Event Types for Oracle Data Safe
Oracle Data Safe has events types for Security Assessment, User Assessment, Alerts, Activity Auditing, Data Discovery, Data Masking, SQL Firewall, Oracle Data Safe on-premises connectors, Oracle Data Safe private endpoints, and target databases.
Target Database Event Types
| Friendly Name | Event Type and Description |
|---|---|
| Create Target Database - Begin |
The event type emits when a user creates a target database with Oracle Data Safe. |
| Create Target Database - End |
The event type emits when target database creation is completed. |
| Delete Target Database - Begin |
The event type emits when a user deletes a target database. |
| Delete Target Database - End |
The event type emits when a target database is deleted. |
| Register Target Database - Begin |
The event type emits when a user registers a target database with Oracle Data Safe. |
| Register Target Database - End |
The event type emits when target database registration is completed. |
| Deregister Target Database - Begin |
The event type emits when a user deregisters a target database with Oracle Data Safe. |
| Deregister Target Database - End |
The event type emits when a target deregistration is completed. |
| Target Database State Change |
The event type emits when there is a change in a target database's state. |
| Alert Policy Target Association Patch Begin |
The event type emits when a user triggers an alert policy target association patch with Oracle Data Safe. |
| Alert Policy Target Association Patch End |
The event type emits when an alert policy target association patch is completed. |
| Disabled Target Alert Policy Association |
The event type emits when a target alert policy association is generating more alerts than the threshold permits. |
Example 11-1 Notification Text for a Create Target Database - End Event Type
{
"eventType": "com.oraclecloud.datasafe.createtargetdatabase.end",
"cloudEventsVersion": "0.1",
"eventTypeVersion": "2.0",
"source": "DataSafe",
"eventTime": "2021-02-23T19:15:20.264Z",
"contentType": "application/json",
"data": {
"compartmentId": "ocid1.tenancy.oc1..unique_ID",
"compartmentName": "example-compartment",
"resourceName": "targetDatabase",
"resourceId": "ocid1.coreservicesworkrequest.oc1..unique_ID",
"availabilityDomain": "<availability-domain>"
},
"eventID": "unique_ID",
"extensions": {
"compartmentId": "ocid1.tenancy.oc1..unique_ID"
},
"serviceName": "Data Safe",
"displayName": "Create Target Database - End",
"additionalDetails": [
{"name": "targetId", "type": "string"},
{"name": "targetType", "type": "string"}
],
"timeCreated": "2021-02-23T19:15:20.264Z",
"activationTime": "2021-03-15T00:00:00.000Z"
}Target Database Group Event Types
| Friendly Name | Event Type and Description |
|---|---|
| Create Target Database Group - Begin |
The event type emits when a user creates a target database group with Oracle Data Safe. |
| Create Target Database Group - End |
The event type emits when target database group creation is completed. |
| Delete Target Database Group - Begin |
The event type emits when a user deletes a target database group. |
| Delete Target Database Group - End |
The event type emits when a target database group is deleted. |
| Refresh Target Database Group - Begin |
The event type emits when a user refreshes a target database group. |
| Refresh Target Database Group - End |
The event type emits when a target database group is refreshed. |
| Update Target Database Group - Begin |
The event type emits when a target database group update is started. |
| Update Target Database Group - End |
The event type emits when a target database group update is completed. |
| Change Target Database Group Compartment - Begin |
The event type emits when change compartment operation is started on a target database group. |
| Change Target Database Group Compartment - End |
The event type emits when change compartment operation is completed on a target database group. |
Example 11-2 Notification Text for a Create Target Database Group - End Event Type
{
"eventType": "com.oraclecloud.datasafe.createtargetdatabasegroup.end",
"cloudEventsVersion": "0.1",
"eventTypeVersion": "2.0",
"source": "DataSafe",
"eventTime": "2021-02-23T19:15:20.264Z",
"contentType": "application/json",
"data": {
"compartmentId": "ocid1.tenancy.oc1..unique_ID",
"compartmentName": "example-compartment",
"resourceName": "targetDatabaseGroup",
"resourceId": "ocid1.coreservicesworkrequest.oc1..unique_ID",
"availabilityDomain": "<availability-domain>"
},
"eventID": "unique_ID",
"extensions": {
"compartmentId": "ocid1.tenancy.oc1..unique_ID"
},
"serviceName": "Data Safe",
"displayName": "Create Target Database Group - End",
"additionalDetails": [
{"name": "targetId", "type": "string"},
{"name": "targetType", "type": "string"}
],
"timeCreated": "2021-02-23T19:15:20.264Z",
"activationTime": "2021-03-15T00:00:00.000Z"
}Oracle Data Safe On-Premises Connector Event Types
The following table describes event types for Oracle Data Safe on-premises connectors.
