This article provides the list of events that you can export using the Druva Cloud Platform Events API.
About Druva Cloud Platform Events API
Using the Events API, you can export the supported events. Here are its benefits:
- Get all the supported events in a single API call
- Monitor the reported failures and take corrective actions
- Integrate the exported events with the third-party SIEM tool
Supported Events
The following sections provide details on events that you can export using the Events API.
The category of the event. The possible values are: EVENT
AUDIT
ALERT
.
Properties
email address of the user
Status of the action performed The possible values are: Success
Failure
.
IP address from which action was performed
Error message in case of failure (optional)
Type of the entity for which the event has happened.
Represents the global ID of the customer or MSP.
The epoch representation of the time at which the event occurred.
Syslog standard of defining the event origin/type.
SyslogSeverity represents the severity(0-7) of the event.
Type of the event. For example, `Login`, `Logout`, `LicenseExpired`, `BackupStatus`.
The category of the event. The possible values are: EVENT
AUDIT
ALERT
.
Properties
email address of the user
Status of the action performed The possible values are: Success
Failure
.
IP address from which action was performed
Multi-factor Authentication mode The possible values are: SMS
TOTP
.
Error message in case of failure (optional)
Type of the entity for which the event has happened.
Represents the global ID of the customer or MSP.
The epoch representation of the time at which the event occurred.
Syslog standard of defining the event origin/type.
SyslogSeverity represents the severity(0-7) of the event.
Type of the event. For example, `Login`, `Logout`, `LicenseExpired`, `BackupStatus`.
The category of the event. The possible values are: EVENT
AUDIT
ALERT
.
Properties
email address of the user
Status of the action performed The possible values are: Success
Failure
.
IP address from which action was performed
Type of the entity for which the event has happened.
Represents the global ID of the customer or MSP.
The epoch representation of the time at which the event occurred.
Syslog standard of defining the event origin/type.
SyslogSeverity represents the severity(0-7) of the event.
Type of the event. For example, `Login`, `Logout`, `LicenseExpired`, `BackupStatus`.
The category of the event. The possible values are: EVENT
AUDIT
ALERT
.
Properties
email address of the user
Status of the action performed The possible values are: Success
Failure
.
IP address from which action was performed
Type of the entity for which the event has happened.
Represents the global ID of the customer or MSP.
The epoch representation of the time at which the event occurred.
Syslog standard of defining the event origin/type.
SyslogSeverity represents the severity(0-7) of the event.
Type of the event. For example, `Login`, `Logout`, `LicenseExpired`, `BackupStatus`.
The category of the event. The possible values are: EVENT
AUDIT
ALERT
.
Properties
email address of the user
Status of the action performed The possible values are: Success
Failure
.
IP address from which action was performed
Email ID or Client ID of the actor entity
Type of the entity for which the event has happened.
Represents the global ID of the customer or MSP.
The epoch representation of the time at which the event occurred.
Syslog standard of defining the event origin/type.
SyslogSeverity represents the severity(0-7) of the event.
Type of the event. For example, `Login`, `Logout`, `LicenseExpired`, `BackupStatus`.
The category of the event. The possible values are: EVENT
AUDIT
ALERT
.
Properties
email address of the user
Status of the action performed The possible values are: Success
Failure
.
IP address from which action was performed
From which mode, operation performed i.e. by Admin or by Client Credentials
Email ID or Client ID of the actor entity
Type of the entity for which the event has happened.
Represents the global ID of the customer or MSP.
The epoch representation of the time at which the event occurred.
Syslog standard of defining the event origin/type.
SyslogSeverity represents the severity(0-7) of the event.
Type of the event. For example, `Login`, `Logout`, `LicenseExpired`, `BackupStatus`.
The category of the event. The possible values are: EVENT
AUDIT
ALERT
.
Properties
email address of the user
Status of the action performed The possible values are: Success
Failure
.
IP address from which action was performed
By which mode reset password was initiated The possible values are:
ForgotPassword
Admin
.
