inSync SIEM Events

This article provides the list of inSync events that you can export using the Druva Cloud Platform Events API.

About Druva Cloud Platform Events API

Using the Events API, you can export the supported inSync events. Here are its benefits:

  • Get inSync events in a single API call
  • Monitor the reported failures and threats, and take corrective actions
  • Integrate the exported events with the third-party SIEM tool

Field

Type

Description

eventCategory

string

The value of this field is EVENT in all scenarios.

uniqueID

string

The event's UUID.

publisherID

string

The value of this field is in the format <cloud-ID>-<product-ID>. CloudID corresponds to public cloud or gov cloud. Product ID is 8193 in all cases.

topicName

string

The value of this field is in the format <cloud-name>-<service-name>-<area/feature>. Cloud name can be public or gov, service name is inSyncPlatform. Feature values can be:

  • Alerts And Notifications

  • Backup And Restore

  • WebDAV

  • Bulk Export WebDAV

  • Admin Event

  • API

  • System Event

  • User And Device

timeStamp

string

The event's timestamp in RFC3339 UTC format. For example 2019-11-03T23:28:01.631Z.

eventType

string

The event's type. For example, Admin Login, Logout, LicenseExpired. See list of event types below.

tenantID

string

The customer's ID that generated this event.

severity

string

The event's severity. Its range is 0-7

identityType

string

The persona who created the event. Example: SERVICE/ADMIN/API/USER.

identityID

string

The persona's ID who created the event.

eventDetails

string

More details about the event. For example, "Total Downloaded Size:2033, Files Downloaded:2, Files Missed:0, System and App Settings:Yes, Total Bytes Transferred:2033, eventsGroupId:1112".

schemaVersion

string

The event's schema version. Its value is 1.0.

Event type

Event TypeIdentity Type
Admin Audit TrailADMIN
Admin LoginADMIN
User EventUSER
User Audit TrailUSER
API LoginADMIN
WebDAV LoginAPI/ADMIN
Bulk Export WebDAV LoginAPI/ADMIN
PST Converter WebDAV LoginADMIN
BackupSERVICE
RestoreSERVICE
DownloadSERVICE
AD SyncSERVICE
AlertSERVICE
Alert ResolutionSERVICE
NotificationSERVICE
Data SourceSERVICE
Client UpgradeADMIN/USER
Additional Data CollectionSERVICE
Device ReplaceSERVICE