SIEM Audit Log Report - Description for the Action Taken Feild

[IDAM09]

We are trying to create an audit log report and export the results in Excel.

select ua.TYPEOFACCESS as 'Object Type',ua.ActionType as 'Action Taken',u.username as 'Accessed By', ua.IPADDRESS as 'IP Address',ua.ACCESSTIME as 'Event Time',ua.DETAIL as 'Message', JSON_VALUE(ua.DETAIL,'$.message') as 'ShortMessage' from users u , userlogin_access ua, userlogins ul where ul.loginkey = ua.LOGINKEY and ul.USERKEY = u.userkey and ua.Detail is not NULL

Some values for Action Taken column is not self-explanatory (as attached below). Is there any documentation which provides detailed description for the Action Taken values in Saviynt EIC?

[DixshantValecha]

Hi @IDAM09,

We are checking on your request and we will keep you posted on the same.

[DixshantValecha]

Hi @IDAM09,

Kindly provide further explanation regarding specific values in the "Action Taken" column. Could you please specify which values you would like clarification on?

[IDAM09]

Hi @DixshantValecha 

Looking for clarification on the below values.

ACTION TAKEN

Update

Create

CHANGE PASSWORD

roleTcodes

roleentitlementhierarchy

roleUsers

role_function

role_business_process

role_dynamic_attribute

role_sod

Upload

Delete

rolerequestfirststep

ANALYTICS ACTION(V2)

Show

assocaitedentitlement

role_history

roledetail

role_owner

role_otherAttribute

role_versions

role_group

existingNameCheck

Edit

Download

entitlement_show_Parents

rolehistorydetail

addRemoveParentEntitlementFromModal

addRemoveEntitlementFromModal

setroleOwnerKeyinsessionset

allusageofent

allusageofentbyaccount

associatedtcode

setchildaccountkeyinsessionset

setparententkeyinsessionset

setentkeyinsessionset

Restart

accountstcode

roletcodeentitlementslist

allusageofentj

allusageofentbyaccountj

roleuserslist

rolerefrencej

listjsongroup

rolehistorylist

allfunctionofrolej

sendforapproval

selectowner

selectentitlement

selectparententitlement

selectChildAccount

[rushikeshvartak]

This are actions user open pages and url bindings

This all are pages and HTTP urls which are shown

Below are description based on my experience and finding each pages

[rushikeshvartak · Accepted solution]

Please close thread if you got answer & as above clarify how to find action taken.

@DixshantValecha  this is good to add in documentation 

[DixshantValecha]

Hi @rushikeshvartak,

Thanks for the update ,we will check and do the needful.