Password Verified

Details of the attempt of password verification.

feature will be Admin Event
type will be Password Verified
category will be EVENT
syslogSeverity for successful verification will be 6
syslogSeverity for verification failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

email string

email address of the user

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

errorMessage string

Error message in case of failure (optional)

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

MFA Verified

Details of the attempt of multi-factor authentication.

feature will be Admin Event
type will be MFA Verified
category will be EVENT
syslogSeverity for successful verification will be 6
syslogSeverity for verification failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

email string

email address of the user

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

mfaMode string

Multi-factor Authentication mode The possible values are: SMS TOTP.

errorMessage string

Error message in case of failure (optional)

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

Login With SSO

Details of the attempt of login via single sign-on.

feature will be Admin Event
type will be Login With SSO
category will be EVENT
syslogSeverity for successful login will be 6
syslogSeverity for login failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

email string

email address of the user

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

Forgot Password Initiated

Details of the forgot password action initiation.

feature will be Admin Event
type will be Forgot Password Initiated
category will be EVENT
syslogSeverity for successful initiation will be 6
syslogSeverity for initiation failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

email string

email address of the user

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

Reset Password Initiated

Details of the reset password action initiation.

feature will be Admin Event
type will be Reset Password Initiated
category will be EVENT
syslogSeverity for successful initiation will be 6
syslogSeverity for initiation failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

email string

email address of the user

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiatorID string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

Password Changed

Details of the password change.

feature will be Admin Event
type will be Password Changed
category will be EVENT
syslogSeverity for successful password change will be 6
syslogSeverity for password change failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

email string

email address of the user

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiator string

From which mode, operation performed i.e. by Admin or by Client Credentials

initiatorID string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

Password Reset

Details of the password reset.

feature will be Admin Event
type will be Password Reset
category will be EVENT
syslogSeverity for successful password reset will be 6
syslogSeverity for password reset failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

email string

email address of the user

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiatedBy string

By which mode reset password was initiated The possible values are: ForgotPassword Admin.

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

MFA Mode Updated

Details of the multi-factor authentication mode update.

feature will be Admin Event
type will be MFA Mode Updated
category will be EVENT
syslogSeverity for successful MFA mode update will be 5
syslogSeverity for MFA mode update failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

oldState object

Properties

mfaMode string

Multi-factor Authentication mode The possible values are: SMS based Multifactor Authentication Authenticator App based Multifactor Authentication No Multifactor Authentication.

newState object

Properties

mfaMode string

Multi-factor Authentication mode The possible values are: SMS based Multifactor Authentication Authenticator App based Multifactor Authentication No Multifactor Authentication.

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiatorID string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

Idle Session Timeout Updated

Details of the idle session timeout update.

feature will be Admin Event
type will be Idle Session Timeout Updated
category will be EVENT
syslogSeverity for successful idle session timeout update will be 5
syslogSeverity for idle session timeout update failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

oldState object

Properties

idleSessionTimeout integer

Idle session timeout in seconds

newState object

Properties

idleSessionTimeout integer

Idle session timeout in seconds

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiatorID string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

Password Policy Updated

Details of the password policy update.

feature will be Admin Event
type will be Password Policy Updated
category will be EVENT
syslogSeverity for successful password policy update will be 5
syslogSeverity for password policy update failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

oldState object

Properties

passwordExpiry integer

Password expiry in days

newState object

Properties

passwordExpiry integer

Password expiry in days

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiatorID string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

SSO Configuration Updated

Details of the single sign-on configuration update.

feature will be Admin Event
type will be SSO Configuration Updated
category will be EVENT
syslogSeverity for successful single sign-on configuration update will be 6
syslogSeverity for single sign-on configuration update failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

oldState object

Properties

authRequestSigned boolean

Whether the auth request is signed

encryptAssertions boolean

Whether the assertions are encrypted

idProviderLoginURL string

ID Provider login URL

singleSignOnForAdministrators boolean

Whether single sign-on is enabled for administrators

newState object

Properties

authRequestSigned boolean

Whether the auth request is signed

encryptAssertions boolean

Whether the assertions are encrypted

idProviderLoginURL string

ID Provider login URL

singleSignOnForAdministrators boolean

Whether single sign-on is enabled for administrators

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiatorID string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

Geofencing Configuration Updated

Details of the geofencing configuration update.

