auditing-and-logging-information-44b00a8.md

Auditing and Logging Information

Here you can find a list of the audit log events that are logged by the SAP Cloud Management service.

Audit log events written in audit logs

Event grouping	What audit log events are logged	How to identify related audit log events	Additional information
Events related to the management of global accounts and the creation and management of directories and subaccounts (Accounts API)	Update of a global account	The message contains the texts: \"type\":\"UPDATE\" \"entity\":\"GlobalAccount	To retrieve audit logs for a global account, use the audit log retrieval API. For more information, see Audit Log Retrieval API for Global Accounts in the Cloud Foundry Environment.
	Creation of a directory	The message contains the texts: \"type\":\"CREATE\" \"entity\":\"Directory
	Update of a directory	The message contains the texts: \"type\":\"UPDATE\" \"entity\":\"Directory
	Deletion of a directory	The message contains the texts: \"type\":\"DELETE\" \"entity\":\"Directory
	Creation of a subaccount	The message contains the texts: \"type\":\"CREATE\" \"entity\":\"Subaccount
	Update of a subaccount	The message contains the texts: \"type\":\"UPDATE\" \"entity\":\"Subaccount
	Deletion of a subaccount	The message contains the texts: \"type\":\"DELETE\" \"entity\":\"Subaccount
Events related to the creation and management of environment instances (Provisioning API)	Creation of an environment instance (for example, Cloud Foundry)	The message contains the texts: \"type\":\"CREATE\" The \"entity\" attribute contains the text .ServiceInstance\"
	Update of an environment instance	The message contains the texts: \"type\":\"UPDATE\" The \"entity\" attribute contains the text .ServiceInstance\"
	Deletion of an environment instance	The message contains the texts: \"type\":\"DELETE\" The \"entity\" attribute contains the text .ServiceInstance\"
Events related to the management of product entitlements and assignments across your global account, directories, and subaccounts (Entitlements API)	Assignment of a service plan to a subaccount	The message contains the texts: \"type\":\"CREATE\" or \"type\":\"UPDATE\" The "entityType" attribute contains the text ServicePlanAssignment. The "entityId" attribute contains the subaccount GUID.	To retrieve audit logs for a global account, use the audit log retrieval API. For more information. see Audit Log Retrieval API for Global Accounts in the Cloud Foundry Environment.
	Removal of a service plan from a subaccount	The message contains the texts: \"type\":\"DELETE\" The "entityType" attribute contains the text ServicePlanAssignment. The "entityId" attribute contains the subaccount GUID.
	Assignment of an entitlement to a directory	The message contains the texts: \"type\":\"CREATE\" or\"type\":\"UPDATE\" The "entityType" attribute contains the text AssignedEntitlement. The "entity_Id" attribute contains the directory GUID in the "entityGUID"field and "entityType":"DIRECTORY".
	Update of an assignment of an entitlement to a directory	The message contains the texts: \"type\":\"UPDATE\" "entityType" attribute contains the text AssignedEntitlement. The "entityGUID" attribute contains the directory GUID and updated quota amounts.
	Removal of an entitlement from a directory	The message contains the texts: \"type\":\"DELETE\" The "entityType" attribute contains the text AssignedEntitlement. The "entityGUID" attribute contains the directory GUID and updated quota amounts.
Event related to subscriptions of consumers to multitenant applications in the Cloud Foundry environment. The multitenant applications must be registered to the SaaS Provisioning Service. See Register the Multitenant Application to the SAP SaaS Provisioning Service. (SaaS Provisioning Service, technical name: saas-registry)	Creation of a subscription to an application for a subaccount	The message contains the texts: \"type\":\"CREATE\" \"entity\":\"RootSubscription The "entity" attribute contains the subaccount GUID in "subaccountId" field, the app name in the "appName" field , and subscription state details, including "state" and "code"(plan).	To retrieve audit logs for subscriptions of applications to subaccounts, use the audit log retrieval API. For more information, see Audit Log Retrieval API Usage for Subaccounts in the Cloud Foundry Environment.
	Update of a subscription (when parameters or a plan have been changed)	\"type\":\"UPDATE\" \"entity\":\"RootSubscription The "entity" attribute contains the subaccount GUID in "subaccountId" field, the app name in the "appName" field , and subscription state details, including "state" and "code"(plan).
	Deletion of a subscription	The message contains the texts: \"type\":\"UPDATE\" \"entity\":\"RootSubscription The "entity" attribute contains the subaccount GUID in "subaccountId" field, the app name in the "appName" field , and subscription state details, including "state" and "code"(plan).
Events related to the management of budgets in your global account. See Managing Budgets in Your Global Account. (Budgets service)	Creation of a budget	The message contains the texts: \"type\":\"CREATE\" \"entity\":\"Budget	To retrieve audit logs for a global account, use the audit log retrieval API. For more information, see Audit Log Retrieval API for Global Accounts in the Cloud Foundry Environment.
	Update of a budget	The message contains the texts: \"type\":\"UPDATE\" \"entity\":\"Budget
	Deletion of a budget	The message contains the texts: \"type\":\"DELETE\" \"entity\":\"Budget

The following information is described in the table columns:

• Event grouping - Events that are logged with a similar format or are related to the same entities.

• What audit events are logged - Description of the security or data protection and privacy related event that is logged.

• How to identify related log events - Search criteria or key words, that are specific for a log event that is created along with the logged event.

• Additional information - Any related information that can be helpful.

Related Information

Audit Logging in the Cloud Foundry Environment