Elements for AUDIT_COMPLIANCE events
This event type records Whether a specified security policy was being complied with.
The following table lists the elements that can be displayed in the output of an AUDIT_COMPLIANCE event and their abbreviated XPath statements.
Element Always in output Abbreviated XPath auditMsg No auditMsg auditMsgElement No Neither this element, nor its children, should be defined in the shredder configuration file. auditTrailId No auditTrailId complianceStatus Yes complianceStatus endTime No endTime [type='dateTime'] extensionName Yes ”'AUDIT_COMPLIANCE'" fixDescription No fixDescription fixId No fixId globalInstanceId Yes Not applicable. This value is an internal number that is not related to #GLOBAL_ID. message No message outcome Yes This element is a container element and has no valid XPath. A valid XPath requires a values declaration. This container element uses the children of the auditOutcomeType element type. outcome.failureReason No outcome.failureReason outcome majorStatus No outcome.majorStatus outcome minorStatus No outcome.minorStatus outcome result Yes outcome.result policyDescription No policyDescription policyName No policyName recommendation No recommendation reporterComponentId When different from sourceComponentId Neither this element, nor its children, should be defined in the shredder configuration file. These elements are generated by the code. This container element uses the children of the auditComponentIdType element type. sequenceNumber Yes Not applicable. This value is an internal number that is not related to #RECORD_ID. severity No severity sourceComponentId Yes This element is a container element and has no valid XPath. A valid XPath requires a values declaration. This container element uses the children of the auditComponentIdType element type. sourceComponentId application Yes CommonBaseEvent/SourceComponentId/ @application sourceComponentId component Yes CommonBaseEvent/SourceComponentId/ @component sourceComponentId componentIdType Yes CommonBaseEvent/SourceComponentId/ @componentIdType sourceComponentId componentType Yes CommonBaseEvent/SourceComponentId/ @componentType sourceComponentId executionEnvironment No CommonBaseEvent/SourceComponentId/ @executionEnvironment sourceComponentId instanceId No CommonBaseEvent/SourceComponentId/ @instanceId sourceComponentId location Yes CommonBaseEvent/SourceComponentId/@location sourceComponentId locationType Yes CommonBaseEvent/SourceComponentId/ @locationType sourceComponentId processed No CommonBaseEvent/SourceComponentId/ @processed sourceComponentId subComponent Yes CommonBaseEvent/SourceComponentId/ @subComponent sourceComponentId threadId No CommonBaseEvent/SourceComponentId/@threadId suppressed No suppressed startTime No startTime [type='dateTime'] targetAccount No targetAccount targetResource No targetResource targetUser No targetUser timestamp Yes CommonBaseEvent/@creationTime violationClassification No violationClassification violationDescription No violationDescription violationName When complianceStatus is nonCompliant violationName
Parent topic: Elements by event types