IBM_SECURITY_RUNTIME events (Runtime start)

This event type is generated when the runtime is started.

The following table lists the elements that can be shown in the output of an IBM_SECURITY_RUNTIME event.

Element	Description
Domain	The XPath is: CommonBaseEvent/extendedDataElements [@name='Domain']/values
IsMgmtAudit	The XPath is: CommonBaseEvent/extendedDataElements [@name='IsMgmtAudit']/values
nameInApp	The XPath is: CommonBaseEvent/extendedDataElements [@name='resourceInfo']/children [@name='nameInApp']/values
nameInPolicy	The XPath is: CommonBaseEvent/extendedDataElements [@name='resourceInfo']/children [@name='nameInPolicy']/values
type	The XPath is: CommonBaseEvent/extendedDataElements [@name='resourceInfo']/children [@name='type']/values
uniqueID	The XPath is: CommonBaseEvent/extendedDataElements [@name='resourceInfo']/children [@name='uniqueID']/values
action	The XPath is: CommonBaseEvent/extendedDataElements [@name='action']/values

Samples of IBM_SECURITY_RUNTIME events

The following example shows an events generated by a runtime request.

<CommonBaseEvent 
  creationTime="2016-09-20T03:45:55.838Z" 
  extensionName="IBM_SECURITY_RUNTIME" 
  globalInstanceId="FIM45b338ad015712f2ad5cd6c9d3998" 
  sequenceNumber="0" version="1.1">
<contextDataElements 
  name="Security Event Factory" 
  type="eventTrailId">
  <contextId>FIM_45b337ec01571ef29f4cd6c9d3998025+1092518090</contextId>
</contextDataElements>
<extendedDataElements name="Domain" type="string">
  <values>Not Available</values>
</extendedDataElements>
<extendedDataElements name="IsMgmtAudit" type="boolean">
  <values>false</values>
</extendedDataElements>
<extendedDataElements name="action" type="string">
  <values>auditStart</values>
</extendedDataElements>
<extendedDataElements name="resourceInfo" type="noValue">
  <children name="nameInApp" type="string"><values></values>
  </children>
  <children name="nameInPolicy" type="string"><values></values>
  </children>
  <children name="type" type="string"><values>application</values>  
  </children>
  <children name="uniqueId" type="long"><values>0</values>
  </children>
</extendedDataElements>
<extendedDataElements name="outcome" type="noValue">
  <children name="result" type="string"><values>SUCCESSFUL</values>
  </children>
  <children name="majorStatus" type="int"><values>0</values>
  </children>
</extendedDataElements>
<sourceComponentId 
  application="IBM Security Verify Access" 
  component="Authentication and Federated Identity" 
  componentIdType="ProductName" 
  executionEnvironment="Linux[amd64]#2.6.32-279.14.1.91.iss7_3.x86_64" 
  location="isam.myidp.ibm.com" 
  locationType="FQHostname" 
  subComponent="com.tivoli.am.fim.audit.event.impl.RuntimeAuditAdapterImpl" 
  threadId="Default Executor-thread-10" 
  componentType="http://www.ibm.com/namespaces/autonomic/Tivoli_componentTypes"/>
<situation categoryName="ReportSituation">
  <situationType xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
    xsi:type="ReportSituation" 
    reasoningScope="INTERNAL" 
    reportCategory="SECURITY"/>
  </situation>
</CommonBaseEvent>

Parent topic: Audit Federation