9-11.3 Audit-Log Contents The information resource must record event information including, but not limited to, the following when available: Date and time of the event. Log-on ID and MAC or IP address of the event initiator. Event type and success or failure of the event if applicable. Identification of information resources accessed. Source host name and IP address generating the log event. Destination host name and IP address generating the log event. Transaction code or process ID.