How-To Guides
...
Integration Guides
Integrate with SIEM Systems

Event Types

1min

See the Event Log Parameter Descriptions for sample parameter and description details.

Event types may change and/or be added with each release.

Type

Description

/aaa/freeradius/8021.x/config/get

Listing records in the Radius 802.1x Configuration event in the Administration/Radius 802.1x Config page

/aaa/freeradius/8021.x/config/get

Listing records in the Radius 802.1x Configuration event in the Administration/Radius 802.1x Config page

/aapm/account/delete

Deleting AAPM account event in the AAPM Management page

/aapm/account/save

Creating/Editing account event in the AAPM Management page

/aapm/account/search

Searching AAPM account event in the AAPM Management page

/aapm/config/save

Creating/Editing configuration event in the AAPM Management page

/aapm/config/search

Searching AAPM configuration event in the AAPM Management page

/aapm/trigger/delete

Deleting AAPM trigger event in the AAPM Management page

/aapm/trigger/save

Creating/Editing trigger event in the AAPM Management page

/aapm/trigger/search

Searching AAPM trigger event in the AAPM Management page

/aapm/trigger-process/search

Searching APPM trigger process event in the AAPM Management page

/addPermissionToAccount

Adding permission to account event via API

/addSapmAccount

Adding SAPM account event via API

/addSapmGroup

Adding SAPM group event via API

/command/save

Adding new command or editing existing command event in the Privileged Task Manager/Command Template page

/createSapmGroups

Creating SAPM groups event via API

/deleteApprovalManagerFromSapmGroup

Deleting approval manager from SAPM group via API

/DeleteApprovedUserFromAccount

Deleting user from approved user list of SAPM Account event via API

/deletePermissionFromAccount

Deleting SAPM account’s permissions event via API

/deletePermissionFromGroup

Deleting SAPM group’s permissions event via API

/deleteSapmAccount

Deleting SAPM account event via API

/deleteSapmGroup

Deleting SAPM group event via API

/device/deleted

Deleting device event in the Device Management page

/device/discovered

Creating/Editing device event in the Device Management page

/device/group/realm/search

Searching device group realm event in the Device Management page

/device/group/show/secret

Showing device group secret event in the Device Management page

/device/property/added

Adding device property event in the Device Management page

/device/property/removed

Removing device property event in the Device Management page

/device/reDiscovered

Editing device event in the Device Management page

/deviceGroup/deleted

Deleting device group event in the Device Management page

/deviceGroup/saved

Creating/Editing device group event in the Device Management page

/deviceGroupSubnet/deleted

Deleting subnet of device group event in the Device Management/Device Group page

/deviceGroupSubnet/saved

Adding/Editing device group subnet event in the Device Management/Device Group page

/deviceRealm/deleted

Deleting device realm event in the Device Management page

/deviceRealm/saved

Creating/Editing device realm event in the Device Management page

/devices/elementType/delete

Deleting device element type event in the Device Management page

/devices/elementType/save

Creating/Editing device element type event in the Device Management page

/devices/elementType/search

Searching device element type event in the Device Management page

/editSapmAccount

Editing SAPM account event in the SAPM Management page

/editSapmGroup

Editing SAPM group event in SAPM via API

/getApprovalForAccount

Requesting approval for an SAPM account event via API

/GetApprovalForGroup

Requesting approval for an SAPM group event via API

/getApprovedUserListForAccount

Getting list of approved users of an SAPM account event via API

/getApprovedUserListForGroup

Getting list of approved user s of an SAPM group event via API

/getApproverForSapmAccount(getApproversForSapmGroup)

Getting list of approvers of an SAPM group event via API

/getApproverForSapmGroup

Getting list of approvers of an SAPM group event via API

/getApproversForSapmAccount

Getting list of approvers of an SAPM account event via API

/getApproversForSapmGroup

Getting list of approvers of an SAPM group event via API

/getApproversForSapmGroupWithGroupName

Getting list of approvers of an SAPM group event via API, by group name

/getDeviceById

Getting the device information in detail by ID event via API

/getDeviceByName

Getting the device information in detail by name event via API

/getDeviceGroupByName

Getting the device group information in detail by name event via API

/getDeviceGroupsOfSessionUser

Listing Device groups of logged on user via API

/getDevicesOfDeviceGroupByDeviceGroupId

Getting the device information in a device group, by device group ID event, via API

