IBM_SECURITY_RUNTIME events

Edit online

This event type is generated when the runtime is started.

The following table lists the elements that can be shown in the output of an IBM_SECURITY_RUNTIME event.

Table 1. Elements for an IBM_SECURITY_RUNTIME event
Element Description
Domain
The XPath is:
CommonBaseEvent/extendedDataElements
[@name='Domain']/values
IsMgmtAudit
The XPath is:
CommonBaseEvent/extendedDataElements
[@name='IsMgmtAudit']/values
nameInApp
The XPath is:
CommonBaseEvent/extendedDataElements
[@name='resourceInfo']/children
[@name='nameInApp']/values
nameInPolicy
The XPath is:
CommonBaseEvent/extendedDataElements
[@name='resourceInfo']/children
[@name='nameInPolicy']/values
type
The XPath is:
CommonBaseEvent/extendedDataElements
[@name='resourceInfo']/children
[@name='type']/values
uniqueID
The XPath is:
CommonBaseEvent/extendedDataElements
[@name='resourceInfo']/children
[@name='uniqueID']/values
action
The XPath is:
CommonBaseEvent/extendedDataElements
[@name='action']/values

Samples of IBM_SECURITY_RUNTIME events

The following example shows an events generated by a runtime request. 
<CommonBaseEvent 
creationTime="2013-07-19T06:20:18.361Z" 
extensionName="IBM_SECURITY_RUNTIME" 
globalInstanceId="FIMf5960a71013f15479e82b66d4d925" 
sequenceNumber="0" 
version="1.1">
	<contextDataElements name="Security Event Factory" 
type="eventTrailId">
		<contextId>FIM_f5960938013f1eba8b40b66d4d92542a+1655973824</contextId>
	</contextDataElements>
	<extendedDataElements name="Domain" type="string">
		<values>Not Available</values>
	</extendedDataElements>
	<extendedDataElements name="IsMgmtAudit" type="boolean">
		<values>false</values>
	</extendedDataElements>
	<extendedDataElements name="resourceInfo" type="noValue">
		<children name="nameInApp" type="string">
			<values/>
		</children>
		<children name="nameInPolicy" type="string">
			<values/>
		</children>
		<children name="type" type="string">
			<values>application</values>
		</children>
		<children name="uniqueId" type="long">
			<values>0</values>
		</children>
	</extendedDataElements>
	<extendedDataElements name="action" type="string">
		<values>auditStart</values>
	</extendedDataElements>
	<extendedDataElements name="outcome" type="noValue">
		<children name="result" type="string">
			<values>SUCCESSFUL</values>
		</children>
		<children name="majorStatus" type="int">
			<values>0</values>
		</children>
	</extendedDataElements>
	<sourceComponentId application="IBM Security Verify Access" 
component="Authentication and Federated Identity" 
componentIdType="ProductName" 
executionEnvironment="Linux[amd64]#2.6.32-279.14.1.30.iss7_3.x86_64" 
location="localhost" locationType="FQHostname" 
subComponent="com.tivoli.am.fim.audit.event.impl.RuntimeAuditAdapterImpl" 
threadId="Start Level Event Dispatcher" 
componentType="http://www.ibm.com/namespaces/autonomic/Tivoli_componentTypes"/>
	<situation categoryName="ReportSituation">
		<situationType xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
xsi:type="ReportSituation" reasoningScope="INTERNAL" reportCategory="SECURITY"/>
	</situation>
</CommonBaseEvent>