FULL_CRL_GENERATION Audit Event - dogtagpki/pki GitHub Wiki
Since version 10.4.x CA will generate a FULL_CRL_GENERATION event when the full CRL generation is complete.
Use the Web UI to update the CRL. The server will generate the following log when the full CRL generation is complete:
[AuditEvent=FULL_CRL_GENERATION][SubjectID=$System$][Outcome=Success][CRLnum=<CR L number>] Full CRL generation
If noCRLIfNoRevokedCert is true and there is no revoked certificates, the server will generate the following events:
[AuditEvent=FULL_CRL_GENERATION][SubjectID=$System$][Outcome=Success][Info=No Re voked Certificates] Full CRL generation
If the full CRL generation fails, the server will generate an event with the failure reason:
[AuditEvent=FULL_CRL_GENERATION][SubjectID=$System$][Outcome=Failure][FailureRea son=<reason>] Full CRL generation