События администрирования
04 сентября 2026
ID 314957
Для операций экспорта и импорта в CEF-сообщениях о событиях администрирования дополнительно указывается ключ sproc (KCSoperationId).
ID CEF-сообщения | Описание | Критичность | Применяемые | Значения ключей | Экспорт/ |
|---|---|---|---|---|---|
ADM-001 | User <username> added user <username> | 5 | shost | outcome=success |
|
ADM-002 | User <username> added user <username> | 5 | outcome=failure |
| |
ADM-003 | User <username> edited user <username> | 5 | outcome=success |
| |
ADM-004 | User <username> edited user <username> | 5 | outcome=failure |
| |
ADM-005 | User <username> deleted user <username> | 5 | outcome=success |
| |
ADM-006 | User <username> deleted user <username> | 5 | outcome=failure |
| |
ADM-007 | User <username> logged in | 3 | shost | outcome=success |
|
ADM-008 | User <username> logged in | 3 | outcome=failure |
| |
ADM-009 | User <username> logged off | 3 | outcome=success |
| |
ADM-010 | User <username> logged off | 3 | outcome=failure |
| |
ADM-011 | User <username> added role <Role Name> | 6 | shost | outcome=success |
|
ADM-012 | User <username> added role <Role Name> | 6 | outcome=failure |
| |
ADM-013 | User <username> edited role <Role Name> | 6 | outcome=success |
| |
ADM-014 | User <username> edited role <Role Name> | 6 | outcome=failure |
| |
ADM-015 | User <username> deleted role <Role Name> | 6 | outcome=success |
| |
ADM-016 | User <username> deleted role <Role Name> | 6 | outcome=failure |
| |
ADM-017 | User <username> assigned role <Role Name> to user <Username> | 7 | shost | outcome=success |
|
ADM-018 | User <username> assigned role <Role Name> to user <Username> | 7 | outcome=failure |
| |
ADM-019 | User <username> assigned role <Role Name> to LDAP group <AD group name> | 7 | shost | outcome=success |
|
ADM-021 | User <username> deprived LDAP group <AD group name> of the role <Role Name> | 7 | outcome=success |
| |
ADM-023 | User <username> deprived user <Username> of the role <Role Name> | 7 | shost | outcome=success |
|
ADM-024 | User <username> deprived user <Username> of the role <Role Name> | 7 | outcome=failure |
| |
ADM-025 | User <username> added image <image name> | 2 | shost | outcome=success |
|
ADM-026 | User <username> added image <image name> | 2 | outcome=failure |
| |
ADM-027 | User <username> started scanning image <image name> | 2 | outcome=success |
| |
ADM-028 | User <username> started scanning image <image name> | 2 | outcome=failure |
| |
ADM-029 | User <username> deleted image <image name> | 4 | outcome=success |
| |
ADM-030 | User <username> deleted image <image name> | 4 | outcome=failure |
| |
ADM-031 | User <username> deleted repository <repository name> | 4 | shost | outcome=success |
|
ADM-032 | User <username> deleted repository <repository name> | 4 | outcome=failure |
| |
ADM-033 | User <username> added registry <registry name> | 4 | shost | outcome=success |
|
ADM-034 | User <username> added registry <registry name> | 4 | outcome=failure |
| |
ADM-035 | User <username> edited registry <registry name> | 4 | outcome=success |
| |
ADM-036 | User <username> edited registry <registry name> | 4 | outcome=failure |
| |
ADM-037 | User <username> deleted registry <registry name> | 4 | outcome=success |
| |
ADM-038 | User <username> deleted registry <registry name> | 4 | outcome=failure |
| |
ADM-039 | User <username> added Email integration <integration name> | 5 | shost | outcome=success |
|
ADM-040 | User <username> added Email integration <integration name> | 5 | outcome=failure |
| |
ADM-041 | User <username> edited Email integration <integration name> | 5 | outcome=success |
| |
ADM-042 | User <username> edited Email integration <integration name> | 5 | outcome=failure |
| |
ADM-043 | User <username> deleted Email integration <integration name> | 5 | outcome=success |
| |
