oci.DataSafe.getAuditEvent
Explore with Pulumi AI
This data source provides details about a specific Audit Event resource in Oracle Cloud Infrastructure Data Safe service.
The ListAuditEvents operation returns specified compartmentId
audit Events only.
The list does not include any audit Events associated with the subcompartments
of the specified compartmentId
.
The parameter accessLevel
specifies whether to return only those compartments for which the
requestor has INSPECT permissions on at least one resource directly
or indirectly (ACCESSIBLE) (the resource can be in a subcompartment) or to return Not Authorized if
Principal doesn’t have access to even one of the child compartments. This is valid only when
compartmentIdInSubtree
is set to true
.
The parameter compartmentIdInSubtree
applies when you perform ListAuditEvents on the
compartmentId
passed and when it is set to true, the entire hierarchy of compartments can be returned.
To get a full list of all compartments and subcompartments in the tenancy (root compartment),
set the parameter compartmentIdInSubtree
to true and accessLevel
to ACCESSIBLE.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as oci from "@pulumi/oci";
const testAuditEvent = oci.DataSafe.getAuditEvent({
compartmentId: compartmentId,
accessLevel: auditEventAccessLevel,
compartmentIdInSubtree: auditEventCompartmentIdInSubtree,
scimQuery: auditEventScimQuery,
});
import pulumi
import pulumi_oci as oci
test_audit_event = oci.DataSafe.get_audit_event(compartment_id=compartment_id,
access_level=audit_event_access_level,
compartment_id_in_subtree=audit_event_compartment_id_in_subtree,
scim_query=audit_event_scim_query)
package main
import (
"github.com/pulumi/pulumi-oci/sdk/go/oci/DataSafe"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := DataSafe.GetAuditEvent(ctx, &datasafe.GetAuditEventArgs{
CompartmentId: compartmentId,
AccessLevel: pulumi.StringRef(auditEventAccessLevel),
CompartmentIdInSubtree: pulumi.BoolRef(auditEventCompartmentIdInSubtree),
ScimQuery: pulumi.StringRef(auditEventScimQuery),
}, nil)
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Oci = Pulumi.Oci;
return await Deployment.RunAsync(() =>
{
var testAuditEvent = Oci.DataSafe.GetAuditEvent.Invoke(new()
{
CompartmentId = compartmentId,
AccessLevel = auditEventAccessLevel,
CompartmentIdInSubtree = auditEventCompartmentIdInSubtree,
ScimQuery = auditEventScimQuery,
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.oci.DataSafe.DataSafeFunctions;
import com.pulumi.oci.DataSafe.inputs.GetAuditEventArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
final var testAuditEvent = DataSafeFunctions.getAuditEvent(GetAuditEventArgs.builder()
.compartmentId(compartmentId)
.accessLevel(auditEventAccessLevel)
.compartmentIdInSubtree(auditEventCompartmentIdInSubtree)
.scimQuery(auditEventScimQuery)
.build());
}
}
variables:
testAuditEvent:
fn::invoke:
Function: oci:DataSafe:getAuditEvent
Arguments:
compartmentId: ${compartmentId}
accessLevel: ${auditEventAccessLevel}
compartmentIdInSubtree: ${auditEventCompartmentIdInSubtree}
scimQuery: ${auditEventScimQuery}
Using getAuditEvent
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getAuditEvent(args: GetAuditEventArgs, opts?: InvokeOptions): Promise<GetAuditEventResult>
function getAuditEventOutput(args: GetAuditEventOutputArgs, opts?: InvokeOptions): Output<GetAuditEventResult>
def get_audit_event(access_level: Optional[str] = None,
compartment_id: Optional[str] = None,
compartment_id_in_subtree: Optional[bool] = None,
scim_query: Optional[str] = None,
opts: Optional[InvokeOptions] = None) -> GetAuditEventResult
def get_audit_event_output(access_level: Optional[pulumi.Input[str]] = None,
compartment_id: Optional[pulumi.Input[str]] = None,
compartment_id_in_subtree: Optional[pulumi.Input[bool]] = None,
scim_query: Optional[pulumi.Input[str]] = None,
opts: Optional[InvokeOptions] = None) -> Output[GetAuditEventResult]
func GetAuditEvent(ctx *Context, args *GetAuditEventArgs, opts ...InvokeOption) (*GetAuditEventResult, error)
func GetAuditEventOutput(ctx *Context, args *GetAuditEventOutputArgs, opts ...InvokeOption) GetAuditEventResultOutput
> Note: This function is named GetAuditEvent
in the Go SDK.