/getElementTypes

Getting all element types event via API

/getRemindBeforeValues

Setting reminder for SAPM password reservation event in the SAPM Manager page

/getSapmGroupWithPermission

Getting permission for SAPM group event via API

/getUserById

Getting users credentials by ID event via API

/group/delete

Deleting user group event in the User Management/User Accounts page

/group/save

Creating/Editing User group event in the User Management/User Accounts page

/group/search

Searching group event in the User Management/User Accounts/User Group Definition page

/integration/ldap/adUserNotDeleted

Preventing deletion of an LDAP user, if the user is in a local User group

/isApprovalRequired

After assigning manager to SAPM group/account, approval is required event in the SAPM Management page

/ldapServerSave

Creating/Editing LDAP server in the Administration/LDAP Manager page

/linuxAuditReport/search

Searching Linux Audit Report event in Audit Report page

/listAccountsAndGroupsOfSapmGroup

Listing SAPM group’s accounts and subs-groups event via API

/listAccountsOfSapmGroupForRest

Listing SAPM group’s accounts event via API

/listGroupsOfSapmGroupForRest

Listing SAPM subs-groups event via API

/listPermissionOfSapmGroup

Listing SAPM group’s permissions event via API

/listPermissionsOfAccount

Listing SAPM account permissions event via API

/listSapmAccountsOfGroup

Listing SAPM accounts in a group event via API

/listSapmConfigs

Listing all SAPM configs event via API

/listSapmGroups

Listing all SAPM groups event via API

/log/cli-sessions/search

Searching sessions log event in the Logging/Session Log page

/log/tacacs-account/search

Searching Tacacs account event in the Logging/Tacacs Account Log page

/log/user-auth/search

Searching user authentication log event in the Logging/User Auth. Log page

/mail/send

Sending mail event

/makeReservation

Making reservation for SAPM account in the SAPM Manager page

/policy/agent-profile/search

Searching agent profile event in the Policy Control/Session Policy page

/policy/assignedCredential/save

Creating assigned credential event in the User Management/Assigned Credential page

/policy/assignedCredential/search

Searching assigned credential event in the User Management/Assigned Credential page

/policy/authentication/view/search

Searching policy authentication event in the Policy Control/Policy Tracking page

/policy/authorization/view/search

Searching policy authorization event in the Policy Control/Policy Tracking page

/policy/blackKey/save

Creating/Editing Black Key event in the Policy Control/Session Policy page

/policy/group/search

Searching policy group event in the Policy Control/Session Policy page

/policy/key/search

Searching policy key event in the Policy Control/Session Policy page

/policy/permit-zone/search

Searching permit zone event in the Policy Control/Session Policy page

/policy/policyGroup/delete

Deleting policy group event in the Policy Control/Session Policy page

/policy/policyGroup/save

Creating/Editing policy group event in the Policy Control/Session Policy page

/policy/policyRealm/delete

 Deleting policy realm in the Policy Control/Session Policy page

/policy/policyRealm/save

Creating/Editing policy realm event in the Policy Control/Session Policy page

/policy/rdp-profile/search

Searching RDP profile event in the Policy Control/Session Policy page

/policy/realm/search

Searching policy realm event in the Policy Control/Session Policy page

/policy/session/disconnected

Killing active sessions event in the Policy Control/Active Session page

/policy/timeRestriction/save

Creating/Editing time restriction event in the Policy Control/Session Policy page

/policy/time-restriction/search

Searching time restriction event in the Policy Control/Session Policy page

/policy/whiteKey/save

Creating/Editing White Key event in the Policy Control/Session Policy page

/portal-functions/group/search

Searching portal functions group event in the Policy Control/Portal Functions page

/portal-functions/realm/search

Searching portal functions realm event in the Policy Control/Portal Functions page

