The Keyfactor Command audit logs are a record of historical changes that have been made within the product to key systems. The following shows the full list of currently audited areas (areas of the product) and operations (types of activity). The equivalent numeric codes are included for those interested in viewing or analyzing raw log data.
Audit Log Operations
The type of operation performed.
Table 76: Audit Operations
|
Value |
Description |
|---|---|
|
1 |
Created |
|
2 |
Updated |
|
3 |
Deleted |
|
4 |
Approved |
|
5 |
Denied |
|
6 |
Revoked |
|
7 |
Downloaded |
|
8 |
Deleted Private Key |
|
9 |
Renewed |
|
10 |
Encountered |
|
11 |
Scheduled Replacement |
|
12 |
Recovered |
|
13 |
Imported |
|
14 |
Removed from Hold |
| 15 | Scheduled Add |
| 16 | Scheduled Removal |
| 17 | Download with Private Key |
| 18 | Scheduled |
| 19 | Reset |
| 20 | Disapproved |
| 21 | Restarted |
| 22 | Sent |
| 23 | Failed |
| 24 | Completed |
| 25 | Rejected |
Audit Log Categories
The area of the product in which the auditable activity occurred. The subcategory name is primarily used in the Keyfactor API A set of functions to allow creation of applications. Keyfactor offers the Keyfactor API, which allows third-party software to integrate with the advanced certificate enrollment and management features of Keyfactor Command. or when reviewing downloaded CSV files.
Table 77: Audit Categories
|
Value |
Subcategory Name |
Description |
|---|---|---|
|
2001 |
Certificate |
Certificate |
|
2001 |
Auditing Certificate Scheduled Replacement |
Auditing Certificate Scheduled Replacement |
|
2001 |
Auditing Certificate Request |
Certificate Request |
|
2002 |
Api Application |
API Application |
|
2003 |
Template |
Template |
|
2004 |
Certificate Query |
Certificate Collection/Query |
|
2005 |
Expiration Alert |
Expiration Alert |
|
2005 |
Expiration Alert Definition Context Model |
Expiration Alert |
|
2006 |
Pending Alert |
Pending Alert |
|
2006 |
Pending Alert Definition Context Model |
Pending Alert |
|
2007 |
Application Setting |
Application Setting |
|
2008 |
Issued Alert |
Issued Alert |
|
2008 |
Issued Alert Definition Context Model |
Issued Alert |
|
2009 |
Denied Alert |
Denied Alert |
|
2009 |
Denied Alert Definition Context Model |
Denied Alert |
|
2010 |
AD Identity Model |
Security Identity |
|
2011 |
Security Role |
Security Role |
|
2012 |
Authorization Failure |
Authorization Failure |
|
2013 |
Certificate Signing Request |
CSR |
|
2014 |
Server Group |
SSH Server Group |
|
2015 |
Server |
SSH Server |
| 2016 | Discovered Key | Rogue Key for Logon |
| 2016 | Key | SSH Key |
|
2017 |
Service Account |
SSH Service Account |
|
2018 |
Logon |
SSH Logon |
|
2019 |
SshUser |
SSH User |
|
2020 |
Key Rotation Alert Definition Context Model |
SSH Key Rotation Alert |
| 2021 | Certificate Store | Certificate Store |
| 2022 | Job Type | Orchestrator Job Type |
| 2023 | Agent Schedule | Orchestrator Job |
| 2024 | Bulk Agent Schedule | Bulk Orchestrator Job |
| 2025 | Certificate Store Container | Store Container |
| 2026 | Agent | Orchestrator |
| 2027 | Revocation Monitoring | Monitoring |
| 2028 | License | License |
| 2029 | Workflow Definition | Workflow Definition |
| 2030 | Workflow Instance | Workflow Instance |
| 2031 | Workflow Instance Signal | Workflow Instance Signal |
| 2032 | Identity Provider | Identity Provider |
| 2033 | Role Claim Definition | Claim Definition |