1. Packages
  2. Oracle Cloud Infrastructure
  3. API Docs
  4. Audit
  5. getEvents
Oracle Cloud Infrastructure v2.32.0 published on Thursday, Apr 24, 2025 by Pulumi

oci.Audit.getEvents

Explore with Pulumi AI

Oracle Cloud Infrastructure v2.32.0 published on Thursday, Apr 24, 2025 by Pulumi

This data source provides the list of Audit Events in Oracle Cloud Infrastructure Audit service.

Returns all the audit events processed for the specified compartment within the specified time range.

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as oci from "@pulumi/oci";

const testAuditEvents = oci.Audit.getEvents({
    compartmentId: compartmentId,
    endTime: auditEventEndTime,
    startTime: auditEventStartTime,
});
Copy
import pulumi
import pulumi_oci as oci

test_audit_events = oci.Audit.get_events(compartment_id=compartment_id,
    end_time=audit_event_end_time,
    start_time=audit_event_start_time)
Copy
package main

import (
	"github.com/pulumi/pulumi-oci/sdk/v2/go/oci/audit"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := audit.GetEvents(ctx, &audit.GetEventsArgs{
			CompartmentId: compartmentId,
			EndTime:       auditEventEndTime,
			StartTime:     auditEventStartTime,
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Oci = Pulumi.Oci;

return await Deployment.RunAsync(() => 
{
    var testAuditEvents = Oci.Audit.GetEvents.Invoke(new()
    {
        CompartmentId = compartmentId,
        EndTime = auditEventEndTime,
        StartTime = auditEventStartTime,
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.oci.Audit.AuditFunctions;
import com.pulumi.oci.Audit.inputs.GetEventsArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var testAuditEvents = AuditFunctions.getEvents(GetEventsArgs.builder()
            .compartmentId(compartmentId)
            .endTime(auditEventEndTime)
            .startTime(auditEventStartTime)
            .build());

    }
}
Copy
variables:
  testAuditEvents:
    fn::invoke:
      function: oci:Audit:getEvents
      arguments:
        compartmentId: ${compartmentId}
        endTime: ${auditEventEndTime}
        startTime: ${auditEventStartTime}
Copy

Using getEvents

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getEvents(args: GetEventsArgs, opts?: InvokeOptions): Promise<GetEventsResult>
function getEventsOutput(args: GetEventsOutputArgs, opts?: InvokeOptions): Output<GetEventsResult>
Copy
def get_events(compartment_id: Optional[str] = None,
               end_time: Optional[str] = None,
               filters: Optional[Sequence[_audit.GetEventsFilter]] = None,
               start_time: Optional[str] = None,
               opts: Optional[InvokeOptions] = None) -> GetEventsResult
def get_events_output(compartment_id: Optional[pulumi.Input[str]] = None,
               end_time: Optional[pulumi.Input[str]] = None,
               filters: Optional[pulumi.Input[Sequence[pulumi.Input[_audit.GetEventsFilterArgs]]]] = None,
               start_time: Optional[pulumi.Input[str]] = None,
               opts: Optional[InvokeOptions] = None) -> Output[GetEventsResult]
Copy
func GetEvents(ctx *Context, args *GetEventsArgs, opts ...InvokeOption) (*GetEventsResult, error)
func GetEventsOutput(ctx *Context, args *GetEventsOutputArgs, opts ...InvokeOption) GetEventsResultOutput
Copy

> Note: This function is named GetEvents in the Go SDK.

public static class GetEvents 
{
    public static Task<GetEventsResult> InvokeAsync(GetEventsArgs args, InvokeOptions? opts = null)
    public static Output<GetEventsResult> Invoke(GetEventsInvokeArgs args, InvokeOptions? opts = null)
}
Copy
public static CompletableFuture<GetEventsResult> getEvents(GetEventsArgs args, InvokeOptions options)
public static Output<GetEventsResult> getEvents(GetEventsArgs args, InvokeOptions options)
Copy
fn::invoke:
  function: oci:Audit/getEvents:getEvents
  arguments:
    # arguments dictionary
Copy

The following arguments are supported:

CompartmentId This property is required. string
The OCID of the compartment.
EndTime This property is required. string

Returns events that were processed before this end date and time, expressed in RFC 3339 timestamp format.

For example, a start value of 2017-01-01T00:00:00Z and an end value of 2017-01-02T00:00:00Z will retrieve a list of all events processed on January 1, 2017. Similarly, a start value of 2017-01-01T00:00:00Z and an end value of 2017-02-01T00:00:00Z will result in a list of all events processed between January 1, 2017 and January 31, 2017. You can specify a value with granularity to the minute. Seconds (and milliseconds, if included) must be set to 0.

StartTime This property is required. string

Returns events that were processed at or after this start date and time, expressed in RFC 3339 timestamp format.

