diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS index ea772efe4bc..993a93a897c 100644 --- a/.github/CODEOWNERS +++ b/.github/CODEOWNERS @@ -130,6 +130,7 @@ /packages/panw_cortex_xdr @elastic/security-external-integrations /packages/panw @elastic/security-external-integrations /packages/pfsense @elastic/security-external-integrations +/packages/ping_one @elastic/security-external-integrations /packages/postgresql @elastic/obs-service-integrations /packages/problemchild @elastic/ml-ui /packages/prometheus @elastic/obs-cloudnative-monitoring diff --git a/packages/ping_one/_dev/build/build.yml b/packages/ping_one/_dev/build/build.yml new file mode 100644 index 00000000000..8d9e4bf7ac8 --- /dev/null +++ b/packages/ping_one/_dev/build/build.yml @@ -0,0 +1,3 @@ +dependencies: + ecs: + reference: git@v8.4.0 diff --git a/packages/ping_one/_dev/build/docs/README.md b/packages/ping_one/_dev/build/docs/README.md new file mode 100644 index 00000000000..b263002638a --- /dev/null +++ b/packages/ping_one/_dev/build/docs/README.md @@ -0,0 +1,61 @@ +# PingOne + +## Overview + +The [PingOne](https://www.pingidentity.com/en.html) integration allows you to monitor audit activity. PingOne is a cloud-based framework for secure identity access management. + +Use the PingOne integration to collect and parse data from the REST APIs or HTTP Endpoint input. Then visualize that data in Kibana. + +For example, you could use the data from this integration to know which action or activity is performed against a defined PingOne resource, and also track the actor or agent who initiated the action. + +## Data streams + +The PingOne integration collects logs for one type of event: Audit. + +**Audit** reporting stores incoming audit messages in a cache and provides endpoints for requesting audit events for a specific time period. + +## Requirements + +You need Elasticsearch for storing and searching your data and Kibana for visualizing and managing it. You can use our hosted Elasticsearch Service on Elastic Cloud, which is recommended, or self-manage the Elastic Stack on your own hardware. + +This module has been tested against `PingOne API version 1.0`. + +## Setup + +### To collect data from PingOne REST APIs, follow below steps: + +1. Go to the [PingOne console](https://www.pingidentity.com/en/account/sign-on.html), select PingOne as an Account and add username and password. +2. Select Environment. +3. Go to **Connections -> Applications**. +4. Click **+** to create an application. +5. Enter an Application Name. +6. Select **Worker** as an application type. +7. Click Save. +8. Click the toggle switch to enable the application, if it is not already enabled. +9. Go to **Configuration**. +10. Copy **Token Endpoint**. +11. Copy **Environment ID**, **Client ID** and **Client Secret** from General Section. + +For more details, see [Documentation](https://docs.pingidentity.com/bundle/pingone/page/vpz1564020488577.html). + +**Note** : Value of initial interval must be less than 2 years. + +### To collect data from PingOne via HTTP Endpoint, follow below steps: + +1. Reference link for configuring [HTTP Endpoint Remote logging](https://docs.pingidentity.com/bundle/pingone/page/sxi1589922927893.html) for PingOne. +2. In Destination, enter the full URL, including the port. +`Example Format: http[s]://{AGENT_ADDRESS}:{AGENT_PORT}/{URL}`. + +**Note** : +- Select Ping Activity Format (JSON) in the format drop down. +- HTTP Endpoint Remote logging will expose the port to the internet, therefore it is advised to have proper network access configured. + +## Logs Reference + +#### audit + +This is the `audit` dataset. + +{{event "audit"}} + +{{fields "audit"}} \ No newline at end of file diff --git a/packages/ping_one/_dev/deploy/docker/docker-compose.yml b/packages/ping_one/_dev/deploy/docker/docker-compose.yml new file mode 100644 index 00000000000..6be83337f96 --- /dev/null +++ b/packages/ping_one/_dev/deploy/docker/docker-compose.yml @@ -0,0 +1,23 @@ +version: '2.3' +services: + ping-one-audit-http-endpoint: + image: docker.elastic.co/observability/stream:v0.8.0 + volumes: + - ./sample_logs:/sample_logs:ro + environment: + - STREAM_PROTOCOL=webhook + - STREAM_ADDR=http://elastic-agent:9577/ + command: log --start-signal=SIGHUP --delay=5s /sample_logs/audit.log + ping_one: + image: docker.elastic.co/observability/stream:v0.8.0 + hostname: ping_one + ports: + - 8080 + volumes: + - ./files:/files:ro + environment: + PORT: '8080' + command: + - http-server + - --addr=:8080 + - --config=/files/config.yml diff --git a/packages/ping_one/_dev/deploy/docker/files/config.yml b/packages/ping_one/_dev/deploy/docker/files/config.yml new file mode 100644 index 00000000000..dd476495464 --- /dev/null +++ b/packages/ping_one/_dev/deploy/docker/files/config.yml @@ -0,0 +1,19 @@ +rules: + - path: /xxxx/as/token + methods: [POST] + responses: + - status_code: 200 + headers: + Content-Type: + - 'application/json' + body: | + {"access_token":"xxxx","expires_in":3600,"token_type":"Bearer"} + - path: /v1/environments/xxxx/activities + methods: [GET] + request_headers: + Authorization: + - 'Bearer xxxx' + responses: + - status_code: 200 + body: |- + {"_links":{"self":{"href":"https://api.pingone.com/v1/environments/bf4cb8b8-33e9-4576-8d70-c0ab679fe0fa/activities"}},"_embedded":{"activities":[{"_links":{"self":{"href":"https://api.pingone.com/v1/environments/bf4cb8b8-33e9-4576-8d70-c0ab679fe0fa/activities/f931efc3-7696-4f4e-b82e-bf3563e99e8a"}},"id":"f931efc3-7696-4f4e-b82e-bf3563e99e8a","recordedAt":"2022-06-10T17:09:38.264Z","createdAt":"2022-06-10T17:09:38.281Z","correlationId":"78179748-3103-4f3e-adbc-5bbcd0d02319","actors":{"client":{"id":"830109c7-f8aa-491e-b2f2-8f7532ae85e9","name":"RichardPatchetWorker","environment":{"id":"bf4cb8b8-33e9-4576-8d70-c0ab679fe0fa"},"href":"https://api.pingone.com/v1/environments/bf4cb8b8-33e9-4576-8d70-c0ab679fe0fa/applications/830109c7-f8aa-491e-b2f2-8f7532ae85e9","type":"CLIENT"}},"action":{"type":"GROUP.CREATED","description":"Group Created"},"resources":[{"type":"GROUP","id":"e195531b-6bc0-435a-96b3-1a377ed7be69","name":"Training","environment":{"id":"bf4cb8b8-33e9-4576-8d70-c0ab679fe0fa"},"href":"https://api.pingone.com/v1/environments/bf4cb8b8-33e9-4576-8d70-c0ab679fe0fa/groups/e195531b-6bc0-435a-96b3-1a377ed7be69"}],"result":{"status":"SUCCESS","description":"Created Group Training"}},{"_links":{"self":{"href":"https://api.pingone.com/v1/environments/bf4cb8b8-33e9-4576-8d70-c0ab679fe0fa/activities/4ca96753-8837-419d-8e06-03fac0ec5ae8"}},"id":"4ca96753-8837-419d-8e06-03fac0ec5ae8","recordedAt":"2022-06-10T17:09:12.775Z","createdAt":"2022-06-10T17:09:12.791Z","correlationId":"45ab6e93-0252-4e46-a144-bda97337b24b","actors":{"client":{"id":"830109c7-f8aa-491e-b2f2-8f7532ae85e9","name":"RPWorker","environment":{"id":"bf4cb8b8-33e9-4576-8d70-c0ab679fe0fa"},"href":"https://api.pingone.com/v1/environments/bf4cb8b8-33e9-4576-8d70-c0ab679fe0fa/applications/830109c7-f8aa-491e-b2f2-8f7532ae85e9","type":"CLIENT"}},"action":{"type":"GROUP.CREATED","description":"Group Created"},"resources":[{"type":"GROUP","id":"158fcbd3-4d2b-49ed-8874-3a58da8559b3","name":"MyGroupName1","environment":{"id":"bf4cb8b8-33e9-4576-8d70-c0ab679fe0fa"},"href":"https://api.pingone.com/v1/environments/bf4cb8b8-33e9-4576-8d70-c0ab679fe0fa/groups/158fcbd3-4d2b-49ed-8874-3a58da8559b3"}],"result":{"status":"SUCCESS","description":"Created Group