A.8 Engine Events

The following table lists the engine events that can be audited through Sentinel:

Table A-7 Engine Events

Event ID

Description

Trigger

30001

Status Success

Many different events can cause the status success event to occur. It usually signifies that an operation was successfully completed.

30002

Status Retry

Many different events can cause the status retry event to occur. It signifies an operation was not completed and the operation must be tried again later.

30003

Status Warning

Many different events can cause the status warning event to occur. It usually signifies that an operation was completed with minor problems.

30004

Status Error

Many different events can cause the status error event to occur. It usually signifies that an operation was not completed successfully.

30005

Status Fatal

Many different events can cause the status fatal event to occur. It usually signifies that an operation was not completed successfully and the engine or driver could not continue.

30006

Status Other

Any status document processed with a level other than the five previously defined creates a status other event. These events can only be generated within a style sheet or rule.

30007

Search

Occurs when a query document is sent to the Identity Manager engine or driver.

30008

Add Entry

Occurs when an object is added.

30009

Delete Entry

Occurs when an object is deleted.

3000A

Modify Entry

Occurs when an object is modified.

3000B

Rename Entry

Occurs when an object is renamed.

3000C

Move Entry

Occurs when an object is moved.

3000D

Add Association

Occurs when an association is added. It can happen on an add or a match.

3000E

Remove Association

When an object is deleted, there is no remove association event. The remove association occurs when a User object is deleted in the disparate application, and the delete is then converted into a modify that removes the association.

3000F

Query Schema

Occurs when a query schema operation is sent to the Identity Manager engine or driver.

30010

Check User Password Status

Manual function that is initiated via iManager to check the status of the user’s password.

30011

Check Object Password

Occurs when a request is issued to check an object's password, other than the driver.

30012

Change Password

Occurs when a request is issued to change the driver's password.

30013

Sync

Occurs when a sync event is requested.

30014

Input XML Document

Generated whenever an input document is created by the engine or driver.

30015

Input Transformation Document

Generated after the input transformation policies are processed, allowing the user to view the transformed document.

30016

Output Transformation Document

Generated after the output transformation policies are processed, allowing the user to view the transformed document.

30017

Event Transformation Document

Generated after the event transformation policies are processed, allowing the user to view the transformed document.

30018

Placement Rule Transformation Document

Generated after the Placement rule policies are processed, allowing the user to view the transformed document.

30019

Create Rule Transformation Document

Generated after the Create rule policies are processed, allowing the user to view the transformed document.

3001A

Input Mapping Rule Transformation Document

Generated after the Schema Mapping rules are processed which convert the document to the eDirectory schema.

3001B

Output Mapping Rule Transformation Document

Generated after the Schema Mapping rules are processed which convert the document to the applications schema.

3001C

Matching Rule Transformation Document

Generated after the Matching rule policies are processed, allowing the user to view the transformed document.

3001D

Command Transformation Document

Generated after the command transformation policies are processed, allowing the user to view the transformed document.

3001E

Publisher Filter Transformation Document

Generated after the processing the notify filter on the Publisher channel, allowing the user to view the transformed document.

3001F

User Agent Request

Occurs when a User Agent XDS command document is sent to the Driver on the Subscriber channel.

30020

Resync Driver

Occurs when a resync request is issued.

30021

Migrate

Occurs when a migrate request is issued.

30022

Driver Start

Occurs when a driver is started.

30023

Driver Stop

Occurs when a driver is stopped.

30024

Password Sync

Generated when setting the distribution or simple password on an object.

30025

Password Reset

Generated when resetting the connected application password after a failed password sync operation.

30026

DirXML Error

Generated whenever the engine throws an internal error.

30027

DirXML Warning

Generated whenever the engine throws an internal warning.

30028

Custom Operation

Occurs when an unknown operation appears in an input document. An example of known operations would be an add, delete, or modify.

30029

Clear Attribute

Occurs when a modify operation contains a remove-all-value element.

3002A

Add Value - Modify Entry

Occurs when a value is added during the modification of an object.

3002B

Remove Value

Occurs when a modify operation contains a remove-value element.

3002C

Merge Entries

Occurs when two objects are being merged.

3002D

Get Named Password

Generated on a Get Named Password operation.

3002E

Reset Attributes

Occurs when a Reset document is issued on the publisher or Subscriber channels.

3002F

Add Value - Add Entry

Occurs when a value is added during the creation of an object.

30030

Set SSO Credential

Occurs when a driver policy executes the do-set-sso-credential action.

30031

Clear SSO Credential

Occurs when a driver policy executes the do-clear-sso-credential action.

30032

Set SSO Passphrase

Occurs when a driver policy executes the do-clear-sso-credential action.

See Section A.13, Log Schema Files for information on understanding the logged events.