ADM-044 | User <username> deleted Email integration <integration name> | 5 | outcome=failure |
| |
ADM-045 | User <username> added Telegram integration <integration name> | 5 | outcome=success |
| |
ADM-046 | User <username> added Telegram integration <integration name> | 5 | outcome=failure |
| |
ADM-047 | User <username> edited Telegram integration <integration name> | 5 | outcome=success |
| |
ADM-048 | User <username> edited Telegram integration <integration name> | 5 | outcome=failure |
| |
ADM-049 | User <username> deleted Telegram integration <integration name> | 5 | outcome=success |
| |
ADM-050 | User <username> deleted Telegram integration <integration name> | 5 | outcome=failure |
| |
ADM-051 | User <username> added LDAP integration <IntegrationName> | 5 | shost | outcome=success |
|
ADM-052 | User <username> added LDAP integration <IntegrationName> | 5 | outcome=failure |
| |
ADM-053 | User <username> edited LDAP integration <IntegrationName> | 6 | outcome=success |
| |
ADM-054 | User <username> edited LDAP integration <IntegrationName> | 6 | outcome=failure |
| |
ADM-055 | User <username> deleted LDAP integration <IntegrationName> | 6 | outcome=success |
| |
ADM-056 | User <username> deleted LDAP integration <IntegrationName> | 6 | outcome=failure |
| |
ADM-057 | User <username> added <type policy> policy <policy name> | 5 | shost | outcome=success |
|
ADM-058 | User <username> added <type policy> policy <policy name> | 5 | outcome=failure |
| |
ADM-059 | User <username> edited <type policy> policy <policy name> | 5 | outcome=success |
| |
ADM-060 | User <username> edited <type policy> policy <policy name> | 5 | outcome=failure |
| |
ADM-061 | User <username> deleted <type policy> policy <policy name> | 5 | outcome=success |
| |
ADM-062 | User <username> deleted <type policy> policy <policy name> | 5 | outcome=failure |
| |
ADM-063 | User <username> added <image sign validator type> image sign validator <image sign validator name> | 5 | shost | outcome=success |
|
ADM-064 | User <username> added <image sign validator type> image sign validator <image sign validator name> | 5 | outcome=failure |
| |
ADM-065 | User <username> edited <image sign validator type> image sign validator <image sign validator name> | 5 | outcome=success |
| |
ADM-066 | User <username> edited <image sign validator type> image sign validator <image sign validator name> | 5 | outcome=failure |
| |
ADM-067 | User <username> deleted <image sign validator type> image sign validator <image sign validator name> | 5 | outcome=success |
| |
ADM-068 | User <username> deleted <image sign validator type> image sign validator <image sign validator name> | 5 | outcome=failure |
| |
ADM-069 | User <username> deleted report <report name> | 5 | shost | outcome=success |
|
ADM-070 | User <username> deleted report <report name> | 6 | outcome=failure |
| |
ADM-071 | User <username> created report <report name> | 5 | outcome=success |
| |
ADM-072 | User <username> created report <report name> | 6 | outcome=failure |
| |
ADM-073 | User <username> created application scope <AS name> | 5 | shost | outcome=success |
|
ADM-074 | User <username> created application scope <AS name> | 5 | outcome=failure |
| |
ADM-075 | User <username> edited application scope <AS name> | 5 | outcome=success |
| |
ADM-076 | User <username> edited application scope <AS name> | 5 | outcome=failure |
| |
ADM-077 | User <username> deleted application scope <AS name> | 5 | outcome=success |
| |
ADM-078 | User <username> deleted application scope <AS name> | 5 | outcome=failure |
| |
ADM-079 | User <username> added Webhook integration <integration name> | 5 | shost | outcome=success |
|
ADM-080 | User <username> added Webhook integration <integration name> | 5 | outcome=failure |
| |
ADM-081 | User <username> edited Webhook integration <integration name> | 5 | outcome=success |
| |
