PasswordVerified

Details of the attempt of password verification.

feature will be Authentication
type will be PasswordVerified
category will be EVENT
syslogSeverity for successful verification will be 6
syslogSeverity for verification failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

email string

email address of the user

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

errorMessage string

Error message in case of failure (optional)

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

MFAVerified

Details of the attempt of multi-factor authentication.

feature will be Authentication
type will be MFAVerified
category will be EVENT
syslogSeverity for successful verification will be 6
syslogSeverity for verification failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

email string

email address of the user

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

mfaMode string

Multi-factor Authentication mode The possible values are: SMS TOTP.

errorMessage string

Error message in case of failure (optional)

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

LoginWithSSO

Details of the attempt of login via single sign-on.

feature will be Authentication
type will be LoginWithSSO
category will be EVENT
syslogSeverity for successful login will be 6
syslogSeverity for login failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

email string

email address of the user

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

ForgotPasswordInitiated

Details of the forgot password action initiation.

feature will be PasswordChange
type will be ForgotPasswordInitiated
category will be EVENT
syslogSeverity for successful initiation will be 6
syslogSeverity for initiation failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

email string

email address of the user

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

ResetPasswordInitiated

Details of the reset password action initiation.

feature will be PasswordChange
type will be ResetPasswordInitiated
category will be EVENT
syslogSeverity for successful initiation will be 6
syslogSeverity for initiation failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

email string

email address of the user

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiatorID string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

PasswordChanged

Details of the password change.

feature will be PasswordChange
type will be PasswordChanged
category will be EVENT
syslogSeverity for successful password change will be 6
syslogSeverity for password change failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

email string

email address of the user

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiator string

From which mode, operation performed i.e. by Admin or by Client Credentials

initiatorID string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

PasswordReset

Details of the password reset.

feature will be PasswordChange
type will be PasswordReset
category will be EVENT
syslogSeverity for successful password reset will be 6
syslogSeverity for password reset failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

email string

email address of the user

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiatedBy string

By which mode reset password was initiated The possible values are: ForgotPassword Admin.

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

MFAModeUpdated

Details of the multi-factor authentication mode update.

feature will be AccessSettings
type will be MFAModeUpdated
category will be EVENT
syslogSeverity for successful MFA mode update will be 5
syslogSeverity for MFA mode update failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

oldState object

Properties

mfaMode string

Multi-factor Authentication mode The possible values are: SMS based Multifactor Authentication Authenticator App based Multifactor Authentication No Multifactor Authentication.

newState object

Properties

mfaMode string

Multi-factor Authentication mode The possible values are: SMS based Multifactor Authentication Authenticator App based Multifactor Authentication No Multifactor Authentication.

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiatorID string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

IdleSessionTimeoutUpdated

Details of the idle session timeout update.

feature will be AccessSettings
type will be IdleSessionTimeoutUpdated
category will be EVENT
syslogSeverity for successful idle session timeout update will be 5
syslogSeverity for idle session timeout update failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

oldState object

Properties

idleSessionTimeout integer

Idle session timeout in seconds

newState object

Properties

idleSessionTimeout integer

Idle session timeout in seconds

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiatorID string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

PasswordPolicyUpdated

Details of the password policy update.

feature will be AccessSettings
type will be PasswordPolicyUpdated
category will be EVENT
syslogSeverity for successful password policy update will be 5
syslogSeverity for password policy update failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

oldState object

Properties

passwordExpiry integer

Password expiry in days

newState object

Properties

passwordExpiry integer

Password expiry in days

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiatorID string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

SSOConfigurationUpdated

Details of the single sign-on configuration update.

feature will be AccessSettings
type will be SSOConfigurationUpdated
category will be EVENT
syslogSeverity for successful single sign-on configuration update will be 6
syslogSeverity for single sign-on configuration update failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

oldState object

Properties

authRequestSigned boolean

Whether the auth request is signed

encryptAssertions boolean

Whether the assertions are encrypted

idProviderLoginURL string

ID Provider login URL

singleSignOnForAdministrators boolean

Whether single sign-on is enabled for administrators

newState object

Properties

authRequestSigned boolean

Whether the auth request is signed

encryptAssertions boolean

Whether the assertions are encrypted

idProviderLoginURL string

ID Provider login URL

singleSignOnForAdministrators boolean

Whether single sign-on is enabled for administrators

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiatorID string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

