How-To Guides
...
Integration Guides
SIEM and Syslog Integration

APPENDIX 1: Event Types

1min

Type

DESCRIPTION

/aaa/freeradius/8021.x/config/get

Listing records in Radius 802.1x Configuration event in Administration/Radius 802.1x Config page

/aaa/freeradius/8021.x/config/get

Listing records in Radius 802.1x Configuration event in the Administration/Radius 802.1x Config page

/aapm/account/delete

Deleting the AAPM account event in the AAPM Management page

/aapm/account/save

Creating/Editing account event in the AAPM Management page

/aapm/account/search

Searching the AAPM account event on the AAPM Management page

/aapm/config/save

Creating/Editing configuration events on the AAPM Management page

/aapm/config/search

Searching AAPM configuration event on the AAPM Management page

/aapm/trigger/delete

Deleting the AAPM trigger event from the AAPM Management page

/aapm/trigger/save

Creating/Editing trigger events on the AAPM Management page

/aapm/trigger/search

Searching AAPM trigger event on the AAPM Management page

/aapm/trigger-process/search

Searching APPM trigger process event on the AAPM Management page

/addPermissionToAccount

Adding permission to account events via API

/addSapmAccount

Adding SAPM account event via API

/addSapmGroup

Adding SAPM group event via API

/command/save

Adding new commands or editing existing command events in the Privileged Task Manager/Command Template page

/createSapmGroups

Creating SAPM group events via API

/deleteApprovalManagerFromSapmGroup

Deleting the approval manager from the SAPM group via API

/DeleteApprovedUserFromAccount

Deleting users from the approved user list of SAPM Account events via API

/deletePermissionFromAccount

Deleting SAPM account's permissions event via API

/deletePermissionFromGroup

Deleting the SAPM group's permissions event via API

/deleteSapmAccount

Deleting the SAPM account event via API

/deleteSapmGroup

Deleting the SAPM group event via API

/device/deleted

Deleting a device event in the Device Management page

/device/discovered

Creating/Editing device event in the Device Management page

/device/group/realm/search

Searching device group realm event on the Device Management page

/device/group/show/secret

Showing device group secret event on the Device Management page

/device/property/added

Adding a device property event in the Device Management page

/device/property/removed

Removing the device property event on the Device Management page

/device/reDiscovered

Editing devices even on the Device Management page

/deviceGroup/deleted

Deleting a device group event in the Device Management page

/deviceGroup/saved

Creating/Editing device group events on the Device Management page

/deviceGroupSubnet/deleted

Deleting the subnet of the device group event in the Device Management/Device Group page

/deviceGroupSubnet/saved

Adding/Editing device group subnet event in Device Management/Device Group page

/deviceRealm/deleted

Deleting the device realm event in the Device Management page.

/deviceRealm/saved

Creating/Editing device realm events on the Device Management page.

/devices/elementType/delete

Deleting the device element type event in the Device Management page

/devices/elementType/save

Creating/Editing device element type events on the Device Management page

/devices/elementType/search

Searching for device element type event in the Device Management page

/editSapmAccount

Editing the SAPM account event on the SAPM Management page.

/editSapmGroup

Editing SAPM group events in SAPM via API

/getApprovalForAccount

Requesting approval for a SAPM account event via API

/GetApprovalForGroup

Requesting approval for a SAPM group event via API

/getApprovedUserListForAccount

Getting a list of approved users of a SAPM account event via API

/getApprovedUserListForGroup

Getting a list of approved users of a SAPM group event via API

/getApproverForSapmAccount(getApproversForSapmGroup)

Getting a list of approvals of a SAPM group event via API

/getApproverForSapmGroup

Getting a list of approvers of a SAPM account event via API

/getApproversForSapmAccount

Getting a list of approvers of a SAPM account event via API

/getApproversForSapmGroup

Getting a list of approvals of a SAPM group event via API

/getApproversForSapmGroupWithGroupName

Getting a list of approvals of a SAPM group event via API

/getDeviceById

Getting the device information in detail by ID event via API

/getDeviceByName

Getting the device information in detail by name event via API

/getDeviceGroupByName

Getting the device group information in detail by name event via API

/getDeviceGroupsOfSessionUser

Listing Device groups of logged users via API

/getDevicesOfDeviceGroupByDeviceGroupId

Getting the device information in a device group by device group ID event via API