ADM-082 | User <username> edited Webhook integration <integration name> | 5 | outcome=failure |
| |
ADM-083 | User <username> deleted Webhook integration <integration name> | 5 | outcome=success |
| |
ADM-084 | User <username> deleted Webhook integration <integration name> | 5 | outcome=failure |
| |
ADM-085 | User <username> added AI tool <integration name> | 5 | shost | outcome=success |
|
ADM-086 | User <username> added AI tool <integration name> | 5 | outcome=failure |
| |
ADM-087 | User <username> edited AI tool <integration name> | 5 | outcome=success |
| |
ADM-088 | User <username> edited AI tool <integration name> | 5 | outcome=failure |
| |
ADM-089 | User <username> deleted AI tool <integration name> | 5 | outcome=success |
| |
ADM-090 | User <username> deleted AI tool <integration name> | 5 | outcome=failure |
| |
ADM-091 | User <username> initiated AI description for <image name> | 2 | shost | outcome=success |
|
ADM-092 | User <username> initiated AI description for <image name> | 2 | outcome=failure |
| |
ADM-093 | User <Username> downloaded SBOM <SbomFormat> for <ImageName> | 5 | shost | outcome=success |
|
ADM-094 | User <Username> downloaded SBOM <SbomFormat> for <ImageName> | 5 | outcome=failure |
| |
ADM-095 | User <User name> changed scanner job focusing configuration. | 3 | shost | outcome=success |
|
ADM-096 | User <User name> changed scanner job focusing configuration. | 5 | outcome=failure |
| |
ADM-097 | User <User name> created external group <EG name>. | 4 | shost | outcome=success |
|
ADM-098 | User <User name> created external group <EG name>. | 4 | outcome=failure |
| |
ADM-099 | User <User name> edited external group <EG name>. | 4 | outcome=success |
| |
ADM-100 | User <User name> edited external group <EG name>. | 4 | outcome=failure |
| |
ADM-101 | User <User name> deleted external group <EG name>. | 4 | outcome=success |
| |
ADM-102 | User <User name> deleted external group <EG name>. | 4 | outcome=failure |
| |
ADM-103 | User <User name> reissued token of external group <EG name>. | 4 | outcome=success |
| |
ADM-104 | User <User name> reissued token of external group <EG name>. | 4 | outcome=failure |
| |
ADM-105 | User <username> changed rotation policy configuration for s3 bucket <bucket_name>. | 5 | shost | outcome=success |
|
ADM-106 | User <username> changed rotation policy configuration for s3 bucket <bucket_name>. | 8 | outcome=failure |
| |
ADM-107 | User <username> added SSO integration <integration ID (URL)>. | 5 | shost | outcome=success |
|
ADM-108 | User <username> added SSO integration <integration ID (URL)>. | 5 | outcome=failure |
| |
ADM-109 | User <username> edited SSO integration <integration ID (URL)>. | 6 | outcome=success |
| |
ADM-110 | User <username> edited SSO integration <integration ID (URL)>. | 6 | outcome=failure |
| |
ADM-111 | User <username> deleted SSO integration <integration ID (URL)>. | 6 | outcome=success |
| |
ADM-112 | User <username> deleted SSO integration <integration ID (URL)>. | 6 | outcome=failure |
| |
ADM-113 | User <username> assigned role <Role Name> to IdP group <IdP group name>. | 7 | shost | outcome=success |
|
ADM-115 | User <username> revoked role <Role Name> from IdP group <IdP group name>. | 7 | outcome=success |
| |
ADM-117 | User <Username> added <ControlName> benchmark control | 5 | shost | outcome=success |
|
ADM-118 | User <Username> added <ControlName> benchmark control | 5 | outcome=failure |
| |
ADM-119 | User <Username> edited <ControlName> benchmark control | 5 | outcome=success |
| |
ADM-120 | User <Username> edited <ControlName> benchmark control | 5 | outcome=failure |
| |
ADM-121 | User <Username> deleted <ControlName> benchmark control | 5 | outcome=success |
| |
ADM-122 | User <Username> deleted <ControlName> benchmark control | 5 | outcome=failure |
| |
ADM-127 | User <Username> added <FrameworkName> benchmark framework | 5 | shost | outcome=success |
