How-To Guides
...
SIEM and Syslog Integration
APPENDIX 1: Event Types
1 min
type description /aaa/freeradius/8021 x/config/get listing records in radius 802 1x configuration event in administration/radius 802 1x config page /aaa/freeradius/8021 x/config/get listing records in radius 802 1x configuration event in the administration/radius 802 1x config page /aapm/account/delete deleting the aapm account event in the aapm management page /aapm/account/save creating/editing account event in the aapm management page /aapm/account/search searching the aapm account event on the aapm management page /aapm/config/save creating/editing configuration events on the aapm management page /aapm/config/search searching aapm configuration event on the aapm management page /aapm/trigger/delete deleting the aapm trigger event from the aapm management page /aapm/trigger/save creating/editing trigger events on the aapm management page /aapm/trigger/search searching aapm trigger event on the aapm management page /aapm/trigger process/search searching appm trigger process event on the aapm management page /addpermissiontoaccount adding permission to account events via api /addsapmaccount adding sapm account event via api /addsapmgroup adding sapm group event via api /command/save adding new commands or editing existing command events in the privileged task manager/command template page /createsapmgroups creating sapm group events via api /deleteapprovalmanagerfromsapmgroup deleting the approval manager from the sapm group via api /deleteapproveduserfromaccount deleting users from the approved user list of sapm account events via api /deletepermissionfromaccount deleting sapm account's permissions event via api /deletepermissionfromgroup deleting the sapm group's permissions event via api /deletesapmaccount deleting the sapm account event via api /deletesapmgroup deleting the sapm group event via api /device/deleted deleting a device event in the device management page /device/discovered creating/editing device event in the device management page /device/group/realm/search searching device group realm event on the device management page /device/group/show/secret showing device group secret event on the device management page /device/property/added adding a device property event in the device management page /device/property/removed removing the device property event on the device management page /device/rediscovered editing devices even on the device management page /devicegroup/deleted deleting a device group event in the device management page /devicegroup/saved creating/editing device group events on the device management page /devicegroupsubnet/deleted deleting the subnet of the device group event in the device management/device group page /devicegroupsubnet/saved adding/editing device group subnet event in device management/device group page /devicerealm/deleted deleting the device realm event in the device management page /devicerealm/saved creating/editing device realm events on the device management page /devices/elementtype/delete deleting the device element type event in the device management page /devices/elementtype/save creating/editing device element type events on the device management page /devices/elementtype/search searching for device element type event in the device management page /editsapmaccount editing the sapm account event on the sapm management page /editsapmgroup editing sapm group events in sapm via api /getapprovalforaccount requesting approval for a sapm account event via api /getapprovalforgroup requesting approval for a sapm group event via api /getapproveduserlistforaccount getting a list of approved users of a sapm account event via api /getapproveduserlistforgroup getting a list of approved users of a sapm group event via api /getapproverforsapmaccount(getapproversforsapmgroup) getting a list of approvals of a sapm group event via api /getapproverforsapmgroup getting a list of approvers of a sapm account event via api /getapproversforsapmaccount getting a list of approvers of a sapm account event via api /getapproversforsapmgroup getting a list of approvals of a sapm group event via api /getapproversforsapmgroupwithgroupname getting a list of approvals of a sapm group event via api /getdevicebyid getting the device information in detail by id event via api /getdevicebyname getting the device information in detail by name event via api /getdevicegroupbyname getting the device group information in detail by name event via api /getdevicegroupsofsessionuser listing device groups of logged users via api /getdevicesofdevicegroupbydevicegroupid getting the device information in a device group by device group id event via api /getelementtypes getting all event types of events via api /getremindbeforevalues setting reminders for sapm password reservation events on the sapm manager page /getsapmgroupwithpermission getting permission for the sapm group event via api /getuserbyid getting users' credentials by id event via api /group/delete deleting user group events in the user management/user accounts page /group/save creating/editing user group events in the user management/user accounts page /group/search searching group event in the user management/user accounts/user group definition page /integration/ldap/adusernotdeleted preventing the deletion of an ldap user if the user is in a local user group /isapprovalrequired after assigning manager, sapm group/account approval is required event in the sapm management page /ldapserversave creating/editing the ldap server on the administration/ldap manager page /linuxauditreport/search searching for linux audit report events on the audit report page /listaccountsandgroupsofsapmgroup listing sapm group's accounts and sub groups events via api /listaccountsofsapmgroupforrest listing sapm group's accounts event via api /listgroupsofsapmgroupforrest listing sapm sub groups event via api /listpermissionofsapmgroup listing sapm group's permissions event via api /listpermissionsofaccount listing permission of the sapm account event via api /listsapmaccountsofgroup listing sapm accounts in a group event via api /listsapmconfigs listing all sapm config events via api /listsapmgroups listing all sapm groups' events via api /log/cli sessions/search searching session logs an event in the logging/session log page /log/tacacs account/search searching for the tacacs account event in the logging/tacacs account log page /log/user auth/search searching for user authentication log events in logging/user auth log page /mail/send sending mail event /sapm/reservation/search when you make a reservation for a sapm account on the sapm manager page /policy/agent profile/search