The audit messages in this section are from the Cryptographic Security Platform Vault for Cryptographic APIs.
In the table below, we list many of the audit messages and show:
- Whether an Alert is also generated.
- The severity (L=Low, M=Medium, H=High).
- What the resolution is if any action should be taken.
In the Message column, a %s represents a string value. For example, in the following message:
Added user %s to group %s
The actual message will be displayed with the name of the user and group, for example:
Added user fred to group IT
Msg ID | Message | Severity | Alert? | Category |
|---|---|---|---|---|
300 | {user_name} created the policy '{policy_name}' | M | false | Tokenization |
301 | {user_name} updated the policy '{policy_name}'. New policy version is {policy_version}. | M | false | Tokenization |
302 | {user_name} deleted the policy '{policy_name}' | M | false | Tokenization |
303 | {user_name} changed the current version of the policy '{policy_name}'. Current policy version is {policy_version}. | M | false | Tokenization |
500 | User '{user_name}' logged in successfully. | H | false | Tokenization |
400 | Cryptographic APIs Client Certificate '{name}' created | M | false | Tokenization |
401 | Cryptographic APIs Client Certificate '{name}' created using Certificate Signing Request | M | false | Tokenization |
402 | Cryptographic APIs Client Certificate '{name}' deleted | M | false | Tokenization |
501 | Active Directory login for {username} succeeded but failed to get information about user. The user might not belong to the Active Directory Domain {domain_name} or user/group base dn in Active Directory configuration might be wrong. Please contact Token Administrator to validate the Active Directory setup. | H | false | Tokenization |
502 | Login failure for Active Directory user {username} from {client_ip}. Reason: {reason} | H | false | Tokenization |
503 | User '{user_name}' logged in successfully using Personal Access Token {token_name}. | H | false | Tokenization |
504 | {user_name} enabled authentication inheritance | M | false | Tokenization |
505 | Authentication settings for inheriting vault {vault_name} {action} by System Admin | M | false | Tokenization |
600 | {user_name} updated AD Setting '{ad_setting_name}' | M | false | Tokenization |
601 | {user_name} changed AD Domain from '{old_ad_setting_name}' to '{ad_setting_name}' | M | false | Tokenization |
602 | {user_name} added AD Setting '{ad_setting_name}' | M | false | Tokenization |
800 | {user_name} updated token '{token_name}' settings. 'degraded mode availability' {degraded_mode}. 'OIDC authentication' {oidc}. | M | false | Tokenization |
801 | {user_name} renamed token '{old_name}' to '{token_name}'. | M | false | Tokenization |
802 | {user_name} updated tokenization '{token_name}' settings of authentication method to AD based authentication | M | false | Tokenization |
803 | {user_name} updated tokenization vault '{token_name}' settings about KCM information with 'kcm ip: ' {kcm_ip}. | M | false | Tokenization |
804 | {user_name} updated tokenization '{vault_name}' settings of authentication method to OIDC based authentication | M | false | Tokenization |
900 | {user_name} created the user '{name}' | M | false | Tokenization |
901 | {user_name} deleted the user '{name}' | M | false | Tokenization |
902 | {user_name} updated the user '{name}' | M | false | Tokenization |
903 | Account {user_name} locked for 5 minutes due to repeated login failures | M | false | Tokenization |
904 | Account {user_name} disabled due to repeated login failures | M | false | Tokenization |
905 | Login failure for Local user {username} from {client_ip}. Reason: {reason} | H | false | Tokenization |
906 | Successfully updated password for user: {username} | H | false | Tokenization |
907 | Account {user_name} enabled Two-factor authentication | M | false | Tokenization |
908 | Account {user_name} disabled Two-factor authentication | M | false | Tokenization |
909 | {user_name} updated the local user password policy | M | false | Tokenization |
910 | {user_name} enforced Two-factor authentication | M | false | Tokenization |
911 | {user_name} enforced Two-factor authentication {user_name} removed enforcement of Two-factor authentication | M | false | Tokenization |
1000 | {user_name} created keyset '{keyset}' | M | false | Tokenization |
1001 | {user_name} failed to create keyset: '{message} | M | false | Tokenization |
1002 | {user_name} enabled HSM for keyset '{keyset}' | M | false | Tokenization |
1003 | {user_name} failed to enable HSM. Reason: '{message}' | M | false | Tokenization |
1004 | {user_name} disabled HSM for keyset '{keyset}' | M | false | Tokenization |
