Symantec ESM keywords

You can use the following keywords in a format file.

Table: Format file keywords

Keyword

Description

adjusted_code

Code minus user-specified code base

agent

Agent that ran the policy

am_pm

AM/PM indicator

century

Two digits that represent the current century (19-20)

class

One digit that represent the message severity (0-4)

code

Symantec ESM message code

description

Long description of the message

esm_version

Version of Symantec ESM that supplies the report

hour

Two digits that represent the hour (00-23)

info

Symantec ESM informational field

minute

Two digits that represent the minute (00-59)

module

Module that is related to the message

month

Two digits that represent the month (01-12)

monthday

Two digits that represent the day of the month (01-31)

name

Symantec ESM name field

os

Operating system of agent

platform

Platform that ran the policy

policy

Policy that is related to the message

record_count

Count of processed message records

title

Symantec ESM message title

weekday

One digit that represent the day of week, starting with Sunday (1-7)

year

Two digits that represent the year (00-99)