MyGroupName1"}},{"_links":{"self":{"href":"https://api.pingone.com/v1/environments/bf4cb8b8-33e9-4576-8d70-c0ab679fe0fa/activities/2076da4e-81ae-4cf4-803a-4ccc16419bc9"}},"id":"2076da4e-81ae-4cf4-803a-4ccc16419bc9","recordedAt":"2022-06-10T17:04:25.518Z","createdAt":"2022-06-10T17:04:25.534Z","correlationId":"28b1f3ca-2ab6-4cc0-b33f-50153c7c9c14","actors":{"client":{"id":"830109c7-f8aa-491e-b2f2-8f7532ae85e9","name":"RichardPatchetWorker","environment":{"id":"bf4cb8b8-33e9-4576-8d70-c0ab679fe0fa"},"href":"https://api.pingone.com/v1/environments/bf4cb8b8-33e9-4576-8d70-c0ab679fe0fa/applications/830109c7-f8aa-491e-b2f2-8f7532ae85e9","type":"CLIENT"}},"action":{"type":"GROUP.CREATED","description":"Group Created"},"resources":[{"type":"GROUP","id":"ac05e3ff-60e2-4e03-bbac-f9455e6a6d51","name":"Managers","environment":{"id":"bf4cb8b8-33e9-4576-8d70-c0ab679fe0fa"},"href":"https://api.pingone.com/v1/environments/bf4cb8b8-33e9-4576-8d70-c0ab679fe0fa/groups/ac05e3ff-60e2-4e03-bbac-f9455e6a6d51"}],"result":{"status":"SUCCESS","description":"Created Group Managers"}}]}} diff --git a/packages/ping_one/_dev/deploy/docker/sample_logs/audit.log b/packages/ping_one/_dev/deploy/docker/sample_logs/audit.log new file mode 100644 index 00000000000..f08b1f8dbbe --- /dev/null +++ b/packages/ping_one/_dev/deploy/docker/sample_logs/audit.log @@ -0,0 +1 @@ +{"_embedded":{},"action":{"type":"USER.ACCESS_ALLOWED"},"actors":{"client":{"environment":{"id":"123abc123-12ab-1234-1abc-abc123abc12"},"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/applications/123abc123-12ab-1234-1abc-abc123abc12","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"PingOne Admin Console","type":"CLIENT"},"user":{"environment":{"id":"123abc123-12ab-1234-1abc-abc123abc12"},"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/users/123abc123-12ab-1234-1abc-abc123abc12","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","population":{"id":"123abc123-12ab-1234-1abc-abc123abc12"},"type":"USER"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-08-08T15:31:08.237Z","resources":[{"environment":{"id":"123abc123-12ab-1234-1abc-abc123abc12"},"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/users/123abc123-12ab-1234-1abc-abc123abc12","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","population":{"id":"123abc123-12ab-1234-1abc-abc123abc12"},"type":"USER"}],"result":{"description":"Passed role access control","status":"SUCCESS"}} diff --git a/packages/ping_one/changelog.yml b/packages/ping_one/changelog.yml new file mode 100644 index 00000000000..11f927bf2ea --- /dev/null +++ b/packages/ping_one/changelog.yml @@ -0,0 +1,6 @@ +# newer versions go on top +- version: '0.1.0' + changes: + - description: Initial Release. + type: enhancement + link: https://github.com/elastic/integrations/pull/4014 diff --git a/packages/ping_one/data_stream/audit/_dev/test/pipeline/test-common-config.yml b/packages/ping_one/data_stream/audit/_dev/test/pipeline/test-common-config.yml new file mode 100644 index 00000000000..be41bb0d476 --- /dev/null +++ b/packages/ping_one/data_stream/audit/_dev/test/pipeline/test-common-config.yml @@ -0,0 +1,4 @@ +fields: + tags: + - preserve_original_event + - preserve_duplicate_custom_fields diff --git a/packages/ping_one/data_stream/audit/_dev/test/pipeline/test-pipeline-audit.log b/packages/ping_one/data_stream/audit/_dev/test/pipeline/test-pipeline-audit.log new file mode 100644 index 00000000000..2e1ee97763b --- /dev/null +++ b/packages/ping_one/data_stream/audit/_dev/test/pipeline/test-pipeline-audit.log @@ -0,0 +1,98 @@ +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-06T06:12:00.400Z","createdAt":"2022-07-06T06:12:00.697Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","action":{"type":"ACTION.CREATED","description":"Action Created"},"resources":[{"type":"SIGN_ON_POLICY","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"123abc123-12ab-1234-1abc-abc123abc12","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/signOnPolicies/123abc123-12ab-1234-1abc-abc123abc12/actions/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Created Action 123abc123-12ab-1234-1abc-abc123abc12"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T13:25:08.750Z","createdAt":"2022-07-18T13:25:08.767Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","action":{"type":"ACTION.UPDATED","description":"Action Updated"},"resources":[{"type":"SIGN_ON_POLICY","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"123abc123-12ab-1234-1abc-abc123abc12","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/signOnPolicies/123abc123-12ab-1234-1abc-abc123abc12/actions/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Updated Action 123abc123-12ab-1234-1abc-abc123abc12"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-06T06:12:00.405Z","createdAt":"2022-07-06T06:12:00.723Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","action":{"type":"APPLICATION.CREATED","description":"Application Created"},"resources":[{"type":"APPLICATION","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"PingOne Application Portal","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Created Application PingOne Application Portal using 'OPENID_CONNECT' protocol of type 'PING_ONE_PORTAL' with enabled state"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-06T11:31:55.312Z","createdAt":"2022-07-06T11:31:55.329Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"APPLICATION.UPDATED","description":"Application Updated"},"resources":[{"type":"APPLICATION","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"testapp","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Updated Application testapp using 'OPENID_CONNECT' protocol of type 'SINGLE_PAGE_APP' with disabled state"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-13T20:51:43.106Z","createdAt":"2022-07-13T20:51:43.121Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"APPLICATION.DELETED","description":"Application Deleted"},"resources":[{"type":"APPLICATION","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"testapp","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Deleted Application testapp using 'OPENID_CONNECT' protocol of type 'SINGLE_PAGE_APP' with enabled state"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T18:18:23.473Z","createdAt":"2022-07-18T18:18:23.489Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"AUTHORIZE_ATTRIBUTE.CREATED","description":"Authorize Attribute Created"},"resources":[{"type":"ATTRIBUTE","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"jdfjb","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Authorize Attribute 'jdfjb' created"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T18:18:46.553Z","createdAt":"2022-07-18T18:18:46.569Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"AUTHORIZE_ATTRIBUTE.DELETED","description":"Authorize Attribute Deleted"},"resources":[{"type":"ATTRIBUTE","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"jdfjb","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Authorize Attribute 'jdfjb' deleted"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T18:18:35.052Z","createdAt":"2022-07-18T18:18:35.067Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"AUTHORIZE_ATTRIBUTE.UPDATED","description":"Authorize Attribute Updated"},"resources":[{"type":"ATTRIBUTE","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"jdfjb","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Authorize Attribute 'jdfjb' updated"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T18:19:31.264Z","createdAt":"2022-07-18T18:19:31.281Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"AUTHORIZE_CONDITION.CREATED","description":"Authorize Condition