Domain Audit Events
Note that the API can be called on each API Server instance using the Routing API
The Domain Audit API allows you to see audit event messages for the NodeManager and API Server Instances.
Each message consist is returned as a JSON string in the following format:
{
"events": [
{
"eventId": 112,
"message": "User 'admin' logged into the system",
"metadata": {
"admin": "admin"
},
"timestamp": 1352996174703
}
]
}
"events" is the main object containing an array of event objects.
Each event object consists of the folloing fields:
- eventId
- timestamp
- message
- metadata
We will examine each of these fields in turn.
eventId
This is a unique integer representing the specific type of event. A list of the current Event IDs is:
Service Events |
Description |
Event Id |
Audit Listener Added |
1 |
Service Started |
2 |
Service Refresh |
3 |
Service Unload |
4 |
Service Clean Shutdown Failed |
5 |
Service Stopped |
6 |
Node Manager Client Connection |
7 |
Node Manager Client Url Connection |
8 |
User Specific Events |
Description |
Event Id |
User Created |
100 |
User Modified |
101 |
User Password Updated |
102 |
User Password Reset Request |
103 |
User Password Reset |
104 |
User Disabled |
105 |
User Deleted |
106 |
User Logged In |
107 |
User Logged Out |
108 |
User Activated |
109 |
User Registration Sent |
110 |
User Registration Validated |
111 |
User Admin Logged In |
112 |
User Registration Email Failed |
113 |
User Password Reset Email Failed |
114 |
User Password Reset Failed |
115 |
User Password Admin Reset |
116 |
User Create Approval Sent |
117 |
User Create Approval Failed |
118 |
User Validation Email Sent |
119 |
User Validation Email Failed |
120 |
User Approval Required |
121 |
User Validation Required |
122 |
User Validation Complete |
123 |
User Password Reset Email Sent |
124 |
User Registration Disabled |
125 |
User Registration Org Disabled |
126 |
Organisation Specific Events |
Description |
Event Id |
Organization Created |
300 |
Organization Modified |
301 |
Organization Disabled |
305 |
Organization Deleted |
306 |
Organization Registration Token Created |
307 |
Organization Registration Token Deleted |
308 |
Application Specific Events |
Description |
Event Id |
Application Created |
500 |
Application Modified |
501 |
Application Disabled |
505 |
Application Deleted |
506 |
Application Oauth Created |
510 |
Application Oauth Modified |
511 |
Application Oauth Disabled |
515 |
Application Oauth Deleted |
516 |
Application Import |
517 |
Application Export |
518 |
Application Apikey Created |
520 |
Application Apikey Modified |
521 |
Application Apikey Disabled |
525 |
Application Apikey Deleted |
526 |
Application Approval Email Sent |
527 |
Application Approval Email Failed |
528 |
Application Quota Created |
529 |
Application Quota Modified |
530 |
Application Quota Deleted |
531 |
Application Permission Created |
532 |
Application Permission Modified |
533 |
Application Permission Deleted |
534 |
Api Application Approval Email Sent |
535 |
Api Application Approval Email Failed |
536 |
Application Approval Required |
537 |
Api Application Approval Required |
538 |
Api Application Approved |
539 |
Application Approved |
540 |
Application Apiaccess Created |
541 |
Application Apiaccess Modified |
542 |
Application Apiaccess Deleted |
543 |
Application Oauth Resource Created |
544 |
Application Oauth Resource Modified |
545 |
Application Oauth Resource Deleted |
546 |
Application Passport Connection Pass |
547 |
Application Passport Connection Fail |
548 |
API Manager Admin Events |
Description |
Event Id |
Abstract Controller Webserver Error 1 |
700 |
Abstract Controller Webserver Error 2 |
701 |
Abstract Controller Webserver Error 3 |
702 |
Portal Config Updated |
703 |
Portal Sysconfig Updated |
704 |
Configuration Events |
Description |
Event Id |
Config Replication Started |
1000 |
Config Writing |
1001 |
Config Replication Complete |
1002 |
Config Deployment Starting |
1003 |
Config Deployment Complete |
1004 |
Config Deployment Failed |
1005 |
Config Deployment Purge Failed |
1006 |
Config Deployment Purge Success |
1007 |
Config Deployment Purge Started |
1008 |
Config Deployment Purge Finished |
1009 |
Config Write Policy Archive |
1010 |
Config Replication Failed Streaming |
1011 |
Config Create Deployment Arc Success |
1012 |
Config Create Deployment Arc Failed |
1013 |
Config Deployment Saved |
1014 |
Config Deployment Save Fail |
1015 |
Config Group Passphrase Update |
1016 |
Config Group Passphrase Update Fail |
1017 |
Config Update Archive Passphrase Trigger |
1018 |
Config Update Archive Passphrase Pass |
1019 |
Config Update Archive Passphrase Fail |
1020 |
Config Update Service Passphrase Trigger |
1021 |
Config Update Service Passphrase Pass |
1022 |
Config Update Service Passphrase Fail |
1023 |
Config Update Nm Passphrase Trigger |
1024 |
Config Update Nm Passphrase Pass |
1025 |
Config Update Nm Passphrase Fail |
1026 |
Config Update Deployment Archive Trigger |
1027 |
Config Update Deployment Archive Pass |
1028 |
Config Update Deployment Archive Fail |
1029 |
Config Load Success |
1030 |
Config Load Fail |
1031 |
Config Load Rollback Success |
1032 |
Config Load Rollback Fail |
1033 |
Config Update Inmem Passphrase Trigger |
1034 |
Config Update Inmem Passphrase Pass |
1035 |
Config Update Inmem Passphrase Fail |
1036 |
Config Domain Deployments Read |
1037 |
Config Policy Archive Read |
1038 |
Config Environment Archive Read |
1039 |
Config Deployment Archive Read |
1040 |
Config Domain Deployments With Pending Read |
1041 |
Config Local Deployments Read |
1042 |
Config Env Settings Read |
1043 |
Config Group File Read |
1044 |
KPS Events |
Description |
Event Id |
Kps Object Read |
1200 |
Kps Object Write |
1201 |
Kps Object Update |
1202 |
Kps Object Delete |
1203 |
Kps Iterator Start |
1204 |
Kps Iterator Next |
1205 |
Kps Query Read |
1206 |
Topology Events |
Description |
Event Id |
Topology Host Added |
1400 |
Topology Host Removed |
1401 |
Topology Host Modified |
1402 |
Topology Group Added |
1403 |
Topology Group Removed |
1404 |
Topology Group Modified |
1405 |
Topology Server Added |
1406 |
Topology Server Removed |
1407 |
Topology Server Modified |
1408 |
User Store Events |
Description |
Event Id |
Userstore Admin Created |
1600 |
Userstore Admin Modified |
1601 |
Userstore Admin Password Modified |
1602 |
Userstore Admin Removed |
1603 |
Userstore Admin Role Removed |
1604 |
Userstore User Created |
1605 |
Userstore User Modified |
1606 |
Userstore User Password Modified |
1607 |
Userstore User Removed |
1608 |
timestamp
This is a timestamp in format of number of milliseconds since the epoch (Jan 1st 1970)
message
The message component of the Domain Audit event
metadata
Optional extra data related to the event, userID perhaps or a given configuration ID.