| Friendly Name | Event Type and Description |
|---|---|
| Create On-Prem Connector - Begin |
The event type emits when an Oracle Data Safe on-premises connector creation request is triggered by a user. |
| Create On-Prem Connector - End |
The event type emits when an on-premises connector creation request is completed. |
| Delete On-Prem Connector - Begin |
The event type emits when an Oracle Data Safe on-premises connector deletion request is triggered by a user. |
| Delete On-Prem Connector - End |
The event type emits when the on-premises connector deletion request is completed. |
| On-Prem Connector State Change |
The event type emits when the state of an Oracle Data Safe on-premises connector changes. |
| Rotate On-Prem Connector - Begin |
The event type emits when a wallet rotation request for an Oracle Data Safe on-premises connector is triggered by a user. |
| Rotate On-Prem Connector - End |
The event type emits when a wallet rotation request for an Oracle Data Safe on-premises connector is completed. |
Example 11-3 Notification Text for the Create On-Prem Connector - Begin Event Type
{
"eventType": "com.oraclecloud.datasafe.createonpremconnector.begin",
"cloudEventsVersion": "0.1",
"eventTypeVersion": "2.0",
"source": "DataSafe",
"eventTime": "2020-09-10T22:06:46.588Z",
"contentType": "application/json",
"data": {
"compartmentId": "ocid1.tenancy.oc1..unique_ID",
"compartmentName": "example-compartment",
"resourceName": "onPremConnectors",
"resourceId": "ocid1.coreservicesworkrequest.oc1..unique_ID",
"availabilityDomain": "ad1"
},
"eventID": "unique_ID",
"extensions": {
"compartmentId": "ocid1.tenancy.oc1..unique_ID"
}
"serviceName": "Data Safe",
"displayName": "Create On-Prem Connector - Begin",
"additionalDetails": [],
"timeCreated": "2020-09-10T22:06:48.011Z"
}Oracle Data Safe Private Endpoint Event Types
The following table describes event types for Oracle Data Safe private endpoints.
| Friendly Name | Event Type and Description |
|---|---|
| Create Private Endpoint - Begin |
The event type emits when an Oracle Data Safe private endpoint creation request is triggered by a user. |
| Create Private Endpoint - End |
The event type emits when an Oracle Data Safe private endpoint creation request is completed. |
| Delete Private Endpoint - Begin |
The event type emits when an Oracle Data Safe private endpoint deletion request is triggered by a user. |
| Delete Private Endpoint - End |
The event type emits when an Oracle Data Safe private endpoint deletion request is completed. |
Example 11-4 Notification Text for the Create Private Endpoint - End Event Type
{
"eventType": "com.oraclecloud.datasafe.createdatasafeprivateendpoint.end",
"cloudEventsVersion": "0.1",
"eventTypeVersion": "2.0",
"source": "DataSafe",
"eventTime": "2020-09-10T22:07:10.809Z",
"contentType": "application/json",
"data": {
"compartmentId": "ocid1.tenancy.oc1..unique_ID",
"compartmentName": "example-compartment",
"resourceName": "privateEndpoints",
"resourceId": "ocid1.coreservicesworkrequest.oc1..unique_ID",
"availabilityDomain": "ad1"
},
"eventID": "unique_ID",
"extensions": {
"compartmentId": "ocid1.tenancy.oc1..unique_ID"
},
"serviceName": "Data Safe",
"displayName": "Create Private Endpoint - End",
"additionalDetails": [],
"timeCreated": "2020-09-10T22:06:48.011Z"
}Attribute Sets Event Types
| Friendly Name | Event Type and Description |
|---|---|
| Attribute Set Create - Begin | com.oraclecloud.datasafe.createattributeset.beginThe event type is emitted at the start of an attribute set creation |
| Attribute Set Create - End | com.oraclecloud.datasafe.createattributeset.endThe event type is emitted at the end of an attribute set creation. |
| Attribute Set Delete - Begin | com.oraclecloud.datasafe.deleteattributeset.beginThe event type is emitted at the start of an attribute set deletion. |
| Attribute Set Delete - End | com.oraclecloud.datasafe.deleteattributeset.endThe event type is emitted at the end of an attribute set deletion. |
| Attribute Set Update - Begin | com.oraclecloud.datasafe.updateattributeset.beginThe event type is emitted at the start of an attribute set update. |
| Attribute Set Update -End | com.oraclecloud.datasafe.updateattributeset.endThe event type is emitted at the end of an attribute set update. |
Security Assessment Event Types
The following table describes event types for Security Assessment in Oracle Data Safe.
| Friendly Name | Event Type and Description |
|---|---|
| Security Assessment Create Begin |
The event type is emitted when a user triggers a security assessment. |
| Security Assessment Create End |
The event type is emitted when a security assessment is finished. |
| Security Assessment Refresh Begin |
The event type is emitted when a user refreshes a security assessment. |
| Security Assessment Refresh End |
The event type is emitted when a security assessment is finished refreshing. |
| Security Assessment Baseline Set Begin |
The event type is emitted when a user sets a security assessment as a baseline. |
| Security Assessment Baseline Set End |
The event type is emitted when a set baseline operation on a security assessment is finished. |
| Security Assessment Baseline Unset Begin |
The event type is emitted when a user unsets a security assessment as a baseline. |
| Security Assessment Baseline Unset End |
The event type is emitted when an unset baseline operation on a security assessment is finished. |
| Security Assessment Compare Begin |
The event type is emitted when a user compares two security assessments. |
| Security Assessment Compare End |
The event type is emitted when a compare operation for two security assessments is finished. |
| Security Assessment Drift From Baseline |
The event type is emitted when a security assessment is compared with a baseline assessment and a difference is found. |
| Security Assessment Report Generate Begin |
The event type is emitted when a user requests to generate a security assessment report. |
| Security Assessment Report Generate End |
The event type is emitted when an operation to generate a security assessment report is finished. |
| Security Assessment Report Download |
The event type is emitted when a user requests to download a security assessment report. |
| Security Assessment Finding Risk Update Begin |
The event type is emitted when a user begins changing the risk for a finding. |
| Security Assessment Finding Risk Update End |
The event type is emitted when changing the risk for a finding is finished. |
Note:
Any Oracle Data Safe event for User Assessment or Security Assessment that you created in the past that uses an old event type name, for example, com.oraclecloud.datasafe.securityassessmentrefresh.begin, needs to be dropped and recreated so that it uses the new friendly name, for example, Security Assessment Refresh Begin; otherwise, the event will not work.