feature will be Admin Event
type will be Geofencing Configuration Updated
category will be EVENT
syslogSeverity for successful geofencing configuration update will be 5
syslogSeverity for geofencing configuration update failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

oldState object

Properties

publicGatewayIPs string

Public Gateway IPs

enableGeofencingForAdministrators boolean

Whether geo-fencing is enabled for administrators

newState object

Properties

publicGatewayIPs string

Public Gateway IPs

enableGeofencingForAdministrators boolean

Whether geo-fencing is enabled for administrators

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiatorID string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

Failsafe Setting Updated

Details of the failsafe setting update.

feature will be Admin Event
type will be Failsafe Setting Updated
category will be EVENT
syslogSeverity for successful failsafe setting update will be 6
syslogSeverity for failsafe setting update failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

isFailsafeForAdministratorsEnabled boolean

Whether failsafe is enabled for administrators

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiatorID string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

Administrator Created

Details of the new administrator creation.

feature will be Admin Event
type will be Administrator Created
category will be EVENT
syslogSeverity for successful administrator creation will be 2
syslogSeverity for administrator creation failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

adminName string

Name of the administrator

adminEmail string

Email of the administrator

adminRole string

Role of the administrator The possible values are: Druva Cloud Product.

timezone string

Time of the event

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiator string

From which mode, operation performed i.e. by Admin or by Client Credentials

initiatorID string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

Administrator Updated

Details of the administrator update.

feature will be Admin Event
type will be Administrator Updated
category will be EVENT
syslogSeverity for successful administrator update will be 5
syslogSeverity for administrator update failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

oldState object

Properties

adminName string

Name of the administrator

adminEmail string

Email of the administrator

adminRole string

Role of the administrator The possible values are: Druva Cloud Product.

timezone string

Time of the event

newState object

Properties

adminName string

Name of the administrator

adminEmail string

Email of the administrator

adminRole string

Role of the administrator The possible values are: Druva Cloud Product.

timezone string

Time of the event

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiator string

From which mode, operation performed i.e. by Admin or by Client Credentials

initiatorID string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

Administrator Activated

Details of the administrator activation.

feature will be Admin Event
type will be Administrator Activated
category will be EVENT
syslogSeverity for successful administrator activation will be 2
syslogSeverity for administrator activation failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

adminName string

Name of the administrator

adminEmail string

Email of the administrator

adminRole string

Role of the administrator The possible values are: Druva Cloud Product.

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiator string

From which mode, operation performed i.e. by Admin or by Client Credentials

initiatorID string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

Administrator Disabled

Details of the administrator disablement.

feature will be Admin Event
type will be Administrator Disabled
category will be EVENT
syslogSeverity for successful administrator disablement will be 2
syslogSeverity for administrator disablement failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

adminName string

Name of the administrator

adminEmail string

Email of the administrator

adminRole string

Role of the administrator The possible values are: Druva Cloud Product.

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiator string

From which mode, operation performed i.e. by Admin or by Client Credentials

initiatorID string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

Administrator Deleted

Details of the administrator deletion.

feature will be Admin Event
type will be Administrator Deleted
category will be EVENT
syslogSeverity for successful administrator deletion will be 2
syslogSeverity for administrator deletion failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

adminName string

Name of the administrator

adminEmail string

Email of the administrator

adminRole string

Role of the administrator The possible values are: Druva Cloud Product.

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiator string

From which mode, operation performed i.e. by Admin or by Client Credentials

initiatorID string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

MFA Reset

Details of the multi-factor authentication reset for administrator.

feature will be Admin Event
type will be MFA Reset
category will be EVENT
syslogSeverity for successful MFA Reset will be 5
syslogSeverity for MFA Reset failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

email string

email address of the user

mfaMode string

Multi-factor Authentication mode The possible values are: SMS TOTP.

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiatorID string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

API Credentials Created

Details of the new API credentials creation.

feature will be API
type will be API Credentials Created
category will be EVENT
syslogSeverity for successful API credentials creation will be 5
syslogSeverity for API credentials creation failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

name string

Name of the client credential

description string

Description of the client credential

networkRestriction string

Network restriction

role string

Role of the Client Credentials The possible values are: Druva Cloud Product.

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiatorID string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

API Credentials Key Regenerated

Details of the API credentials key regeneration.

feature will be API
type will be API Credentials Key Regenerated
category will be EVENT
syslogSeverity for successful API credentials key regeneration will be 5
syslogSeverity for API credentials key regeneration failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

name string

Name of the client credential

description string

Description of the client credential

networkRestriction string

Network restriction

role string

Role of the Client Credentials The possible values are: Druva Cloud Product.

