Skip Navigation
  1. BlackBerry Docs
  2. Cylance Endpoint Security
  3. Administration
  4. Administratorhandbuch für Cylance Endpoint Security
  5. Überwachung von Administratoraktionen
  6. Überwachungsprotokollinformationen: CylanceAVERT

Überwachungsprotokollinformationen:
CylanceAVERT

In der folgenden Tabelle sind die Informationen aufgeführt, die dem Überwachungsprotokoll für administrative Aktionen in
CylanceAVERT
 hinzugefügt werden. Sie können die in der Konsole verfügbaren Filteroptionen verwenden, um die Ergebnisse des Überwachungsprotokolls zu filtern.
Kategorie
Aktion
Details
Datenelement
Hinzufügen
{
    "id": "
<ID>
",
    "tenantId": "
<Mandanten-ID>
",
    "occurred": "
<Datum/Uhrzeit>
",
    "traceId": "
<Ablaufverfolgungs-ID>
",
    "spanId": "
<Span-ID>
",
    "source": "com.blackberry.dlp",
    "type": "AUDIT",
    "category": "Entity",
    "subcategory": "created",
    "message": "admin created DataEntity named 
<Richtlinienname>
"
    },
    "admin": {
        "ecoId": "
<Eco-ID>
"
    },
    "entity": {
        "id": "
<ID>
",
        "type": "DATAENTITY",
        "displayName": "
<Anzeigename des Elements>
"
    },
    "changes": {
        "regions": {
            "new": "
<Region>
"
        },
        "name":{
            „new“: „
<Name des Datenelements>
“
        "description": {
            "new": "
<Beschreibung>
"
        },
        "infoTypes": {
            "new": "
<Infotypen>
"
        },
        "Type": {
            "new": "
<Data type>
"
        },
        "Parameters": {
            "new": "
<Parameter>
"
        },
        "algorithm":{
            "new":
<Algorithmus>
    
     }
}
Datenelement
Bearbeiten
{
    "id": "
<ID>
",
    "tenantId": "
<Mandanten-ID>
",
    "occurred": "
<Datum/Uhrzeit>
",
    "traceId": "
<Ablaufverfolgungs-ID>
",
    "spanId": "
<Span-ID>
",
    "source": "com.blackberry.dlp",
    "type": "AUDIT",
    "category": "ENTITY",
    "subcategory": "UPDATED",
    "message": "admin updated DataEntity named 
<Name des Datenelements>
",
    "crud": {
        "admin": {
            "ecoId": "
<Eco-ID>
"
        },
        "entity": {
            "id": "
<ID>
",
            "type": "DATAENTITY",
            "displayName": "
<Anzeigename des Datenelements>
"
        },
        "changes": {
            "description": {
                "new": "
<Neue Beschreibung>
",
                "old": "
<Alte Beschreibung>
"
            }
        }
    }
}
Datenelement
Entfernen
{
    "id": "
<ID>
",
    "tenantId": "
<Mandanten-ID>
",
    "occurred": "
<Datum/Uhrzeit>
",
    "traceId": "
<Ablaufverfolgungs-ID>
",
    "spanId": "
<Span-ID>
",
    "source": "com.blackberry.dlp",
    "type": "AUDIT",
    "category": "ENTITY",
    "subcategory": "DELETED",
    "message": "admin deleted DataEntity named 
<Name des Datenelements>
",
    "crud": {
        "admin": {
            "ecoId": "
<Eco-ID>
"
        },
        "entity": {
            "id": "
<ID>
",
            "type": "DATAENTITY",
            "displayName": "
<Anzeigename des Datenelements>
"
        }
    }
}
Nachweisdatei
Download
{
    "id": "
<ID>
",
    "tenantId": "
<Mandanten-ID>
",
    "occurred": "
<Datum/Uhrzeit>
",
    "traceId": "
<Ablaufverfolgungs-ID>
",
    "spanId": "
<Span-ID>
",
    "source": "com.blackberry.dlp",
    "type": "AUDIT",
    "category": "ENTITY",
    "subcategory": "READ",
    "message": "Evidence File is downloaded",
    "crud": {
        "admin": {
            "ecoId": "
<Eco-ID>
"
        },
        "entity": {
            "id": "
<ID>
",
            "type": "
<Elementtyp>
"
        }
    }
}
Nachweisdatei
Entfernen
{
    "id": "
<ID>
",
    "tenantId": "
<Mandanten-ID>
",
    "occurred": "
<Datum/Uhrzeit>
",
    "traceId": "
<Ablaufverfolgungs-ID>
",
    "spanId": "
<Span-ID>
",
    "source": "com.blackberry.dlp",
    "type": "AUDIT",
    "category": "ENTITY",
    "subcategory": "DELETED",
    "message": "Evidence File is DELETED",
    "crud": {
        "admin": {
            "ecoId": "
<Eco-ID>
"
        },
        "entity": {
            "id": "
<ID>
",
            "type": "
<Elementtyp>
"
        }
    }
}
Richtlinie
Hinzufügen
{
    "common": {
        "id": "
<ID>
",
        "tenantId": "
<Mandanten-ID>
",
        "occurred": "
<Datum/Uhrzeit>
",
        "traceId": "
<Ablaufverfolgungs-ID>
",
        "spanId": "
<Span-ID>
",
        "source": "com.blackberry.dlp",
        "type": "AUDIT",
        "category": "Entity",
        "subcategory": "created",
        "message": "admin created Policy named 
<Richtlinienname>
"
    },
    "admin": {
        "ecoId": "
<Eco-ID>
"
    },
    "entity": {
        "id": "
<ID>
",
        "type": "PROFILE",
        "displayName": "
<Anzeigename des Elements>
"
    },
    "changes": {
        "emailDomainsRule": {
            "new": "
<Domain-Regel>
"
        },
        "condition": {
            "new": "
<Bedingung>
"
        },
        "policyName": {
            "new": "
<Richtlinienname>
"
        },
        "policyType": {
            "new": "
<Richtlinientyp>
"
        },
        "description": {
            "new": "
<Beschreibung>
"
        },
        "policyRules": {
            "new": "
<Richtlinienregeln>
"
        },
        "classification": {
            "new": "
<Klassifizierung>
"
        },
        "browserDomains": {
            "new": "
<Browserdomänen>
"
        }
    }
}
Richtlinie
Bearbeiten
{
    "common": {
        "id": "
<ID>
",
        "tenantId": "
<Mandanten-ID>
",
        "occurred": "
<Datum/Uhrzeit>
",
        "traceId": "
<Ablaufverfolgungs-ID>
",
        "spanId": "
<Span-ID>
",
        "source": "com.blackberry.dlp",
        "type": "AUDIT",
        "category": "Entity",
        "subcategory": "Updated",
        "message": "admin created Policy named 
<Richtlinienname>
"
    },
    "admin": {
        "ecoId": " "
    },
    "entity": {
        "id": "fbfa8366-e58c-4018-925f-2a536dce4c2d",
        "type": "PROFILE",
        "displayName": "policy-test-name-created-from-auto-test"
    },
    "changes": 
{
    "policyName":{
              "old" : "HIPAA",
              "new" : "HIPAA Compliance"
        },
 
