4.4.2.1.3.6. Audit Logger

Audit Logger related information

Table 4.109 Audit Logger Attributes (LDAP Object: dcmAuditLogger)

Name

Type

Description (LDAP Attribute)

Name

string

Arbitrary/Meaningful name for the Audit Logger object

(cn)

Network Connection Reference(s)

string

The JSON Pointers to the Network Connection objects used by this Audit Logger

(dicomNetworkConnectionReference)

Audit Record Repository Device Name

string

Device Name of Audit Record Repository to which Audit Messages are sent

(dcmAuditRecordRepositoryDeviceName)

Source ID

string

RFC 3881 Audit Source ID; device name if absent

(dcmAuditSourceID)

Enterprise Site ID

string

RFC 3881 Audit Enterprise Site ID; value ‘dicomInstitutionName’ is replaced by the institution name of the DICOM device

(dcmAuditEnterpriseSiteID)

Source Type Code(s)

string

RFC 3881 Audit Source Type Code; value ‘dicomPrimaryDeviceType’ is replaced by the primary type of the DICOM device

(dcmAuditSourceTypeCode)

Syslog Facility

string

RFC 5424 Syslog Facility string value of audit message.

Enumerated values:

kern (= kernel messages)

user (= user-level messages)

mail (= mail system messages)

daemon (= system daemons’ messages)

auth (= authorization messages)

syslog (= messages generated internally by syslogd)

lpr (= line printer subsystem messages)

news (= network news subsystem messages)

uucp (= UUCP subsystem messages)

cron (= clock daemon messages)

authpriv (= security/authorization messages)

ftp (= ftp daemon messages)

ntp (= NTP subsystem messages)

audit (= audit messages)

console (= console messages)

cron2 (= clock daemon messages)

local0

local1

local2

local3

local4

local5

local6

local7

(dcmAuditFacility)

Syslog Severity - Success

string

RFC 5424 Syslog Severity string value of audit message with Event Outcome Indicator 0 (Success).

Enumerated values:

emerg (= emergency; system is unusable)

alert (= action must be taken immediately)

crit (= critical condition)

err (= error condition)

warning (= warning condition)

notice (= normal but significant condition)

info (= informational message)

debug (= debug-level messages)

(dcmAuditSuccessSeverity)

Syslog Severity - Failure

string

RFC 5424 Syslog Severity string value of audit message with Event Outcome Indicator 4 (Minor failure).

Enumerated values:

emerg (= emergency; system is unusable)

alert (= action must be taken immediately)

crit (= critical condition)

err (= error condition)

warning (= warning condition)

notice (= normal but significant condition)

info (= informational message)

debug (= debug-level messages)

(dcmAuditMinorFailureSeverity)

Syslog Severity - Failure

string

RFC 5424 Syslog Severity string value of audit message with Event Outcome Indicator 8 (Serious failure).

Enumerated values:

emerg (= emergency; system is unusable)

alert (= action must be taken immediately)

crit (= critical condition)

err (= error condition)

warning (= warning condition)

notice (= normal but significant condition)

info (= informational message)

debug (= debug-level messages)

(dcmAuditSeriousFailureSeverity)

Syslog Severity - Major

string

RFC 5424 Syslog Severity string value of audit message with Event Outcome Indicator 12 (Major failure).

Enumerated values:

emerg (= emergency; system is unusable)

alert (= action must be taken immediately)

crit (= critical condition)

err (= error condition)

warning (= warning condition)

notice (= normal but significant condition)

info (= informational message)

debug (= debug-level messages)

(dcmAuditMajorFailureSeverity)

Syslog Application Name

string

RFC 5424 Syslog APP-NAME of audit message; Audit Source ID if absent

(dcmAuditApplicationName)

Syslog Message ID

string

RFC 5424 Syslog MSGID of audit message.

(dcmAuditMessageID)

Message Encoding

string

Character encoding of RFC 5424 Syslog MSG part of audit message.

(dcmAuditMessageEncoding)

Message BOM

boolean

Enable/disable Unicode BOM prefix of RFC 5424 Syslog MSG part of audit message; include BOM if absent

(dcmAuditMessageBOM)

Timestamp in UTC

boolean

Specify if RFC 5424 Syslog TIMESTAMP and the Event Date/Time of the audit message are specified in Coordinated Universal Time. Default indicates it will be in Local Time zone.

(dcmAuditTimestampInUTC)

Message Format XML

boolean

Specify whether or not the XML audit message is formatted with line feeds and indentation.

(dcmAuditMessageFormatXML)

Message Schema URI

string

URI of DICOM Audit Message Schema referenced in audit message

(dcmAuditMessageSchemaURI)

Include Instance UIDs

boolean

Indicates if Audit Log Message should contain optional Instance UIDs

(dcmAuditIncludeInstanceUID)

Spool Directory URI

string

URI of spool directory used to store messages which could not delivered to the record repository; use system temporary directory if absent.

(dcmAuditLoggerSpoolDirectoryURI)

Retry Interval

integer

Retry interval in s to re-sent messages which could not delivered to the record repository; do no retry to re-sent messages if absent

(dcmAuditLoggerRetryInterval)

installed

boolean

True if the Audit Logger is installed on network. If not present, information about the installed status of the Audit Logger is inherited from the device

(dicomInstalled)

Audit Suppress Criteria (s)

object

Audit Suppress Criteria