Type of the entity for which the event has happened.
Represents the global ID of the customer or MSP.
The epoch representation of the time at which the event occurred.
Syslog standard of defining the event origin/type.
SyslogSeverity represents the severity(0-7) of the event.
Type of the event. For example, `Login`, `Logout`, `LicenseExpired`, `BackupStatus`.
The category of the event. The possible values are: EVENT
AUDIT
ALERT
.
Properties
Properties
Multi-factor Authentication mode The possible values are:
SMS based Multifactor Authentication
Authenticator App based Multifactor Authentication
No Multifactor Authentication
.
Properties
Multi-factor Authentication mode The possible values are:
SMS based Multifactor Authentication
Authenticator App based Multifactor Authentication
No Multifactor Authentication
.
Status of the action performed The possible values are: Success
Failure
.
IP address from which action was performed
Email ID or Client ID of the actor entity
Type of the entity for which the event has happened.
Represents the global ID of the customer or MSP.
The epoch representation of the time at which the event occurred.
Syslog standard of defining the event origin/type.
SyslogSeverity represents the severity(0-7) of the event.
Type of the event. For example, `Login`, `Logout`, `LicenseExpired`, `BackupStatus`.
The category of the event. The possible values are: EVENT
AUDIT
ALERT
.
Properties
Properties
Idle session timeout in seconds
Properties
Idle session timeout in seconds
Status of the action performed The possible values are: Success
Failure
.
IP address from which action was performed
Email ID or Client ID of the actor entity
Type of the entity for which the event has happened.
Represents the global ID of the customer or MSP.
The epoch representation of the time at which the event occurred.
Syslog standard of defining the event origin/type.
SyslogSeverity represents the severity(0-7) of the event.
Type of the event. For example, `Login`, `Logout`, `LicenseExpired`, `BackupStatus`.
The category of the event. The possible values are: EVENT
AUDIT
ALERT
.
Properties
Properties
Password expiry in days
Properties
Password expiry in days
Status of the action performed The possible values are: Success
Failure
.
IP address from which action was performed
Email ID or Client ID of the actor entity
Type of the entity for which the event has happened.
Represents the global ID of the customer or MSP.
The epoch representation of the time at which the event occurred.
Syslog standard of defining the event origin/type.
SyslogSeverity represents the severity(0-7) of the event.
Type of the event. For example, `Login`, `Logout`, `LicenseExpired`, `BackupStatus`.
The category of the event. The possible values are: EVENT
AUDIT
ALERT
.
Properties
Properties
Whether the auth request is signed
Whether the assertions are encrypted
ID Provider login URL
Whether single sign-on is enabled for administrators
Properties
Whether the auth request is signed
Whether the assertions are encrypted
ID Provider login URL
Whether single sign-on is enabled for administrators
Status of the action performed The possible values are: Success
Failure
.
IP address from which action was performed
Email ID or Client ID of the actor entity
Type of the entity for which the event has happened.
Represents the global ID of the customer or MSP.
The epoch representation of the time at which the event occurred.
Syslog standard of defining the event origin/type.
SyslogSeverity represents the severity(0-7) of the event.
Type of the event. For example, `Login`, `Logout`, `LicenseExpired`, `BackupStatus`.
The category of the event. The possible values are: EVENT
AUDIT
ALERT
.
Properties
Properties
Public Gateway IPs
Whether geo-fencing is enabled for administrators
Properties
Public Gateway IPs
Whether geo-fencing is enabled for administrators
Status of the action performed The possible values are: Success
Failure
.
IP address from which action was performed
Email ID or Client ID of the actor entity
Type of the entity for which the event has happened.
Represents the global ID of the customer or MSP.
The epoch representation of the time at which the event occurred.
Syslog standard of defining the event origin/type.
SyslogSeverity represents the severity(0-7) of the event.
Type of the event. For example, `Login`, `Logout`, `LicenseExpired`, `BackupStatus`.
