The Keyfactor Command audit logs are a record of historical changes that have been made within the product to key systems. The following shows the full list of currently audited areas (areas of the product) and operations (types of activity). The equivalent numeric codes are included for those interested in viewing or analyzing raw log data.
Audit Log Operations
The type of operation performed.
Table 76: Audit Operations
|
Value |
Description |
|---|---|
|
1 |
Created |
|
2 |
Updated |
|
3 |
Deleted |
|
4 |
Approved |
|
5 |
Denied |
|
6 |
Revoked |
|
7 |
Downloaded |
|
8 |
Deleted Private Key |
|
9 |
Renewed |
|
10 |
Encountered |
|
11 |
Scheduled Replacement |
|
12 |
Recovered |
|
13 |
Imported |
|
14 |
Removed from Hold |
| 15 | Scheduled Add |
| 16 | Scheduled Removal |
| 17 | Download with Private Key |
| 18 | Scheduled |
| 19 | Reset |
| 20 | Disapproved |
| 21 | Restarted |
| 22 | Sent |
| 23 | Failed |
| 24 | Completed |
| 25 | Rejected |
Audit Log Categories
The area of the product in which the auditable activity occurred. The subcategory name is primarily used in the Keyfactor API A set of functions to allow creation of applications. Keyfactor offers the Keyfactor API, which allows third-party software to integrate with the advanced certificate enrollment and management features of Keyfactor Command. or when reviewing downloaded CSV files.
Table 77: Audit Categories
|
Value |
Subcategory Name |
Description |
|---|---|---|
|
2001 |
Certificate |
Certificate |
|
2001 |
Auditing Certificate Scheduled Replacement |
Auditing Certificate Scheduled Replacement |
|
2001 |
Auditing Certificate Request |
Certificate Request |
|
2002 |
ApiApplication |
API Application |
|
2003 |
Template |
Template |
|
2004 |
CertificateQuery |
Certificate Collection/Query |
|
2005 |
ExpirationAlert |
Expiration Alert |
|
2005 |
Expiration Alert Definition Context Model |
Expiration Alert |
|
2006 |
PendingAlert |
Pending Alert |
|
2006 |
Pending Alert Definition Context Model |
Pending Alert |
|
2007 |
ApplicationSetting |
Application Setting |
|
2008 |
IssuedAlert |
Issued Alert |
|
2008 |
Issued Alert Definition Context Model |
Issued Alert |
|
2009 |
DeniedAlert |
Denied Alert |
|
2009 |
Denied Alert Definition Context Model |
Denied Alert |
|
2010 |
ADIdentityModel |
Security Identity |
|
2011 |
SecurityRole |
Security Role |
|
2012 |
AuthorizationFailure |
Authorization Failure |
|
2013 |
CertificateSigningRequest |
CSR |
|
2014 |
ServerGroup |
SSH Server Group |
|
2015 |
Server |
SSH Server |
| 2016 | DiscoveredKey | Rogue Key for Logon |
| 2016 | Key | SSH Key |
|
2017 |
ServiceAccount |
SSH Service Account |
|
2018 |
Logon |
SSH Logon |
|
2019 |
SshUser |
SSH User |
|
2020 |
Key Rotation Alert Definition Context Model |
SSH Key Rotation Alert |
| 2021 | CertificateStore | Certificate Store |
| 2022 | JobType | Orchestrator Job Type |
| 2023 | AgentSchedule | Orchestrator Job |
| 2024 | Bulk Agent Schedule | Bulk Orchestrator Job |
| 2025 | Certificate Store Container | Store Container |
| 2026 | Agent | Orchestrator |
| 2027 | Revocation Monitoring | Monitoring |
| 2028 | License | License |
| 2029 | WorkflowDefinition | Workflow Definition |
| 2030 | WorkflowInstance | Workflow Instance |
| 2031 | WorkflowInstanceSignal | Workflow Instance Signal |
| 2032 | IdentityProvider | Identity Provider |
| 2033 | RoleClaimDefinition | Claim Definition |
| 2034 | PermissionSet | Permission Set |