inSync SIEM Events

About Druva Cloud Platform Events API

Using the Events API, you can export the supported inSync events. Here are its benefits:

  • Get inSync events in a single API call
  • Monitor the reported failures and threats, and take corrective actions
  • Integrate the exported events with the third-party SIEM tool
FieldTypeDescription
eventCategorystringThe value of this field is EVENT in all scenarios.
uniqueIDstringThe event's UUID.
publisherIDstringThe value of this field is in the format <cloud-ID>-<product-ID>. CloudID corresponds to public cloud or gov cloud. Product ID is 8193 in all cases.
topicNamestringThe value of this field is in the format <cloud-name>-<service-name>-<area/feature>. Cloud name can be public or gov, service name is inSyncPlatform. Feature values can be:
  • Alerts And Notifications

  • Backup And Restore

  • WebDAV

  • Bulk Export WebDAV

  • Admin Event

  • API

  • System Event

  • User And Device

timeStampstringThe event's timestamp in RFC3339 UTC format. For example 2019-11-03T23:28:01.631Z.
eventTypestringThe event's type. For example, Admin Login, Logout, LicenseExpired. See list of event types below.
tenantIDstringThe customer's ID that generated this event.
severitystringThe event's severity. Its range is 0-7
identityTypestringThe persona who created the event. Example: SERVICE/ADMIN/API/USER.
identityIDstringThe persona's ID who created the event.
eventDetailsstringMore details about the event. For example, "Total Downloaded Size:2033, Files Downloaded:2, Files Missed:0, System and App Settings:Yes, Total Bytes Transferred:2033, eventsGroupId:1112".
schemaVersionstringThe event's schema version. Its value is 1.0.

Event type

Event TypeIdentity Type
Admin Audit TrailADMIN
Admin LoginADMIN
User EventUSER
User Audit TrailUSER
API LoginADMIN
WebDAV LoginAPI/ADMIN
Bulk Export WebDAV LoginAPI/ADMIN
PST Converter WebDAV LoginADMIN
BackupSERVICE
RestoreSERVICE
DownloadSERVICE
AD SyncSERVICE
AlertSERVICE
Alert ResolutionSERVICE
NotificationSERVICE
Data SourceSERVICE
Client UpgradeADMIN/USER
Additional Data CollectionSERVICE
Device ReplaceSERVICE