Sybase Recorder Reference Guide

eTrust Audit Field Mappingsyslisteners.Category Derived from NID Event category. See Sybase event table above.Status‘S’ or ‘F’ depends oneventmod‘S’uccess when eventmod = 0 or 1‘F’ailed when eventmod = 2eTrust Audit Normalized FieldsNormalized Fields are eTrust Audit field names that are mapped or translatedfrom the native event field names according to the classification of the Recorder.Normalized fields are common across all products in the same classification. ForSAPI recorder, the classification is defined by the Log Name (see eTrust AuditMandatory Fields).Normalized Fields for Sybase RecordereTrust Audit Field Sybase sysaudit fields DescriptionOperation Derived from Event ID Name of the operation thattriggers the event. See Sybaseevent table above.ObjClass Derived from Event ID The class of objects as reported inthe event. See Sybase event tableabove.ObjName Derived from Event ID Object name corresponding toSybase_OID (see Product Specificfields below)Event ID Event Event type. See Sybase eventtable above.PID Spid Server process Id of the databaseprocess that caused the eventEventCount Sequence Sequence number within a singleevent. Some events require morethan one audit record12 eTrust Audit