GH Software (c) GHIT ApS

Logging format up

With the beginning of DomainScan v2.5, the event file is now written using a standard based CSV format, for the purpose of helping system administrators with the task of integrating DomainScan Pro with 3rd party systems.

Both the main event log file and the event files for individual devices are formatted like this.

The CSV parameters used, are:

File format	UTF-8
Column separator	,
Columns may be enclosed by ", and all " characters in the text is replaced by "" Date fields are formatted as YYYY-MM-DD, TT:nn (nn is minutes)

There are 15 columns in the file, as described in the following table:

Column	Name	Type	Description
1	EventTime	Time	The time of this event. The time is equal to the fixed time that is set by DomainScan Pro at the beginning of the scan. This time is used for the duration of the scan.
2	EventFirstTime	Time	The first time this event was detected.
3	Device/User	Text	The device or user name where the event happened.
4	MonitorID	Int	The unique ID of the monitor that caused the event
5	MonitorName	Text	The name of the monitor that caused the event
6	MonitorType	Text	The monitor type. For example WMI monitor
7	MonitorSummary	Text	A small summary of what the monitor does.
8	EventSeverity	Int	Severity level of the event
9	IsUserEvent	Bool	Equal to 1 if the event were caused by a User. Otherwise 0, which means that the event were detected on a device.
10	IsNotification	Bool	Equal to 1 if the event is a notification. Otherwise, when 0, then it’s an event.
11	EventSummary	Text	A small summary that describes the event. For example: The target is offline
12	TriggeredResponseName	Text	The name of response that were executed
13	TriggeredResponseType	Text	The type of the response
14	TriggeredResponseSummary	Text	Summary of what happened
15	ResponseID	Int	The unique ID of the response that were executed.

Note: One event may appear in multiple lines. This will happen when the event causes several responses to trigger.

Note: Additional columns may be appended in later revisions of DomainScan

Note: Monitors and responses will be exportable in a later revision of DomainScan.