inSync SIEM Events

This article provides the list of inSync events that you can export using the Druva Cloud Platform Events API.

About Druva Cloud Platform Events API

Using the Events API, you can export the supported inSync events. Here are its benefits:

  • Get inSync events in a single API call
  • Monitor the reported failures and threats, and take corrective actions
  • Integrate the exported events with the third-party SIEM tool
FieldTypeDescription
eventCategorystringThe value of this field is EVENT in all scenarios.
uniqueIDstringThe event's UUID.
publisherIDstringThe value of this field is in the format <cloud-ID>-<product-ID>. CloudID corresponds to public cloud or gov cloud. Product ID is 8193 in all cases.
topicNamestringThe value of this field is in the format <cloud-name>-<service-name>-<area/feature>. Cloud name can be public or gov, service name is inSyncPlatform. Feature values can be:

- Alerts And Notifications

- Backup And Restore

- WebDAV

- Bulk Export WebDAV

- Admin Event

- API

- System Event

- User And Device
timeStampstringThe event's timestamp in RFC3339 UTC format. For example 2019-11-03T23:28:01.631Z.
eventTypestringThe event's type. For example, Admin Login, Logout, LicenseExpired. See list of event types below.
tenantIDstringThe customer's ID that generated this event.
severitystringThe event's severity. Its range is 0-7
identityTypestringThe persona who created the event. Example: SERVICE/ADMIN/API/USER.
identityIDstringThe persona's ID who created the event.
eventDetailsstringMore details about the event. For example, "Total Downloaded Size:2033, Files Downloaded:2, Files Missed:0, System and App Settings:Yes, Total Bytes Transferred:2033, eventsGroupId:1112".
schemaVersionstringThe event's schema version. Its value is 1.0.

Event type

Event TypeIdentity Type
Admin Audit TrailADMIN
Admin LoginADMIN
User EventUSER
User Audit TrailUSER
API LoginADMIN
WebDAV LoginAPI/ADMIN
Bulk Export WebDAV LoginAPI/ADMIN
PST Converter WebDAV LoginADMIN
BackupSERVICE
RestoreSERVICE
DownloadSERVICE
AD SyncSERVICE
AlertSERVICE
Alert ResolutionSERVICE
NotificationSERVICE
Data SourceSERVICE
Client UpgradeADMIN/USER
Additional Data CollectionSERVICE
Device ReplaceSERVICE