Created"},"resources":[{"type":"CONDITION","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"db","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Authorize Condition 'db' created"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T18:19:45.644Z","createdAt":"2022-07-18T18:19:45.659Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"AUTHORIZE_CONDITION.DELETED","description":"Authorize Condition Deleted"},"resources":[{"type":"CONDITION","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"db","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Authorize Condition 'db' deleted"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T18:19:39.465Z","createdAt":"2022-07-18T18:19:39.483Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"AUTHORIZE_CONDITION.UPDATED","description":"Authorize Condition Updated"},"resources":[{"type":"CONDITION","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"db","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Authorize Condition 'db' updated"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"7a0463f2-642c-4b5d-b446-57414e114451","recordedAt":"2022-07-18T18:25:22.313Z","createdAt":"2022-07-18T18:25:22.328Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"AUTHORIZE_POLICY.UPDATED","description":"Authorize Policy Updated"},"resources":[{"type":"POLICYSET","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"Policies","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/policy-manager/policysets/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Authorize Policy 'Policies' updated"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T18:20:22.863Z","createdAt":"2022-07-18T18:20:22.880Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"AUTHORIZE_PROCESSOR.CREATED","description":"Authorize Processor Created"},"resources":[{"type":"AUTHORIZE_PROCESSOR","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"dnn","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Authorize Processor 'dnn' created"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T18:20:37.110Z","createdAt":"2022-07-18T18:20:37.126Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"AUTHORIZE_PROCESSOR.DELETED","description":"Authorize Processor Deleted"},"resources":[{"type":"AUTHORIZE_PROCESSOR","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"dnn","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Authorize Processor 'dnn' deleted"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T18:20:32.948Z","createdAt":"2022-07-18T18:20:32.964Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"AUTHORIZE_PROCESSOR.UPDATED","description":"Authorize Processor Updated"},"resources":[{"type":"AUTHORIZE_PROCESSOR","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"dnn","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Authorize Processor 'dnn' updated"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T18:16:54.699Z","createdAt":"2022-07-18T18:16:54.715Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"AUTHORIZE_SERVICE.CREATED","description":"Authorize Service Created"},"resources":[{"type":"SERVICE","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"Untitled","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Authorize Service 'Untitled' created"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T18:17:16.075Z","createdAt":"2022-07-18T18:17:16.090Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"AUTHORIZE_SERVICE.DELETED","description":"Authorize Service Deleted"},"resources":[{"type":"SERVICE","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"Untitled","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Authorize Service 'Untitled' deleted"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T18:17:08.873Z","createdAt":"2022-07-18T18:17:08.914Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"AUTHORIZE_SERVICE.UPDATED","description":"Authorize Service Updated"},"resources":[{"type":"SERVICE","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"Untitled","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Authorize Service 'Untitled' updated"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T18:14:45.756Z","createdAt":"2022-07-18T18:14:45.771Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"AUTHORIZE_SHARED_ADVICE.CREATED","description":"Authorize Shared Advice Created"},"resources":[{"type":"AUTHORIZE_SHARED_ADVICE","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"hgh","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/policy-manager/statements/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Authorize shared Advice 'hgh' created"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T18:15:27.900Z","createdAt":"2022-07-18T18:15:27.914Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"AUTHORIZE_SHARED_ADVICE.DELETED","description":"Authorize Shared Advice Deleted"},"resources":[{"type":"AUTHORIZE_SHARED_ADVICE","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"hgh","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/policy-manager/statements/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Authorize shared Advice 'hgh' deleted"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T18:15:21.082Z","createdAt":"2022-07-18T18:15:21.098Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"AUTHORIZE_SHARED_ADVICE.UPDATED","description":"Authorize Shared Advice Updated"},"resources":[{"type":"AUTHORIZE_SHARED_ADVICE","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"hgh","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/policy-manager/statements/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Authorize shared Advice 'hgh' updated"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T18:12:38.635Z","createdAt":"2022-07-18T18:12:38.665Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"AUTHORIZE_SHARED_RULE.CREATED","description":"Authorize Shared Rule Created"},"resources":[{"type":"AUTHORIZE_SHARED_RULE","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"jijj","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/policy-manager/rules/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Authorize shared Rule 'jijj' created"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T18:13:47.396Z","createdAt":"2022-07-18T18:13:47.409Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"AUTHORIZE_SHARED_RULE.DELETED","description":"Authorize Shared Rule Deleted"},"resources":[{"type":"AUTHORIZE_SHARED_RULE","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"jijj","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/policy-manager/rules/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Authorize shared Rule 'jijj' deleted"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T18:13:41.663Z","createdAt":"2022-07-18T18:13:41.677Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"AUTHORIZE_SHARED_RULE.UPDATED","description":"Authorize Shared Rule Updated"},"resources":[{"type":"AUTHORIZE_SHARED_RULE","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"jijj","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/policy-manager/rules/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Authorize shared Rule 'jijj' updated"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T18:11:03.242Z","createdAt":"2022-07-18T18:11:03.275Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"DECISION_ENDPOINT.CREATED","description":"Decision Endpoint Created"},"resources":[{"type":"DECISION_ENDPOINT","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"hfvhv","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/decisionEndpoints/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Decision