The category of the event. The possible values are: EVENT
AUDIT
ALERT
.
Properties
Whether failsafe is enabled for administrators
Status of the action performed The possible values are: Success
Failure
.
IP address from which action was performed
Email ID or Client ID of the actor entity
Type of the entity for which the event has happened.
Represents the global ID of the customer or MSP.
The epoch representation of the time at which the event occurred.
Syslog standard of defining the event origin/type.
SyslogSeverity represents the severity(0-7) of the event.
Type of the event. For example, `Login`, `Logout`, `LicenseExpired`, `BackupStatus`.
The category of the event. The possible values are: EVENT
AUDIT
ALERT
.
Properties
Name of the administrator
Email of the administrator
Role of the administrator The possible values are: Druva Cloud
Product
.
Time of the event
Status of the action performed The possible values are: Success
Failure
.
IP address from which action was performed
From which mode, operation performed i.e. by Admin or by Client Credentials
Email ID or Client ID of the actor entity
Type of the entity for which the event has happened.
Represents the global ID of the customer or MSP.
The epoch representation of the time at which the event occurred.
Syslog standard of defining the event origin/type.
SyslogSeverity represents the severity(0-7) of the event.
Type of the event. For example, `Login`, `Logout`, `LicenseExpired`, `BackupStatus`.
The category of the event. The possible values are: EVENT
AUDIT
ALERT
.
Properties
Properties
Name of the administrator
Email of the administrator
Role of the administrator The possible values are:
Druva Cloud
Product
.
Time of the event
Properties
Name of the administrator
Email of the administrator
Role of the administrator The possible values are:
Druva Cloud
Product
.
Time of the event
Status of the action performed The possible values are: Success
Failure
.
IP address from which action was performed
From which mode, operation performed i.e. by Admin or by Client Credentials
Email ID or Client ID of the actor entity
Type of the entity for which the event has happened.
Represents the global ID of the customer or MSP.
The epoch representation of the time at which the event occurred.
Syslog standard of defining the event origin/type.
SyslogSeverity represents the severity(0-7) of the event.
Type of the event. For example, `Login`, `Logout`, `LicenseExpired`, `BackupStatus`.
The category of the event. The possible values are: EVENT
AUDIT
ALERT
.
Properties
Name of the administrator
Email of the administrator
Role of the administrator The possible values are: Druva Cloud
Product
.
Status of the action performed The possible values are: Success
Failure
.
IP address from which action was performed
From which mode, operation performed i.e. by Admin or by Client Credentials
Email ID or Client ID of the actor entity
Type of the entity for which the event has happened.
Represents the global ID of the customer or MSP.
The epoch representation of the time at which the event occurred.
Syslog standard of defining the event origin/type.
SyslogSeverity represents the severity(0-7) of the event.
Type of the event. For example, `Login`, `Logout`, `LicenseExpired`, `BackupStatus`.
The category of the event. The possible values are: EVENT
AUDIT
ALERT
.
Properties
Name of the administrator
Email of the administrator
Role of the administrator The possible values are: Druva Cloud
Product
.
Status of the action performed The possible values are: Success
Failure
.
IP address from which action was performed
From which mode, operation performed i.e. by Admin or by Client Credentials
Email ID or Client ID of the actor entity
Type of the entity for which the event has happened.
Represents the global ID of the customer or MSP.
The epoch representation of the time at which the event occurred.
Syslog standard of defining the event origin/type.
SyslogSeverity represents the severity(0-7) of the event.
Type of the event. For example, `Login`, `Logout`, `LicenseExpired`, `BackupStatus`.
The category of the event. The possible values are: EVENT
AUDIT
ALERT
.
Properties
Name of the administrator
Email of the administrator
Role of the administrator The possible values are: Druva Cloud
Product
.
Status of the action performed The possible values are: Success
Failure
.
IP address from which action was performed
From which mode, operation performed i.e. by Admin or by Client Credentials
Email ID or Client ID of the actor entity
Type of the entity for which the event has happened.