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiatorID string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

API CredentialsUpdated

Details of the API credentials update.

feature will be API
type will be API Credentials Updated
category will be EVENT
syslogSeverity for successful API credentials update will be 5
syslogSeverity for API credentials update failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

oldState object

Properties

name string

Name of the client credential

description string

Description of the client credential

networkRestriction string

Network restriction

role string

Role of the Client Credentials The possible values are: Druva Cloud Product.

newState object

Properties

name string

Name of the client credential

description string

Description of the client credential

networkRestriction string

Network restriction

role string

Role of the Client Credentials The possible values are: Druva Cloud Product.

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiatorID string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

API Credentials Deleted

Details of the API credentials deletion.

feature will be API
type will be API Credentials Deleted
category will be EVENT
syslogSeverity for successful API credentials deletion will be 5
syslogSeverity for API credentials deletion failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

name string

Name of the client credential

description string

Description of the client credential

networkRestriction string

Network restriction

role string

Role of the Client Credentials The possible values are: Druva Cloud Product.

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiatorID string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

Report Subscription Created

Details of the report subscription creation.

feature will be Admin Event
type will be Report Subscription Created
category will be EVENT
syslogSeverity for successful report subscription creation will be 6
syslogSeverity for report subscription creation failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

reportName string

Name of the report

category string

Category in which report belongs. e.g. Endpoints

attachmentFormat string

Attachment format of the report The possible values are: CSV PDF.

recurrence string

Recurrence of the report subscription The possible values are: Daily Weekly Monthly.

repeat string

Repeat of the report subscription

timezone string

Timezone of the report subscription

time string

Time for which subscription got created

recipients array

Recipient of the report subscription

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiator string

Email ID or Client ID of the actor entity

isPaused boolean

True if subscription is paused. False otherwise.

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

Report Subscription Updated

Details of the report subscription update.

feature will be Admin Event
type will be Report Subscription Updated
category will be EVENT
syslogSeverity for successful report subscription update will be 6
syslogSeverity for report subscription update failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

reportName string

Name of the report

category string

Category in which report belongs. e.g. Endpoints

oldState object

Properties

attachmentFormat string

Attachment format of the report The possible values are: CSV PDF.

recurrence string

Recurrence of the report subscription The possible values are: Daily Weekly Monthly.

repeat string

Repeat of the report subscription

timezone string

Timezone of the report subscription

time string

Time for which subscription got created

recipients array

Recipient of the report subscription

isPaused boolean

True if subscription is paused. False otherwise.

newState object

Properties

attachmentFormat string

Attachment format of the report The possible values are: CSV PDF.

recurrence string

Recurrence of the report subscription The possible values are: Daily Weekly Monthly.

repeat string

Repeat of the report subscription

timezone string

Timezone of the report subscription

time string

Time for which subscription got created

recipients array

Recipient of the report subscription

isPaused boolean

True if subscription is paused. False otherwise.

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiator string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

Report Subscription Deleted

Details of the report subscription deletion.

feature will be Admin Event
type will be Report Subscription Deleted
category will be EVENT
syslogSeverity for successful report subscription deletion will be 6
syslogSeverity for report subscription deletion failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

reportName string

Name of the report

category string

Category in which report belongs. e.g. Endpoints

attachmentFormat string

Attachment format of the report The possible values are: CSV PDF.

recurrence string

Recurrence of the report subscription The possible values are: Daily Weekly Monthly.

repeat string

Repeat of the report subscription

timezone string

Timezone of the report subscription

time string

Time for which subscription got created

recipients array

Recipient of the report subscription

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiator string

Email ID or Client ID of the actor entity

isPaused boolean

True if subscription is paused. False otherwise.

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

Rollback Window Updated

Details of the rollback window update.

feature will be Admin Event
type will be Rollback Window Updated
category will be EVENT
syslogSeverity for successful rollback window update will be 6
syslogSeverity for rollback window update failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

oldState object

Properties

rollbackWindow integer

Rollback window

newState object

Properties

rollbackWindow integer

Rollback window

effectiveDate string

Effective date from which the rollback window is applicable. Timestamp in RFC3339 format.