endpoint 'hfvhv' created"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T18:11:35.390Z","createdAt":"2022-07-18T18:11:35.422Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"DECISION_ENDPOINT.DELETED","description":"Decision Endpoint Deleted"},"resources":[{"type":"DECISION_ENDPOINT","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"hfvhv","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/decisionEndpoints/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Decision endpoint 'hfvhv' deleted"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T18:22:54.150Z","createdAt":"2022-07-18T18:22:54.167Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"DECISION_ENDPOINT.UPDATED","description":"Decision Endpoint Updated"},"resources":[{"type":"DECISION_ENDPOINT","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"API Access Management","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/decisionEndpoints/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Decision endpoint 'API Access Management' updated"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T16:28:31.564Z","createdAt":"2022-07-18T16:28:31.597Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"ENVIRONMENT.CREATED","description":"Environment Created"},"resources":[{"type":"ENVIRONMENT","id":"abc12abc-12ab-1234-1abc-abc123abc123","name":"Temp_environment","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123"}],"result":{"status":"SUCCESS","description":"Created Environment Temp_environment"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-19T12:05:00.440Z","createdAt":"2022-07-19T12:05:00.473Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"ENVIRONMENT.UPDATED","description":"Environment Updated"},"resources":[{"type":"ENVIRONMENT","id":"abc12abc-12ab-1234-1abc-abc123abc123","name":"Temp_environment","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123"}],"result":{"status":"SUCCESS","description":"Updated Environment Temp_environment"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T10:56:26.984Z","createdAt":"2022-07-18T10:56:27.008Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"FIDO_POLICY.CREATED","description":"Fido Policy Created"},"resources":[{"type":"FIDO Policy","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"New Policy","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/fidoPolicies/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"FIDO Policy created: \"New Policy\""}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T10:57:39.193Z","createdAt":"2022-07-18T10:57:39.211Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"FIDO_POLICY.DELETED","description":"Fido Policy Deleted"},"resources":[{"type":"FIDO Policy","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"New Policy","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/fidoPolicies/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"FIDO Policy deleted: \"New Policy\""}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T10:57:22.740Z","createdAt":"2022-07-18T10:57:22.757Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"FIDO_POLICY.UPDATED","description":"Fido Policy Updated"},"resources":[{"type":"FIDO Policy","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"New Policy","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/fidoPolicies/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"FIDO Policy updated: \"New Policy\""}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-20T12:24:53.296Z","createdAt":"2022-07-20T12:24:53.329Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"PingOne Admin Console","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"FLOW.DELETED","description":"Sign-on flow finished"},"resources":[{"type":"FLOW","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"123abc123-12ab-1234-1abc-abc123abc12","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/flows/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Flow completed with policy Single_Factor"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-20T11:52:16.978Z","createdAt":"2022-07-20T11:52:16.997Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"PingOne Admin Console","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"FLOW.CREATED","description":"Sign-on flow started with policies [Single_Factor]"},"resources":[{"type":"FLOW","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"123abc123-12ab-1234-1abc-abc123abc12","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/flows/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Flow completed with policy Single_Factor"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-20T05:43:06.427Z","createdAt":"2022-07-20T05:43:06.454Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"PingOne Admin Console","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"FLOW.UPDATED","description":"Sign-on flow continued"},"resources":[{"type":"FLOW","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"123abc123-12ab-1234-1abc-abc123abc12","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/flows/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Flow completed with policy Single_Factor"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-14T13:46:49.175Z","createdAt":"2022-07-14T13:46:49.194Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"GRANT.CREATED","description":"Grant Created"},"resources":[{"type":"APPLICATION","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"New","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Created Grant for application '123abc123-12ab-1234-1abc-abc123abc12' to resource '123abc123-12ab-1234-1abc-abc123abc12'"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-13T20:51:43.150Z","createdAt":"2022-07-13T20:51:43.196Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"GRANT.DELETED","description":"Grant Deleted"},"resources":[{"type":"APPLICATION","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"testapp","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Deleted Grant for application '123abc123-12ab-1234-1abc-abc123abc12' to resource '123abc123-12ab-1234-1abc-abc123abc12'"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-11T07:27:51.868Z","createdAt":"2022-07-11T07:27:51.886Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"GRANT.UPDATED","description":"Grant Updated"},"resources":[{"type":"APPLICATION","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"testapp","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Updated Grant for application '123abc123-12ab-1234-1abc-abc123abc12' to resource '123abc123-12ab-1234-1abc-abc123abc12'"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T10:22:39.285Z","createdAt":"2022-07-18T10:22:39.301Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"GROUP.CREATED","description":"Group Created"},"resources":[{"type":"GROUP","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"abc","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/groups/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Created Group abc"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T10:23:36.760Z","createdAt":"2022-07-18T10:23:36.777Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"GROUP.DELETED","description":"Group Deleted"},"resources":[{"type":"GROUP","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"abc_group","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/groups/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Deleted Group abc_group"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T10:23:26.394Z","createdAt":"2022-07-18T10:23:26.408Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"GROUP.UPDATED","description":"Group Updated"},"resources":[{"type":"GROUP","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"abc_group","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/groups/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Updated Group abc_group"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T11:54:55.713Z","createdAt":"2022-07-18T11:54:55.731Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"IDENTITY_PROVIDER.CREATED","description":"Identity Provider Created"},"resources":[{"type":"IDENTITY_PROVIDER","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"google","environment":{"id":"123abc123-12ab-1234-1abc-abc123abc12"},"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/identityProviders/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Created Identity Provider google of type 'GOOGLE'."