Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
tutorial:adm:reading_audits [2019/09/02 13:22] fiserp [Identity disabled] |
tutorial:adm:reading_audits [2021/10/07 13:39] (current) fiserp |
||
|---|---|---|---|
| Line 1: | Line 1: | ||
| ====== Audit - Reading audit information ====== | ====== Audit - Reading audit information ====== | ||
| This article shows how to connect CzechIdM to automated security monitoring system (SIEM). This form of integration is necessary in many organizations. IdM, being the central point where identities and their roles are managed, is just another piece of the security monitoring mosaic. | This article shows how to connect CzechIdM to automated security monitoring system (SIEM). This form of integration is necessary in many organizations. IdM, being the central point where identities and their roles are managed, is just another piece of the security monitoring mosaic. | ||
| + | |||
| + | <note tip> | ||
| + | |||
| + | Please, use specialized [[devel: | ||
| ===== Important events to monitor ===== | ===== Important events to monitor ===== | ||
| Line 117: | Line 121: | ||
| " | " | ||
| " | " | ||
| + | // who created | ||
| " | " | ||
| " | " | ||
| + | // login of created identity | ||
| " | " | ||
| " | " | ||
| Line 506: | Line 512: | ||
| " | " | ||
| " | " | ||
| + | // who created the role | ||
| " | " | ||
| + | // role name in the form of NAME|environment | ||
| " | " | ||
| ... redacted ... | ... redacted ... | ||
| Line 513: | Line 521: | ||
| " | " | ||
| " | " | ||
| + | // implementation name of the role | ||
| " | " | ||
| + | // deployment environment the role is intended for | ||
| " | " | ||
| + | // user friendly name of the role | ||
| " | " | ||
| " | " | ||