1005 | {user_name} failed to disable HSM. Reason: '{message}' | M | false | Tokenization |
1100 | {user_name} tokenized data using policy '{policy}' | M | false | Tokenization |
1101 | {user_name} detokenized data using policy '{policy}' | M | false | Tokenization |
1102 | {user_name} masked data using policy '{policy}' | M | false | Tokenization |
1103 | {user_name} detokenized and masked data using policies '{policy}' | M | false | Tokenization |
1104 | {user_name} encrypted data using key '{key}' | M | false | Tokenization |
1105 | {user_name} decrypted data using key '{key}' | M | false | Tokenization |
1106 | {user_name} failed to tokenize data: '{message}' | M | false | Tokenization |
1107 | {user_name} failed to detokenize data: '{message}' | M | false | Tokenization |
1108 | {user_name} failed to mask data: '{message}' | M | false | Tokenization |
1109 | {user_name} failed to detokenize and mask data: '{message}' | M | false | Tokenization |
1110 | {user_name} failed to encrypt data: '{message}' | M | false | Tokenization |
1111 | {user_name} failed to decrypt data: '{message}' | M | false | Tokenization |
1112 | {user_name} rekeyed data using policies '{policy}' | M | false | Tokenization |
1113 | {user_name} batch tokenized data using policies '{policy}' | M | false | Tokenization |
1114 | {user_name} batch detokenized data using policies '{policy}' | M | false | Tokenization |
1115 | {user_name} batch masked data using policies '{policy}' | M | false | Tokenization |
1116 | {user_name} batch rekeyed data using policies '{policy}' | M | false | Tokenization |
1117 | {user_name} failed to rekey data using policies '{policy}' | M | false | Tokenization |
1118 | {user_name} failed to batch tokenize data using policies '{policy}' | M | false | Tokenization |
1119 | {user_name} failed to batch detokenize data using policies '{policy}' | M | false | Tokenization |
1120 | {user_name} failed to batch mask data using policies '{policy}' | M | false | Tokenization |
1121 | {user_name} failed to batch rekey data using policies '{policy}' | M | false | Tokenization |
1122 | {user_name} signed data using key '{key}' | M | false | Tokenization |
1123 | {user_name} verified signature using key '{key}' | M | false | Tokenization |
1124 | {user_name} failed to sign data: '{message}' | M | false | Tokenization |
1125 | {user_name} failed to verify signature: '{message}' | M | false | Tokenization |
1126 | {user_name} wrapped key using key '{key}' | M | false | Tokenization |
1127 | {user_name} unwrapped key using key '{key}' | M | false | Tokenization |
1128 | {user_name} failed to wrap key: '{message}' | M | false | Tokenization |
1129 | {user_name} failed to unwrap key: '{message}' | M | false | Tokenization |
1130 | {user_name} generated mac using key '{key}' | M | false | Tokenization |
1131 | {user_name} verified mac using key '{key}' | M | false | Tokenization |
1132 | {user_name} failed to generate mac: '{message}' | M | false | Tokenization |
1133 | {user_name} failed to verify mac: '{message}' | M | false | Tokenization |
1134 | {user_name} has generated message digest | M | false | Tokenization |
1135 | {user_name} failed to generate message digest: '{message}' | M | false | Tokenization |
1136 | {user_name} batch encrypted data using keys '{keys}' | M | false | Tokenization |
1137 | {user_name} batch decrypted data using keys '{keys}' | M | false | Tokenization |
1138 | {user_name} failed to batch encrypt data using keys '{keys}' with error: '{message}' | M | false | Tokenization |
1139 | {user_name} failed to batch decrypt data using keys '{keys}' with error: '{message}' | M | false | Tokenization |
1140 | {user_name} batch encrypted-decrypted data using keys '{keys}' | M | false | Tokenization |
1141 | {user_name} failed to batch encrypt-decrypt data using keys '{keys}' with error: '{message}' | M | false | Tokenization |
1200 | {user_name} created tokenization policy: '{policy}' | M | false | Tokenization |
1201 | {user_name} deleted tokenization policy: '{policy}' | M | false | Tokenization |
1202 | {user_name} updated tokenization policy: '{policy}' | M | false | Tokenization |
1203 | {user_name} created masking policy: '{policy}' | M | false | Tokenization |
1204 | {user_name} deleted masking policy: '{policy}' | M | false | Tokenization |
1205 | {user_name} updated masking policy: '{policy}' | M | false | Tokenization |
1207 | {user_name} deleted encryption policy: '{policy}' | M | false | Tokenization |
1209 | {user_name} failed to create tokenization policy. Reason: '{message}' | M | false | Tokenization |
1210 | {user_name} failed to delete tokenization policy. Reason: '{message}' | M | false | Tokenization |
1211 | {user_name} failed to update tokenization policy. Reason: '{message}' | M | false | Tokenization |