Example 11-5 Notification Text for a Security Assessment Drift From Baseline Event Type
{
"eventType": "com.oraclecloud.datasafe.securityassessmentdriftfrombaseline",
"cloudEventsVersion": "0.1",
"eventTypeVersion": "2.0",
"source": "DataSafe",
"eventTime": "2020-09-10T22:06:46.588Z",
"contentType": "application/json",
"data": {
"compartmentId": "ocid1.tenancy.oc1..unique_ID",
"compartmentName": "example-compartment",
"resourceName": "securityAssessment",
"resourceId": "ocid1.coreservicesworkrequest.oc1..unique_ID",
"availabilityDomain": "ad1"
},
"eventID": "unique_ID",
"extensions": {
"compartmentId": "ocid1.tenancy.oc1..unique_ID"
},
"serviceName": "Data Safe",
"displayName": "Security Assessment Drift From Baseline",
"additionalDetails": [{"name":"targetNames","value":["target1", "target2"]},{"name":"comparisonId","value": "<baseline_assessment_ID>"} ],
"timeCreated": "2020-09-10T22:06:48.011Z"
}User Assessment Event Types
The following table describes event types for User Assessment in Oracle Data Safe.
| Friendly Name | Event Type and Description |
|---|---|
| User Assessment Create Begin |
The event type is emitted when a user triggers a user assessment. |
| User Assessment Create End |
The event type is emitted when a user assessment is finished creating. |
| User Assessment Refresh Begin |
The event type is emitted when a user refreshes a user assessment. |
| User Assessment Refresh End |
The event type is emitted when a user assessment is finished refreshing. |
| User Assessment Baseline Set Begin |
The event type is emitted when a user sets a user assessment as a baseline assessment. |
| User Assessment Baseline Set End |
The event type is emitted when a set baseline operation on a user assessment is finished. |
| User Assessment Baseline Unset Begin |
The event type is emitted when a user unsets a user assessment as a baseline assessment. |
| User Assessment Baseline Unset End |
The event type is emitted when an unset baseline operation on a user assessment is finished. |
| User Assessment Compare Begin |
The event type is emitted when a user compares two user assessments. |
| User Assessment Compare End |
The event type is emitted when a compare operation for two user assessments is finished. |
| User Assessment Drift From Baseline |
The event type is emitted when a user assessment is compared with a baseline and a difference is found. |
| User Assessment Report Generate Begin |
The event type is emitted when a user requests to generate a user assessment report. |
| User Assessment Report Generate End |
The event type is emitted when a user assessment report is generated. |
| User Assessment Report Download |
The event type is emitted when a user requests to download a user assessment report. |
| Security Policy Report Create Begin |
The event type is emitted when a security policy report is being created. |
| Security Policy Report Create Complete |
The event type is emitted when security policy report creation is completed. |
| Security Policy Report Delete Begin |
The event type is emitted when a security policy report is being deleted by the system. |
| Security Policy Report Delete Complete |
The event type is emitted when a security policy report deletion is completed. |
| Security Policy Report Refresh Begin |
The event type is emitted when a security policy report is being refreshed. |
| Security Policy Report Refresh Complete |
The event type is emitted when a security policy report is refreshed. |
| User Assessment Password Expiry Date |
This event is triggered twice: first when the user has fewer than 90 days remaining until password expiration, and again when fewer than 30 days remain. |
Note:
Any Oracle Data Safe event for User Assessment or Security Assessment that you created in the past that uses an old event type name, for example, com.oraclecloud.datasafe.securityassessmentrefresh.begin, needs to be dropped and recreated so that it uses the new friendly name, for example, Security Assessment Refresh Begin; otherwise, the event will not work.