/getElementTypes

Getting all event types of events via API

/getRemindBeforeValues

Setting reminders for SAPM password reservation events on the SAPM Manager page

/getSapmGroupWithPermission

Getting permission for the SAPM group event via API

/getUserById

Getting users' credentials by ID event via API

/group/delete

Deleting user group events in the User Management/User Accounts page

/group/save

Creating/Editing User group events in the User Management/User Accounts page

/group/search

Searching group event in the User Management/User Accounts/User Group Definition page

/integration/ldap/adUserNotDeleted

Preventing the deletion of an LDAP user if the user is in a local User group

/isApprovalRequired

After assigning manager, SAPM group/account approval is required event in the SAPM Management page

/ldapServerSave

Creating/Editing the LDAP server on the Administration/LDAP Manager page

/linuxAuditReport/search

Searching for Linux Audit Report events on the Audit Report page

/listAccountsAndGroupsOfSapmGroup

Listing SAPM group's accounts and sub-groups events via API

/listAccountsOfSapmGroupForRest

Listing SAPM group's accounts event via API

/listGroupsOfSapmGroupForRest

Listing SAPM sub-groups event via API

/listPermissionOfSapmGroup

Listing SAPM group's permissions event via API

/listPermissionsOfAccount

Listing permission of the SAPM account event via API

/listSapmAccountsOfGroup

Listing SAPM accounts in a group event via API

/listSapmConfigs

Listing all SAPM config events via API

/listSapmGroups

Listing all SAPM groups' events via API

/log/cli-sessions/search

Searching session logs an event in the Logging/Session Log page

/log/tacacs-account/search

Searching for the TACACS account event in the Logging/TACACS Account Log page

/log/user-auth/search

Searching for user authentication log events in Logging/User Auth. Log page

/mail/send

Sending mail event

/sapm/reservation/search

When you make a reservation for a SAPM account on the SAPM Manager page.

/policy/agent-profile/search

Searching agent profile events on the Policy Control/Session Policy page.

/policy/assignedCredential/save

Creating an assigned credential event in the User Management/Assigned Credential page

/policy/assignedCredential/search

Searching assigned credential events in the User Management/Assigned Credential page

/policy/authentication/view/search

Searching policy authentication events in the Policy Control/Policy Tracking page

/policy/authorization/view/search

Searching policy authorization events in the Policy Control/Policy Tracking page

/policy/blackKey/save

Creating/Editing Black Key event on Policy Control/Session Policy page

/policy/group/search

Searching policy group events on the Policy Control/Session Policy page

/policy/key/search

Searching policy key events on the Policy Control/Session Policy page

/policy/permit-zone/search

Searching permit zone events on the Policy Control/Session Policy page

/policy/policyGroup/delete

Deleting policy group events in the Policy Control/Session Policy page

/policy/policyGroup/save

Creating/Editing policy group events on the Policy Control/Session Policy page

/policy/policyRealm/delete



/policy/policyRealm/save

Creating/Editing policy realm events on Policy Control/Session Policy page

/policy/rdp-profile/search

Searching RDP profile event on Policy Control/Session Policy page

/policy/realm/search

Searching policy realm events on the Policy Control/Session Policy page

/policy/session/disconnected

Killing active sessions event in the Policy Control/Active Session page

/policy/timeRestriction/save

Creating/Editing time restriction events on the Policy Control/Session Policy page

/policy/time-restriction/search

Searching for time restriction events on the Policy Control/Session Policy page

/policy/whiteKey/save

Creating/Editing White Key event on Policy Control/Session Policy page

/portal-functions/group/search

Searching portal functions group event on the Policy Control/Portal Functions page

/portal-functions/realm/search

Searching the portal functions realm event on the Policy Control/Portal Functions page