For example, a start value of 2017-01-15T11:30:00Z will retrieve a list of all events processed since 30 minutes after the 11th hour of January 15, 2017, in Coordinated Universal Time (UTC). You can specify a value with granularity to the minute. Seconds (and milliseconds, if included) must be set to 0.

Filters Changes to this property will trigger replacement. List<GetEventsFilter>
CompartmentId This property is required. string
The OCID of the compartment.
EndTime This property is required. string

Returns events that were processed before this end date and time, expressed in RFC 3339 timestamp format.

For example, a start value of 2017-01-01T00:00:00Z and an end value of 2017-01-02T00:00:00Z will retrieve a list of all events processed on January 1, 2017. Similarly, a start value of 2017-01-01T00:00:00Z and an end value of 2017-02-01T00:00:00Z will result in a list of all events processed between January 1, 2017 and January 31, 2017. You can specify a value with granularity to the minute. Seconds (and milliseconds, if included) must be set to 0.

StartTime This property is required. string

Returns events that were processed at or after this start date and time, expressed in RFC 3339 timestamp format.

For example, a start value of 2017-01-15T11:30:00Z will retrieve a list of all events processed since 30 minutes after the 11th hour of January 15, 2017, in Coordinated Universal Time (UTC). You can specify a value with granularity to the minute. Seconds (and milliseconds, if included) must be set to 0.

Filters Changes to this property will trigger replacement. []GetEventsFilter
compartmentId This property is required. String
The OCID of the compartment.
endTime This property is required. String

Returns events that were processed before this end date and time, expressed in RFC 3339 timestamp format.

For example, a start value of 2017-01-01T00:00:00Z and an end value of 2017-01-02T00:00:00Z will retrieve a list of all events processed on January 1, 2017. Similarly, a start value of 2017-01-01T00:00:00Z and an end value of 2017-02-01T00:00:00Z will result in a list of all events processed between January 1, 2017 and January 31, 2017. You can specify a value with granularity to the minute. Seconds (and milliseconds, if included) must be set to 0.

startTime This property is required. String

Returns events that were processed at or after this start date and time, expressed in RFC 3339 timestamp format.

For example, a start value of 2017-01-15T11:30:00Z will retrieve a list of all events processed since 30 minutes after the 11th hour of January 15, 2017, in Coordinated Universal Time (UTC). You can specify a value with granularity to the minute. Seconds (and milliseconds, if included) must be set to 0.

filters Changes to this property will trigger replacement. List<GetEventsFilter>
compartmentId This property is required. string
The OCID of the compartment.
endTime This property is required. string

Returns events that were processed before this end date and time, expressed in RFC 3339 timestamp format.

For example, a start value of 2017-01-01T00:00:00Z and an end value of 2017-01-02T00:00:00Z will retrieve a list of all events processed on January 1, 2017. Similarly, a start value of 2017-01-01T00:00:00Z and an end value of 2017-02-01T00:00:00Z will result in a list of all events processed between January 1, 2017 and January 31, 2017. You can specify a value with granularity to the minute. Seconds (and milliseconds, if included) must be set to 0.

startTime This property is required. string

Returns events that were processed at or after this start date and time, expressed in RFC 3339 timestamp format.

For example, a start value of 2017-01-15T11:30:00Z will retrieve a list of all events processed since 30 minutes after the 11th hour of January 15, 2017, in Coordinated Universal Time (UTC). You can specify a value with granularity to the minute. Seconds (and milliseconds, if included) must be set to 0.

filters Changes to this property will trigger replacement. GetEventsFilter[]
compartment_id This property is required. str
The OCID of the compartment.
end_time This property is required. str

Returns events that were processed before this end date and time, expressed in RFC 3339 timestamp format.

For example, a start value of 2017-01-01T00:00:00Z and an end value of 2017-01-02T00:00:00Z will retrieve a list of all events processed on January 1, 2017. Similarly, a start value of 2017-01-01T00:00:00Z and an end value of 2017-02-01T00:00:00Z will result in a list of all events processed between January 1, 2017 and January 31, 2017. You can specify a value with granularity to the minute. Seconds (and milliseconds, if included) must be set to 0.

start_time This property is required. str

Returns events that were processed at or after this start date and time, expressed in RFC 3339 timestamp format.

For example, a start value of 2017-01-15T11:30:00Z will retrieve a list of all events processed since 30 minutes after the 11th hour of January 15, 2017, in Coordinated Universal Time (UTC). You can specify a value with granularity to the minute. Seconds (and milliseconds, if included) must be set to 0.

filters Changes to this property will trigger replacement. Sequence[audit.GetEventsFilter]
compartmentId This property is required. String
The OCID of the compartment.
endTime This property is required. String

Returns events that were processed before this end date and time, expressed in RFC 3339 timestamp format.

