Activity Event Topic Properties
| Event Property | Description |
|---|---|
_id | UUID for the message object, such as "0419d364-1b3d-4e4f-b769-555c3ca098b0". |
timestamp | Time that IDM logged the message, in UTC format; for example, "2020-05-18T08:48:00.160Z". |
eventName | Describes the audit event. Examples include activity, workflow-complete_task, and relationship_created. |
transactionId | UUID of the transaction; you might see the same transaction for the same event in different audit event topics. |
userId | User ID. |
trackingId | A unique value for the object being tracked. |
runAs | User to run the activity as; may be used in delegated administration. |
objectId | Object identifier, such as /managed/user/42f8a60e-2019-4110-a10d-7231c3578e2b. |
operation | Common REST operation taken on the object; for example, UPDATE, DELETE, or ACTION. |
before | JSON representation of the object prior to the activity. |
after | JSON representation of the object after the activity. |
changedFields | Fields that were changed, based on "Fields to Watch". |
revision | Object revision number. |
status | Result, such as SUCCESS. |
message | Human readable text about the action. |
passwordChanged | True/False entry on changes to the password. |
context | Flag for self-service logins, such as SELFSERVICE. |
provider | Name of the self-service provider, usually a social identity provider. |