The following messages document local system processes such as system startup and shutdown and changes to the system time or audit log.
Parameters: None.
Configurable Information: Success
Formal name: SE_AUDITID_SYSTEM_RESTART
Parameters: None.
Configurable Information: Success
Formal name: SE_AUDITID_SYSTEM_SHUTDOWN
Parameters: Authentication package name.
Configurable Information: Success
Formal name: SE_AUDITID_AUTH_PACKAGE_LOAD
Parameters: Logon process name.
Configurable Information: Success
Formal name: SE_AUDITID_SYSTEM_LOGON_PROC_REGISTER
Parameters: Number of audit messages discarded.
Configurable Information: Success
Formal name: SE_AUDITID_AUDITS_DISCARDED
Parameters: Primary user name, primary domain, primary logon ID, client user name, client domain, client logon ID
Configurable Information: Success
Formal name: SE_AUDITID_AUDIT_LOG_CLEARED
Parameter: Notification package name.
Configurable Information: Success
Formal name: SE_AUDITID_NOTIFY_PACKAGE_LOAD
Parameters: Process ID, type of invalid use (either impersonation or reply), server port name, primary user name, primary domain, primary logon ID, client user name, client domain, client logon ID.
Configurable Information: Success
Formal name: SE_AUDITID_LPC_INVALID_USE
Parameters: Process ID, process name, primary user name, primary domain, primary logon ID, client user name, client domain, client logon ID, previous time, new time.
Configurable Information: Success
Formal name: SE_AUDITID_SYSTEM_TIME_CHANGE
This audit normally appears twice. This is necessary to deal with time zone changes.