For example, a start value of 2017-01-01T00:00:00Z and an end value of 2017-01-02T00:00:00Z will retrieve a list of all events processed on January 1, 2017. Similarly, a start value of 2017-01-01T00:00:00Z and an end value of 2017-02-01T00:00:00Z will result in a list of all events processed between January 1, 2017 and January 31, 2017. You can specify a value with granularity to the minute. Seconds (and milliseconds, if included) must be set to 0.

startTime This property is required. String

Returns events that were processed at or after this start date and time, expressed in RFC 3339 timestamp format.

For example, a start value of 2017-01-15T11:30:00Z will retrieve a list of all events processed since 30 minutes after the 11th hour of January 15, 2017, in Coordinated Universal Time (UTC). You can specify a value with granularity to the minute. Seconds (and milliseconds, if included) must be set to 0.

filters Changes to this property will trigger replacement. List<Property Map>

getEvents Result

The following output properties are available:

AuditEvents List<GetEventsAuditEvent>
The list of audit_events.
CompartmentId string
The OCID of the compartment of the resource emitting the event.
EndTime string
Id string
The provider-assigned unique ID for this managed resource.
StartTime string
Filters List<GetEventsFilter>
AuditEvents []GetEventsAuditEvent
The list of audit_events.
CompartmentId string
The OCID of the compartment of the resource emitting the event.
EndTime string
Id string
The provider-assigned unique ID for this managed resource.
StartTime string
Filters []GetEventsFilter
auditEvents List<GetEventsEvent>
The list of audit_events.
compartmentId String
The OCID of the compartment of the resource emitting the event.
endTime String
id String
The provider-assigned unique ID for this managed resource.
startTime String
filters List<GetEventsFilter>
auditEvents GetEventsAuditEvent[]
The list of audit_events.
compartmentId string
The OCID of the compartment of the resource emitting the event.
endTime string
id string
The provider-assigned unique ID for this managed resource.
startTime string
filters GetEventsFilter[]
audit_events Sequence[audit.GetEventsAuditEvent]
The list of audit_events.
compartment_id str
The OCID of the compartment of the resource emitting the event.
end_time str
id str
The provider-assigned unique ID for this managed resource.
start_time str
filters Sequence[audit.GetEventsFilter]
auditEvents List<Property Map>
The list of audit_events.
compartmentId String
The OCID of the compartment of the resource emitting the event.
endTime String
id String
The provider-assigned unique ID for this managed resource.
startTime String
filters List<Property Map>

Supporting Types

GetEventsAuditEvent

CloudEventsVersion This property is required. string
The version of the CloudEvents specification. The structure of the envelope follows the CloudEvents industry standard format hosted by the Cloud Native Computing Foundation ( CNCF).
ContentType This property is required. string
The content type of the data contained in data. Example: application/json
Datas This property is required. List<GetEventsAuditEventData>
The payload of the event. Information within data comes from the resource emitting the event.
EventId This property is required. string
The GUID of the event.
EventTime This property is required. string
The time the event occurred, expressed in RFC 3339 timestamp format. Example: 2019-09-18T00:10:59.252Z
EventType This property is required. string
The type of event that happened.
EventTypeVersion This property is required. string
The version of the event type. This version applies to the payload of the event, not the envelope. Use cloudEventsVersion to determine the version of the envelope. Example: 2.0
Source This property is required. string
The source of the event. Example: ComputeApi
CloudEventsVersion This property is required. string
The version of the CloudEvents specification. The structure of the envelope follows the CloudEvents industry standard format hosted by the Cloud Native Computing Foundation ( CNCF).
ContentType This property is required. string
The content type of the data contained in data. Example: application/json
Datas This property is required. []GetEventsAuditEventData
The payload of the event. Information within data comes from the resource emitting the event.
EventId This property is required. string
The GUID of the event.
EventTime This property is required. string
The time the event occurred, expressed in RFC 3339 timestamp format. Example: 2019-09-18T00:10:59.252Z
EventType This property is required. string
The type of event that happened.
EventTypeVersion This property is required. string
The version of the event type. This version applies to the payload of the event, not the envelope. Use cloudEventsVersion to determine the version of the envelope. Example: 2.0
Source This property is required. string
The source of the event. Example: ComputeApi
cloudEventsVersion This property is required. String
The version of the CloudEvents specification. The structure of the envelope follows the CloudEvents industry standard format hosted by the Cloud Native Computing Foundation ( CNCF).
contentType This property is required. String
The content type of the data contained in data. Example: application/json
datas This property is required. List<GetEventsEventData>
The payload of the event. Information within data comes from the resource emitting the event.
eventId This property is required. String
The GUID of the event.
eventTime This property is required. String
The time the event occurred, expressed in RFC 3339 timestamp format. Example: 2019-09-18T00:10:59.252Z
eventType This property is required. String
The type of event that happened.
eventTypeVersion This property is required. String
The version of the event type. This version applies to the payload of the event, not the envelope. Use cloudEventsVersion to determine the version of the envelope. Example: 2.0
source This property is required. String
The source of the event. Example: ComputeApi
cloudEventsVersion This property is required. string
The version of the CloudEvents specification. The structure of the envelope follows the CloudEvents industry standard format hosted by the Cloud Native Computing Foundation ( CNCF).
contentType This property is required. string
The content type of the data contained in data. Example: application/json
datas This property is required. GetEventsAuditEventData[]
The payload of the event. Information within data comes from the resource emitting the event.
eventId This property is required. string
The GUID of the event.
eventTime This property is required. string
The time the event occurred, expressed in RFC 3339 timestamp format. Example: 2019-09-18T00:10:59.252Z
eventType This property is required. string
The type of event that happened.
eventTypeVersion This property is required. string
The version of the event type. This version applies to the payload of the event, not the envelope. Use cloudEventsVersion to determine the version of the envelope. Example: 2.0
source This property is required. string
The source of the event. Example: ComputeApi
cloud_events_version This property is required. str
The version of the CloudEvents specification. The structure of the envelope follows the CloudEvents industry standard format hosted by the Cloud Native Computing Foundation ( CNCF).
content_type This property is required. str
The content type of the data contained in data. Example: application/json
datas This property is required. Sequence[audit.GetEventsAuditEventData]
The payload of the event. Information within data comes from the resource emitting the event.
event_id This property is required. str
The GUID of the event.
event_time This property is required. str
The time the event occurred, expressed in RFC 3339 timestamp format. Example: 2019-09-18T00:10:59.252Z
event_type This property is required. str
The type of event that happened.
event_type_version This property is required. str
The version of the event type. This version applies to the payload of the event, not the envelope. Use cloudEventsVersion to determine the version of the envelope. Example: 2.0
source This property is required. str
The source of the event. Example: ComputeApi
cloudEventsVersion This property is required. String
The version of the CloudEvents specification. The structure of the envelope follows the CloudEvents industry standard format hosted by the Cloud Native Computing Foundation ( CNCF).
contentType This property is required. String
The content type of the data contained in data. Example: application/json
datas This property is required. List<Property Map>
The payload of the event. Information within data comes from the resource emitting the event.
eventId This property is required. String
The GUID of the event.
eventTime This property is required. String
The time the event occurred, expressed in RFC 3339 timestamp format. Example: 2019-09-18T00:10:59.252Z
eventType This property is required. String
The type of event that happened.
eventTypeVersion This property is required. String
The version of the event type. This version applies to the payload of the event, not the envelope. Use cloudEventsVersion to determine the version of the envelope. Example: 2.0
source This property is required. String
The source of the event. Example: ComputeApi

