Access Event Topic Properties

Event PropertyDescription
_id UUID for the message object, such as "0419d364-1b3d-4e4f-b769-555c3ca098b0".
timestamp Time that IDM logged the message, in UTC format; for example, "2020-05-18T08:48:00.160Z".
eventName Name of the audit event: access for this log.
transactionId UUID of the transaction; you might see the same transaction for the same event in different audit event topics.
userIdUser ID.
trackingIdA unique value for the object being tracked.
server.ipIP address of the IDM server.
server.portPort number used by the IDM server.
client.ipClient IP address.
client.portClient port number.
request.protocolProtocol for request, typically Common REST.
request.operation Common REST operation taken on the object; for example, UPDATE, DELETE, or ACTION.
request.detail Typically, details for an ACTION request.
http.request.secureBoolean for request security.
http.request.methodHTTP method requested by the client.
http.request.pathPath of the HTTP request.
http.request.queryParametersParameters sent in the HTTP request, such as a key/value pair.
http.request.headersHTTP headers for the request (optional).
http.request.cookiesHTTP cookies for the request (optional).
http.response.headersHTTP response headers (optional).
response.statusNormally, SUCCESSFUL, FAILED, or null.
response.statusCode SUCCESS in response.status leads to a null response.statusCode; FAILURE leads to a 400-level error.
response.detail Message associated with response.statusCode, such as Not Found or Internal Server Error.
response.elapsedTimeTime to execute the access event.
response.elapsedTimeUnitsUnits for response time.
rolesIDM roles associated with the request.
Read a different version of :