Example 11-6 Notification Text for a User Assessment Drift From Baseline Event Type
{
"eventType": "com.oraclecloud.datasafe.userassessmentdriftfrombaseline",
"cloudEventsVersion": "0.1",
"eventTypeVersion": "2.0",
"source": "DataSafe",
"eventTime": "2020-09-10T22:06:46.588Z",
"contentType": "application/json",
"data": {
"compartmentId": "ocid1.tenancy.oc1..unique_ID",
"compartmentName": "example-compartment",
"resourceName": "userAssessment",
"resourceId": "ocid1.coreservicesworkrequest.oc1..unique_ID",
"availabilityDomain": "ad1"
},
"eventID": "unique_ID",
"extensions": {
"compartmentId": "ocid1.tenancy.oc1..unique_ID"
},
"serviceName": "Data Safe",
"displayName": "User Assessment Drift From Baseline",
"additionalDetails": [{"name":"targetNames","value":["target1", "target2"]},{"name":"comparisonId","value": "<baseline_assessment_ID>"} ],
"timeCreated": "2020-09-10T22:06:48.011Z"
}Activity Auditing Event Types
| Friendly Name | Event Type and Description |
|---|---|
| Audit Archive Retrieval Create Begin |
An event is emitted when an archive retrieval is started. |
| Audit Archive Retrieval Create End |
An event is emitted when an archive retrieval is finished. |
| Audit Archive Retrieval Delete Begin |
An event is emitted when an archive retrieval delete is started. |
| Audit Archive Retrieval Delete End |
An event is emitted when an archive retrieval delete is finished. |
| Audit Events Post Retention Purge |
An event is emitted when the retention period for audit records is reached and the audit events are being deleted from Data Safe. |
| Audit Policy Provision Begin |
An event is emitted when an audit policy provisioning is started. |
| Audit Policy Provision End |
An event is emitted when an audit policy provisioning ends. |
| Audit Profile Retention Update Begin |
An event is emitted when an audit retention update is started. Example, when online/offline audit data retention settings are being updated. |
| Audit Profile Retention Update End |
An event is emitted when an audit retention update is completed. Example, when online/offline audit data retention settings are successfully updated. |
| Audit Policy Retrieve Begin |
An event is emitted when an audit policy retrieval is started. |
| Audit Policy Retrieve End |
An event is emitted when an audit policy retrieval is finished. |
| Audit Profile Update Begin |
An event is emitted when an audit profile update is started. |
| Audit Profile Update End |
An event is emitted when an audit profile update is completed. |
| Audit Trail Collection Free Limit Warning |
An event is emitted when an audit collection reaches 80% of the free limit. |
| Audit Trail Resume Begin |
An event is emitted when an audit trail resume begins. |
| Audit Trail Resume End |
An event is emitted when an audit trail resume ends. |
| Audit Trail Start Begin |
An event is emitted when an audit trail start begins. |
| Audit Trail Start End |
An event is emitted when an audit trail start ends. |
| Audit Trail Stop Begin |
An event is emitted when an audit trail stop begins. |
| Audit Trail Stop End |
An event is emitted when an audit trail is stopped automatically or manually. |
| Audit Trail Update Begin |
An event is emitted when audit trail update is started. |
| Audit Trail Update End |
An event is emitted when audit trail update is finished. |
| Report Generate Begin |
An event is emitted when a report generation is started. |
| Report Generate End |
An event is emitted when a report generation is completed. |
| Report Schedule Begin |
An event is emitted when a new report schedule is being created. |
| Report Schedule End |
An event is emitted when a new report schedule is created successfully. |
| Report Schedule Delete Begin |
An event is emitted when report schedule delete is started. |
| Report Schedule Delete End |
An event is emitted when report schedule delete is completed. |
| Scheduled Report Generated |
An event is emitted when a scheduled report is generated successfully. |
Example 11-7 Notification text for the event type Audit Policy Provision Begin
{
"eventType": "com.oraclecloud.datasafe.provisionauditpolicy.begin",
"cloudEventsVersion": "0.1",
"eventTypeVersion": "2.0",
"source": "DataSafe",
"eventTime": "2021-11-18T11:06:46.588Z",
"contentType": "application/json",
"data": {
"compartmentId": "ocid1.tenancy.oc1..unique_ID",
"compartmentName": "example-compartment",
"resourceName": "auditPolicies",
"resourceId": "ocid1.coreservicesworkrequest.oc1..unique_ID",
"availabilityDomain": "ad1",
"additionalDetails": {
"targetId": "ocid1.datasafetargetdatabase.oc1..unique_ID"
}
},
"eventID": "unique_ID",
"extensions": {
"compartmentId": "ocid1.tenancy.oc1..unique_ID"
}
}Alert Event Types
| Friendly Name | Event Type and Description |
|---|---|
| Alert Generated |
An event is emitted when an audit alert is generated. |
| Alert Generation Throttled |
An event is emitted when alert generation has been temporarily disabled for the alert policy because it generated more alerts than the threshold of 1,000 per ten minutes. |
| Alert Policy Target Association Patch Begin |
An event is emitted when target alert policy associations are created or updated. |
| Alert Policy Target Association Patch End |
An event is emitted when target alert policy associations updates have completed. |
| Alert UpdateAll Begin |
An event is emitted when Alert updateAll is started. |
| Alert UpdateAll End |
An event is emitted when Alert updateAll is completed. |
| Create Alert Policy Begin |
An event is emitted when creation of a custom alert policy is started. |
| Create Alert Policy End |
An event is emitted when creation of a custom alert policy is finished. |
| Create Alert Policy Rule Begin |
An event is emitted when creation of a custom alert policy rule is started. |
| Create Alert Policy Rule End |
An event is emitted when creation of a custom alert policy rule is finished. |
| Delete Alert Policy Begin |
An event is emitted when deletion of a custom alert policy is started. |
| Delete Alert Policy End |