GetEventsAuditEventData

AdditionalDetails This property is required. Dictionary<string, string>
A container object for attribues unique to the resource emitting the event.
AvailabilityDomain This property is required. string
The availability domain where the resource resides.
CompartmentId This property is required. string
The OCID of the compartment.
CompartmentName This property is required. string
The name of the compartment. This value is the friendly name associated with compartmentId. This value can change, but the service logs the value that appeared at the time of the audit event. Example: CompartmentA
DefinedTags This property is required. Dictionary<string, string>
Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
EventGroupingId This property is required. string
This value links multiple audit events that are part of the same API operation. For example, a long running API operations that emit an event at the start and the end of an operation would use the same value in this field for both events.
EventName This property is required. string
Name of the API operation that generated this event. Example: GetInstance
FreeformTags This property is required. Dictionary<string, string>
Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. Exists for cross-compatibility only. For more information, see Resource Tags. Example: {"Department": "Finance"}
Identities This property is required. List<GetEventsAuditEventDataIdentity>
A container object for identity attributes.
Requests This property is required. List<GetEventsAuditEventDataRequest>
A container object for request attributes.
ResourceId This property is required. string
An OCID or some other ID for the resource emitting the event.
ResourceName This property is required. string
The name of the resource emitting the event.
Responses This property is required. List<GetEventsAuditEventDataResponse>
A container object for response attributes.
StateChanges This property is required. List<GetEventsAuditEventDataStateChange>
A container object for state change attributes.
AdditionalDetails This property is required. map[string]string
A container object for attribues unique to the resource emitting the event.
AvailabilityDomain This property is required. string
The availability domain where the resource resides.
CompartmentId This property is required. string
The OCID of the compartment.
CompartmentName This property is required. string
The name of the compartment. This value is the friendly name associated with compartmentId. This value can change, but the service logs the value that appeared at the time of the audit event. Example: CompartmentA
DefinedTags This property is required. map[string]string
Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
EventGroupingId This property is required. string
This value links multiple audit events that are part of the same API operation. For example, a long running API operations that emit an event at the start and the end of an operation would use the same value in this field for both events.
EventName This property is required. string
Name of the API operation that generated this event. Example: GetInstance
FreeformTags This property is required. map[string]string
Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. Exists for cross-compatibility only. For more information, see Resource Tags. Example: {"Department": "Finance"}
Identities This property is required. []GetEventsAuditEventDataIdentity
A container object for identity attributes.
Requests This property is required. []GetEventsAuditEventDataRequest
A container object for request attributes.
ResourceId This property is required. string
An OCID or some other ID for the resource emitting the event.
ResourceName This property is required. string
The name of the resource emitting the event.
Responses This property is required. []GetEventsAuditEventDataResponse
A container object for response attributes.
StateChanges This property is required. []GetEventsAuditEventDataStateChange
A container object for state change attributes.
additionalDetails This property is required. Map<String,String>
A container object for attribues unique to the resource emitting the event.
availabilityDomain This property is required. String
The availability domain where the resource resides.
compartmentId This property is required. String
The OCID of the compartment.
compartmentName This property is required. String
The name of the compartment. This value is the friendly name associated with compartmentId. This value can change, but the service logs the value that appeared at the time of the audit event. Example: CompartmentA
definedTags This property is required. Map<String,String>
Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
eventGroupingId This property is required. String
This value links multiple audit events that are part of the same API operation. For example, a long running API operations that emit an event at the start and the end of an operation would use the same value in this field for both events.
eventName This property is required. String
Name of the API operation that generated this event. Example: GetInstance
freeformTags This property is required. Map<String,String>
Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. Exists for cross-compatibility only. For more information, see Resource Tags. Example: {"Department": "Finance"}
identities This property is required. List<GetEventsEventDataIdentity>
A container object for identity attributes.
requests This property is required. List<GetEventsEventDataRequest>
A container object for request attributes.
resourceId This property is required. String
An OCID or some other ID for the resource emitting the event.
resourceName This property is required. String
The name of the resource emitting the event.
responses This property is required. List<GetEventsEventDataResponse>
A container object for response attributes.
stateChanges This property is required. List<GetEventsEventDataStateChange>