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiatorID string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

Rollback Initiated

Details of the rollback initiation.

feature will be Admin Event
type will be Rollback Initiated
category will be EVENT
syslogSeverity for successful rollback initiation will be 6
syslogSeverity for rollback initiation failure will be 3

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

batchID string

Batch ID of the operation

workloadTypeID string

ID of the workload type

status string

Status of the action performed The possible values are: Success Failure.

sourceIP string

IP address from which action was performed

initiatorID string

Email ID or Client ID of the actor entity

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

Webhook Configuration Created

Details of the webhook configuration creation.

feature will be Admin Event
type will be Webhook Configuration Created
category will be EVENT
syslogSeverity for successful webhook configuration creation will be 5

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

initiator string

Email ID or Client ID of the actor entity

sourceIP string

IP address from which action was performed

providerName string

Provider name of the webhook configuration The possible values are: CrowdStrike Sentinel Generic.

webhookName string

Name of the webhook configuration

endpointURL string

Endpoint URL of the webhook configuration

authType string

Supported auth type for the webhook configuration The possible values are: OAuth2 APIKey.

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

Webhook Configuration Updated

Details of the webhook configuration Update.

feature will be Admin Event
type will be Webhook Configuration Updated
category will be EVENT
syslogSeverity for successful webhook configuration update will be 5

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

initiator string

Email ID or Client ID of the actor entity

sourceIP string

IP address from which action was performed

oldState object

Properties

providerName string

Provider name of the webhook configuration The possible values are: CrowdStrike Sentinel Generic.

webhookName string

Name of the webhook configuration

endpointURL string

Endpoint URL of the webhook configuration

authType string

Supported auth type for the webhook configuration The possible values are: OAuth2 APIKey.

newState object

Properties

providerName string

Provider name of the webhook configuration The possible values are: CrowdStrike Sentinel Generic.

webhookName string

Name of the webhook configuration

endpointURL string

Endpoint URL of the webhook configuration

authType string

Supported auth type for the webhook configuration The possible values are: OAuth2 APIKey.

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

Webhook Configuration Deleted

Details of the webhook configuration deletion.

feature will be Admin Event
type will be Webhook Configuration Deleted
category will be EVENT
syslogSeverity for successful webhook configuration deletion will be 5

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

initiator string

Email ID or Client ID of the actor entity

sourceIP string

IP address from which action was performed

providerName string

Provider name of the webhook configuration The possible values are: CrowdStrike Sentinel Generic.

webhookName string

Name of the webhook configuration

endpointURL string

Endpoint URL of the webhook configuration

authType string

Supported auth type for the webhook configuration The possible values are: OAuth2 APIKey.

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

Webhook Subscription Created

Details of the webhook subscription creation.

feature will be Admin Event
type will be Webhook Subscription Created
category will be EVENT
syslogSeverity for successful webhook subscription creation will be 5

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

initiator string

Email ID or Client ID of the actor entity

sourceIP string

IP address from which action was performed

provider string

Provider name of the webhook configuration The possible values are: CrowdStrike Sentinel Generic.

webhookName string

Name of the webhook configuration

status string

Status of the action performed The possible values are: Success Failure.

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

Webhook Subscription Updated

Details of the webhook subscription update.

feature will be Admin Event
type will be Webhook Subscription Updated
category will be EVENT
syslogSeverity for successful webhook subscription update will be 5

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

initiator string

Email ID or Client ID of the actor entity

sourceIP string

IP address from which action was performed

oldState object

Properties

filters array

Event type filters on subscription

newState object

Properties

filters array

Event type filters on subscription

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

Webhook Subscription Deleted

Details of the webhook subscription deletion.

feature will be Admin Event
type will be Webhook Subscription Deleted
category will be EVENT
syslogSeverity for successful webhook subscription deletion will be 5

category string

The category of the event. The possible values are: EVENT AUDIT ALERT.

details object

Properties

initiator string

Email ID or Client ID of the actor entity

sourceIP string

IP address from which action was performed

provider string

Provider name of the webhook configuration The possible values are: CrowdStrike Sentinel Generic.

webhookName string

Name of the webhook configuration

status string

Status of the action performed The possible values are: Success Failure.

filters array

Event type filters on subscription

feature string

Type of the entity for which the event has happened.

globalID string

Represents the global ID of the customer or MSP.

timeStamp integer

The epoch representation of the time at which the event occurred.

syslogFacility integer

Syslog standard of defining the event origin/type.

syslogSeverity integer

SyslogSeverity represents the severity(0-7) of the event.

type string

Type of the event. For example, 'SystemEvent' or 'UserRestore'. This event's title is its type.

About Druva Cloud Platform Events API

Note

Supported Events