Monitoring user actions
For regulatory compliance, you need to be able to monitor what users do in the cloud portal or through the APIs. For example, who invited a user to the subscription and when, who created a particular group, or who created a specific data source in the development environment. Each of these actions generates an audit event.
The following types of audit events are generated. The events that
are enabled for your subscription might differ.
You can create audit reports by using the instance services Audit
Events REST API. For an example of how to use the API, see Example: Audit Events REST API.
Audit events for actions on cloud subscriptions
| Action | Generated event |
|---|---|
| Audit events on or before the specified date were deleted. | dba.audit_events.deleted |
| The service provider certificate was created. | dba.certificate.imported |
| The service provider certificate was deleted. | dba.certificate.deleted |
| A component restart was requested for the specified environment. | dba.component.restarted |
| The desktop was created. | dba.desktop.created |
| The desktop was deleted. | dba.desktop.deleted |
| The desktop was updated. | dba.desktop.updated |
| The user accessed the specified environment. | dba.environment.accessed |
| The user group was created. | dba.group.created |
| The user group was deleted. | dba.group.deleted |
| The named members were added to the user group. | dba.group_members.added |
| The named members were deleted from the user group. | dba.group_members.deleted |
| The members of the user group were replaced by the new set of members. | dba.group_members.set |
| An import token for a service credential was created. | dba.import.token.created |
| An import token for a service credential was deleted. | dba.import.token.deleted |
| The OAuth 2.0 client credential was created. | dba.oauth_credential.created |
| The OAuth 2.0 client credential was deleted. | dba.oauth_credential.deleted |
| The user accessed the cloud portal. | dba.portal.accessed |
| The service credential was created. | dba.service_credential.created |
| The service credential was deleted. | dba.service_credential.deleted |
| The service credential was imported into the subscription. | dba.service_credential.imported |
| The user was invited to the subscription. | dba.user.invited |
| The user was deleted from the subscription. | dba.user.deleted |
| The user information was updated. | dba.user.updated |
Workflow audit events
| Action | Generated event |
|---|---|
| The application was installed on the workflow server. | baw.application.installed |
| The application was updated. | baw.application.updated |
| The application was started. | baw.application.started |
| The application was stopped. | baw.application.stopped |
| The application was uninstalled. | baw.application.uninstalled |
| The data source was created. | baw.datasource.created |
| The data source was deleted. | baw.datasource.deleted |
| The data source was updated. | baw.datasource.updated |
| The data source was updated to use the specified authentication alias. | baw.datasource_alias.updated |
| The custom property of the data source was updated. | baw.datasource_custom_property.updated |
| The connection pool property of the data source was updated. | baw.datasource_connection_pool.updated |
| A cluster restart was requested in the specified environment. | baw.cluster.restarted |
| The data source details were updated for the specified environment. | baw.datasource.updated |
| The failed event was submitted for processing again. | baw.failed_event.resubmitted |
| The JDBC driver was created for the specified environment. | baw.jdbc_driver.created |
| The JDBC driver for the specified environment was deleted. | baw.jdbc_driver.deleted |
| All failed events were submitted for processing again. | baw.all_failed_events.resubmitted |
| The failed event was discarded in the specified environment. | baw.failed_event.discarded |
| All failed events were discarded. | baw.all_failed_events.discarded |
| A workflow server restart was requested in the specified environment. | baw.environment.restarted |
| The user uploaded a plug-in for a custom IBM® Navigator desktop. | baw.plugin_upload.started |