}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T11:55:48.406Z","createdAt":"2022-07-18T11:55:48.431Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"IDENTITY_PROVIDER.DELETED","description":"Identity Provider Deleted"},"resources":[{"type":"IDENTITY_PROVIDER","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"google","environment":{"id":"123abc123-12ab-1234-1abc-abc123abc12"},"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/identityProviders/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Deleted Identity Provider google of type 'GOOGLE'."}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T11:55:28.970Z","createdAt":"2022-07-18T11:55:28.985Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"IDENTITY_PROVIDER.UPDATED","description":"Identity Provider Updated"},"resources":[{"type":"IDENTITY_PROVIDER","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"google","environment":{"id":"123abc123-12ab-1234-1abc-abc123abc12"},"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/identityProviders/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Updated Identity Provider google of type 'GOOGLE'."}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T12:06:15.066Z","createdAt":"2022-07-18T12:06:15.084Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"IDP_ATTRIBUTE.CREATED","description":"Idp Attribute Created"},"resources":[{"type":"IDENTITY_PROVIDER","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"123abc123-12ab-1234-1abc-abc123abc12","environment":{"id":"123abc123-12ab-1234-1abc-abc123abc12"},"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/identityProviders/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"IDP Attribute 'accountId' created for Identity Provider '123abc123-12ab-1234-1abc-abc123abc12' in environment '123abc123-12ab-1234-1abc-abc123abc12'"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T12:07:55.167Z","createdAt":"2022-07-18T12:07:55.209Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"IDP_ATTRIBUTE.DELETED","description":"Idp Attribute Deleted"},"resources":[{"type":"IDENTITY_PROVIDER","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"123abc123-12ab-1234-1abc-abc123abc12","environment":{"id":"123abc123-12ab-1234-1abc-abc123abc12"},"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/identityProviders/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"IDP Attribute 'username' deleted for Identity Provider '123abc123-12ab-1234-1abc-abc123abc12' in environment '123abc123-12ab-1234-1abc-abc123abc12'"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T12:06:15.050Z","createdAt":"2022-07-18T12:06:15.064Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"IDP_ATTRIBUTE.UPDATED","description":"Idp Attribute Updated"},"resources":[{"type":"IDENTITY_PROVIDER","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"123abc123-12ab-1234-1abc-abc123abc12","environment":{"id":"123abc123-12ab-1234-1abc-abc123abc12"},"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/identityProviders/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"IDP Attribute 'username' updated for Identity Provider '123abc123-12ab-1234-1abc-abc123abc12' in environment '123abc123-12ab-1234-1abc-abc123abc12'"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T11:26:26.841Z","createdAt":"2022-07-18T11:26:26.872Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"IMAGE.CREATED","description":"Image Created"},"resources":[{"type":"IMAGE","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"123abc123-12ab-1234-1abc-abc123abc12","environment":{"id":"123abc123-12ab-1234-1abc-abc123abc12"},"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/images/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Created Image 123abc123-12ab-1234-1abc-abc123abc12"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-13T21:09:18.211Z","createdAt":"2022-07-13T21:09:18.530Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"KEY.CREATED","description":"Key Created"},"resources":[{"type":"KEY","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"PingOne SSO Certificate for Test environment","environment":{"id":"123abc123-12ab-1234-1abc-abc123abc12"},"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/keys/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Created Key PingOne SSO Certificate for Test environment"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-13T21:09:17.946Z","createdAt":"2022-07-13T21:09:18.261Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"MFA_SETTINGS.UPDATED","description":"MFA settings updated"},"resources":[{"type":"MFA_SETTINGS","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"123abc123-12ab-1234-1abc-abc123abc12","environment":{"id":"123abc123-12ab-1234-1abc-abc123abc12"},"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/mfaSettings"}],"result":{"status":"SUCCESS","description":"MFA settings updated for environment 123abc123-12ab-1234-1abc-abc123abc12"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T10:40:13.538Z","createdAt":"2022-07-18T10:40:13.565Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"NOTIFICATION_POLICY.CREATED","description":"Notification Policy Created"},"resources":[{"type":"Notification Policy","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"temp_notification","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/notificationsPolicies/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Notification Policy created: \"temp_notification\""}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T10:46:16.176Z","createdAt":"2022-07-18T10:46:16.196Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"NOTIFICATION_POLICY.DELETED","description":"Notification Policy Deleted"},"resources":[{"type":"Notification Policy","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"temp_notifications","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/notificationsPolicies/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Notification Policy deleted: \"temp_notifications\""}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T10:42:35.334Z","createdAt":"2022-07-18T10:42:35.351Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"NOTIFICATION_POLICY.UPDATED","description":"Notification Policy Updated"},"resources":[{"type":"Notification Policy","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"temp_notifications","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/notificationsPolicies/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Notification Policy updated: \"temp_notifications\""}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-07T13:12:36.168Z","createdAt":"2022-07-07T13:12:36.185Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","action":{"type":"PASSWORD.CHECK_FAILED","description":"Password