An event is emitted when deletion of a custom alert policy is finished. |
| Delete Alert Policy Rule Begin |
An event is emitted when deletion of a custom alert policy rule is started. |
| Delete Alert Policy Rule End |
An event is emitted when deletion of a custom alert policy rule is finished. |
| Update Alert Policy Begin |
An event is emitted when a custom alert policy update is started. |
| Update Alert Policy End |
An event is emitted when a custom alert policy update is finished. |
| Update Alert Policy Rule Begin |
An event is emitted when a custom alert policy rule update is started. |
| Update Alert Policy Rule End |
An event is emitted when a custom alert policy rule update is finished. |
Example 11-8 Notification Text for an Audit Alert Generated Event Type
{
"eventType": "com.oraclecloud.datasafe.generateauditalert",
"cloudEventsVersion": "0.1",
"eventTypeVersion": "2.0",
"source": "DataSafe",
"eventTime": "2020-09-29T16:03:41.293Z",
"contentType": "application/json",
"data": {
"compartmentId": "ocid1.compartment.oc1..unique_ID",
"compartmentName": "example_compartment",
"resourceName": "alerts",
"resourceId": "ocid1.datasafealert.oc1.phx.unique_ID",
"availabilityDomain": "availability_domain",
"additionalDetails": {
"status": "OPEN",
"displayName": "Failed logon by Admin user",
"description": "Failed logon by Admin user was detected",
"severity": "HIGH",
"targetId": "ocid1.datasafetarget.oc1.phx.unique_ID",
"targetName": "target_sa",
"policyId": "ocid1.datasafealertpolicy.oc1.iad.unique_ID",
"timeCreated": "2020-09-29T16:03:31.293Z",
"timeUpdated": "2020-09-29T16:03:42.736Z",
"osUserName": "dscs",
"operationTime": "2020-09-29T15:29:51.404Z",
"operation": "Login on target database",
"operationStatus": "Success",
"clientHostname": "jobsvm3002.jobsvm.stestvcn.oraclevcn.com",
"clientIPs": "10.0.4.15,10.0.4.16,10.0.4.14",
"clientId": "ORACLE$_DATA_SAFE#",
"clientProgram": "JDBC Thin Client",
"userName": "user1",
"objectType": "UNIFIED_AUDIT_TRAIL",
"commandText": "SELECT * FROM AUDSYS.UNIFIED_AUDIT_TRAIL WHERE \"EVENT_TIMESTAMP\"<=:1 AND \"EVENT_TIMESTAMP\">:2 \u0000",
"commandParam": " #1(31):02-JUL-21 12.42.15.044000000 PM #2(31):02-JUL-21 12.34.22.509000000 PM"
}
},
"eventID": "unique_ID",
"extensions": {
"compartmentId": "ocid1.compartment.oc1..unique_ID"
}
}Data Discovery Event Types
| Friendly Name | Event Type and Description |
|---|---|
| Create Sensitive Type Group Begin |
The event type emits when a sensitive type group creation request is triggered. |
| Create Sensitive Type Group End |
The event type emits when a sensitive type group creation request is completed |
| Delete Sensitive Type Group Begin |
The event type emits when a sensitive type group delete request is triggered. |
| Delete Sensitive Type Group End |
The event type emits when a sensitive type group delete request is completed. |
| Patch Grouped Sensitive Types Begin |
The event type emits when the request for a sensitive type to be added to or to be removed from a sensitive type group is triggered. |
| Patch Grouped Sensitive Types End |
The event type emits when the request for a sensitive type to be added to or to be removed from a sensitive type group is completed. |
| Referential Relations Create Begin |
The event type emits when a referential relation creation request in a sensitive data model is triggered. |
| Referential Relations Create End |
The event type emits when a referential relation creation request in a sensitive data model is completed. |
| Referential Relations Delete Begin |
The event type emits when a referential relation deletion request in a sensitive data model is triggered. |
| Referential Relations Delete End |
The event type emits when a referential relation deletion request in a sensitive data model is completed. |
| Sensitive Column Create Begin |
The event type emits when a sensitive column creation request is triggered. |
| Sensitive Column Create End |
The event type emits when a sensitive column creation request is completed. |
| Sensitive Column Delete Begin |
The event type emits when a sensitive column delete request is triggered. |
| Sensitive Column Delete End |
The event type emits when a sensitive column delete request is completed. |
| Sensitive Data Model Create Begin |
The event type emits when a sensitive data model creation request is triggered. |
| Sensitive Data Model Create End |
The event type emits when a sensitive data model creation request is completed. |
| Sensitive Data Model Delete Begin |
The event type emits when a sensitive data model deletion request is triggered. |
| Sensitive Data Model Delete End |
The event type emits when a sensitive data model deletion request is triggered. |
| Sensitive Data Model Update Begin |
The event type emits when a sensitive data model update request is triggered. |
| Sensitive Data Model Update End |
The event type emits when a sensitive data model update request is completed. |
| Sensitive Discovery Job Create Begin |
The event type emits when an incremental discovery job creation request is triggered. |
| Sensitive Discovery Job Create End |
The event type emits when an incremental discovery job creation request is completed. |
| Sensitive Type Create Begin |
The event type emits when a sensitive type request is triggered. |
| Sensitive Type Create End |
The event type emits when a sensitive type creation request is completed. |
| Sensitive Type Delete |
The event type emits when a sensitive type delete request is completed. |
| Sensitive Types Export Create Begin |
The event type is emitted when a sensitive types export resource creation request is triggered. |
| Sensitive Types Export Create End |
The event type emits when a sensitive types export resource creation request is completed. |
| Sensitive Types Export Update Begin |
The event type is emitted when a sensitive types export resource update request is triggered. |
| Sensitive Types Export Update End |
The event type is emitted when a sensitive types export resource update request is completed. |
