Activity event topic properties

Event Property Description

Event Property	Description
`_id`	UUID for the message object, such as `"0419d364-1b3d-4e4f-b769-555c3ca098b0"`.
`timestamp`	Time that IDM logged the message, in UTC format; for example, `"2020-05-18T08:48:00.160Z"`.
`eventName`	Describes the audit event. Examples include `activity`, `workflow-complete_task`, and `relationship_created`.
`transactionId`	UUID of the transaction; you might see the same transaction for the same event in different audit event topics.
`userId`	User ID.
`trackingId`	A unique value for the object being tracked.
`runAs`	User to run the activity as; may be used in delegated administration.
`objectId`	Object identifier, such as `/managed/user/42f8a60e-2019-4110-a10d-7231c3578e2b`.
`operation`	Common REST operation taken on the object; for example, UPDATE, DELETE, or ACTION.
`before`	JSON representation of the object prior to the activity.
`after`	JSON representation of the object after the activity.
`changedFields`	Fields that were changed, based on Fields to Watch.
`revision`	Object revision number.
`status`	Result, such as SUCCESS.
`message`	Human readable text about the action.
`passwordChanged`	True/False entry on changes to the password.
`context`	Flag for self-service logins, such as `SELFSERVICE`.
`provider`	Name of the self-service provider, usually a social identity provider.

_id

UUID for the message object, such as "0419d364-1b3d-4e4f-b769-555c3ca098b0".

timestamp

Time that IDM logged the message, in UTC format; for example, "2020-05-18T08:48:00.160Z".

eventName

Describes the audit event. Examples include activity, workflow-complete_task, and relationship_created.

transactionId

UUID of the transaction; you might see the same transaction for the same event in different audit event topics.

userId

User ID.

trackingId

A unique value for the object being tracked.

runAs

User to run the activity as; may be used in delegated administration.

objectId

Object identifier, such as /managed/user/42f8a60e-2019-4110-a10d-7231c3578e2b.

operation

Common REST operation taken on the object; for example, UPDATE, DELETE, or ACTION.

before

JSON representation of the object prior to the activity.

after

JSON representation of the object after the activity.

changedFields

Fields that were changed, based on Fields to Watch.

revision

Object revision number.

status

Result, such as SUCCESS.

message

Human readable text about the action.

passwordChanged

True/False entry on changes to the password.

context

Flag for self-service logins, such as SELFSERVICE.

provider

Name of the self-service provider, usually a social identity provider.