Check Failed"},"resources":[{"type":"USER","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Check Failed Password 123abc123-12ab-1234-1abc-abc123abc12"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-07T13:12:48.320Z","createdAt":"2022-07-07T13:12:48.334Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","action":{"type":"PASSWORD.CHECK_SUCCEEDED","description":"Password Check Succeeded"},"resources":[{"type":"USER","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Check Succeeded Password 123abc123-12ab-1234-1abc-abc123abc12"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-13T21:09:18.030Z","createdAt":"2022-07-13T21:09:18.513Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"POLICY.CREATED","description":"Policy Created"},"resources":[{"type":"SIGN_ON_POLICY","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"Multi_Factor","environment":{"id":"123abc123-12ab-1234-1abc-abc123abc12"},"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/signOnPolicies/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Created Policy Multi_Factor"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-19T12:21:46.891Z","createdAt":"2022-07-19T12:21:46.916Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"POLICY.DELETED","description":"Policy Deleted"},"resources":[{"type":"SIGN_ON_POLICY","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"bbb","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/signOnPolicies/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Deleted Policy bbb"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-27T17:50:45.426Z","createdAt":"2022-07-27T17:50:45.441Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"p14c-myaccount","name":"p14c-myaccount","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"PASSWORD.RESET","description":"Password Reset"},"resources":[{"type":"USER","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Reset Password 123abc123-12ab-1234-1abc-abc123abc12"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-06T06:12:00.573Z","createdAt":"2022-07-06T06:12:00.983Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","action":{"type":"PASSWORD.SET","description":"Password Set"},"resources":[{"type":"USER","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Set password for: 123abc123-12ab-1234-1abc-abc123abc12"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-13T21:09:19.500Z","createdAt":"2022-07-13T21:09:19.513Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"POPULATION.CREATED","description":"Population Created"},"resources":[{"type":"POPULATION","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"Default","environment":{"id":"123abc123-12ab-1234-1abc-abc123abc12"},"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/populations/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Created Population Default"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T10:30:30.896Z","createdAt":"2022-07-18T10:30:30.910Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"POPULATION.DELETED","description":"Population Deleted"},"resources":[{"type":"POPULATION","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"temp","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/populations/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Deleted Population temp"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T10:30:24.482Z","createdAt":"2022-07-18T10:30:24.497Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"POPULATION.UPDATED","description":"Population Updated"},"resources":[{"type":"POPULATION","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"temp","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/populations/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Updated Population temp"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T16:32:19.529Z","createdAt":"2022-07-18T16:32:19.545Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"PROVISIONING_CONNECTION.CREATED","description":"Provisioning Connection Created"},"resources":[{"type":"PROVISIONING_IDENTITY_CONNECTION","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"xyz","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/propagation/stores/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Created connection xyz of type xyz."}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T16:34:29.509Z","createdAt":"2022-07-18T16:34:29.534Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"PROVISIONING_RULE.DELETED","description":"Provisioning Rule Deleted"},"resources":[{"type":"PROVISIONING_IDENTITY_RULE","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"rule","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/propagation/rules/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Deleted provisioning rule rule."}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T16:34:29.509Z","createdAt":"2022-07-18T16:34:29.534Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"PROVISIONING_RULE.DELETED","description":"Provisioning Rule Deleted"},"resources":[{"type":"PROVISIONING_IDENTITY_RULE","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"rule","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/propagation/rules/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Deleted provisioning rule rule."}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T16:35:32.124Z","createdAt":"2022-07-18T16:35:32.138Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"PROVISIONING_CONNECTION.UPDATED","description":"Provisioning Connection Updated"},"resources":[{"type":"PROVISIONING_IDENTITY_CONNECTION","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"xyz","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/propagation/stores/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Updated connection xyz of type xyz."}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T16:33:44.614Z","createdAt":"2022-07-18T16:33:44.630Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"PROVISIONING_RULE.CREATED","description":"Provisioning Rule Created"},"resources":[{"type":"PROVISIONING_IDENTITY_RULE","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"rule","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/propagation/rules/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Created provisioning rule rule."}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T16:34:14.045Z","createdAt":"2022-07-18T16:34:14.060Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"PROVISIONING_RULE.UPDATED","description":"Provisioning Rule Updated"},"resources":[{"type":"PROVISIONING_IDENTITY_RULE","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"rule","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/propagation/rules/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Updated provisioning rule rule."