The current time in UTC, encoded in UNIX epoch time format.
The unique audit ID for the message (not UNIX user identifier). The format of the audit ID is: <First IP address in hex>-<ThreadID & ProcessID in hex>-<Protected 2 digit counter>-<UTC Time in hex>-<Random number, seeded with millisecond timer, in 8 character padded hex>. The audit ID is always 41 bytes in length.
The audit ID is stored in the message in a X-AuditID: header.
The type of audit event being logged. Some event IDs are followed by parameters.