Represents the global ID of the customer or MSP.
The epoch representation of the time at which the event occurred.
Syslog standard of defining the event origin/type.
SyslogSeverity represents the severity(0-7) of the event.
Type of the event. For example, `Login`, `Logout`, `LicenseExpired`, `BackupStatus`.
The category of the event. The possible values are: EVENT
AUDIT
ALERT
.
Properties
email address of the user
Multi-factor Authentication mode The possible values are: SMS
TOTP
.
Status of the action performed The possible values are: Success
Failure
.
IP address from which action was performed
Email ID or Client ID of the actor entity
Type of the entity for which the event has happened.
Represents the global ID of the customer or MSP.
The epoch representation of the time at which the event occurred.
Syslog standard of defining the event origin/type.
SyslogSeverity represents the severity(0-7) of the event.
Type of the event. For example, `Login`, `Logout`, `LicenseExpired`, `BackupStatus`.
The category of the event. The possible values are: EVENT
AUDIT
ALERT
.
Properties
Name of the client credential
Description of the client credential
Network restriction
Role of the Client Credentials The possible values are: Druva Cloud
Product
.
Status of the action performed The possible values are: Success
Failure
.
IP address from which action was performed
Email ID or Client ID of the actor entity
Type of the entity for which the event has happened.
Represents the global ID of the customer or MSP.
The epoch representation of the time at which the event occurred.
Syslog standard of defining the event origin/type.
SyslogSeverity represents the severity(0-7) of the event.
Type of the event. For example, `Login`, `Logout`, `LicenseExpired`, `BackupStatus`.
The category of the event. The possible values are: EVENT
AUDIT
ALERT
.
Properties
Name of the client credential
Description of the client credential
Network restriction
Role of the Client Credentials The possible values are: Druva Cloud
Product
.
Status of the action performed The possible values are: Success
Failure
.
IP address from which action was performed
Email ID or Client ID of the actor entity
Type of the entity for which the event has happened.
Represents the global ID of the customer or MSP.
The epoch representation of the time at which the event occurred.
Syslog standard of defining the event origin/type.
SyslogSeverity represents the severity(0-7) of the event.
Type of the event. For example, `Login`, `Logout`, `LicenseExpired`, `BackupStatus`.
The category of the event. The possible values are: EVENT
AUDIT
ALERT
.
Properties
Properties
Name of the client credential
Description of the client credential
Network restriction
Role of the Client Credentials The possible values are:
Druva Cloud
Product
.
Properties
Name of the client credential
Description of the client credential
Network restriction
Role of the Client Credentials The possible values are:
Druva Cloud
Product
.
Status of the action performed The possible values are: Success
Failure
.
IP address from which action was performed
Email ID or Client ID of the actor entity
Type of the entity for which the event has happened.
Represents the global ID of the customer or MSP.
The epoch representation of the time at which the event occurred.
Syslog standard of defining the event origin/type.
SyslogSeverity represents the severity(0-7) of the event.
Type of the event. For example, `Login`, `Logout`, `LicenseExpired`, `BackupStatus`.
The category of the event. The possible values are: EVENT
AUDIT
ALERT
.
Properties
Name of the client credential
Description of the client credential
Network restriction
Role of the Client Credentials The possible values are: Druva Cloud
Product
.
Status of the action performed The possible values are: Success
Failure
.
IP address from which action was performed
Email ID or Client ID of the actor entity
Type of the entity for which the event has happened.
Represents the global ID of the customer or MSP.
The epoch representation of the time at which the event occurred.
Syslog standard of defining the event origin/type.
SyslogSeverity represents the severity(0-7) of the event.
Type of the event. For example, `Login`, `Logout`, `LicenseExpired`, `BackupStatus`.
The category of the event. The possible values are: EVENT
AUDIT
ALERT
.