| Sensitive Type Update Begin |
The event type emits when a sensitive type update request is triggered. |
| Sensitive Type Update End |
The event type emits when a sensitive type update request is completed. |
| Update Sensitive Type Group Begin |
The event type emits when a sensitive type group update request is triggered. |
| Update Sensitive Type Group End |
The event type emits when a sensitive type group update request is completed. |
Example 11-9 Notification text for the event type Sensitive Type Create Begin
{
"eventType": "com.oraclecloud.datasafe.createsensitivetype.begin",
"cloudEventsVersion": "0.1",
"eventTypeVersion": "2.0",
"source": "DataSafe",
"eventTime": "2021-11-18T11:06:46.588Z",
"contentType": "application/json",
"data": {
"compartmentId": "ocid1.tenancy.oc1..unique_ID",
"compartmentName": "example-compartment",
"resourceName": "sensitiveTypes",
"resourceId": "ocid1.coreservicesworkrequest.oc1..unique_ID",
"availabilityDomain": "ad1",
},
"eventID": "unique_ID",
"extensions": {
"compartmentId": "ocid1.tenancy.oc1..unique_ID"
}
}
Data Masking Event Types
| Friendly Name | Event Type and Description |
|---|---|
| Masking Column Delete |
The event type emits when a masking column delete request is completed. |
| Masking Columns Patch Begin |
The event type emits when a masking columns patch request is triggered by a user. |
| Masking Columns Patch End |
The event type emits when a masking columns patch request is completed. |
| Masking Health Check Begin |
The event type emits when a masking policy health report creation request is triggered by a user. |
| Masking Health Check Delete Begin |
The event type emits when a masking policy health report deletion request is triggered by a user. |
| Masking Health Check Delete End |
The event type emits when a masking policy health report deletion request is completed. |
| Masking Health Check End |
The event type emits when a masking policy health report creation request is completed. |
| Masking Job Begin |
The event type emits when a masking job creation request is triggered by a user. |
| Masking Job End |
The event type emits when a masking job creation request is completed. |
| Masking Library Format Create Begin |
The event type emits when a library masking format creation request is triggered by a user. |
| Masking Library Format Create End |
The event type emits when a library masking format creation request is completed. |
| Masking Library Format Delete |
The event type emits when a library masking format delete request is completed. |
| Masking Library Format Update Begin |
The event type emits when a library masking format update request is triggered by a user. |
| Masking Library Format Update End |
The event type emits when a library masking format update request is completed. |
| Masking Policy Create Begin |
The event type emits when a masking policy creation request is triggered by a user. |
| Masking Policy Create End |
The event type emits when a masking policy creation request is completed. |
| Masking Policy Delete Begin |
The event type emits when a masking policy deletion request is triggered by a user. |
| Masking Policy Delete End |
The event type emits when a masking policy deletion request is completed. |
| Masking Policy Update Begin |
The event type emits when a masking policy update request is triggered by a user. |
| Masking Policy Update End |
The event type emits when a masking policy update request is completed. |
| Masking Report Delete Begin |
The event type emits when a masking report delete request is triggered by a user. |
| Masking Report Delete End |
The event type emits when a masking report delete request is completed. |
Example 11-10 Notification text for the event type Masking Library Format Create Begin
{
"eventType": "com.oraclecloud.datasafe.createlibrarymaskingformat.begin",
"cloudEventsVersion": "0.1",
"eventTypeVersion": "2.0",
"source": "DataSafe",
"eventTime": "2021-11-18T11:06:46.588Z",
"contentType": "application/json",
"data": {
"compartmentId": "ocid1.tenancy.oc1..unique_ID",
"compartmentName": "example-compartment",
"resourceName": "libraryMaskingFormats",
"resourceId": "ocid1.coreservicesworkrequest.oc1..unique_ID",
"availabilityDomain": "ad1",
},
"eventID": "unique_ID",
"extensions": {
"compartmentId": "ocid1.tenancy.oc1..unique_ID"
}
}SQL Firewall Event Types
The following table describes event types for SQL Firewall in Oracle Data Safe.
| Friendly Name | Event Type and Description |
|---|---|
| Database Security Config Cleanup | com.oraclecloud.datasafe.cleanupdatabasesecurityconfigThe event is emitted when a database security configuration is deleted. |
| Database Security Config Create Begin | com.oraclecloud.datasafe.createdatabasesecurityconfig.beginThe event is emitted when a database security configuration is started. |
| Database Security Config Create End | com.oraclecloud.datasafe.createdatabasesecurityconfig.endThe event is emitted when a database security configuration is finished. |
| Database Security Config Refresh Begin | com.oraclecloud.datasafe.refreshdatabasesecurityconfig.beginThe event is emitted when a database security configuration refresh is started. |
| Database Security Config Refresh End |
The event is emitted when a database security configuration refresh is finished. |
| Database Security Config Update Begin | com.oraclecloud.datasafe.updatedatabasesecurityconfig.beginThe event is emitted when a database security configuration update is started. |
| Database Security Config Update End | com.oraclecloud.datasafe.updatedatabasesecurityconfig.endThe event is emitted when a database security configuration update is finished. |
| Security Policy Auto Create | com.oraclecloud.datasafe.autocreatesecuritypolicyThe event is emitted when a security policy is created by the system. |
| Security Policy Cleanup | com.oraclecloud.datasafe.cleanupsecuritypolicyThe event is emitted when a security policy is deleted by the system. |