}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T16:28:31.606Z","createdAt":"2022-07-18T16:28:31.683Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"RESOURCE_ATTRIBUTE.CREATED","description":"Resource Attribute Created"},"resources":[{"type":"RESOURCE","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"name","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/resources/123abc123-12ab-1234-1abc-abc123abc12/attributes/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Created Resource Attribute: name"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T18:22:54.678Z","createdAt":"2022-07-18T18:22:54.693Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"RESOURCE_ATTRIBUTE.DELETED","description":"Resource Attribute Deleted"},"resources":[{"type":"RESOURCE","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"sub","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/resources/123abc123-12ab-1234-1abc-abc123abc12/attributes/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Deleted Resource Attribute: sub"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T18:22:00.289Z","createdAt":"2022-07-18T18:22:00.304Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"RESOURCE.CREATED","description":"Resource Created"},"resources":[{"type":"RESOURCE","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"name","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/resources/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Created Resource name"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T18:22:54.683Z","createdAt":"2022-07-18T18:22:54.704Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"RESOURCE.DELETED","description":"Resource Deleted"},"resources":[{"type":"RESOURCE","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"name","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/resources/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Deleted Resource name"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-14T13:44:05.978Z","createdAt":"2022-07-14T13:44:05.991Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"RESOURCE.UPDATED","description":"Resource Updated"},"resources":[{"type":"RESOURCE","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"jhjb","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/resources/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Updated Resource jhjb"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T11:01:14.102Z","createdAt":"2022-07-18T11:01:14.177Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"RISK_POLICY_SET.CREATED","description":"Risk Policy Created"},"resources":[{"type":"RISK_POLICY","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"policy","environment":{"id":"123abc123-12ab-1234-1abc-abc123abc12"},"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/riskPolicySets/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Created Risk Policy \"policy\"."}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T11:03:00.639Z","createdAt":"2022-07-18T11:03:00.657Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"RISK_POLICY_SET.DELETED","description":"Risk Policy Deleted"},"resources":[{"type":"RISK_POLICY","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"policy","environment":{"id":"123abc123-12ab-1234-1abc-abc123abc12"},"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/riskPolicySets/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Deleted Risk Policy \"policy\"."}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T11:02:43.696Z","createdAt":"2022-07-18T11:02:43.717Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"RISK_POLICY_SET.UPDATED","description":"Risk Policy Updated"},"resources":[{"type":"RISK_POLICY","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"policy","environment":{"id":"123abc123-12ab-1234-1abc-abc123abc12"},"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/riskPolicySets/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Updated Risk Policy \"policy\"."}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T11:12:39.136Z","createdAt":"2022-07-18T11:12:39.162Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"RISK_PREDICTOR.CREATED","description":"Risk Predictor Created"},"resources":[{"type":"RISK_PREDICTOR","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"Geo_temp","environment":{"id":"123abc123-12ab-1234-1abc-abc123abc12"},"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/riskPredictors/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Created Risk Predictor \"Geo_temp\"."}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T11:13:22.881Z","createdAt":"2022-07-18T11:13:22.900Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"RISK_PREDICTOR.DELETED","description":"Risk Predictor Deleted"},"resources":[{"type":"RISK_PREDICTOR","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"Geo_temp","environment":{"id":"123abc123-12ab-1234-1abc-abc123abc12"},"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/riskPredictors/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Deleted Risk Predictor \"Geo_temp\"."}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T11:13:12.876Z","createdAt":"2022-07-18T11:13:12.921Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"RISK_PREDICTOR.UPDATED","description":"Risk Predictor Updated"},"resources":[{"type":"RISK_PREDICTOR","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"Geovelocity Anomaly","environment":{"id":"123abc123-12ab-1234-1abc-abc123abc12"},"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/riskPredictors/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Updated Risk Predictor \"Geovelocity Anomaly\"."}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-06T06:12:00.615Z","createdAt":"2022-07-06T06:12:00.994Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","action":{"type":"ROLE_ASSIGNMENT.CREATED","description":"Role Assignment Created"},"resources":[{"type":"USER","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12/roleAssignments/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Created role assignment '123abc123-12ab-1234-1abc-abc123abc12' for role '123abc123-12ab-1234-1abc-abc123abc12' scoped for ORGANIZATION '123abc123-12ab-1234-1abc-abc123abc12'"},"tags":["adminIdentityEvent"]} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-19T17:56:47.122Z","createdAt":"2022-07-19T17:56:47.384Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"ROLE_ASSIGNMENT.DELETED","description":"Role Assignment Deleted"},"resources":[{"type":"GATEWAY","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"123abc123-12ab-1234-1abc-abc123abc12","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/gateways/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Deleted role assignment '123abc123-12ab-1234-1abc-abc123abc12' scoped for ENVIRONMENT for gateway:'123abc123-12ab-1234-1abc-abc123abc12'"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-19T18:02:42.987Z","createdAt":"2022-07-19T18:02:43.004Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"SAML_ATTRIBUTE.CREATED","description":"Saml Attribute Created"},"resources":[{"type":"APPLICATION","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"oidc_app","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Saml Attribute 'hvhgv' created for application '123abc123-12ab-1234-1abc-abc123abc12' in environment 'abc12abc-12ab-1234-1abc-abc123abc123'"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-13T20:51:43.129Z","createdAt":"2022-07-13T20:51:43.143Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"SAML_ATTRIBUTE.DELETED","description":"Saml Attribute Deleted"},"resources":[{"type":"APPLICATION","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"testapp","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Saml Attribute 'sub' deleted for application '123abc123-12ab-1234-1abc-abc123abc12' in environment 'abc12abc-12ab-1234-1abc-abc123abc123'"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-19T18:02:43.011Z","createdAt":"2022-07-19T18:02:43.025Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"SAML_ATTRIBUTE.UPDATED","description":"Saml Attribute Updated"},"resources":[{"type":"APPLICATION","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"oidc_app","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Saml Attribute 'sub' updated for application '123abc123-12ab-1234-1abc-abc123abc12' in