GeofencingConfigurationUpdated

Details of the geofencing configuration update.

feature will be AccessSettings
type will be GeofencingConfigurationUpdated
category will be EVENT
syslogSeverity for successful geofencing configuration update will be 5
syslogSeverity for geofencing configuration update failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

oldState object

Properties

publicGatewayIPs string

Public Gateway IPs

enableGeofencingForAdministrators boolean

Whether geo-fencing is enabled for administrators

newState object

Properties

publicGatewayIPs string

Public Gateway IPs

enableGeofencingForAdministrators boolean

Whether geo-fencing is enabled for administrators

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiatorID string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

FailsafeSettingUpdated

Details of the failsafe setting update.

feature will be AccessSettings
type will be FailsafeSettingUpdated
category will be EVENT
syslogSeverity for successful failsafe setting update will be 6
syslogSeverity for failsafe setting update failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

isFailsafeForAdministratorsEnabled boolean

Whether failsafe is enabled for administrators

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiatorID string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

AdministratorCreated

Details of the new administrator creation.

feature will be ManageAdministrators
type will be AdministratorCreated
category will be EVENT
syslogSeverity for successful administrator creation will be 2
syslogSeverity for administrator creation failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

adminName string

Name of the administrator

adminEmail string

Email of the administrator

adminRole string

Role of the administrator The possible values are: Druva Cloud Product.

timezone string

Time of the event

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiator string

From which mode, operation performed i.e. by Admin or by Client Credentials

initiatorID string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

AdministratorUpdated

Details of the administrator update.

feature will be ManageAdministrators
type will be AdministratorUpdated
category will be EVENT
syslogSeverity for successful administrator update will be 5
syslogSeverity for administrator update failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

oldState object

Properties

adminName string

Name of the administrator

adminEmail string

Email of the administrator

adminRole string

Role of the administrator The possible values are: Druva Cloud Product.

timezone string

Time of the event

newState object

Properties

adminName string

Name of the administrator

adminEmail string

Email of the administrator

adminRole string

Role of the administrator The possible values are: Druva Cloud Product.

timezone string

Time of the event

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiator string

From which mode, operation performed i.e. by Admin or by Client Credentials

initiatorID string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

AdministratorActivated

Details of the administrator activation.

feature will be ManageAdministrators
type will be AdministratorActivated
category will be EVENT
syslogSeverity for successful administrator activation will be 2
syslogSeverity for administrator activation failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

adminName string

Name of the administrator

adminEmail string

Email of the administrator

adminRole string

Role of the administrator The possible values are: Druva Cloud Product.

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiator string

From which mode, operation performed i.e. by Admin or by Client Credentials

initiatorID string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

AdministratorDisabled

Details of the administrator disablement.

feature will be ManageAdministrators
type will be AdministratorDisabled
category will be EVENT
syslogSeverity for successful administrator disablement will be 2
syslogSeverity for administrator disablement failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

adminName string

Name of the administrator

adminEmail string

Email of the administrator

adminRole string

Role of the administrator The possible values are: Druva Cloud Product.

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiator string

From which mode, operation performed i.e. by Admin or by Client Credentials

initiatorID string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

AdministratorDeleted

Details of the administrator deletion.

feature will be ManageAdministrators
type will be AdministratorDeleted
category will be EVENT
syslogSeverity for successful administrator deletion will be 2
syslogSeverity for administrator deletion failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

adminName string

Name of the administrator

adminEmail string

Email of the administrator

adminRole string

Role of the administrator The possible values are: Druva Cloud Product.

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiator string

From which mode, operation performed i.e. by Admin or by Client Credentials

initiatorID string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

MFAReset

Details of the multi-factor authentication reset for administrator.

feature will be ManageAdministrators
type will be MFAReset
category will be EVENT
syslogSeverity for successful MFA Reset will be 5
syslogSeverity for MFA Reset failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

email string

email address of the user

mfaMode string

Multi-factor Authentication mode The possible values are: SMS TOTP.

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiatorID string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

APICredentialsCreated

Details of the new API credentials creation.

feature will be APICredentials
type will be APICredentialsCreated
category will be EVENT
syslogSeverity for successful API credentials creation will be 5
syslogSeverity for API credentials creation failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

name string

Name of the client credential

description string

Description of the client credential

networkRestriction string

Network restriction

role string

Role of the Client Credentials The possible values are: Druva Cloud Product.