public static class GetAuditEvent
{
public static Task<GetAuditEventResult> InvokeAsync(GetAuditEventArgs args, InvokeOptions? opts = null)
public static Output<GetAuditEventResult> Invoke(GetAuditEventInvokeArgs args, InvokeOptions? opts = null)
}
public static CompletableFuture<GetAuditEventResult> getAuditEvent(GetAuditEventArgs args, InvokeOptions options)
// Output-based functions aren't available in Java yet
fn::invoke:
function: oci:DataSafe/getAuditEvent:getAuditEvent
arguments:
# arguments dictionary
The following arguments are supported:
- Compartment
Id string - A filter to return only resources that match the specified compartment OCID.
- Access
Level string - Valid values are RESTRICTED and ACCESSIBLE. Default is RESTRICTED. Setting this to ACCESSIBLE returns only those compartments for which the user has INSPECT permissions directly or indirectly (permissions can be on a resource in a subcompartment). When set to RESTRICTED permissions are checked and no partial results are displayed.
- Compartment
Id boolIn Subtree - Default is false. When set to true, the hierarchy of compartments is traversed and all compartments and subcompartments in the tenancy are returned. Depends on the 'accessLevel' setting.
- Scim
Query string The scimQuery query parameter accepts filter expressions that use the syntax described in Section 3.2.2.2 of the System for Cross-Domain Identity Management (SCIM) specification, which is available at RFC3339. In SCIM filtering expressions, text, date, and time values must be enclosed in quotation marks, with date and time values using ISO-8601 format. (Numeric and boolean values should not be quoted.)
Example: query=(operationTime ge '2021-06-04T01-00-26') and (eventName eq 'LOGON')
- Compartment
Id string - A filter to return only resources that match the specified compartment OCID.
- Access
Level string - Valid values are RESTRICTED and ACCESSIBLE. Default is RESTRICTED. Setting this to ACCESSIBLE returns only those compartments for which the user has INSPECT permissions directly or indirectly (permissions can be on a resource in a subcompartment). When set to RESTRICTED permissions are checked and no partial results are displayed.
- Compartment
Id boolIn Subtree - Default is false. When set to true, the hierarchy of compartments is traversed and all compartments and subcompartments in the tenancy are returned. Depends on the 'accessLevel' setting.
- Scim
Query string The scimQuery query parameter accepts filter expressions that use the syntax described in Section 3.2.2.2 of the System for Cross-Domain Identity Management (SCIM) specification, which is available at RFC3339. In SCIM filtering expressions, text, date, and time values must be enclosed in quotation marks, with date and time values using ISO-8601 format. (Numeric and boolean values should not be quoted.)
Example: query=(operationTime ge '2021-06-04T01-00-26') and (eventName eq 'LOGON')
- compartment
Id String - A filter to return only resources that match the specified compartment OCID.
- access
Level String - Valid values are RESTRICTED and ACCESSIBLE. Default is RESTRICTED. Setting this to ACCESSIBLE returns only those compartments for which the user has INSPECT permissions directly or indirectly (permissions can be on a resource in a subcompartment). When set to RESTRICTED permissions are checked and no partial results are displayed.
- compartment
Id BooleanIn Subtree - Default is false. When set to true, the hierarchy of compartments is traversed and all compartments and subcompartments in the tenancy are returned. Depends on the 'accessLevel' setting.
- scim
Query String The scimQuery query parameter accepts filter expressions that use the syntax described in Section 3.2.2.2 of the System for Cross-Domain Identity Management (SCIM) specification, which is available at RFC3339. In SCIM filtering expressions, text, date, and time values must be enclosed in quotation marks, with date and time values using ISO-8601 format. (Numeric and boolean values should not be quoted.)
Example: query=(operationTime ge '2021-06-04T01-00-26') and (eventName eq 'LOGON')
- compartment
Id string - A filter to return only resources that match the specified compartment OCID.