1212 | {user_name} failed to create masking policy. Reason: '{message}' | M | false | Tokenization |
1213 | {user_name} failed to delete masking policy. Reason: '{message}' | M | false | Tokenization |
1214 | {user_name} failed to update masking policy. Reason: '{message}' | M | false | Tokenization |
1216 | {user_name} failed to delete encryption policy. Reason: '{message}' | M | false | Tokenization |
1300 | {user_name} created the key: '{key_name}' | M | false | Tokenization |
1301 | {user_name} failed to create key: '{key_name}'. Reason: '{message}' | M | false | Tokenization |
1302 | {user_name} updated details of key: '{key_name}' | M | false | Tokenization |
1303 | {user_name} changed state of the key: '{key_name}' to '{state}' | M | false | Tokenization |
1304 | {user_name} scheduled deletion of key: '{key_name}' | M | false | Tokenization |
1305 | {user_name} cancelled scheduled deletion of key: '{key_name}' | M | false | Tokenization |
1306 | {user_name} failed to schedule or cancel schedule deletion of key: '{key_name}' | M | false | Tokenization |
1307 | {user_name} purged key: '{key_name}' | M | false | Tokenization |
1308 | {user_name} failed to purge key: '{key_name}' | M | false | Tokenization |
1309 | {user_name} rotated key: '{key_name} | M | false | Tokenization |
1310 | {user_name} failed to rotate key: '{key_name}' | M | false | Tokenization |
1311 | {user_name} fetched clear value of key: '{key_name}' | M | false | Tokenization |
1312 | {user_name} failed fetch clear value of key: '{key_name}' | M | false | Tokenization |
1313 | {user_name} exported key: '{key_name}' | M | false | Tokenization |
1314 | {user_name} failed to export key: '{key_name}' | M | false | Tokenization |
1315 | {user_name} generated {key_name} key and CSR | M | false | Tokenization |
1316 | {user_name} failed to generate {key_name} key and CSR. Reason: '{message}' | M | false | Tokenization |
1317 | {user_name} exported public key: '{key_name}' | M | false | Tokenization |
1318 | {user_name} failed to export public key: '{key_name}' | M | false | Tokenization |
1319 | {user_name} imported key: '{key_name}' | M | false | Tokenization |
1320 | {user_name} failed to import key: '{key_name}' | M | false | Tokenization |
1321 | {user_name} has successfully rebuilt keys database | M | false | Tokenization |
1322 | {user_name} has failed to rebuild keys database. Reason: '{message}' | M | false | Tokenization |
1323 | {user_name} imported clear key: '{key_name}' | M | false | Tokenization |
1324 | {user_name} failed to import clear key: '{key_name}' | M | false | Tokenization |
1400 | {user_name} created Personal Access Token {token_name} | M | false | Tokenization |
1401 | {user_name} {update_info} Personal Access Token {token_name} | M | false | Tokenization |
1402 | {user_name} deleted Personal Access Token {token_name} | M | false | Tokenization |
1500 | {user_name} created OIDC user {oidc_user_email}: {oidc_user_guid} | M | false | Tokenization |
1501 | {user_name} failed to create OIDC user {oidc_user_email} | M | false | Tokenization |
1502 | {user_name} updated OIDC user {oidc_user_email}: {oidc_user_guid} | M | false | Tokenization |
1503 | {user_name} failed to update OIDC user {oidc_user_email}: {oidc_user_guid} | M | false | Tokenization |
1504 | {user_name} deleted OIDC user {oidc_user_email}: {oidc_user_guid} | M | false | Tokenization |
1505 | {user_name} failed to delete OIDC user {oidc_user_email}: {oidc_user_guid} | M | false | Tokenization |
1506 | {user_name} created registration link for OIDC user {oidc_user_email}: {oidc_user_guid} | M | false | Tokenization |
1507 | {user_name} failed to create registration link for OIDC user {oidc_user_email}: {oidc_user_guid} | M | false | Tokenization |
1508 | Login failure for OIDC user {username} from {client_ip}. Reason: {reason} | M | false | Tokenization |
1600 | {user_name} cleared cache | M | false | Tokenization |
1601 | {user_name} failed to clear cache. Reason: '{message}' | M | false | Tokenization |
1602 | {user_name} changed caching state | M | false | Tokenization |
1603 | {user_name} failed to change caching state. Reason: '{message}' | M | false | Tokenization |
1604 | {user_name} fetched caching status | M | false | Tokenization |
1605 | {user_name} failed to get caching status. Reason: '{message}' | M | false | Tokenization |
1606 | {user_name} fetched caching settings | M | false | Tokenization |
1607 | {user_name} failed to get caching settings. Reason: '{message}' | M | false | Tokenization |
1608 | {user_name} set caching settings | M | false | Tokenization |
1609 | {user_name} failed to set caching settings. Reason: '{message}' | M | false | Tokenization |