/sapm/account/password/changed

Resetting the SAPM account's password event

/sapm/account/delete

Deleting the SAPM account event on the SAPM Management page

/sapm/account/password/changed

Changing the SAPM accounts' password event

/sapm/account/save

Creating/Editing SAPM account events on the SAPM Management page

/sapm/account/search

Searching SAPM account events on the SAPM Management page

/sapm/auto/import/rule/save

Creating/Editing SAPM auto-import rules event in SAPM Management/Auto-Import Rules page

/sapm/auto/import/rule/search

Searching SAPM auto-import rules event on the SAPM Management/Auto-Import Rules page

/sapm/config/delete

Deleting the SAPM configuration event in the SAPM Management page

/sapm/config/save

Creating/Editing SAPM configuration events on the SAPM Management page

/sapm/config/search

Searching SAPM configuration event on the SAPM Management page

/sapm/group/delete

Deleting the SAPM group event in the SAPM Management page

/sapm/new/users/log/search

Searching SAPM's new user's log event in the SAPM Management page

/sapm/password/change/log/history/search

Searching the SAPM password change log history event in the SAPM Management page

/sapm/password/change/log/search

Searching the SAPM password change log event in the SAPM Management page

/sapm/password/change/log/search

Searching the SAPM password check log event in the SAPM Management page

/sapm/reservation/delete

Deleting the SAPM account's password reservation event in the SAPM Management page

/sapm/reservation/search

Searching the SAPM account's password reservation event in the SAPM Management page

/SAPMGroup/saved

Creating/Editing SAPM group event in SAPM Management page

/sdd/discovery/search

Searching for sensitive data discovery events in the Sensitivity Data Discovery page

/sdd/pattern/search

Searching for sensitive data discovery pattern event in the Sensitivity Data Discovery page

/SdvGroup/saved

Creating/Editing secret data vault group in the Secret Data Vault page

/searchSapmAccounts

Searching the SAPM account event via API

/searchSapmConfig

Searching SAPM configuration event via API

/secret/data/vault/delete

Deleting the secret data vault record event in the Secret Data Vault page

/secret/data/vault/group/deleted

Deleting a group of secret data vault events in the Secret Data Vault page

/secret/data/vault/save

Creating/Editing secret data vault event in the Secret Data Vault page

/secret/data/vault/search

Searching secret data vault event in the Secret Data Vault page

/secret/data/vault/show

Showing secret data vault event in the Secret Data Vault page

/setApprovalManagersForSapmAccount

Setting a list of approvers of an SAPM account event via API

/setApprovalManagersForSapmGroup

Setting a list of approval managers for an SAPM group event via API

/setPermissionForGroup

Setting the SAPM group's permissions event via API

/showOldPassword

Showing the old password record of each SAPM account event via API

/showOldPasswordRecordsForAccount

Showing the old password record of each SAPM account event

/system/config/delete

Deleting the system configuration parameter event

/system/config/save

Creating/Editing system configuration parameter event

/system/config/search

Searching system configuration parameters event

/tfa/lastOtp

Checking the user's last OTP used time event (this event occurs when the OTP cache time is set on the related application)

/tfa/otpStatus

Checking if 2FA is enabled for the user

/tfa/otpValid

Applying the OTP validation event for a user

/updatePassword

Updating password event

/user/delete

Deleting a user event in the User Management/User Account page

/user/lock

Locking the user event in the User Management/User Account page

/user/passwordchange

Changing the user's password event in the User Management/User Account page

/user/passwordreset

Resetting the user's password event in the User Management/User Account page

/user/save

Creating/Editing user event in User Management/User Account page

/user/search

Searching for user events in the User Management/User Account page

/user/unlock

Unlocking the user event in the API

/user/update

Updating the user event in the User Management/User Account page

/user-approval/search

Searching for user approval requests event

/userRealm/delete

Deleting the Portal Function user realm event

/userRealm/save

Creating/Editing Portal Function user realm event

/windowsAuditReport/search

Searching for Windows Audit Report events on the Audit Report page

  • Example Parameter and Description details can be found in the Event Log Parameter Description Table Document as an external document.
  • Event types may change and increase with each release.