/resetPassword

Resetting SAPM account’s password event

/sapm/account/delete

Deleting SAPM account event in the SAPM Management page

/sapm/account/password/changed

Changing SAPM accounts' password event

/sapm/account/save

Creating/Editing SAPM account event in the SAPM Management page

/sapm/account/search

Searching SAPM account event in the SAPM Management page

/sapm/auto/import/rule/save

Creating/Editing SAPM auto-import rules event in the SAPM Management/Auto-Import Rules page

/sapm/auto/import/rule/search

Searching SAPM auto-import rules event in the SAPM Management/Auto-Import Rules page

/sapm/config/delete

Deleting SAPM configuration event in the SAPM Management page

/sapm/config/save

Creating/Editing SAPM configuration event in the SAPM Management page

/sapm/config/search

Searching SAPM configuration event in the SAPM Management page

/sapm/group/delete

Deleting SAPM group event in the SAPM Management page

/sapm/new/users/log/search

Searching SAPM new user’s log event in the SAPM Management page

/sapm/password/change/log/history/search

Searching SAPM password change log history event in the SAPM Management page

/sapm/password/change/log/search

Searching SAPM password change log event in the SAPM Management page

/sapm/password/check/log/search

Searching SAPM password check log event in the SAPM Management page

/sapm/reservation/delete

Deleting SAPM account’s password reservation event in the SAPM Management page

/sapm/reservation/search

Searching SAPM account’s password reservation event in the SAPM Management page

/SAPMGroup/saved

Creating/Editing SAPM group event in the SAPM Management page

/sapmShowPassword

Showing SAPM account’s password event in the SAPM Management page

/sdd/discovery/search

Searching sensitive data discovery event in the Sensitivity Data Discovery page

/sdd/pattern/search

Searching sensitive data discovery pattern event in the Sensitivity Data Discovery page

/SdvGroup/saved

Creating/Editing secret data vault group in the Secret Data Vault page

/searchSapmAccounts

Searching SAPM account event via API

/searchSapmConfig

Searching SAPM configuration event via API

/secret/data/vault/delete

Deleting secret data vault record event in the Secret Data Vault page

/secret/data/vault/group/deleted

Deleting group of secret data vault event in the Secret Data Vault page

/secret/data/vault/save

Creating/Editing secret data vault event in the Secret Data Vault page

/secret/data/vault/search

Searching secret data vault event in the Secret Data Vault page

/secret/data/vault/show

Showing secret data vault event in the Secret Data Vault page

/setApprovalManagersForSapmAccount

Setting list of approvers of an SAPM account event via API

/setApprovalManagersForSapmGroup

Setting a list of approval managers of an SAPM group event via API

/setPermissionForGroup

Setting SAPM group's permissions event via API

/showOldPassword

Showing old password record of each SAPM account event via API

/showOldPasswordRecordsForAccount

Showing old password record of each SAPM account event

/system/config/delete

Deleting system configuration parameter event

/system/config/save

Creating/Editing system configuration parameter event

/system/config/search

Searching system configuration parameters event

/tfa/lastOtp

Checking user’s last OTP used time event (this event occurs when the OTP cache time is set on the related application)

/tfa/otpStatus

Checking if 2FA is enabled event for the user

/tfa/otpValid

Applying OTP validation event for a user

/updatePassword

Updating password event

/user/delete

Deleting user event in the User Management/User Account page

/user/lock

Locking user event in the User Management/User Account page

/user/passwordchange

Changing user’s password event in the User Management/User Account page

/user/passwordreset

Resetting user’s password event in the User Management/User Account page

/user/save

Creating/Editing user events in the User Management/User Account page

/user/search

Searching user events in the User Management/User Account page

/user/unlock

Unlocking user event in API

/user/update

Updating user events in the User Management/User Account page

/user-approval/search

Searching user approval requests event

/userRealm/delete

Deleting Portal Function user realm event

/userRealm/save

Creating/Editing Portal Function user realm event

/windowsAuditReport/search

Searching Windows Audit Report event in the Audit Report page.