- access
Level string - Valid values are RESTRICTED and ACCESSIBLE. Default is RESTRICTED. Setting this to ACCESSIBLE returns only those compartments for which the user has INSPECT permissions directly or indirectly (permissions can be on a resource in a subcompartment). When set to RESTRICTED permissions are checked and no partial results are displayed.
- compartment
Id booleanIn Subtree - Default is false. When set to true, the hierarchy of compartments is traversed and all compartments and subcompartments in the tenancy are returned. Depends on the 'accessLevel' setting.
- scim
Query string The scimQuery query parameter accepts filter expressions that use the syntax described in Section 3.2.2.2 of the System for Cross-Domain Identity Management (SCIM) specification, which is available at RFC3339. In SCIM filtering expressions, text, date, and time values must be enclosed in quotation marks, with date and time values using ISO-8601 format. (Numeric and boolean values should not be quoted.)
Example: query=(operationTime ge '2021-06-04T01-00-26') and (eventName eq 'LOGON')
- compartment_
id str - A filter to return only resources that match the specified compartment OCID.
- access_
level str - Valid values are RESTRICTED and ACCESSIBLE. Default is RESTRICTED. Setting this to ACCESSIBLE returns only those compartments for which the user has INSPECT permissions directly or indirectly (permissions can be on a resource in a subcompartment). When set to RESTRICTED permissions are checked and no partial results are displayed.
- compartment_
id_ boolin_ subtree - Default is false. When set to true, the hierarchy of compartments is traversed and all compartments and subcompartments in the tenancy are returned. Depends on the 'accessLevel' setting.
- scim_
query str The scimQuery query parameter accepts filter expressions that use the syntax described in Section 3.2.2.2 of the System for Cross-Domain Identity Management (SCIM) specification, which is available at RFC3339. In SCIM filtering expressions, text, date, and time values must be enclosed in quotation marks, with date and time values using ISO-8601 format. (Numeric and boolean values should not be quoted.)
Example: query=(operationTime ge '2021-06-04T01-00-26') and (eventName eq 'LOGON')
- compartment
Id String - A filter to return only resources that match the specified compartment OCID.
- access
Level String - Valid values are RESTRICTED and ACCESSIBLE. Default is RESTRICTED. Setting this to ACCESSIBLE returns only those compartments for which the user has INSPECT permissions directly or indirectly (permissions can be on a resource in a subcompartment). When set to RESTRICTED permissions are checked and no partial results are displayed.
- compartment
Id BooleanIn Subtree - Default is false. When set to true, the hierarchy of compartments is traversed and all compartments and subcompartments in the tenancy are returned. Depends on the 'accessLevel' setting.
- scim
Query String The scimQuery query parameter accepts filter expressions that use the syntax described in Section 3.2.2.2 of the System for Cross-Domain Identity Management (SCIM) specification, which is available at RFC3339. In SCIM filtering expressions, text, date, and time values must be enclosed in quotation marks, with date and time values using ISO-8601 format. (Numeric and boolean values should not be quoted.)
Example: query=(operationTime ge '2021-06-04T01-00-26') and (eventName eq 'LOGON')
getAuditEvent Result
The following output properties are available:
- Compartment
Id string - The OCID of the compartment containing the audit event. This is the same audited target database resource comparment.
- Id string
- The provider-assigned unique ID for this managed resource.
- Items
List<Get
Audit Event Item> - Array of audit event summary.
- Access
Level string - Compartment
Id boolIn Subtree - Scim
Query string
- Compartment
Id string - The OCID of the compartment containing the audit event. This is the same audited target database resource comparment.
- Id string
- The provider-assigned unique ID for this managed resource.
- Items
[]Get
Audit Event Item - Array of audit event summary.
- Access
Level string - Compartment
Id boolIn Subtree - Scim
Query string
- compartment
Id String - The OCID of the compartment containing the audit event. This is the same audited target database resource comparment.
- id String
- The provider-assigned unique ID for this managed resource.
- items
List<Get
Audit Event Item> - Array of audit event summary.
- access
Level String - compartment
Id BooleanIn Subtree - scim
Query String
- compartment
Id string - The OCID of the compartment containing the audit event. This is the same audited target database resource comparment.
- id string
- The provider-assigned unique ID for this managed resource.
