Elements for AUDIT_RESOURCE_ACCESS events
This event type identifies all accesses to a resource, such as a file or HTTP request or response events outside of the AUDIT_AUTHZ events.
The following table lists the elements that can be displayed in the output of an AUDIT_RESOURCE_ACCESS event and their abbreviated XPath statements.
Element Always in output Abbreviated XPath accessDecision No accessDecision accessDecisionReason When accessDecision is Denied accessDecisionReason action Yes action appName No appName attributePermissionInfo No This element is a container element and has no valid XPath. A valid XPath requires a values declaration. This container element uses the children of the attributePermissionInfoType element type. attributePermissionInfo.attributeNames Yes attributePermissionInfo.attributeNames attributePermissionInfo.checked Yes attributePermissionInfo.checked attributePermissionInfo denied No attributePermissionInfo.denied attributePermissionInfo granted No attributePermissionInfo.granted auditMsg No auditMsg auditMsgElement No Neither this element, nor its children, should be defined in the shredder configuration file. auditTrailId No auditTrailId endTime No endTime [type='dateTime'] extensionName Yes ”'AUDIT_RESOURCE_ACCESS'" globalInstanceId Yes Not applicable. This value is an internal number that is not related to #GLOBAL_ID. httpURLInfo When action is HTTPRequest This element is a container element and has no valid XPath. A valid XPath requires a values declaration. This container element uses the children of the HTTPURLInfoType element type. httpURLInfo method No HTTPURLInfo.method httpURLInfo requestHeaders HTTPURLInfo.requestHeaders httpURLInfo responseCode HTTPURLInfo.responseCode httpURLInfo responseHeaders HTTPURLInfo.responseHeaders httpURLInfo url HTTPURLInfo.url outcome Yes This element is a container element and has no valid XPath. A valid XPath requires a values declaration. This container element uses the children of the auditOutcomeType element type. outcome.failureReason No outcome.failureReason outcome majorStatus No outcome.majorStatus outcome minorStatus No outcome.minorStatus outcome result Yes outcome.result permissionInfo Yes This element is a container element and has no valid XPath. A valid XPath requires a values declaration. This container element uses the children of the permissionInfoType element type. permissionInfo.checked Yes permissionInfo.checked permissionInfo.denied No permissionInfo.denied permissionInfo.granted No permissionInfo.granted permissionInfo.J2EERolesChecked No permissionInfo.J2EERolesChecked permissionInfo.J2EERolesGranted No permissionInfo.J2EERolesGranted registryInfo No This element is a container element and has no valid XPath. A valid XPath requires a values declaration. This container element uses the children of the registryInfoType element type. registryInfo serverLocation Yes registryInfo.serverLocation registryInfo serverLocationType Yes registryInfo.serverLocationType registryInfo serverPort Yes registryInfo.serverPort registryInfo type Yes registryInfo.type reporterComponentId When different from the sourceComponentId Neither this element, nor its children, should be defined in the shredder configuration file. These elements are generated by the code. This container element uses the children of the auditComponentIdType element type. resourceInfo Yes This element is a container element and has no valid XPath. A valid XPath requires a values declaration. This container element uses the children of the resourceInfoType element type. resourceInfo.attributes No resourceInfo.attributes resourceInfo.nameInApp Yes resourceInfo.nameInApp resourceInfo.nameInPolicy Yes resourceInfo.nameInPolicy resourceInfo.type Yes resourceInfo.type sequenceNumber Yes Not applicable. This value is an internal number that is not related to #RECORD_ID. sourceComponentId Yes This element is a container element and has no valid XPath. A valid XPath requires a values declaration. This container element uses the children of the auditComponentIdType element type. sourceComponentId application Yes CommonBaseEvent/SourceComponentId/ @application sourceComponentId component Yes CommonBaseEvent/SourceComponentId/ @component sourceComponentId componentIdType Yes CommonBaseEvent/SourceComponentId/ @componentIdType sourceComponentId componentType Yes CommonBaseEvent/SourceComponentId/ @componentType sourceComponentId executionEnvironment No CommonBaseEvent/SourceComponentId/ @executionEnvironment sourceComponentId instanceId No CommonBaseEvent/SourceComponentId/ @instanceId sourceComponentId location Yes CommonBaseEvent/SourceComponentId/@location sourceComponentId locationType Yes CommonBaseEvent/SourceComponentId/ @locationType sourceComponentId processed No CommonBaseEvent/SourceComponentId/ @processed sourceComponentId subComponent Yes CommonBaseEvent/SourceComponentId/ @subComponent sourceComponentId threadId No CommonBaseEvent/SourceComponentId/@threadId startTime No startTime [type='dateTime'] timestamp Yes CommonBaseEvent/@creationTime userInfo Yes This element is a container element and has no valid XPath. A valid XPath requires a values declaration. This container element uses the children of the userInfoType element type. userInfo.appUserName Yes userInfo.appUserName userInfo.attributes No userInfo.attributes userInfo.callerList No userInfo.callerList userInfo.domain No userInfo.domain userInfo location No userInfo.location userInfo locationType No userInfo.locationType userInfo.realm No userInfo.realm userInfo.registryUserName Yes userInfo.registryUserName userInfo.sessionId No userInfo.sessionId userInfo.uniqueId No userInfo.uniqueId
Parent topic: Elements by event types