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiatorID string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

APICredentialsKeyRegenerated

Details of the API credentials key regeneration.

feature will be APICredentials
type will be APICredentialsKeyRegenerated
category will be EVENT
syslogSeverity for successful API credentials key regeneration will be 5
syslogSeverity for API credentials key regeneration failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

name string

Name of the client credential

description string

Description of the client credential

networkRestriction string

Network restriction

role string

Role of the Client Credentials The possible values are: Druva Cloud Product.

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiatorID string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

APICredentialsUpdated

Details of the API credentials update.

feature will be APICredentials
type will be APICredentialsUpdated
category will be EVENT
syslogSeverity for successful API credentials update will be 5
syslogSeverity for API credentials update failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

oldState object

Properties

name string

Name of the client credential

description string

Description of the client credential

networkRestriction string

Network restriction

role string

Role of the Client Credentials The possible values are: Druva Cloud Product.

newState object

Properties

name string

Name of the client credential

description string

Description of the client credential

networkRestriction string

Network restriction

role string

Role of the Client Credentials The possible values are: Druva Cloud Product.

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiatorID string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

APICredentialsDeleted

Details of the API credentials deletion.

feature will be APICredentials
type will be APICredentialsDeleted
category will be EVENT
syslogSeverity for successful API credentials deletion will be 5
syslogSeverity for API credentials deletion failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

name string

Name of the client credential

description string

Description of the client credential

networkRestriction string

Network restriction

role string

Role of the Client Credentials The possible values are: Druva Cloud Product.

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiatorID string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

ReportSubscriptionCreated

Details of the report subscription creation.

feature will be Reports
type will be ReportSubscriptionCreated
category will be EVENT
syslogSeverity for successful report subscription creation will be 6
syslogSeverity for report subscription creation failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

reportName string

Name of the report

category string

Category in which report belongs. e.g. Endpoints

attachmentFormat string

Attachment format of the report The possible values are: CSV PDF.

recurrence string

Recurrence of the report subscription The possible values are: Daily Weekly Monthly.

repeat string

Repeat of the report subscription

timezone string

Timezone of the report subscription

time string

Time for which subscription got created

recipients array

Recipient of the report subscription

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiator string

Email ID or Client ID of the actor entity

isPaused boolean

True if subscription is paused. False otherwise.

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

ReportSubscriptionUpdated

Details of the report subscription update.

feature will be Reports
type will be ReportSubscriptionUpdated
category will be EVENT
syslogSeverity for successful report subscription update will be 6
syslogSeverity for report subscription update failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

reportName string

Name of the report

category string

Category in which report belongs. e.g. Endpoints

oldState object

Properties

attachmentFormat string

Attachment format of the report The possible values are: CSV PDF.

recurrence string

Recurrence of the report subscription The possible values are: Daily Weekly Monthly.

repeat string

Repeat of the report subscription

timezone string

Timezone of the report subscription

time string

Time for which subscription got created

recipients array

Recipient of the report subscription

isPaused boolean

True if subscription is paused. False otherwise.

newState object

Properties

attachmentFormat string

Attachment format of the report The possible values are: CSV PDF.

recurrence string

Recurrence of the report subscription The possible values are: Daily Weekly Monthly.

repeat string

Repeat of the report subscription

timezone string

Timezone of the report subscription

time string

Time for which subscription got created

recipients array

Recipient of the report subscription

isPaused boolean

True if subscription is paused. False otherwise.

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiator string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

ReportSubscriptionDeleted

Details of the report subscription deletion.

feature will be Reports
type will be ReportSubscriptionDeleted
category will be EVENT
syslogSeverity for successful report subscription deletion will be 6
syslogSeverity for report subscription deletion failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

reportName string

Name of the report

category string

Category in which report belongs. e.g. Endpoints

attachmentFormat string

Attachment format of the report The possible values are: CSV PDF.

recurrence string

Recurrence of the report subscription The possible values are: Daily Weekly Monthly.

repeat string

Repeat of the report subscription

timezone string

Timezone of the report subscription

time string

Time for which subscription got created

recipients array

Recipient of the report subscription

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiator string

Email ID or Client ID of the actor entity

isPaused boolean

True if subscription is paused. False otherwise.