- items
Get
Audit Event Item[] - Array of audit event summary.
- access
Level string - compartment
Id booleanIn Subtree - scim
Query string
- compartment_
id str - The OCID of the compartment containing the audit event. This is the same audited target database resource comparment.
- id str
- The provider-assigned unique ID for this managed resource.
- items
Sequence[datasafe.
Get Audit Event Item] - Array of audit event summary.
- access_
level str - compartment_
id_ boolin_ subtree - scim_
query str
- compartment
Id String - The OCID of the compartment containing the audit event. This is the same audited target database resource comparment.
- id String
- The provider-assigned unique ID for this managed resource.
- items List<Property Map>
- Array of audit event summary.
- access
Level String - compartment
Id BooleanIn Subtree - scim
Query String
Supporting Types
GetAuditEventItem
- Action
Taken string - The action taken for this audit event.
- Audit
Event stringTime - Time of audit event occurrence in the target database.
- Audit
Location string - The location of the audit. Currently the value is audit table.
- Audit
Policies string - Comma-seperated list of audit policies that caused the current audit event.
- Audit
Trail stringId - The OCID of the audit trail that generated this audit event. To be noted, this field has been deprecated.
- Audit
Type string - Type of auditing.
- Client
Hostname string - Name of the host machine from which the session was spawned.
- Client
Id string - The client identifier in each Oracle session.
- Client
Ip string - IP address of the host from which the session was spawned.
- Client
Program string - The application from which the audit event was generated. Examples SQL Plus or SQL Developer.
- Command
Param string - List of bind variables associated with the command text.
- Command
Text string - The SQL associated with the audit event.
- Compartment
Id string - A filter to return only resources that match the specified compartment OCID.
- Database
Type string - The type of the target database that was audited. Allowed values are
- DATABASE_CLOUD_SERVICE - Represents Oracle Database Cloud Services.
- AUTONOMOUS_DATABASE - Represents Oracle Autonomous Databases.
- INSTALLED_DATABASE - Represents databases running on-premises or on compute instances.
- Db
User stringName - Name of the database user whose actions were audited.
- Dictionary<string, object>
- Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags Example:
{"Operations.CostCenter": "42"}
- Error
Code string - Oracle Error code generated by the action. Zero indicates the action was successful.
- Error
Message string - Detailed message on why the Error occurred.
- Event
Name string - Name of the detail action executed by the user on the target database. i.e ALTER SEQUENCE, CREATE TRIGGER, CREATE INDEX.
- Extended
Event stringAttributes - List of all other attributes of the audit event seperated by a colon other than the one returned in audit record.
- Dictionary<string, object>
- Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags Example:
{"Department": "Finance"}
- Id string
- The OCID of the audit event.
- Is
Alerted bool - Indicates whether an alert was raised for this audit event.
- Object string
- Name of the object affected by the action.
- Object
Owner string - Schema name of object affected but the action.
- Object
Type string - Type of object in the source database affected by the action. i.e PL/SQL, SYNONYM, PACKAGE BODY.
- Operation string
- Name of the action executed by the user on the target database. i.e ALTER, CREATE, DROP.
- Operation
Status string - Indicates whether the operation was a success or a failure.
- Os
Terminal string - The operating system terminal of the user session.
- Os
User stringName - Name of the operating system user for the database session.
- Target
Class string - Class of the target that was audited.
- Target
Id string - The OCID of the target database that was audited.
- Target
Name string - The name of the target database that was audited.
- Time
Collected string - Timestamp when this audit event was collected from the target database by Data Safe.
- Action
Taken string - The action taken for this audit event.
- Audit
Event stringTime - Time of audit event occurrence in the target database.
- Audit
Location string - The location of the audit. Currently the value is audit table.
- Audit
Policies string - Comma-seperated list of audit policies that caused the current audit event.
- Audit
Trail stringId - The OCID of the audit trail that generated this audit event. To be noted, this field has been deprecated.
- Audit
Type string - Type of auditing.
- Client
Hostname string - Name of the host machine from which the session was spawned.
- Client
Id string - The client identifier in each Oracle session.
- Client
Ip string - IP address of the host from which the session was spawned.
- Client
Program string - The application from which the audit event was generated. Examples SQL Plus or SQL Developer.
