Informations du journal d'audit : CylanceAVERT

Le tableau suivant répertorie les informations qui sont ajoutées au journal d'audit pour les actions administratives CylanceAVERT. Vous pouvez utiliser les options de filtrage dans la console pour filtrer les résultats du journal d'audit.

Catégorie

Action

Détails

Entité de données

Ajouter

JSON
{
    "id": "ID",
    "tenantId": "Tenant ID",
    "occurred": "Date/Time",
    "traceId": "Trace ID",
    "spanId": "Span ID",
    "source": "com.blackberry.dlp",
    "type": "AUDIT",
    "category": "Entity",
    "subcategory": "created",
    "message": "admin created DataEntity named Policy name"
    },
    "admin": {
        "ecoId": "Eco ID"
    },
    "entity": {
        "id": "ID",
        "type": "DATAENTITY",
        "displayName": "Entity display name"
    },
    "changes": {
        "regions": {
            "new": "Region"
        },
        "name":{
            "new": "Data entity name"
        "description": {
            "new": "Description"
        },
        "infoTypes": {
            "new": "Info types"
        },
        "Type": {
            "new": "Data type"
        },
        "Parameters": {
            "new": "parameters"
        },
        "algorithm":{
            "new":Algorithm    
     }
}

Entité de données

Modifier

JSON
{
    "id": "ID",
    "tenantId": "Tenant ID",
    "occurred": "Date/Time",
    "traceId": "Trace ID",
    "spanId": "Span ID",
    "source": "com.blackberry.dlp",
    "type": "AUDIT",
    "category": "ENTITY",
    "subcategory": "UPDATED",
    "message": "admin updated DataEntity named Data entity name",
    "crud": {
        "admin": {
            "ecoId": "Eco ID"
        },
        "entity": {
            "id": "ID",
            "type": "DATAENTITY",
            "displayName": "Data entity display name"
        },
        "changes": {
            "description": {
                "new": "New description",
                "old": "Old description"
            }
        }
    }
}

Entité de données

Supprimer

JSON
{
    "id": "ID",
    "tenantId": "Tenant ID",
    "occurred": "Date/Time",
    "traceId": "Trace ID",
    "spanId": "Span ID",
    "source": "com.blackberry.dlp",
    "type": "AUDIT",
    "category": "ENTITY",
    "subcategory": "DELETED",
    "message": "admin deleted DataEntity named Data entity name",
    "crud": {
        "admin": {
            "ecoId": "Eco ID"
        },
        "entity": {
            "id": "ID",
            "type": "DATAENTITY",
            "displayName": "Data entity display name"
        }
    }
}

Fichier de preuve

Télécharger

JSON
{
    "id": "ID",
    "tenantId": "Tenant ID",
    "occurred": "Date/Time",
    "traceId": "Trace ID",
    "spanId": "Span ID",
    "source": "com.blackberry.dlp",
    "type": "AUDIT",
    "category": "ENTITY",
    "subcategory": "READ",
    "message": "Evidence File is downloaded",
    "crud": {
        "admin": {
            "ecoId": "Eco ID"
        },
        "entity": {
            "id": "ID",
            "type": "Entity type"
        }
    }
}

Fichier de preuve

Supprimer

JSON
{
    "id": "ID",
    "tenantId": "Tenant ID",
    "occurred": "Date/Time",
    "traceId": "Trace ID",
    "spanId": "Span ID",
    "source": "com.blackberry.dlp",
    "type": "AUDIT",
    "category": "ENTITY",
    "subcategory": "DELETED",
    "message": "Evidence File is DELETED",
    "crud": {
        "admin": {
            "ecoId": "Eco ID"
        },
        "entity": {
            "id": "ID",
            "type": "Entity type"
        }
    }
}

Stratégie

Ajouter

JSON
{
    "common": {
        "id": "ID",
        "tenantId": "Tenant ID",
        "occurred": "Date/Time",
        "traceId": "Trace ID",
        "spanId": "Span ID",
        "source": "com.blackberry.dlp",
        "type": "AUDIT",
        "category": "Entity",
        "subcategory": "created",
        "message": "admin created Policy named Policy name"
    },
    "admin": {
        "ecoId": "Eco ID"
    },
    "entity": {
        "id": "ID",
        "type": "PROFILE",
        "displayName": "Entity display name"
    },
    "changes": {
        "emailDomainsRule": {
            "new": "Domain rule"
        },
        "condition": {
            "new": "Condition"
        },
        "policyName": {
            "new": "Policy name"
        },
        "policyType": {
            "new": "Policy type"
        },
        "description": {
            "new": "Description"
        },
        "policyRules": {
            "new": "Policy rules"
        },
        "classification": {
            "new": "Classification"
        },
        "browserDomains": {
            "new": "Browser domains"
        }
    }
}