| Security Policy Deployment Auto Create | com.oraclecloud.datasafe.autocreatesecuritydeploymentpolicyThe event is emitted when a security policy deployment is created by the system. |
| Security Policy Deployment Cleanup | com.oraclecloud.datasafe.cleanupsecuritydeploymentpolicyThe event is emitted when a security policy deployment is deleted. |
| Security Policy Deployment Update Begin | com.oraclecloud.datasafe.updatesecuritydeploymentpolicy.beginThis event is emitted when a security policy deployment update is started. |
| Security Policy Deployment Update End | com.oraclecloud.datasafe.updatesecuritydeploymentpolicy.endThis event is emitted when a security policy deployment update is finished. |
| Security Policy Update Begin | com.oraclecloud.datasafe.updatesecuritypolicy.beginThe event is emitted when a security policy update is started. |
| Security Policy Update End | com.oraclecloud.datasafe.updatesecuritypolicy.endThis event is emitted when a security policy update is finished. |
| SQL Firewall Allowed SQL Bulk Create Begin | com.oraclecloud.datasafe.BulkCreateSqlFirewallAllowedSqls.beginThe event is emitted when a bulk create of allowed SQLs is started. |
| SQL Firewall Allowed SQL Bulk Create End | com.oraclecloud.datasafe.BulkCreateSqlFirewallAllowedSqls.endThe event is emitted when a bulk create of allowed SQLs is finished. |
| SQL Firewall Allowed SQL Bulk Delete Begin | com.oraclecloud.datasafe.BulkDeleteSqlFirewallAllowedSqls.beginThis event is emitted when a bulk delete of allowed SQLs is started. |
| SQL Firewall Allowed SQL Bulk Delete End | com.oraclecloud.datasafe.BulkDeleteSqlFirewallAllowedSqls.endThis event is emitted when a bulk delete of allowed SQLs is finished. |
| SQL Firewall Allowed SQL Delete Begin | com.oraclecloud.datasafe.DeleteSqlFirewallAllowedSql.beginThis event is emitted when a delete of allowed SQL is started. |
| SQL Firewall Allowed SQL Delete End | com.oraclecloud.datasafe.DeleteSqlFirewallAllowedSql.endThis event is emitted when a delete of allowed SQL is finished. |
| SQL Firewall Collection Auto Create | com.oraclecloud.datasafe.autocreatesqlcollectionThe event is emitted when a SQL Firewall collection is created by the system. |
| SQL Firewall Collection Cleanup | com.oraclecloud.datasafe.cleanupsqlcollectionThe event is emitted when a SQL Firewall collection is deleted by the system. |
| SQL Firewall Collection Create Begin | com.oraclecloud.datasafe.createsqlcollection.beginThe event is emitted when creation of a SQL Firewall collection is started. |
| SQL Firewall Collection Create End | com.oraclecloud.datasafe.createsqlcollection.endThe event is emitted when creation of a SQL Firewall collection is finished. |
| SQL Firewall Collection Delete Begin | com.oraclecloud.datasafe.deletesqlcollection.beginThe event is emitted when deletion of a SQL Firewall collection is started. |
| SQL Firewall Collection Delete End | com.oraclecloud.datasafe.deletesqlcollection.endThe event is emitted when deletion of a SQL Firewall collection is finished. |
| SQL Firewall Collection Insights Refresh Begin | com.oraclecloud.datasafe.refreshsqlcollectionloginsights.beginThe event is emitted when a SQL Firewall collection insights refresh is started. |
| SQL Firewall Collection Insights Refresh End | com.oraclecloud.datasafe.refreshsqlcollectionloginsights.endThe event is emitted when a SQL Firewall collection insights refresh is finished. |
| SQL Firewall Collection Logs Purge Begin | com.oraclecloud.datasafe.purgesqlcollectionlogs.beginThe event is emitted when a SQL Firewall collection logs purge is started. |
| SQL Firewall Collection Logs Purge End | com.oraclecloud.datasafe.purgesqlcollectionlogs.endThe event is emitted when a SQL Firewall collection logs purge is finished. |
| SQL Firewall Collection Start Begin | com.oraclecloud.datasafe.startsqlcollection.beginThe event is emitted when a SQL Firewall collection is started. |
| SQL Firewall Collection Start End | com.oraclecloud.datasafe.startsqlcollection.endThe event is emitted when a SQL Firewall collection is finished. |
| SQL Firewall Collection Stop Begin | com.oraclecloud.datasafe.stopsqlcollection.beginThe event is emitted when a SQL Firewall collection stop is started. |
| SQL Firewall Collection Stop End | com.oraclecloud.datasafe.stopsqlcollection.endThe event is emitted when a SQL Firewall collection stop is finished. |
| SQL Firewall Collection Update Begin |
This event is emitted when a SQL firewall collection update is started. |
| SQL Firewall Collection Update End | com.oraclecloud.datasafe.updatesqlcollection.endThis event is emitted when a SQL Firewall collection update is finished. |
| SQL Firewall Policy Auto Create | com.oraclecloud.datasafe.autocreatesqlfirewallpolicyThe event is emitted when a SQL Firewall policy is created by a system. |
| SQL Firewall Policy Cleanup | com.oraclecloud.datasafe.cleanupsqlfirewallpolicyThe event is emitted when a SQL Firewall policy is deleted. |
| SQL Firewall Policy Delete Begin | com.oraclecloud.datasafe.deletesqlfirewallpolicy.beginThe event is emitted when deletion for a SQL Firewall policy is started. |
| SQL Firewall Policy Delete End | com.oraclecloud.datasafe.deletesqlfirewallpolicy.endThe event is emitted when deletion for a SQL Firewall policy is finished. |
| SQL Firewall Policy Generate Begin | com.oraclecloud.datasafe.generatesqlfirewallpolicy.beginThe event is emitted when generation of a SQL Firewall policy is started. |
| SQL Firewall Policy Generate End | com.oraclecloud.datasafe.generatesqlfirewallpolicy.endThe event is emitted when generation of a SQL Firewall policy is finished. |
| SQL Firewall Policy Update Begin | com.oraclecloud.datasafe.updatesqlfirewallpolicy.beginThis event is emitted when a SQL Firewall policy update is started. |
| SQL Firewall Policy Update End | com.oraclecloud.datasafe.updatesqlfirewallpolicy.endThis event is emitted when a SQL Firewall policy update is finished. |
Security Policies Event Types
The following table describes event types for Security Policies in Oracle Data Safe.