- Command
Param string - List of bind variables associated with the command text.
- Command
Text string - The SQL associated with the audit event.
- Compartment
Id string - A filter to return only resources that match the specified compartment OCID.
- Database
Type string - The type of the target database that was audited. Allowed values are
- DATABASE_CLOUD_SERVICE - Represents Oracle Database Cloud Services.
- AUTONOMOUS_DATABASE - Represents Oracle Autonomous Databases.
- INSTALLED_DATABASE - Represents databases running on-premises or on compute instances.
- Db
User stringName - Name of the database user whose actions were audited.
- map[string]interface{}
- Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags Example:
{"Operations.CostCenter": "42"}
- Error
Code string - Oracle Error code generated by the action. Zero indicates the action was successful.
- Error
Message string - Detailed message on why the Error occurred.
- Event
Name string - Name of the detail action executed by the user on the target database. i.e ALTER SEQUENCE, CREATE TRIGGER, CREATE INDEX.
- Extended
Event stringAttributes - List of all other attributes of the audit event seperated by a colon other than the one returned in audit record.
- map[string]interface{}
- Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags Example:
{"Department": "Finance"}
- Id string
- The OCID of the audit event.
- Is
Alerted bool - Indicates whether an alert was raised for this audit event.
- Object string
- Name of the object affected by the action.
- Object
Owner string - Schema name of object affected but the action.
- Object
Type string - Type of object in the source database affected by the action. i.e PL/SQL, SYNONYM, PACKAGE BODY.
- Operation string
- Name of the action executed by the user on the target database. i.e ALTER, CREATE, DROP.
- Operation
Status string - Indicates whether the operation was a success or a failure.
- Os
Terminal string - The operating system terminal of the user session.
- Os
User stringName - Name of the operating system user for the database session.
- Target
Class string - Class of the target that was audited.
- Target
Id string - The OCID of the target database that was audited.
- Target
Name string - The name of the target database that was audited.
- Time
Collected string - Timestamp when this audit event was collected from the target database by Data Safe.
- action
Taken String - The action taken for this audit event.
- audit
Event StringTime - Time of audit event occurrence in the target database.
- audit
Location String - The location of the audit. Currently the value is audit table.
- audit
Policies String - Comma-seperated list of audit policies that caused the current audit event.
- audit
Trail StringId - The OCID of the audit trail that generated this audit event. To be noted, this field has been deprecated.
- audit
Type String - Type of auditing.
- client
Hostname String - Name of the host machine from which the session was spawned.
- client
Id String - The client identifier in each Oracle session.
- client
Ip String - IP address of the host from which the session was spawned.
- client
Program String - The application from which the audit event was generated. Examples SQL Plus or SQL Developer.
- command
Param String - List of bind variables associated with the command text.
- command
Text String - The SQL associated with the audit event.
- compartment
Id String - A filter to return only resources that match the specified compartment OCID.
- database
Type String - The type of the target database that was audited. Allowed values are
- DATABASE_CLOUD_SERVICE - Represents Oracle Database Cloud Services.
- AUTONOMOUS_DATABASE - Represents Oracle Autonomous Databases.
- INSTALLED_DATABASE - Represents databases running on-premises or on compute instances.
- db
User StringName - Name of the database user whose actions were audited.
- Map<String,Object>
- Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags Example:
{"Operations.CostCenter": "42"}
- error
Code String - Oracle Error code generated by the action. Zero indicates the action was successful.
- error
Message String - Detailed message on why the Error occurred.
- event
Name String - Name of the detail action executed by the user on the target database. i.e ALTER SEQUENCE, CREATE TRIGGER, CREATE INDEX.
- extended
Event StringAttributes - List of all other attributes of the audit event seperated by a colon other than the one returned in audit record.
- Map<String,Object>
- Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags Example:
{"Department": "Finance"}
- id String
- The OCID of the audit event.
- is
Alerted Boolean - Indicates whether an alert was raised for this audit event.
- object String
- Name of the object affected by the action.
- object
Owner String - Schema name of object affected but the action.
- object
Type String - Type of object in the source database affected by the action. i.e PL/SQL, SYNONYM, PACKAGE BODY.
- operation String
- Name of the action executed by the user on the target database. i.e ALTER, CREATE, DROP.