    "condition": {
          "old": "
<Alte Bedingung>
",
          "new":"
<Neue Bedingung>
"
      },
 
    "policyRules": {
            "old":[{
<Alte Richtlinienregeln>
}],
            "new":[{
<Neue Richtlinienregeln>
}]
      },
   
    "policyConfigs": {
            "old":[{
<Alte Richtlinienregeln>
}],
            "new":[{
<Neue Richtlinienregeln>
}]
      },
   
    "browserDomains":{
            "old":
<Alte Browserdomänen>
,
            "new":
<Neue Browserdomänen>

      },
   
    "emailDomainsRule": {
            "old":
<Alte Domänenregel>
,
            "new":
<Neue Domänenregel>

      }
    }
}
Richtlinie
Entfernen
{
    "id": "
<ID>
",
    "tenantId": "
<Mandanten-ID>
",
    "occurred": "
<Datum/Uhrzeit>
",
    "traceId": "
<Ablaufverfolgungs-ID>
",
    "spanId": "
<Span-ID>
",
    "source": "com.blackberry.dlp",
    "type": "AUDIT",
    "category": "ENTITY",
    "subcategory": "DELETED",
    "message": "admin DELETED Policy named 
<Richtlinienname>
",
    "crud": {
        "admin": {
            "ecoId": "
<Eco-ID>
"
        },
        "entity": {
            "id": "
<ID>
",
            "type": "PROFILE",
            "displayName": "
<Anzeigename des Elements>
"
        }
    }
}
Einstellung
Aktualisieren
{
    "id": "
<ID>
",
    "tenantId": "
<Mandanten-ID>
",
    "occurred": "
<Datum/Uhrzeit>
",
    "traceId": "
<Ablaufverfolgungs-ID>
",
    "spanId": "
<Span-ID>
",
    "source": "com.blackberry.dlp",
    "type": "AUDIT",
    "category": "SETTING",
    "subcategory": "UPDATED",
    "message": "admin UPDATED DLP settings",
    "crud": {
        "admin": {
            "ecoId": "
<Eco-ID>
"
        },
        "changes": {
            "ui.tenant.setting.emailRecipients": {
                "new": "
<Neue E-Mail-Empfänger>
",
                "old": "
<Alte E-Mail-Empfänger>
"
            }
        }
    }
}
Vorlage
Entfernen
{
    "id": "
<ID>
",
    "tenantId": "
<Mandanten-ID>
",
    "occurred": "
<Datum/Uhrzeit>
",
    "traceId": "
<Ablaufverfolgungs-ID>
",
    "spanId": "
<Span-ID>
",
    "source": "com.blackberry.dlp",
    "type": "AUDIT",
    "category": "ENTITY",
    "subcategory": "DELETED",
    "message": "Template 
<Vorlagenname>
 was deleted",
    "crud": {
        "admin": {
            "ecoId": "
<Eco-ID>
"
        },
        "entity": {
            "id": "
<ID>
",
            "type": "TEMPLATE",
            "displayName": "
<Vorlagenname>
"
        }
    }
}
Vorlage
Hinzufügen
{
    "id": "
<ID>
",
    "tenantId": "
<Mandanten-ID>
",
    "occurred": "
<Datum/Uhrzeit>
",
    "traceId": "
<Ablaufverfolgungs-ID>
",
    "spanId": "
<Span-ID>
",
    "source": "com.blackberry.dlp",
    "type": "AUDIT",
    "category": "ENTITY",
    "subcategory": "CREATED",
    "message": "Template 
<Vorlagenname>
 was created",
    "crud": {
        "admin": {
            "ecoId": "
<Eco-ID>
"
        },
        "entity": {
            "id": "
<ID>
",
            "type": "TEMPLATE",
            "displayName": "
<Vorlagenname>
"
        },
        "changes": {
            "condition": {
                "new": "
<Bedingung>
"
            },
            "regions": {
                "new": "
<Region>
"
            },
            "name": {
                "new": "
<Vorlagenname>
"
            },
            "description": {
                "new": 
<Beschreibung>
"
            },
            "infoTypes": {
                "new": "
<Infotyp>
"
            },
            "type": {
                "new": "
<Vorlagentyp>
"
            }
        }
    }
}