This figure shows how the audit log is positioned in a DIT. The root of the DIT is the DSE. The entry immediately below is the audit log container. It is called cn=auditlog. The tree then branches in two, indicating that this entry has two sample attributes. One is orclsequence=1, the other orclsequence=2. The first attribute has the following attributes:

• orcleventtime: 199811281010z

• orclauditmessage: Adding Attribute: (1.2.32.43.3.NAME 'myattr' SYNTAX '1.2.3.4.5.6.7')

• orcleopresult: Invalid syntax

• orcluserdn: cn=orcladmin

• objectclass: top

• objectclass: orclauditoc

orclsequence=2 lists no attributes in this example.