A container object for state change attributes.
additionalDetails This property is required. {[key: string]: string}
A container object for attribues unique to the resource emitting the event.
availabilityDomain This property is required. string
The availability domain where the resource resides.
compartmentId This property is required. string
The OCID of the compartment.
compartmentName This property is required. string
The name of the compartment. This value is the friendly name associated with compartmentId. This value can change, but the service logs the value that appeared at the time of the audit event. Example: CompartmentA
definedTags This property is required. {[key: string]: string}
Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
eventGroupingId This property is required. string
This value links multiple audit events that are part of the same API operation. For example, a long running API operations that emit an event at the start and the end of an operation would use the same value in this field for both events.
eventName This property is required. string
Name of the API operation that generated this event. Example: GetInstance
freeformTags This property is required. {[key: string]: string}
Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. Exists for cross-compatibility only. For more information, see Resource Tags. Example: {"Department": "Finance"}
identities This property is required. GetEventsAuditEventDataIdentity[]
A container object for identity attributes.
requests This property is required. GetEventsAuditEventDataRequest[]
A container object for request attributes.
resourceId This property is required. string
An OCID or some other ID for the resource emitting the event.
resourceName This property is required. string
The name of the resource emitting the event.
responses This property is required. GetEventsAuditEventDataResponse[]
A container object for response attributes.
stateChanges This property is required. GetEventsAuditEventDataStateChange[]
A container object for state change attributes.
additional_details This property is required. Mapping[str, str]
A container object for attribues unique to the resource emitting the event.
availability_domain This property is required. str
The availability domain where the resource resides.
compartment_id This property is required. str
The OCID of the compartment.
compartment_name This property is required. str
The name of the compartment. This value is the friendly name associated with compartmentId. This value can change, but the service logs the value that appeared at the time of the audit event. Example: CompartmentA
defined_tags This property is required. Mapping[str, str]
Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
event_grouping_id This property is required. str
This value links multiple audit events that are part of the same API operation. For example, a long running API operations that emit an event at the start and the end of an operation would use the same value in this field for both events.
event_name This property is required. str
Name of the API operation that generated this event. Example: GetInstance
freeform_tags This property is required. Mapping[str, str]
Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. Exists for cross-compatibility only. For more information, see Resource Tags. Example: {"Department": "Finance"}
identities This property is required. Sequence[audit.GetEventsAuditEventDataIdentity]
A container object for identity attributes.
requests This property is required. Sequence[audit.GetEventsAuditEventDataRequest]
A container object for request attributes.
resource_id This property is required. str
An OCID or some other ID for the resource emitting the event.
resource_name This property is required. str
The name of the resource emitting the event.
responses This property is required. Sequence[audit.GetEventsAuditEventDataResponse]
A container object for response attributes.
state_changes This property is required. Sequence[audit.GetEventsAuditEventDataStateChange]
A container object for state change attributes.
additionalDetails This property is required. Map<String>
A container object for attribues unique to the resource emitting the event.
availabilityDomain This property is required. String
The availability domain where the resource resides.
compartmentId This property is required. String
The OCID of the compartment.
compartmentName This property is required. String
The name of the compartment. This value is the friendly name associated with compartmentId. This value can change, but the service logs the value that appeared at the time of the audit event. Example: CompartmentA
definedTags This property is required. Map<String>
Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
eventGroupingId This property is required. String
This value links multiple audit events that are part of the same API operation. For example, a long running API operations that emit an event at the start and the end of an operation would use the same value in this field for both events.
eventName This property is required. String
Name of the API operation that generated this event. Example: GetInstance
freeformTags This property is required. Map<String>
Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. Exists for cross-compatibility only. For more information, see Resource Tags. Example: {"Department": "Finance"}
identities This property is required. List<Property Map>
A container object for identity attributes.
requests This property is required. List<Property Map>
A container object for request attributes.
resourceId This property is required. String
An OCID or some other ID for the resource emitting the event.
resourceName This property is required. String
The name of the resource emitting the event.
responses This property is required. List<Property Map>
A container object for response attributes.
stateChanges This property is required. List<Property Map>
A container object for state change attributes.