- operation
Status String - Indicates whether the operation was a success or a failure.
- os
Terminal String - The operating system terminal of the user session.
- os
User StringName - Name of the operating system user for the database session.
- target
Class String - Class of the target that was audited.
- target
Id String - The OCID of the target database that was audited.
- target
Name String - The name of the target database that was audited.
- time
Collected String - Timestamp when this audit event was collected from the target database by Data Safe.
- action
Taken string - The action taken for this audit event.
- audit
Event stringTime - Time of audit event occurrence in the target database.
- audit
Location string - The location of the audit. Currently the value is audit table.
- audit
Policies string - Comma-seperated list of audit policies that caused the current audit event.
- audit
Trail stringId - The OCID of the audit trail that generated this audit event. To be noted, this field has been deprecated.
- audit
Type string - Type of auditing.
- client
Hostname string - Name of the host machine from which the session was spawned.
- client
Id string - The client identifier in each Oracle session.
- client
Ip string - IP address of the host from which the session was spawned.
- client
Program string - The application from which the audit event was generated. Examples SQL Plus or SQL Developer.
- command
Param string - List of bind variables associated with the command text.
- command
Text string - The SQL associated with the audit event.
- compartment
Id string - A filter to return only resources that match the specified compartment OCID.
- database
Type string - The type of the target database that was audited. Allowed values are
- DATABASE_CLOUD_SERVICE - Represents Oracle Database Cloud Services.
- AUTONOMOUS_DATABASE - Represents Oracle Autonomous Databases.
- INSTALLED_DATABASE - Represents databases running on-premises or on compute instances.
- db
User stringName - Name of the database user whose actions were audited.
- {[key: string]: any}
- Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags Example:
{"Operations.CostCenter": "42"}
- error
Code string - Oracle Error code generated by the action. Zero indicates the action was successful.
- error
Message string - Detailed message on why the Error occurred.
- event
Name string - Name of the detail action executed by the user on the target database. i.e ALTER SEQUENCE, CREATE TRIGGER, CREATE INDEX.
- extended
Event stringAttributes - List of all other attributes of the audit event seperated by a colon other than the one returned in audit record.
- {[key: string]: any}
- Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags Example:
{"Department": "Finance"}
- id string
- The OCID of the audit event.
- is
Alerted boolean - Indicates whether an alert was raised for this audit event.
- object string
- Name of the object affected by the action.
- object
Owner string - Schema name of object affected but the action.
- object
Type string - Type of object in the source database affected by the action. i.e PL/SQL, SYNONYM, PACKAGE BODY.
- operation string
- Name of the action executed by the user on the target database. i.e ALTER, CREATE, DROP.
- operation
Status string - Indicates whether the operation was a success or a failure.
- os
Terminal string - The operating system terminal of the user session.
- os
User stringName - Name of the operating system user for the database session.
- target
Class string - Class of the target that was audited.
- target
Id string - The OCID of the target database that was audited.
- target
Name string - The name of the target database that was audited.
- time
Collected string - Timestamp when this audit event was collected from the target database by Data Safe.
- action_
taken str - The action taken for this audit event.
- audit_
event_ strtime - Time of audit event occurrence in the target database.
- audit_
location str - The location of the audit. Currently the value is audit table.
- audit_
policies str - Comma-seperated list of audit policies that caused the current audit event.
- audit_
trail_ strid - The OCID of the audit trail that generated this audit event. To be noted, this field has been deprecated.
- audit_
type str - Type of auditing.
- client_
hostname str - Name of the host machine from which the session was spawned.
- client_
id str - The client identifier in each Oracle session.
- client_
ip str - IP address of the host from which the session was spawned.
- client_
program str - The application from which the audit event was generated. Examples SQL Plus or SQL Developer.
- command_
param str - List of bind variables associated with the command text.
- command_
text str - The SQL associated with the audit event.
- compartment_
id str - A filter to return only resources that match the specified compartment OCID.
- database_
type str - The type of the target database that was audited. Allowed values are
- DATABASE_CLOUD_SERVICE - Represents Oracle Database Cloud Services.
- AUTONOMOUS_DATABASE - Represents Oracle Autonomous Databases.
- INSTALLED_DATABASE - Represents databases running on-premises or on compute instances.