searching agent profile events on the policy control/session policy page /policy/assignedcredential/save creating an assigned credential event in the user management/assigned credential page /policy/assignedcredential/search searching assigned credential events in the user management/assigned credential page /policy/authentication/view/search searching policy authentication events in the policy control/policy tracking page /policy/authorization/view/search searching policy authorization events in the policy control/policy tracking page /policy/blackkey/save creating/editing black key event on policy control/session policy page /policy/group/search searching policy group events on the policy control/session policy page /policy/key/search searching policy key events on the policy control/session policy page /policy/permit zone/search searching permit zone events on the policy control/session policy page /policy/policygroup/delete deleting policy group events in the policy control/session policy page /policy/policygroup/save creating/editing policy group events on the policy control/session policy page /policy/policyrealm/delete /policy/policyrealm/save creating/editing policy realm events on policy control/session policy page /policy/rdp profile/search searching rdp profile event on policy control/session policy page /policy/realm/search searching policy realm events on the policy control/session policy page /policy/session/disconnected killing active sessions event in the policy control/active session page /policy/timerestriction/save creating/editing time restriction events on the policy control/session policy page /policy/time restriction/search searching for time restriction events on the policy control/session policy page /policy/whitekey/save creating/editing white key event on policy control/session policy page /portal functions/group/search searching portal functions group event on the policy control/portal functions page /portal functions/realm/search searching the portal functions realm event on the policy control/portal functions page /sapm/account/password/changed resetting the sapm account's password event /sapm/account/delete deleting the sapm account event on the sapm management page /sapm/account/password/changed changing the sapm accounts' password event /sapm/account/save creating/editing sapm account events on the sapm management page /sapm/account/search searching sapm account events on the sapm management page /sapm/auto/import/rule/save creating/editing sapm auto import rules event in sapm management/auto import rules page /sapm/auto/import/rule/search searching sapm auto import rules event on the sapm management/auto import rules page /sapm/config/delete deleting the sapm configuration event in the sapm management page /sapm/config/save creating/editing sapm configuration events on the sapm management page /sapm/config/search searching sapm configuration event on the sapm management page /sapm/group/delete deleting the sapm group event in the sapm management page /sapm/new/users/log/search searching sapm's new user's log event in the sapm management page /sapm/password/change/log/history/search searching the sapm password change log history event in the sapm management page /sapm/password/change/log/search searching the sapm password change log event in the sapm management page /sapm/password/change/log/search searching the sapm password check log event in the sapm management page /sapm/reservation/delete deleting the sapm account's password reservation event in the sapm management page /sapm/reservation/search searching the sapm account's password reservation event in the sapm management page /sapmgroup/saved creating/editing sapm group event in sapm management page /sdd/discovery/search searching for sensitive data discovery events in the sensitivity data discovery page /sdd/pattern/search searching for sensitive data discovery pattern event in the sensitivity data discovery page /sdvgroup/saved creating/editing secret data vault group in the secret data vault page /searchsapmaccounts searching the sapm account event via api /searchsapmconfig searching sapm configuration event via api /secret/data/vault/delete deleting the secret data vault record event in the secret data vault page /secret/data/vault/group/deleted deleting a group of secret data vault events in the secret data vault page /secret/data/vault/save creating/editing secret data vault event in the secret data vault page /secret/data/vault/search searching secret data vault event in the secret data vault page /secret/data/vault/show showing secret data vault event in the secret data vault page /setapprovalmanagersforsapmaccount setting a list of approvers of an sapm account event via api /setapprovalmanagersforsapmgroup setting a list of approval managers for an sapm group event via api /setpermissionforgroup setting the sapm group's permissions event via api /showoldpassword showing the old password record of each sapm account event via api /showoldpasswordrecordsforaccount showing the old password record of each sapm account event /system/config/delete deleting the system configuration parameter event /system/config/save creating/editing system configuration parameter event /system/config/search searching system configuration parameters event /tfa/lastotp checking the user's last otp used time event (this event occurs when the otp cache time is set on the related application) /tfa/otpstatus checking if 2fa is enabled for the user /tfa/otpvalid applying the otp validation event for a user /updatepassword updating password event /user/delete deleting a user event in the user management/user account page /user/lock locking the user event in the user management/user account page /user/passwordchange changing the user's password event in the user management/user account page /user/passwordreset resetting the user's password event in the user management/user account page /user/save creating/editing user event in user management/user account page /user/search searching for user events in the user management/user account page /user/unlock unlocking the user event in the api /user/update updating the user event in the user management/user account page /user approval/search searching for user approval requests event /userrealm/delete deleting the portal function user realm event /userrealm/save creating/editing portal function user realm event /windowsauditreport/search searching for windows audit report events on the audit report page example parameter and description details can be found in the event log parameter description table document as an external document event types may change and increase with each release