
Origin name	ORIGIN_NAME	Name of the component that triggered the audit event.
Result	RESULT	Result state after the audited event.
Rule Tag	RULE_ID	Rule tag of the rule that triggered the log event.
Sender	NODE_ID	IP address of the engine or server that sent the log entry.
Sender type	SENDER_TYPE	The type of engine or server that sent the log entry.