| Security Policy Configuration Create - Begin | com.oraclecloud.datasafe.createsecuritypolicyconfig.beginThe event type is emitted at the start of a security policy config creation. |
| Security Policy Configuration Create - End | com.oraclecloud.datasafe.createsecuritypolicyconfig.endThe event type is emitted at the end of a security policy config creation. |
| Security Policy Configuration Delete - Begin | com.oraclecloud.datasafe.deletesecuritypolicyconfig.beginThe event type is emitted at the start of security policy config deletion. |
| Security Policy Configuration Delete - End | com.oraclecloud.datasafe.deletesecuritypolicyconfig.endThe event type is emitted at the end of security policy config deletion. |
| Security Policy Configuration Update - Begin | com.oraclecloud.datasafe.updatesecuritypolicyconfig.beginThe event type is emitted at the start of security policy config update. |
| Security Policy Configuration Update - End | com.oraclecloud.datasafe.updatesecuritypolicyconfig.endThe event type is emitted at the end of security policy config update. |
| Security Policy Create - Begin | com.oraclecloud.datasafe.createsecuritypolicy.beginThe event type is emitted at the start of an security policy creation. |
| Security Policy Create - End | com.oraclecloud.datasafe.createsecuritypolicy.endThe event type is emitted at the end of an security policy creation. |
| Security Policy Create - End | com.oraclecloud.datasafe.deletesecuritypolicy.endThe event type is emitted at the end of a security policy deletion. |
| Security Policy Delete - Begin | com.oraclecloud.datasafe.deletesecuritypolicy.beginThe event type is emitted at the start of a security policy deletion. |
| Security Policy Deploy - Begin | com.oraclecloud.datasafe.deploysecuritypolicy.beginThe event type is emitted at the start of security policy deployment. |
| Security Policy Deploy - End | com.oraclecloud.datasafe.deploysecuritypolicy.endThe event type is emitted at the end of security policy deployment. |
| Security Policy Deployment Create - Begin | com.oraclecloud.datasafe.createsecuritypolicydeployment.beginThe event type is emitted at the start of a security policy deployment creation. |
| Security Policy Deployment Create - End | com.oraclecloud.datasafe.createsecuritypolicydeployment.endThe event type is emitted at the end of a security policy deployment creation. |
| Security Policy Deployment Delete - Begin | com.oraclecloud.datasafe.deletesecuritypolicydeployment.beginThe event type is emitted at the start of security policy deployment deletion. |
| Security Policy Deployment Delete - End | com.oraclecloud.datasafe.deletesecuritypolicydeployment.endThe event type is emitted at the end of security policy deployment deletion. |
| Security Policy Deployment Refresh - Begin | com.oraclecloud.datasafe.refreshsecuritypolicydeployment.beginThe event type is emitted at the start of security policy deployment refresh. |
| Security Policy Deployment Refresh - End | com.oraclecloud.datasafe.refreshsecuritypolicydeployment.endThe event type is emitted at the end of security policy deployment refresh. |
| Unified Audit Policy Bulk Create - Begin | com.oraclecloud.datasafe.bulkcreateunifiedauditpolicy.beginThe event type is emitted at the start of an bulk creation of unified audit policies.. |
| Unified Audit Policy Bulk Create - End | com.oraclecloud.datasafe.bulkcreateunifiedauditpolicy.endThe event type is emitted at the end of an bulk creation of unified audit policies.. |
| Unified Audit Policy Create - Begin | com.oraclecloud.datasafe.createunifiedauditpolicy.beginThe event type is emitted at the start of an unified audit policy creation. |
| Unified Audit Policy Create - End | com.oraclecloud.datasafe.createunifiedauditpolicy.endThe event type is emitted at the end of an unified audit policy creation. |
| Unified Audit Policy Definition Delete - Begin | com.oraclecloud.datasafe.deleteunifiedauditpolicydefinition.beginThe event type is emitted at the start of unified audit policy definition deletion. |
| Unified Audit Policy Definition Delete - End | com.oraclecloud.datasafe.deleteunifiedauditpolicydefinition.endThe event type is emitted at the start of unified audit policy definition deletion. |
| Unified Audit Policy Definition Update - Begin | com.oraclecloud.datasafe.updateunifiedauditpolicydefinition.beginThe event type is emitted at the start of unified audit policy definition update. |
| Unified Audit Policy Definition Update - End | com.oraclecloud.datasafe.updateunifiedauditpolicydefinition.endThe event type is emitted at the end of unified audit policy definition update. |
| Unified Audit Policy Delete - Begin | com.oraclecloud.datasafe.deleteunifiedauditpolicy.beginThe event type is emitted at the start of unified audit policy deletion. |
| Unified Audit Policy Delete - End | com.oraclecloud.datasafe.deleteunifiedauditpolicy.end
The event type is emitted at the end of unified audit policy deletion. |
| Unified Audit Policy Update - Begin | com.oraclecloud.datasafe.updateunifiedauditpolicy.beginThe event type is emitted at the start of unified audit policy update. |
| Unified Audit Policy Update - End | com.oraclecloud.datasafe.updateunifiedauditpolicy.endThe event type is emitted at the end of unified audit policy update. |