Properties
Name of the report
Category in which report belongs. e.g. Endpoints
Attachment format of the report The possible values are: CSV
PDF
.
Recurrence of the report subscription The possible values are:
Daily
Weekly
Monthly
.
Repeat of the report subscription
Timezone of the report subscription
Time for which subscription got created
Recipient of the report subscription
Status of the action performed The possible values are: Success
Failure
.
IP address from which action was performed
Email ID or Client ID of the actor entity
Type of the entity for which the event has happened.
Represents the global ID of the customer or MSP.
The epoch representation of the time at which the event occurred.
Syslog standard of defining the event origin/type.
SyslogSeverity represents the severity(0-7) of the event.
Type of the event. For example, `Login`, `Logout`, `LicenseExpired`, `BackupStatus`.
The category of the event. The possible values are: EVENT
AUDIT
ALERT
.
Properties
Name of the report
Category in which report belongs. e.g. Endpoints
Properties
Attachment format of the report The possible values are:
CSV
PDF
.
Recurrence of the report subscription The possible values are:
Daily
Weekly
Monthly
.
Repeat of the report subscription
Timezone of the report subscription
Time for which subscription got created
Recipient of the report subscription
Properties
Attachment format of the report The possible values are:
CSV
PDF
.
Recurrence of the report subscription The possible values are:
Daily
Weekly
Monthly
.
Repeat of the report subscription
Timezone of the report subscription
Time for which subscription got created
Recipient of the report subscription
Status of the action performed The possible values are: Success
Failure
.
IP address from which action was performed
Email ID or Client ID of the actor entity
Type of the entity for which the event has happened.
Represents the global ID of the customer or MSP.
The epoch representation of the time at which the event occurred.
Syslog standard of defining the event origin/type.
SyslogSeverity represents the severity(0-7) of the event.
Type of the event. For example, `Login`, `Logout`, `LicenseExpired`, `BackupStatus`.
The category of the event. The possible values are: EVENT
AUDIT
ALERT
.
Properties
Name of the report
Category in which report belongs. e.g. Endpoints
Attachment format of the report The possible values are: CSV
PDF
.
Recurrence of the report subscription The possible values are:
Daily
Weekly
Monthly
.
Repeat of the report subscription
Timezone of the report subscription
Time for which subscription got created
Recipient of the report subscription
Status of the action performed The possible values are: Success
Failure
.
IP address from which action was performed
Email ID or Client ID of the actor entity
Type of the entity for which the event has happened.
Represents the global ID of the customer or MSP.
The epoch representation of the time at which the event occurred.
Syslog standard of defining the event origin/type.
SyslogSeverity represents the severity(0-7) of the event.
Type of the event. For example, `Login`, `Logout`, `LicenseExpired`, `BackupStatus`.
The category of the event. The possible values are: EVENT
AUDIT
ALERT
.
Properties
Properties
Rollback window
Properties
Rollback window
Effective date from which the rollback window is applicable. Timestamp in RFC3339 format.
Status of the action performed The possible values are: Success
Failure
.
IP address from which action was performed
Email ID or Client ID of the actor entity
Type of the entity for which the event has happened.
Represents the global ID of the customer or MSP.
The epoch representation of the time at which the event occurred.
Syslog standard of defining the event origin/type.
SyslogSeverity represents the severity(0-7) of the event.
Type of the event. For example, `Login`, `Logout`, `LicenseExpired`, `BackupStatus`.
The category of the event. The possible values are: EVENT
AUDIT
ALERT
.
Properties
Batch ID of the operation
ID of the workload type
Status of the action performed The possible values are: Success
Failure
.
IP address from which action was performed
Email ID or Client ID of the actor entity
Type of the entity for which the event has happened.
Represents the global ID of the customer or MSP.
The epoch representation of the time at which the event occurred.
Syslog standard of defining the event origin/type.
SyslogSeverity represents the severity(0-7) of the event.
Type of the event. For example, `Login`, `Logout`, `LicenseExpired`, `BackupStatus`.