GetEventsAuditEventDataIdentity

AuthType This property is required. string
The type of authentication used. Example: natv
CallerId This property is required. string
The OCID of the caller. The caller that made a request on behalf of the prinicpal.
CallerName This property is required. string
The name of the user or service. This value is the friendly name associated with callerId.
ConsoleSessionId This property is required. string
This value identifies any Console session associated with this request.
Credentials This property is required. string
The credential ID of the user. This value is extracted from the HTTP 'Authorization' request header. It consists of the tenantId, userId, and user fingerprint, all delimited by a slash (/).
IpAddress This property is required. string
The IP address of the source of the request. Example: 172.24.80.88
PrincipalId This property is required. string
The OCID of the principal.
PrincipalName This property is required. string
The name of the user or service. This value is the friendly name associated with principalId. Example: ExampleName
TenantId This property is required. string
The OCID of the tenant.
UserAgent This property is required. string
The user agent of the client that made the request. Example: Jersey/2.23 (HttpUrlConnection 1.8.0_212)
AuthType This property is required. string
The type of authentication used. Example: natv
CallerId This property is required. string
The OCID of the caller. The caller that made a request on behalf of the prinicpal.
CallerName This property is required. string
The name of the user or service. This value is the friendly name associated with callerId.
ConsoleSessionId This property is required. string
This value identifies any Console session associated with this request.
Credentials This property is required. string
The credential ID of the user. This value is extracted from the HTTP 'Authorization' request header. It consists of the tenantId, userId, and user fingerprint, all delimited by a slash (/).
IpAddress This property is required. string
The IP address of the source of the request. Example: 172.24.80.88
PrincipalId This property is required. string
The OCID of the principal.
PrincipalName This property is required. string
The name of the user or service. This value is the friendly name associated with principalId. Example: ExampleName
TenantId This property is required. string
The OCID of the tenant.
UserAgent This property is required. string
The user agent of the client that made the request. Example: Jersey/2.23 (HttpUrlConnection 1.8.0_212)
authType This property is required. String
The type of authentication used. Example: natv
callerId This property is required. String
The OCID of the caller. The caller that made a request on behalf of the prinicpal.
callerName This property is required. String
The name of the user or service. This value is the friendly name associated with callerId.
consoleSessionId This property is required. String
This value identifies any Console session associated with this request.
credentials This property is required. String
The credential ID of the user. This value is extracted from the HTTP 'Authorization' request header. It consists of the tenantId, userId, and user fingerprint, all delimited by a slash (/).
ipAddress This property is required. String
The IP address of the source of the request. Example: 172.24.80.88
principalId This property is required. String
The OCID of the principal.
principalName This property is required. String
The name of the user or service. This value is the friendly name associated with principalId. Example: ExampleName
tenantId This property is required. String
The OCID of the tenant.
userAgent This property is required. String
The user agent of the client that made the request. Example: Jersey/2.23 (HttpUrlConnection 1.8.0_212)
authType This property is required. string
The type of authentication used. Example: natv
callerId This property is required. string
The OCID of the caller. The caller that made a request on behalf of the prinicpal.
callerName This property is required. string
The name of the user or service. This value is the friendly name associated with callerId.
consoleSessionId This property is required. string
This value identifies any Console session associated with this request.
credentials This property is required. string
The credential ID of the user. This value is extracted from the HTTP 'Authorization' request header. It consists of the tenantId, userId, and user fingerprint, all delimited by a slash (/).
ipAddress This property is required. string
The IP address of the source of the request. Example: 172.24.80.88
principalId This property is required. string
The OCID of the principal.
principalName This property is required. string
The name of the user or service. This value is the friendly name associated with principalId. Example: ExampleName
tenantId This property is required. string
The OCID of the tenant.
userAgent This property is required. string
The user agent of the client that made the request. Example: Jersey/2.23 (HttpUrlConnection 1.8.0_212)
auth_type This property is required. str
The type of authentication used. Example: natv
caller_id This property is required. str
The OCID of the caller. The caller that made a request on behalf of the prinicpal.
caller_name This property is required. str
The name of the user or service. This value is the friendly name associated with callerId.
console_session_id This property is required. str
This value identifies any Console session associated with this request.
credentials This property is required. str
The credential ID of the user. This value is extracted from the HTTP 'Authorization' request header. It consists of the tenantId, userId, and user fingerprint, all delimited by a slash (/).
ip_address This property is required. str
The IP address of the source of the request. Example: 172.24.80.88
principal_id This property is required. str
The OCID of the principal.
principal_name This property is required. str
The name of the user or service. This value is the friendly name associated with principalId. Example: ExampleName
tenant_id This property is required. str
The OCID of the tenant.
user_agent This property is required. str
The user agent of the client that made the request. Example: Jersey/2.23 (HttpUrlConnection 1.8.0_212)
authType This property is required. String
The type of authentication used. Example: natv
callerId This property is required. String
The OCID of the caller. The caller that made a request on behalf of the prinicpal.
callerName This property is required. String
The name of the user or service. This value is the friendly name associated with callerId.
consoleSessionId This property is required. String
This value identifies any Console session associated with this request.
credentials This property is required. String
The credential ID of the user. This value is extracted from the HTTP 'Authorization' request header. It consists of the tenantId, userId, and user fingerprint, all delimited by a slash (/).
ipAddress This property is required. String
The IP address of the source of the request. Example: 172.24.80.88
principalId This property is required. String
The OCID of the principal.
principalName This property is required. String
The name of the user or service. This value is the friendly name associated with principalId. Example: ExampleName
tenantId This property is required. String
The OCID of the tenant.
userAgent This property is required. String
The user agent of the client that made the request. Example: Jersey/2.23 (HttpUrlConnection 1.8.0_212)

