Audit - 审计日志对象区 —— 日志来源、级别、日志量、存储占用、防篡改状态与转发目标状态

Go back Parent node: Security Domain - 安全域 —— 部署运行状态类的安全对象（PKI 监控、认证、审计、合规、威胁），区别于安全产品线 1.3.6.1.4.1.59719.2.900 (1.3.6.1.4.1.59719.6)

Technical information

Dot notation:	`1.3.6.1.4.1.59719.6.3`
ASN.1 notation:	`{ iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) tsingyao(59719) security(6) audit(3) }`
OID-IRI notation:	`/ISO/Identified-Organization/6/1/4/1/TsingYao/Security/Audit`
WEID notation:	`weid:P-1A2V-6-3-7`
DER encoding:	`06:0A:2B:06:01:04:01:83:D2:47:06:03`

Description

English:
Audit logging object area. Describes the generation, storage, protection and forwarding state of audit logs, including log source, log level, log volume, storage usage, tamper protection state and forwarding target state, ensuring that security events can be traced and evidenced.
Status: registered but unused. No object has been implemented; when implementing, expose the tamper protection state and the forwarding target state, because a log that is generated but not protected or forwarded has limited evidential value. The unused state shall be re-verified at each revision of this file.
Recommendation: align the audit log content with the security notifications (1.3.6.1.4.1.59719.0) so that every alarm has a corresponding audit record with the same event identity.
See also: 1.3.6.1.4.1.59719.0, 1.3.6.1.4.1.59719.3.400, 1.3.6.1.4.1.59719.6.4.
Verification: 2026-10-22 — this arc and all its sub-ordinates are confirmed unused; re-verify the unused state at each revision of this file.

中文:
审计日志对象区。描述审计日志的生成、存储、保护与转发状态，包含日志来源、日志级别、日志量、存储占用、防篡改状态与转发目标状态，确保安全事件可追溯、可取证。
状态：已注册但未使用。尚无对象被实现；实现时应暴露防篡改状态与转发目标状态，因为仅生成而未保护、未转发的日志证据价值有限。本文件每次修订时须重新核验该未使用状态。
建议：审计日志内容应与安全通知（1.3.6.1.4.1.59719.0）对齐，使每条告警都有同一事件标识的审计记录。
关联节点：1.3.6.1.4.1.59719.0、1.3.6.1.4.1.59719.3.400、1.3.6.1.4.1.59719.6.4。
核验：2026-10-22 —— 本弧及其全部下级标识均确认未使用，本文件每次修订时须重新核验该未使用状态。

Registration Authority

tsingyao
E-Mail: op@tsingyao.net
JunQing Gu
TsingYao Technology Limited

The RA does not want to publish their personal information.

Subordinate objects

ID	Base36	ASN.1 IDs (comma sep.)	IRI IDs (comma sep.)	RA	Comment	Created	Updated
No items available

Alternative Identifiers

Identifier	Description
aid:D276000186B200054278A5EC5EE742E9 (No PIX allowed)	OIDplus Information Object Application Identifier (ISO/IEC 7816)
aid:D276000186F62B0601040183D2470603 (No PIX allowed)	Application Identifier (ISO/IEC 7816)
guid:4278a5ec-0000-8000-a6d3-3919b6e46fbf	OIDplus Information Object Custom UUID (RFC 9562)
guid:fb968fdd-da3f-3f79-a366-f7c79f095dc4	Name based version 3 / MD5 UUID with namespace UUID_NAMEBASED_NS_OID
guid:e0c35888-b369-52bc-8cc8-ca337d9114c2	Name based version 5 / SHA1 UUID with namespace UUID_NAMEBASED_NS_OID
mac:B2-DA-DE-E7-42-E9	OIDplus Information Object MAC address, Unicast (AAI)
mac:B3-DA-DE-E7-42-E9	OIDplus Information Object MAC address, Multicast (AAI)
weid:P-1A2V-6-3-7	WEID notation
x500dn:/dc=com/dc=example/cn=oidplus/1.3.6.1.4.1.37476.2.5.2.9.4.1=1115203052/1.3.6.1.4.1.37476.2.5.2.9.4.2=1592214249	OIDplus Information Object X.500 DN