Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Is there a comprehensive list of ActionTypeID that is used in Auditing Events?

We run a weekly audit of events generated by users outside of our team and I would like to verify what the ActionTypeID fully means.

Find more posts tagged with

Accepted answers

aLTeReGo

Correct. There is no additional detail beyond what the audit event states. If you'd like to see additional detail included like 'changed value X to Y' or something to that effect, I would suggest opening a feature request.

All comments

aLTeReGo

The ActionTypeID is the unique internal numeric value assigned to each audit event type.

60 Orion.SSH.ConnectionSuccess SSH connection successful.
61 Orion.SSH.ConnectionFailed SSH connection failed.
30 Orion.NodeChanged

In the examples above, 60, 61, and 30 are the ActionTypeIDs for the audit event, followed by the 'ActionType' and finally the 'ActionTypeDisplayName' that is the friendly, human readable text you see throughout the web interface for Audit Events.

ZaStump

If that is the case, the following is all that I will be able to get from the message. Is that correct?

ActionTypeID: 140 - User <username> changed account <username>.

I was originally looking to see if there was more information that I could get on this message to make sure that no actual account changes are taking place.

aLTeReGo