A.4 Output format of exported operation logs

The following table shows the output format of a CSV file that is output by using the ioutils exportoplog command or by periodically exporting an operation log.

Output item	Output format	Maximum number of bytes of the output character string^#1
Suspicious Operation	Either Warning or FALSE is output.	8
Operation Date/Time (Agent)	The date and time are output in the following format: YYYY/MM/DD hh:mm:ss^#2	19
Operation Date/Time (UTC)	The date and time are output in the following format: YYYY/MM/DD hh:mm:ss^#2	19
Time Zone	The time zone of the computer where the operation was carried out. It also displays the difference from the UTC time. Example: `GMT+09:00`	9
Source	A character string of 256 or fewer characters is output.	1,024
User Name	A character string of 1,024 or fewer characters is output.	4,096
Operation Type	One of the following is output: Power On/Shutdown/Logon/Logoff Process/Program Operation File Operation Print Operation External Media Operation Web Access Shut Down Device operation Entry of the HIBUN access log or extended operation log, starting with `[HIBUN]`^#4	88
Operation Type (Detail)	One of the following is output: Power On Shutdown Log On Log Off Block Program Activation Process Execution Process Termination Copy file Move file Rename file Create file Delete file Copy folder Move folder Rename folder Create folder Delete folder Web Access (Upload) Web Access (Download) FTP (Send File) FTP (Receive File) Send Mail (Attachment File) Receive Mail (Attachment File) Save Attached File Print Block Printing Attach External Device Detach External Device Block Attached External Device Web Access Change active window Device connection Device disconnection Suppressing device connection Permitting device connection Entry of the HIBUN access log, event log, or extended operation log, starting with `[HIBUN]`^#4	244
File Created Date/Time	The date and time are output in the following format: YYYY/MM/DD hh:mm:ss^#2	19
File Last Modified Date/Time	The date and time are output in the following format: YYYY/MM/DD hh:mm:ss^#2	19
File Size	A number is output that includes a decimal point and to which one of the following units is added: B, KB, MB, GB, TB, or PB. The maximum value is 8,191 PB.	6
Original File Drive Type	One of the following is output: Local Disk Network Drive Removable Disk CD-ROM RAM Disk Web FTP Email Other	40
Original File Created Date/Time	The date and time are output in the following format: YYYY/MM/DD hh:mm:ss^#2	19
Source File Information^#3	A character string of 2,083 or fewer characters is output.	8,332
Source File Drive Type	One of the following is output: Local Disk Network Drive Removable Disk CD-ROM RAM Disk Web FTP Email Other	40
Destination File Information^#3	A character string of 2,083 or fewer characters is output.	8,332
Destination File Drive Type	One of the following is output: Local Disk Network Drive Removable Disk CD-ROM RAM Disk Web FTP Email Other	40
User Name (Run As)	A character string of 1,024 or fewer characters is output.	4,096
File Name	A character string of 520 or fewer characters is output.	2,080
Software Name	A character string of 512 or fewer characters is output.	2,048
Software Version	A character string of 128 or fewer characters is output.	512
File Version	A character string of 20 or fewer characters is output.	80
Process Name	A character string of 520 or fewer characters is output.	2,080
Drive type	One of the following is output: Local Disk Network Drive Removable Disk CD-ROM RAM Disk Other	40
Drive name	A drive name in the range from `A:\` to `Z:\` is output.	3
Serial #	A character string of 256 or fewer characters is output.	1,024
Device type	A character string of 1,024 or fewer characters is output.	4,096
Device name	A character string of 1,024 or fewer characters is output.	4,096
Device instance ID	A character string of 1,024 or fewer characters is output.	4,096
Printed Document Name	A character string of 1,024 or fewer characters is output.	4,096
Printer Name	A character string of 1,024 or fewer characters is output.	4,096
Printed Page Count	An integer that is equal to or less than 2,147,483,647 is output.	10
URL	A character string of 2,083 or fewer characters is output.	8,332
Web Page Title	A character string of 1,024 or fewer characters is output.	4,096
Window Title	A character string of 512 or fewer characters is output.	2,048
Host ID	A character string of 64 or fewer characters is output.	64
Device category	One of the following is output: USB device Built-in CD or DVD drive Internal floppy disk drive IEEE1394 device Built-in SD card Bluetooth device Imaging device Windows portable device Unknown Removable media^#4 External hard disk^#4 CD or DVD drive^#4 Infrared device^#4 Wireless LAN^#4 Modem^#4 Windows Mobile device^#4 Palm handheld device^#4 BlackBerry device^#4 Serial or parallel port^#4 Other controlled device^#4 Wired LAN (USB connections)^#4 Wired LAN (non-USB connections)^#4	64
HIBUN log entry^#4	The following entries of the HIBUN log are output: [HIBUN]Header [HIBUN]Version [HIBUN]Date [HIBUN]Time [HIBUN]HIBUN User [HIBUN]Windows User [HIBUN]SID [HIBUN]Computer [HIBUN]IP Address [HIBUN]Function Type [HIBUN]Status [HIBUN]Log Type [HIBUN]Operation [HIBUN]Process [HIBUN]File Name [HIBUN]Event Target [HIBUN]APP Data Version [HIBUN]Message 1 [HIBUN]Message 2 [HIBUN]Message 3	It depends on the specifications of HIBUN.

#1: This is the maximum number of bytes if either UTF-8 or UTF-16 is specified for the character encoding during execution of the ioutils exportoplog command. A half-width alphanumeric character or symbol is counted as 1 byte. For other characters, a character is counted as 4 bytes.

#2: YYYY: year, MM: month, DD: day, hh: hour, mm: minute, ss: second

#3: If Operation Type (Detail) is Send Mail (Attachment File), Receive Mail (Attachment File), or Save Attachment File, \r\n (return code) is converted to \n, and then the data is output.

#4: They are output when HIBUN logs are imported. For details about the HIBUN logs, see Importing HIBUN logs into the management server in the manual JP1/IT Desktop Management 2 Overview and System Design Guide.

Note

The following item names that are output in a CSV file when operation logs are exported by using the ioutils exportoplog command have been updated. If you have specified these item names in an operation log analysis tool or such, change the names.

<Before> External Drive Type, <After> Drive Type
<Before> External Drive Name, <After> Drive Name
<Before> External Device Type, <After> Device Type
<Before> External Device Name, <After> Device Name
<Before> External Device Instance ID, <After> Device Instance ID

Related Topics:

To Page Top