Messaging security audit events

Messaging security audit events are produced when a messaging client sends or receives a message, or updates a service data object repository, and when a publisher submits a message to a topic.

To audit messaging security, we create security event type filters for the audit events produced during messaging operations. Details of the audit events produced are included in the following descriptions of auditable messaging operations:

• A messaging client sending a message to a message destination

• A messaging client receiving a message from a message destination

• Messaging engines connecting to one another on the same bus

• Messaging engines connecting to one another on different buses

• A publisher sending a message to a topic

• A messaging client receiving a message from a subscription

• A cell administrator updates a service data object (SDO) repository

Subtopics

• A messaging client sending a message to a message destination
  The messaging security audit events SECURITY_AUTHN, SECURITY_AUTHZ and SECURITY_AUTHN_TERMINATE are produced when a messaging client sends a message to a message destination.

• A messaging client receiving a message from a message destination
  Messaging security audit events SECURITY_AUTHN, SECURITY_AUTHZ and SECURITY_AUTHN_TERMINATE are produced when a messaging client receives a message from a message destination.

• Messaging engines connecting to one another on the same bus
  The messaging security audit events SECURITY_AUTHN and SECURITY_AUTHZ are produced when a messaging engine connects to another messaging engine on the same bus.

• Messaging engines connecting to one another on different buses
  The messaging security audit events SECURITY_AUTHN and SECURITY_AUTHZ are produced when a messaging engine connects to another messaging engine on a foreign bus.

• A publisher sending a message to a topic
  The messaging security audit events SECURITY_AUTHN, SECURITY_AUTHZ and SECURITY_AUTHN_TERMINATE are produced when a messaging client sends a message to a subscription topic.

• A messaging client receiving a message from a subscription
  The messaging security audit events SECURITY_AUTHN, A SECURITY_AUTHZ, and SECURITY_AUTHN_TERMINATE are produced when a messaging client receives a message from a subscription.

• A cell administrator updates a service data object (SDO) repository
  The messaging security audit events SECURITY_AUTHN, SECURITY_AUTHZ, SECURITY_MGMT_CONFIG, and SECURITY_AUTHN_TERMINATE are produced when a cell administrator changes the contents of a service data object (SDO) repository in an import or remove operation.

Related tasks

Create security auditing event type filters

Auditing the service integration security infrastructure