The following table provides the list of engine events that can be audited through Sentinel:
Table A-7 Engine Events
|
Event ID |
Description |
Trigger |
|---|---|---|
|
30001 |
Status Success |
Many different events can cause the status success event to occur. It usually signifies that an operation was successfully completed. |
|
30002 |
Status Retry |
Many different events can cause the status retry event to occur. It signifies an operation was not completed and the operation must be tried again later. |
|
30003 |
Status Warning |
Many different events can cause the status warning event to occur. It usually signifies that an operation was completed with minor problems. |
|
30004 |
Status Error |
Many different events can cause the status error event to occur. It usually signifies that an operation was not completed successfully. |
|
30005 |
Status Fatal |
Many different events can cause the status fatal event to occur. It usually signifies that an operation was not completed successfully and the engine or driver could not continue. |
|
30006 |
Status Other |
Any status document processed with a level other than the five previously defined creates a status other event. These events can only be generated within a style sheet or rule. |
|
30007 |
Search |
Occurs when a query document is sent to the IDM engine or driver. |
|
30008 |
Add Entry |
Occurs when an object is added. |
|
30009 |
Delete Entry |
Occurs when an object is deleted. |
|
3000A |
Modify Entry |
Occurs when an object is modified. |
|
3000B |
Rename Entry |
Occurs when an object is renamed. |
|
3000C |
Move Entry |
Occurs when an object is moved. |
|
3000D |
Add Association |
Occurs when an association is added. It can happen on an add or a match. |
|
3000E |
Remove Association |
When an object is deleted, there is no remove association event. The remove association occurs when a User object is deleted in the disparate application, and the delete is then converted into a modify that removes the association. |
|
3000F |
Query Schema |
Occurs when a query schema operation is sent to the IDM engine or driver. |
|
30010 |
Check User Password Status |
Manual function that is initiated via iManager to check the status of the user’s password. |
|
30011 |
Check Object Password |
Occurs when a request is issued to check an object's password, other than the driver. |
|
30012 |
Change Password |
Occurs when a request is issued to change the driver's password. |
|
30013 |
Sync |
Occurs when a sync event is requested. |
|
30014 |
Input XML Document |
Generated whenever an input document is created by the engine or driver. |
|
30015 |
Input Transformation Document |
Generated after the input transformation policies are processed, allowing the user to view the transformed document. |
|
30016 |
Output Transformation Document |
Generated after the output transformation policies are processed, allowing the user to view the transformed document. |
|
30017 |
Event Transformation Document |
Generated after the event transformation policies are processed, allowing the user to view the transformed document. |
|
30018 |
Placement Rule Transformation Document |
Generated after the Placement rule policies are processed, allowing the user to view the transformed document. |
|
30019 |
Create Rule Transformation Document |
Generated after the Create rule policies are processed, allowing the user to view the transformed document. |
|
3001A |
Input Mapping Rule Transformation Document |
Generated after the Schema Mapping rules are processed which convert the document to the eDirectory schema. |
|
3001B |
Output Mapping Rule Transformation Document |
Generated after the Schema Mapping rules are processed which convert the document to the applications schema. |
|
3001C |
Matching Rule Transformation Document |
Generated after the Matching rule policies are processed, allowing the user to view the transformed document. |
|
3001D |
Command Transformation Document |
Generated after the command transformation policies are processed, allowing the user to view the transformed document. |
|
3001E |
Publisher Filter Transformation Document |
Generated after the processing the notify filter on the Publisher channel, allowing the user to view the transformed document. |
|
3001F |
User Agent Request |
Occurs when a User Agent XDS command document is sent to the Driver on the Subscriber channel. |
|
30020 |
Resync Driver |
Occurs when a resync request is issued. |
|
30021 |
Migrate |
Occurs when a migrate request is issued. |
|
30022 |
Driver Start |
Occurs when a driver is started. |
|
30023 |
Driver Stop |
Occurs when a driver is stopped. |
|
30024 |
Password Sync |
Generated when setting the distribution or simple password on an object. |
|
30025 |
Password Reset |
Generated when resetting the connected application password after a failed password sync operation. |
|
30026 |
DirXML Error |
Generated whenever the engine throws an internal error. |
|
30027 |
DirXML Warning |
Generated whenever the engine throws an internal warning. |
|
30028 |
Custom Operation |
Occurs when an unknown operation appears in an input document. An example of known operations would be an add, delete, or modify. |
|
30029 |
Clear Attribute |
Occurs when a modify operation contains a remove-all-value element. |
|
3002A |
Add Value - Modify Entry |
Occurs when a value is added during the modification of an object. |
|
3002B |
Remove Value |
Occurs when a modify operation contains a remove-value element. |
|
3002C |
Merge Entries |
Occurs when two objects are being merged. |
|
3002D |
Get Named Password |
Generated on a Get Named Password operation. |
|
3002E |
Reset Attributes |
Occurs when a Reset document is issued on the publisher or Subscriber channels. |
|
3002F |
Add Value - Add Entry |
Occurs when a value is added during the creation of an object. |
|
30030 |
Set SSO Credential |
Occurs when a driver policy executes the do-set-sso-credential action. |
|
30031 |
Clear SSO Credential |
Occurs when a driver policy executes the do-clear-sso-credential action. |
|
30032 |
Set SSO Passphrase |
Occurs when a driver policy executes the do-clear-sso-credential action. |
See Section A.13, Log Schema Files for information on understanding the logged events.