GetEventsAuditEventDataRequest

Action This property is required. string
The HTTP method of the request. Example: GET
Headers This property is required. Dictionary<string, string>
The headers of the response.
Id This property is required. string
The opc-request-id of the request.
Parameters This property is required. Dictionary<string, string>
The parameters supplied by the caller during this operation.
Path This property is required. string
The full path of the API request. Example: /20160918/instances/ocid1.instance.oc1.phx.<unique_ID>
Action This property is required. string
The HTTP method of the request. Example: GET
Headers This property is required. map[string]string
The headers of the response.
Id This property is required. string
The opc-request-id of the request.
Parameters This property is required. map[string]string
The parameters supplied by the caller during this operation.
Path This property is required. string
The full path of the API request. Example: /20160918/instances/ocid1.instance.oc1.phx.<unique_ID>
action This property is required. String
The HTTP method of the request. Example: GET
headers This property is required. Map<String,String>
The headers of the response.
id This property is required. String
The opc-request-id of the request.
parameters This property is required. Map<String,String>
The parameters supplied by the caller during this operation.
path This property is required. String
The full path of the API request. Example: /20160918/instances/ocid1.instance.oc1.phx.<unique_ID>
action This property is required. string
The HTTP method of the request. Example: GET
headers This property is required. {[key: string]: string}
The headers of the response.
id This property is required. string
The opc-request-id of the request.
parameters This property is required. {[key: string]: string}
The parameters supplied by the caller during this operation.
path This property is required. string
The full path of the API request. Example: /20160918/instances/ocid1.instance.oc1.phx.<unique_ID>
action This property is required. str
The HTTP method of the request. Example: GET
headers This property is required. Mapping[str, str]
The headers of the response.
id This property is required. str
The opc-request-id of the request.
parameters This property is required. Mapping[str, str]
The parameters supplied by the caller during this operation.
path This property is required. str
The full path of the API request. Example: /20160918/instances/ocid1.instance.oc1.phx.<unique_ID>
action This property is required. String
The HTTP method of the request. Example: GET
headers This property is required. Map<String>
The headers of the response.
id This property is required. String
The opc-request-id of the request.
parameters This property is required. Map<String>
The parameters supplied by the caller during this operation.
path This property is required. String
The full path of the API request. Example: /20160918/instances/ocid1.instance.oc1.phx.<unique_ID>

