Syslog messages in structured-format will show the details about the attributes and values of an event-id.
For example,
|
1
|
<189>1 2008-04-25T18:43:44.878-07:00 ritter mgd 20856 UI_DBASE_LOGOUT_EVENT [junos@2636.1.1.1.2.10 username="user"] User 'user' exiting configuration mode
|
In the above message, UI_DBASE_LOGOUT_EVENT is the event-id and it has one attribute 'username' with value 'user'.
To enable logging in structured format, configure [edit system syslog file <file-name> structured-data].