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

RollbackWindowUpdated

Details of the rollback window update.

feature will be RollbackActions
type will be RollbackWindowUpdated
category will be EVENT
syslogSeverity for successful rollback window update will be 6
syslogSeverity for rollback window update failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

oldState object

Properties

rollbackWindow integer

Rollback window

newState object

Properties

rollbackWindow integer

Rollback window

effectiveDate string

Effective date from which the rollback window is applicable. Timestamp in RFC3339 format.

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiatorID string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

RollbackInitiated

Details of the rollback initiation.

feature will be RollbackActions
type will be RollbackInitiated
category will be EVENT
syslogSeverity for successful rollback initiation will be 6
syslogSeverity for rollback initiation failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

batchID string

Batch ID of the operation

workloadTypeID string

ID of the workload type

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiatorID string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

WebhookConfigurationCreated

Details of the webhook configuration creation.

feature will be AdminEvent
type will be WebhookConfigurationCreated
category will be EVENT
syslogSeverity for successful webhook configuration creation will be 5

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

initiator string

Email ID or Client ID of the actor entity

sourceIP string

IP address from which action was performed

providerName string

Provider name of the webhook configuration The possible values are: CrowdStrike Sentinel Generic.

webhookName string

Name of the webhook configuration

endpointURL string

Endpoint URL of the webhook configuration

authType string

Supported auth type for the webhook configuration The possible values are: OAuth2 APIKey.

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

WebhookConfigurationUpdated

Details of the webhook configuration Update.

feature will be AdminEvent
type will be WebhookConfigurationUpdated
category will be EVENT
syslogSeverity for successful webhook configuration update will be 5

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

initiator string

Email ID or Client ID of the actor entity

sourceIP string

IP address from which action was performed

oldState object

Properties

providerName string

Provider name of the webhook configuration The possible values are: CrowdStrike Sentinel Generic.

webhookName string

Name of the webhook configuration

endpointURL string

Endpoint URL of the webhook configuration

authType string

Supported auth type for the webhook configuration The possible values are: OAuth2 APIKey.

newState object

Properties

providerName string

Provider name of the webhook configuration The possible values are: CrowdStrike Sentinel Generic.

webhookName string

Name of the webhook configuration

endpointURL string

Endpoint URL of the webhook configuration

authType string

Supported auth type for the webhook configuration The possible values are: OAuth2 APIKey.

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

WebhookConfigurationDeleted

Details of the webhook configuration deletion.

feature will be AdminEvent
type will be WebhookConfigurationDeleted
category will be EVENT
syslogSeverity for successful webhook configuration deletion will be 5

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

initiator string

Email ID or Client ID of the actor entity

sourceIP string

IP address from which action was performed

providerName string

Provider name of the webhook configuration The possible values are: CrowdStrike Sentinel Generic.

webhookName string

Name of the webhook configuration

endpointURL string

Endpoint URL of the webhook configuration

authType string

Supported auth type for the webhook configuration The possible values are: OAuth2 APIKey.

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

WebhookSubscriptionCreated

Details of the webhook subscription creation.

feature will be AdminEvent
type will be WebhookSubscriptionCreated
category will be EVENT
syslogSeverity for successful webhook subscription creation will be 5

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

initiator string

Email ID or Client ID of the actor entity

sourceIP string

IP address from which action was performed

provider string

Provider name of the webhook configuration The possible values are: CrowdStrike Sentinel Generic.

webhookName string

Name of the webhook configuration

status string

Status of the action performed The possible values are: Success Failure.

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

WebhookSubscriptionUpdated

Details of the webhook subscription update.

feature will be AdminEvent
type will be WebhookSubscriptionUpdated
category will be EVENT
syslogSeverity for successful webhook subscription update will be 5

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

initiator string

Email ID or Client ID of the actor entity

sourceIP string

IP address from which action was performed

oldState object

Properties

filters array

Event type filters on subscription

newState object

Properties

filters array

Event type filters on subscription

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

WebhookSubscriptionDeleted

Details of the webhook subscription deletion.

feature will be AdminEvent
type will be WebhookSubscriptionDeleted
category will be EVENT
syslogSeverity for successful webhook subscription deletion will be 5

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

initiator string

Email ID or Client ID of the actor entity

sourceIP string

IP address from which action was performed

provider string

Provider name of the webhook configuration The possible values are: CrowdStrike Sentinel Generic.

webhookName string

Name of the webhook configuration

status string

Status of the action performed The possible values are: Success Failure.

filters array

Event type filters on subscription

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

About Druva Cloud Platform Events API

Note

Supported Events