Credential Manager Events

https://www.arubanetworks.com/techdocs/AOS-CX/10.07/HTML/5200-8214/Content/fir-int.htm

https://www.arubanetworks.com/techdocs/AOS-CX/10.07/PDF/5200-8214.pdf

Credential Manager Events

Base Rule

General Information Log Message

Information

Event ID

<vmid>

Number

Event ID 6501, 6502, 6504, 6505, 6506, 6507, 6508, 6509

Severity

<severity>

Text/String

For All: Information
For 6501, 6502:  Warning
For 6507, 6509:  Error

Message

<subject>

Text/String

Event ID 6501:
Warns the user that export password file was corrupted and default passwd was used instead.

<subject>

Text/String

Event ID 6502:
Warns the user that the chassis secret has been corrupted.

<subject>

Text/String

Event ID 6504:
Logs a message when the self-signed cert is created by credmgr.

<subject>

Text/String

Event ID 6505:
Logs a message when a user changes admin password from ServiceOS

<subject>
<account>

Text/String

Event ID 6506:
Logs a message when SSH authorized keys are added for a user

<subject>
<account>

Text/String

Event ID 6507:
Logs a message after a failure to write SSH authorized keys for a user

<subject>
<account>

Text/String

Event ID 6508:
Logs a message after deleting SSH authorized keys for a user

<subject>
<account>
<object>

Text/String/Number

Event ID 6509:
Logs a message when SSH authorized key fails validation check