Log Types: TandemLog

Owned by Leigh Purdie (Unlicensed)
Sept 30, 2020
2 min read

Overview

The Tandem NonStop series ran a custom operating system. It was initially called T/TOS (Tandem Transactional Operating System) but soon named Guardian for its ability to protect all data from machine faults or software faults.

Tandem servers generated event log data, that could be transferred to the Snare Central server via ftp.

Collection

Logs should be transferred to the directory /data/SnareCollect/TandemLog via FTP using the user 'snarexfer'. Logs will be processed daily, at around midnight.

Sample Events

"07/22/07, 20:00:01","\TAND4 ","255 255","SUPER.MOP ","\TAND4.$ZHOME ","Read ","Granted ","255 001","UserRec ","EBSG.CODE (144 001) ","255 255","\TAND4.$ZTN1.#PTDYJPN ","255 255"
"07/22/07, 23:59:01","\TAND4 ","255 255","SUPER.MOP ","\TAND4.$ZHOME ","Read ","Granted ","255 001","UserRec ","SUPER.STARTUP (255 004) ","255 255","\TAND4.$ZTN1.#PTDYJPN ","255 255"
“07/22/07, 23:59:11","\TAND4 ","255 255","SUPER.MOP ","\TAND4.$ZHOME ","Read ","Granted ","255 001","UserRec ","SUPER.STARTUP (255 004) ","255 255","\TAND4.$ZTN1.#PTDYJPN ","255 255"
"07/23/07, 00:00:02","\TAND4 ","255 255","SUPER.MOP ","\TAND4.$ZHOME ","Read ","Granted ","255 001","UserRec ","SUPER.SYSMGR (255 000) ","255 255","\TAND4.$ZTN1.#PTDYJPN ","255 255"

Fields

Field

Description

Field

Description

DATE

Event date, in the format YYYY-MM-DD

TIME

Event time, in the format HH:MM:SS

SYSTEM

The source system

TABLE

TandemLog

PSGUSER

 

PSGUSERID

 

PCGUSER

 

POOBJECTIVE

 

POOPERATION

 

POOWNUSER

 

POOWNUSERID

 

PSTERM

 

PCTERM

 

RETURN

 

Notes

Â