Hi,
I have taken a look at the data produced by a test audit log from Saviynt and there are some additional questions. We require the following Login, User access management and System security events.
Login events
Records of successful and failed attempts to access an Saviynt EIGA
Typically, they include the following information:
who attempted to access Saviynt EIGA
from which system the activity occurred (i.e. source)
when the activity occurred (i.e. timestamp)
what the result was (i.e. access was successful or failed)
User access management events
Records of successful creation, modification, or removal of identities & roles (e.g. users, groups, roles, profiles) in Saviynt as well as assignment or revocation of permissions to such identities.
Typically, they include the following information:
which identity (e.g. user, group, role, profile) was created, modified or deleted
which permission sets were created, modified or deleted
which permission sets were assigned to or revoked from an identity
who triggered the activity
from which system the activity occurred (i.e. source)
when the activity occurred (i.e. timestamp)
System security events
Records of key security-related changes or activities to Saviynt EIGA along with the corresponding date and time of occurrence.
Typically, they include the following events:
alteration or deactivation of the security log
changes to the configuration of the Saviynt EIGA
modifications of other settings that affect the security of the Saviynt EIGA (e.g. password composition parameters)
who triggered the activity
from which system the activity occurred (i.e. source)
when the activity occurred (i.e. timestamp)
Is it possible to get the necessary Login events from the application audit log? (The file created on the filesystem)
Is it possible to generate the User access management and System security events from the database audits?
Thanks