GetEventsAuditEventDataResponse

Headers This property is required. Dictionary<string, string>
The headers of the response.
Message This property is required. string
A friendly description of what happened during the operation. Use this for troubleshooting.
Payload This property is required. Dictionary<string, string>
This value is included for backward compatibility with the Audit version 1 schema, where it contained metadata of interest from the response payload.
ResponseTime This property is required. string
The time of the response to the audited request, expressed in RFC 3339 timestamp format. Example: 2019-09-18T00:10:59.278Z
Status This property is required. string
The status code of the response. Example: 200
Headers This property is required. map[string]string
The headers of the response.
Message This property is required. string
A friendly description of what happened during the operation. Use this for troubleshooting.
Payload This property is required. map[string]string
This value is included for backward compatibility with the Audit version 1 schema, where it contained metadata of interest from the response payload.
ResponseTime This property is required. string
The time of the response to the audited request, expressed in RFC 3339 timestamp format. Example: 2019-09-18T00:10:59.278Z
Status This property is required. string
The status code of the response. Example: 200
headers This property is required. Map<String,String>
The headers of the response.
message This property is required. String
A friendly description of what happened during the operation. Use this for troubleshooting.
payload This property is required. Map<String,String>
This value is included for backward compatibility with the Audit version 1 schema, where it contained metadata of interest from the response payload.
responseTime This property is required. String
The time of the response to the audited request, expressed in RFC 3339 timestamp format. Example: 2019-09-18T00:10:59.278Z
status This property is required. String
The status code of the response. Example: 200
headers This property is required. {[key: string]: string}
The headers of the response.
message This property is required. string
A friendly description of what happened during the operation. Use this for troubleshooting.
payload This property is required. {[key: string]: string}
This value is included for backward compatibility with the Audit version 1 schema, where it contained metadata of interest from the response payload.
responseTime This property is required. string
The time of the response to the audited request, expressed in RFC 3339 timestamp format. Example: 2019-09-18T00:10:59.278Z
status This property is required. string
The status code of the response. Example: 200
headers This property is required. Mapping[str, str]
The headers of the response.
message This property is required. str
A friendly description of what happened during the operation. Use this for troubleshooting.
payload This property is required. Mapping[str, str]
This value is included for backward compatibility with the Audit version 1 schema, where it contained metadata of interest from the response payload.
response_time This property is required. str
The time of the response to the audited request, expressed in RFC 3339 timestamp format. Example: 2019-09-18T00:10:59.278Z
status This property is required. str
The status code of the response. Example: 200
headers This property is required. Map<String>
The headers of the response.
message This property is required. String
A friendly description of what happened during the operation. Use this for troubleshooting.
payload This property is required. Map<String>
This value is included for backward compatibility with the Audit version 1 schema, where it contained metadata of interest from the response payload.
responseTime This property is required. String
The time of the response to the audited request, expressed in RFC 3339 timestamp format. Example: 2019-09-18T00:10:59.278Z
status This property is required. String
The status code of the response. Example: 200

GetEventsAuditEventDataStateChange

Current This property is required. Dictionary<string, string>
Provides the current state of fields that may have changed during an operation. To determine how the current operation changed a resource, compare the information in this attribute to previous.
Previous This property is required. Dictionary<string, string>
Provides the previous state of fields that may have changed during an operation. To determine how the current operation changed a resource, compare the information in this attribute to current.
Current This property is required. map[string]string
Provides the current state of fields that may have changed during an operation. To determine how the current operation changed a resource, compare the information in this attribute to previous.
Previous This property is required. map[string]string
Provides the previous state of fields that may have changed during an operation. To determine how the current operation changed a resource, compare the information in this attribute to current.
current This property is required. Map<String,String>
Provides the current state of fields that may have changed during an operation. To determine how the current operation changed a resource, compare the information in this attribute to previous.
previous This property is required. Map<String,String>
Provides the previous state of fields that may have changed during an operation. To determine how the current operation changed a resource, compare the information in this attribute to current.
current This property is required. {[key: string]: string}
Provides the current state of fields that may have changed during an operation. To determine how the current operation changed a resource, compare the information in this attribute to previous.
previous This property is required. {[key: string]: string}
Provides the previous state of fields that may have changed during an operation. To determine how the current operation changed a resource, compare the information in this attribute to current.
current This property is required. Mapping[str, str]
Provides the current state of fields that may have changed during an operation. To determine how the current operation changed a resource, compare the information in this attribute to previous.
previous This property is required. Mapping[str, str]
Provides the previous state of fields that may have changed during an operation. To determine how the current operation changed a resource, compare the information in this attribute to current.
current This property is required. Map<String>
Provides the current state of fields that may have changed during an operation. To determine how the current operation changed a resource, compare the information in this attribute to previous.
previous This property is required. Map<String>
Provides the previous state of fields that may have changed during an operation. To determine how the current operation changed a resource, compare the information in this attribute to current.

GetEventsFilter

Name This property is required. string
Values This property is required. List<string>
Regex bool
Name This property is required. string
Values This property is required. []string
Regex bool
name This property is required. String
values This property is required. List<String>
regex Boolean
name This property is required. string
values This property is required. string[]
regex boolean
name This property is required. str
values This property is required. Sequence[str]
regex bool
name This property is required. String
values This property is required. List<String>
regex Boolean

Package Details

Repository
oci pulumi/pulumi-oci
License
Apache-2.0
Notes
This Pulumi package is based on the oci Terraform Provider.
Oracle Cloud Infrastructure v2.32.0 published on Thursday, Apr 24, 2025 by Pulumi