- db_
user_ strname - Name of the database user whose actions were audited.
- Mapping[str, Any]
- Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags Example:
{"Operations.CostCenter": "42"}
- error_
code str - Oracle Error code generated by the action. Zero indicates the action was successful.
- error_
message str - Detailed message on why the Error occurred.
- event_
name str - Name of the detail action executed by the user on the target database. i.e ALTER SEQUENCE, CREATE TRIGGER, CREATE INDEX.
- extended_
event_ strattributes - List of all other attributes of the audit event seperated by a colon other than the one returned in audit record.
- Mapping[str, Any]
- Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags Example:
{"Department": "Finance"}
- id str
- The OCID of the audit event.
- is_
alerted bool - Indicates whether an alert was raised for this audit event.
- object str
- Name of the object affected by the action.
- object_
owner str - Schema name of object affected but the action.
- object_
type str - Type of object in the source database affected by the action. i.e PL/SQL, SYNONYM, PACKAGE BODY.
- operation str
- Name of the action executed by the user on the target database. i.e ALTER, CREATE, DROP.
- operation_
status str - Indicates whether the operation was a success or a failure.
- os_
terminal str - The operating system terminal of the user session.
- os_
user_ strname - Name of the operating system user for the database session.
- target_
class str - Class of the target that was audited.
- target_
id str - The OCID of the target database that was audited.
- target_
name str - The name of the target database that was audited.
- time_
collected str - Timestamp when this audit event was collected from the target database by Data Safe.
- action
Taken String - The action taken for this audit event.
- audit
Event StringTime - Time of audit event occurrence in the target database.
- audit
Location String - The location of the audit. Currently the value is audit table.
- audit
Policies String - Comma-seperated list of audit policies that caused the current audit event.
- audit
Trail StringId - The OCID of the audit trail that generated this audit event. To be noted, this field has been deprecated.
- audit
Type String - Type of auditing.
- client
Hostname String - Name of the host machine from which the session was spawned.
- client
Id String - The client identifier in each Oracle session.
- client
Ip String - IP address of the host from which the session was spawned.
- client
Program String - The application from which the audit event was generated. Examples SQL Plus or SQL Developer.
- command
Param String - List of bind variables associated with the command text.
- command
Text String - The SQL associated with the audit event.
- compartment
Id String - A filter to return only resources that match the specified compartment OCID.
- database
Type String - The type of the target database that was audited. Allowed values are
- DATABASE_CLOUD_SERVICE - Represents Oracle Database Cloud Services.
- AUTONOMOUS_DATABASE - Represents Oracle Autonomous Databases.
- INSTALLED_DATABASE - Represents databases running on-premises or on compute instances.
- db
User StringName - Name of the database user whose actions were audited.
- Map<Any>
- Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags Example:
{"Operations.CostCenter": "42"}
- error
Code String - Oracle Error code generated by the action. Zero indicates the action was successful.
- error
Message String - Detailed message on why the Error occurred.
- event
Name String - Name of the detail action executed by the user on the target database. i.e ALTER SEQUENCE, CREATE TRIGGER, CREATE INDEX.
- extended
Event StringAttributes - List of all other attributes of the audit event seperated by a colon other than the one returned in audit record.
- Map<Any>
- Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags Example:
{"Department": "Finance"}
- id String
- The OCID of the audit event.
- is
Alerted Boolean - Indicates whether an alert was raised for this audit event.
- object String
- Name of the object affected by the action.
- object
Owner String - Schema name of object affected but the action.
- object
Type String - Type of object in the source database affected by the action. i.e PL/SQL, SYNONYM, PACKAGE BODY.
- operation String
- Name of the action executed by the user on the target database. i.e ALTER, CREATE, DROP.
- operation
Status String - Indicates whether the operation was a success or a failure.
- os
Terminal String - The operating system terminal of the user session.
- os
User StringName - Name of the operating system user for the database session.
- target
Class String - Class of the target that was audited.
- target
Id String - The OCID of the target database that was audited.
- target
Name String - The name of the target database that was audited.
- time
Collected String - Timestamp when this audit event was collected from the target database by Data Safe.
Package Details
- Repository
- oci pulumi/pulumi-oci
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
oci
Terraform Provider.