|
ADM-128 | User <Username> added <FrameworkName> benchmark framework | 5 | outcome=failure |
| |
ADM-129 | User <Username> edited <FrameworkName> benchmark framework | 5 | outcome=success |
| |
ADM-130 | User <Username> edited <FrameworkName> benchmark framework | 5 | outcome=failure |
| |
ADM-131 | User <Username> deleted <FrameworkName> benchmark framework | 5 | outcome=success |
| |
ADM-132 | User <Username> deleted <FrameworkName> benchmark framework | 5 | outcome=failure |
| |
ADM-133 | User <Username> enabled <FrameworkName> benchmark framework | 5 | outcome=success |
| |
ADM-134 | User <Username> enabled <FrameworkName> benchmark framework | 5 | outcome=failure |
| |
ADM-135 | User <Username> disabled <FrameworkName> benchmark framework | 5 | outcome=success |
| |
ADM-136 | User <Username> disabled <FrameworkName> benchmark framework | 5 | outcome=failure |
| |
ADM-137 | User <Username> added <ControlName> admission controller custom control | 5 | shost | outcome=success |
|
ADM-138 | User <Username> added <ControlName> admission controller custom control | 5 | outcome=failure |
| |
ADM-139 | User <Username> edited <ControlName> admission controller custom control | 5 | outcome=success |
| |
ADM-140 | User <Username> edited <ControlName> admission controller custom control | 5 | outcome=failure |
| |
ADM-141 | User <Username> deleted <ControlName> admission controller custom control | 5 | outcome=success |
| |
ADM-142 | User <Username> deleted <ControlName> admission controller custom control | 5 | outcome=failure |
| |
ADM-147 | User <Username> added <ControlName> assurance custom control | 5 | shost | outcome=success |
|
ADM-148 | User <Username> added <ControlName> assurance custom control | 5 | outcome=failure |
| |
ADM-149 | User <Username> edited <ControlName> assurance custom control | 5 | outcome=success |
| |
ADM-150 | User <Username> edited <ControlName> assurance custom control | 5 | outcome=failure |
| |
ADM-151 | User <Username> deleted <ControlName> assurance custom control | 5 | outcome=success |
| |
ADM-152 | User <Username> deleted <ControlName> assurance custom control | 5 | outcome=failure |
| |
ADM-157 | User <suser> initiated operation <KCSoperationType>. | 5 | shost | outcome=success |
|
ADM-158 | User <suser> initiated operation <KCSoperationType>. | 5 | outcome=failure |
| |
ADM-159 | User <suser> cancelled operation <KCSoperationType> (operation ID: <KCSoperationId>). | 5 | shost | outcome=success |
|
ADM-160 | User <suser> cancelled operation <KCSoperationType> (operation ID: <KCSoperationId>). | 5 | outcome=failure |
| |
ADM-161 | User <suser> requested to remove the KCS blocking. | 5 | shost |
|
|
ADM-170 | User <Username> added agent group <AgentGroupName>. | 5 | shost | outcome=success |
|
ADM-171 | User <Username> added agent group <AgentGroupName>. | 5 | outcome=failure |
| |
ADM-172 | User <Username> deleted agent group <AgentGroupName>. | 5 | outcome=success |
| |
ADM-173 | User <Username> deleted agent group <AgentGroupName>. | 5 | outcome=failure |
| |
ADM-174 | User <Username> changed agent group <AgentGroupName>. | 5 | outcome=success |
| |
ADM-175 | User <Username> changed agent group <AgentGroupName>. | 5 | outcome=failure |
| |
ADM-176 | <KCS_AgreementName> has been accepted | 5 | shost | outcome=success |
|
ADM-177 | <KCS_AgreementName> has been accepted | 8 | outcome=failure |
| |
ADM-178 | User <Username> has accepted <KESLKSN_AgreementName> | 5 | shost | outcome=success |
|
ADM-179 | User <Username> has accepted <KESLKSN_AgreementName> | 8 | outcome=failure |
| |
ADM-180 | User <Username> has withdrawn consent to <KESLKSN_AgreementName> | 5 | outcome=success |
| |
ADM-181 | User <Username> has withdrawn consent to <KESLKSN_AgreementName> | 8 | outcome=failure |
| |
ADM-182 | Сonsent to <KCS_AgreementName> has been withdrawn | 8 | shost | outcome=failure |
|
