Audit parameter fields - PingOne - PingOne Cloud Platform

Time Range

Specific

Set the time range to a specific date range.

Relative

Set the time range to a period relative to the current time.

Filter Type

Resource ID

Find activities by resource ID.

Correlation ID

Find activities by correlation ID. When an HTTP request is received by PingOne, it is assigned a correlation ID. You can use the correlation ID to associate HTTP responses with messages in the event log.

Event type

Find activities by event type.

Select an event type. If Risk is enabled, the following parameters are available:

• Risk Evaluation Created
• Risk Evaluation Updated
• Risk Policy Created
• Risk Policy Deleted
• Risk Policy Updated

User ID (Actor)

Find activities that were performed by a particular user by user ID.

Username (Actor)

Find activities that were performed by a particular user by username.

Client (Actor)

Select a client to find activities that were performed by that client.

The list of clients can vary depending on your configuration.

Resource population

Select a population to find activities that were performed in resources within a particular population.

Resource type

Select a resource to find activities that were performed on a particular type of resource.

Population

Find activities that were performed on a particular population.

User

Find activities that were performed on a particular user.

Application

Find activities that were performed by a particular client application.

Selected Fields

Timestamp

The date and time of the event.

The format is: MM/DD/YYYY HH:mm:ss.

Event name

A unique identifier for the event.

Description

A brief description of the event.

Client

The client that performed the event.

User identity

The user for which the event was performed.

Population

The population in which the event was performed.

Resource type

The type of resource for which the event was performed.