Agent health events payload

The following IBM® Verify agent event attributes are available when generating reports.

Agent health event attributes

The following table lists the additional attributes that are contained in the agent events.

Table 1. Agent event attributes
Name	Data type	Description
data.action	String	The action performed by a user for the resource.
data.cause	String	The message describing the action.
data.data_resource	String	A specific resource or dataset that is associated with the main data object, such as a file, database entry, API resource, or structured data.
data.deploymentId	String	A unique identifier for a deployment, such as a deployment of an application, service, or resource in a cloud or software environment.
data.errors	Integer	The number of errors which were encountered within the agent polling period.
data.instanceId	String	The unique identifier of the agent instance.
data.origin	String	IP address of system that caused event to be generated
data.performedby	String	The Cloud Directory userid or the UUID of the API client.
data.performedby_clientname	String	The API client name.
data.performedby_realm	String	The realm of the person who performed the action.
data.performedby_type	String	API, System, or User.
data.performedby_username	String	The username of the person who performed the action.
data.requests	Integer	The number of requests that were processed by the agent.
data.resource	String	A specific resource related to the context, such as a file, database record, API endpoint, or any entity being accessed or manipulated.
data.result	String	Success or failure
data.state	String	The current status or condition of the object, process, or resource described by data, such as "available", "needs attention", "unavailable", or another relevant state value.
data.target	String	The intended destination, recipient, or object of an action or operation, such as a target agent.
data.targetId	String	The a unique identifier for a target entity, such as an agent that an action is directed toward.
geoip.city_name geoio.continent_name geoip.country_iso_code geoip.country_name geoip.location geoip.region_name	String	Augmented by Event service by using `data.origin`

Example

The following code is a sample payload. Use the Events APIs to get the actual attributes. See https://docs.verify.ibm.com/verify/reference/getallevents and https://docs.verify.ibm.com/verify/docs/pulling-event-data.

{
          "geoip": {
            "continent_name": "North America",
            "as_org": "SOFTLAYER",
            "city_name": "Ashburn",
            "country_iso_code": "USA",
            "ip": "169.55.102.86",
            "country_name": "United States",
            "region_name": "Virginia",
            "location": {
              "lon": "-77.539",
              "lat": "39.018"
            },
            "asn": 36351
          },
          "event_type": "agent",
          "data": {
            "performedby_type": "user",
            "targetid": "2dcac7d4-ea28-41e0-b0bd-65ae5cace4a0",
            "resource": "application_gateway",
            "origin": "169.55.102.86",
            "performedby_username": "scott",
            "cause": "Application gateway instance health updated",
            "requests": 80,
            "performedby_realm": "cloudIdentityRealm",
            "target": "NonAdminTest",
            "result": "success",
            "instance_id": "iag-what-is-8u",
            "performedby": "32300114TO",
            "action": "modified",
            "deployment_id": "iag-deployment-test-ashd78",
            "state": "available",
            "performedby_clientname": "",
            "errors": 3
          },
          "month": 8,
          "indexed_at": 1754249724329,
          "year": 2025,
          "tenantid": "e41a4d27-71a4-417b-89b6-daefa6c183ed",
          "tenantname": "iagisv-icd.dev.verify.ibmcloudsecurity.com",
          "correlationid": "CORR_ID-AK82add48a-9a1c-4e4a-9e5d-de84819d1580",
          "id": "0d77cb1d-2078-4134-ad0a-d02b28cee415",
          "time": 1754249723836,
          "day": 3
        }