Events

The CADF Event Model applies semantics to the activities, resources, information, and changes within a cloud provider’s infrastructure and models these using the concept of an event.

Property	Type	Required	Description
id	cadf:Identifier	Yes	The unique identifier of the CADF Event Record
typeURI	cadf:Path	Dependent	Can be used to declare versioning of Events.
eventType	xs:string	Yes	The classification of the type of event
eventTime	cadf:Timestamp	Yes	The OBSERVER’s best estimate as to the time the Actual Event occurred or began
action	cadf:Path	Yes	This property represents the event’s ACTION
outcome	cadf:Path	Yes	A valid classification value from the CADF Outcome Taxonomy
initiator	cadf:Resource	Dependent	The event’s INITIATOR. Required if not initiatorId
initiatorId	cadf:Identifier	Dependent	The event’s INITIATOR resource by reference. Required if not initiator
target	cadf:Resource	Dependent	The event’s TARGET. Required if not targetId
targetId	cadf:Identifier	Dependent	The event’s TARGET by reference. Required if not target
observer	cadf:Resource	Dependent	The event’s OBSERVER. Required if not observerId
observerId	cadf:Identifier	Dependent	The event’s OBSERVER by reference. Required if not observer
reason	cadf:Reason	No	Domain-specific reason code and policy data that provides an additional level of detail to the outcome value. Required if the eventType property is “control”
severity	xs:string	No	Describes domain-relative severity assigned to the event by the OBSERVER. This property’s value is non-normative
measurements	cadf:Measurement[]	Dependent	Any measurement (values) associated with the event. Required if the eventType property is “monitor”
name	xs:string	No	A descriptive name for the event
tags	cadf:Tag[]	No	Array of Tags that MAY be used to further qualify or categorize the CADF Event Record
attachments	cadf:Attachment[]	No	Array of extended or domain-specific information about the event or its context
reporterchain	cadf:Reporterstep[]	No	Array of Reporterstep typed data that contains information about the sequenced handling of or change to the associated CADF Event Record by any REPORTER

Serialisation

   {
    "typeURI": "http://schemas.dmtf.org/cloud/audit/1.0/event",
    "id": "a80dc5ee-be83-48ad-ad5e-6577f2217637",
    "eventType": "activity",
    "action": "read",
    "outcome": "success",
    "reason": {
        "reasonCode": "200",
        "reasonType": "HTTP"
    },
    "eventTime": "2014-01-17T23:23:38.109989+0000",
    "initiator": {
        "id": "95f12d248a234a969f456cd2c794f29a",
        "typeURI": "service/security/account/user",
        "name": "admin",
        "project_id": "e55b158759854ea6a7852aa76632c6c1",
        "credential": {
            "token": "MIIQBgYJKoZIhvcNAQcCoIIP9z xxxxxx KoZIhvcIP9z=",
            "identity_status": "Confirmed"
        },
        "host": {
            "agent": "python-novaclient",
            "address": "9.26.27.109"
        }
    },
    "target": {
        "id": "0f126160203748a5b4923f2eb6e3b7db",
        "typeURI": "service/compute/servers",
        "name": "nova",
        "addresses": [
            {
                "url": "http://9.26.27.109:8774/v2/e55b158759854ea6a7852aa76632c6c1",
                "name": "admin"
            },
            {
                "url": "http://9.26.27.109:8774/v2/e55b158759854ea6a7852aa76632c6c1",
                "name": "private"
            },
            {
                "url": "http://9.26.27.109:8774/v2/e55b158759854ea6a7852aa76632c6c1",
                "name": "public"
            }
        ]
    },
    "observer": {
        "id": "target"
    },
    "reporterchain": [
        {
            "reporterTime": "2014-01-17T23:23:38.154152+0000",
            "role": "modifier",
            "reporter": {
                "id": "target"
            }
        }
    ],
    "requestPath": "/v2/56600971-90f3-4370-807f-ab79339381a9/servers",
    "tags": [
        "correlation_id?value=bcac04dc-e0be-4110-862c-347088a7836a"
    ]
}