Stratégie

Modifier

JSON
{
    "common": {
        "id": "ID",
        "tenantId": "Tenant ID",
        "occurred": "Date/Time",
        "traceId": "Trace ID",
        "spanId": "Span ID",
        "source": "com.blackberry.dlp",
        "type": "AUDIT",
        "category": "Entity",
        "subcategory": "Updated",
        "message": "admin created Policy named Policy name"
    },
    "admin": {
        "ecoId": " "
    },
    "entity": {
        "id": "fbfa8366-e58c-4018-925f-2a536dce4c2d",
        "type": "PROFILE",
        "displayName": "policy-test-name-created-from-auto-test"
    },
    "changes": 
{
    "policyName":{
              "old" : "HIPAA",
              "new" : "HIPAA Compliance"
        },
 
    "condition": {
          "old": "Old condition",
          "new":"New condition"
      },
 
    "policyRules": {
            "old":[{Old policy rules}],
            "new":[{New policy rules}]
      },
   
    "policyConfigs": {
            "old":[{Old policy rules}],
            "new":[{New policy rules}]
      },
   
    "browserDomains":{
            "old":Old browser domains,
            "new":New browser domains
      },
   
    "emailDomainsRule": {
            "old":Old domain rule,
            "new":New domain rule
      }
    }
}

Stratégie

Supprimer

JSON
{
    "id": "ID",
    "tenantId": "Tenant ID",
    "occurred": "Date/Time",
    "traceId": "Trace ID",
    "spanId": "Span ID",
    "source": "com.blackberry.dlp",
    "type": "AUDIT",
    "category": "ENTITY",
    "subcategory": "DELETED",
    "message": "admin DELETED Policy named Policy name",
    "crud": {
        "admin": {
            "ecoId": "Eco ID"
        },
        "entity": {
            "id": "ID",
            "type": "PROFILE",
            "displayName": "Entity display name"
        }
    }
}

Paramètre

Mettre à jour

JSON
{
    "id": "ID",
    "tenantId": "Tenant ID",
    "occurred": "Date/Time",
    "traceId": "Trace ID",
    "spanId": "Span ID",
    "source": "com.blackberry.dlp",
    "type": "AUDIT",
    "category": "SETTING",
    "subcategory": "UPDATED",
    "message": "admin UPDATED DLP settings",
    "crud": {
        "admin": {
            "ecoId": "Eco ID"
        },
        "changes": {
            "ui.tenant.setting.emailRecipients": {
                "new": "New email recipients",
                "old": "Old email recipients"
            }
        }
    }
}

Modèle

Supprimer

JSON
{
    "id": "ID",
    "tenantId": "Tenant ID",
    "occurred": "Date/Time",
    "traceId": "Trace ID",
    "spanId": "Span ID",
    "source": "com.blackberry.dlp",
    "type": "AUDIT",
    "category": "ENTITY",
    "subcategory": "DELETED",
    "message": "Template Template name was deleted",
    "crud": {
        "admin": {
            "ecoId": "Eco ID"
        },
        "entity": {
            "id": "ID",
            "type": "TEMPLATE",
            "displayName": "Template name"
        }
    }
}

Modèle

Ajouter

JSON
{
    "id": "ID",
    "tenantId": "Tenant ID",
    "occurred": "Date/Time",
    "traceId": "Trace ID",
    "spanId": "Span ID",
    "source": "com.blackberry.dlp",
    "type": "AUDIT",
    "category": "ENTITY",
    "subcategory": "CREATED",
    "message": "Template Template name was created",
    "crud": {
        "admin": {
            "ecoId": "Eco ID"
        },
        "entity": {
            "id": "ID",
            "type": "TEMPLATE",
            "displayName": "Template name"
        },
        "changes": {
            "condition": {
                "new": "Condition"
            },
            "regions": {
                "new": "Region"
            },
            "name": {
                "new": "Template name"
            },
            "description": {
                "new": Description"
            },
            "infoTypes": {
                "new": "Info type"
            },
            "type": {
                "new": "Template type"
            }
        }
    }
}