The following is a log file entry for a single event. Each field in the entry is described below.
"Launch Failure","11","2002-07-25 9:27:52 AM", "JSMITH.NOVELL.NOVELL_TREE",".WORKSTATION NOT REGISTERED","137.65.45.25","NOTEPAD.APPS.NOVELL.NOVELL_TREE","3054A94E-BBFF-4851-9D8E-58973623B728","2","Could not launch NOTEPAD.APPS.NOVELL.NOVELL_TREE (using c:\winnt\notepa) (id=123)","The filename, directory name, or volume label syntax is incorrect.","c:\winnt\notepa","","","","","524288"
Table 44-3 Log File Fields and Descriptions
Field |
Example |
Description |
---|---|---|
Event Type |
Launch Failure |
The event that occurred and whether it was successful or failed. Possible event types are: Launch Success Launch Failure Distribution Success Distribution Failure Filter Show Filter Hide Uninstall Success Uninstall Failure Cache Success Cache Failure Application Termination Process Ignored Process Terminated |
Event Type Code |
11 |
The code associated with the event. Possible codes are: 10 - Launch Success 11 - Launch Failure 20 - Distribution Success 21 - Distribution Failure 30 - Filter Hide 40 - Filter Show 50 - Uninstall Success 51 - Uninstall Failure 60 - Cache Success 61 - Cache Failure 70 - Application Termination 80 - Process Ignored 81 - Process Terminated |
Date and Time |
2002-07-25 9:27:52 AM |
The date (7/25/2002) and time (9:27:52 AM) the event occurred. |
User Distinguished Name and Tree |
JSMITH.NOVELL.NOVELL_TREE |
The distinguished name and tree of the user for which the event occurred. |
Workstation Distinguished Name and Tree |
.WORKSTATION NOT REGISTERED |
The distinguished name and tree of the workstation on which the event occurred. If the workstation has not been imported into eDirectory as a Workstation object, the field contains WORKSTATION NOT REGISTERED. |
Workstation Address |
137.65.45.25 |
The IPX or IP address of the workstation on which the event occurred. |
Application Distinguished Name and Tree |
NOTEPAD.APPS.NOVELL.NOVELL_TREE |
The distinguished name and tree of the Application object for which the event occurred. For rogue processes, this field contains ZEN Process Management. |
Application GUID |
3054A94E-BBFF-4851-9D8E-58973623B728 |
The global unique identifier assigned to the Application object. The GUID is located on the Application object's Options page (Distribution Options tab). For rogue processes, this field is left blank. |
Application Version Number |
2 |
The version number assigned to the Application object. Possible numbers range from 0 to 65535. The version number is located on the Application object's Options page (Distribution Options tab). For rogue processes, this field is left blank. |
Error Code Major |
Could not launch NOTEPAD.APPS.NOVELL.NOVELL_TREE (using c:\winnt\notepa) (id=123) |
For failed events, the error code generated by Application Launcher. For successful events, this field is always 0. For rogue processes, this field is left blank. |
Error Code Minor |
The filename, directory name, or volume label syntax is incorrect. |
Additional error code information. For successful events, this field is always 0. For rogue processes, this field is left blank. |
Event String 1 |
c:\winnt\notepa |
Optional event information. For rogue processes, this field contains the process executable path. |
Event String 2 |
no example |
Optional event information. For rogue processes, this field contains the Original Filename of the process. |
Event String 3 |
no example |
Optional event information. For rogue processes, this field contains the process ID (PID). |
Event String 4 |
no example |
Optional event information. For rogue processes, this field contains the parent process ID (parent PID). |
Event String 5 |
no example |
Optional event information. For rogue processes, this field contains the event action, either “process ignored” or “process terminated successfully.” |
Application Flag |
524288 |
Application object bitmask. For rogue processes, this field is always 0. |