environment 'abc12abc-12ab-1234-1abc-abc123abc123'"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T10:31:45.379Z","createdAt":"2022-07-18T10:31:45.394Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"SCHEMA_ATTRIBUTE.CREATED","description":"Schema Attribute Created"},"resources":[{"type":"SCHEMA","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"abc","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/schemas/56eabe11-2955-4fe8-b061-68a1e205925f/attributes/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Created Schema Attribute abc"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T10:32:12.175Z","createdAt":"2022-07-18T10:32:12.189Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"SCHEMA_ATTRIBUTE.DELETED","description":"Schema Attribute Deleted"},"resources":[{"type":"SCHEMA","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"abc","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/schemas/56eabe11-2955-4fe8-b061-68a1e205925f/attributes/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Deleted Schema Attribute abc"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-18T10:31:58.976Z","createdAt":"2022-07-18T10:31:58.991Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"SCHEMA_ATTRIBUTE.UPDATED","description":"Schema Attribute Updated"},"resources":[{"type":"SCHEMA","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"abc","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/schemas/56eabe11-2955-4fe8-b061-68a1e205925f/attributes/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Updated Schema Attribute abc"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-13T21:06:16.530Z","createdAt":"2022-07-13T21:06:16.545Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"SCOPE.CREATED","description":"Scope Created"},"resources":[{"type":"SCOPE","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"bhfbhrbb","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/resources/123abc123-12ab-1234-1abc-abc123abc12/scopes/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Created Scope bhfbhrbb in resource '123abc123-12ab-1234-1abc-abc123abc12'"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-13T21:00:40.114Z","createdAt":"2022-07-13T21:00:40.128Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"SCOPE.DELETED","description":"Scope Deleted"},"resources":[{"type":"SCOPE","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"abc","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/resources/123abc123-12ab-1234-1abc-abc123abc12/scopes/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Deleted Scope abc in resource '123abc123-12ab-1234-1abc-abc123abc12'"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-13T21:06:26.044Z","createdAt":"2022-07-13T21:06:26.060Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"SCOPE.UPDATED","description":"Scope Updated"},"resources":[{"type":"SCOPE","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"bhfbhrbbjhjr","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/resources/123abc123-12ab-1234-1abc-abc123abc12/scopes/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Updated Scope bhfbhrbbjhjr in resource '123abc123-12ab-1234-1abc-abc123abc12'"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-15T08:11:20.947Z","createdAt":"2022-07-15T08:11:20.962Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"SECRET.READ","description":"Secret Read"},"resources":[{"type":"APPLICATION","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"New","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Client secret read for application '123abc123-12ab-1234-1abc-abc123abc12'"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-20T18:27:20.929Z","createdAt":"2022-07-20T18:27:20.945Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"PingOne Admin Console","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"USER.ACCESS_ALLOWED","description":"User Access Allowed"},"resources":[{"type":"USER","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Passed role access control"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-13T21:03:54.524Z","createdAt":"2022-07-13T21:03:54.559Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"USER.CREATED","description":"User Created"},"resources":[{"type":"USER","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"djcdjh","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Created User djcdjh"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-13T19:32:54.079Z","createdAt":"2022-07-13T19:32:54.101Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"USER.DELETED","description":"User Deleted"},"resources":[{"type":"USER","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"jhbjhb","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Deleted User jhbjhb"},"tags":["adminIdentityEvent"]} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-13T17:25:28.877Z","createdAt":"2022-07-13T17:25:28.895Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"USER.UPDATED","description":"User Updated"},"resources":[{"type":"USER","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"jhbjhb","environment":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"population":{"id":"abc12abc-12ab-1234-1abc-abc123abc123"},"href":"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12"}],"result":{"status":"SUCCESS","description":"Updated enabled for User jhbjhb"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-28T04:25:41.533Z","createdAt":"2022-07-28T04:25:41.546Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"123abc123-12ab-1234-1abc-abc123abc12"},"population":{},"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"MEMBER_OF_GROUP.CREATED","description":"Member Of Group Created"},"resources":[{"type":"MEMBER_OF_GROUP","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"new","environment":{"id":"123abc123-12ab-1234-1abc-abc123abc12"},"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/users/123abc123-12ab-1234-1abc-abc123abc12/memberOfGroups/af26d367-a058-4f73-a697-ab18e3ab29a2"}],"result":{"status":"SUCCESS","description":"Created Member Of Group new"}} +{"_links":{"self":{"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/activities/123abc123-12ab-1234-1abc-abc123abc12"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-07-28T04:27:16.164Z","createdAt":"2022-07-28T04:27:16.180Z","correlationId":"123abc123-12ab-1234-1abc-abc123abc12","actors":{"client":{"id":"adminui","name":"adminui","type":"CLIENT"},"user":{"id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","environment":{"id":"123abc123-12ab-1234-1abc-abc123abc12"},"population":{},"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/users/123abc123-12ab-1234-1abc-abc123abc12","type":"USER"}},"action":{"type":"MEMBER_OF_GROUP.DELETED","description":"Member Of Group Deleted"},"resources":[{"type":"MEMBER_OF_GROUP","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"new","environment":{"id":"123abc123-12ab-1234-1abc-abc123abc12"},"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/users/123abc123-12ab-1234-1abc-abc123abc12/memberOfGroups/af26d367-a058-4f73-a697-ab18e3ab29a2"}],"result":{"status":"SUCCESS","description":"Deleted Member Of Group new"}} +{"_embedded":{},"action":{"type":"USER.ACCESS_ALLOWED"},"actors":{"client":{"environment":{"id":"123abc123-12ab-1234-1abc-abc123abc12"},"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/applications/123abc123-12ab-1234-1abc-abc123abc12","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"PingOne Admin Console","type":"CLIENT"},"user":{"environment":{"id":"123abc123-12ab-1234-1abc-abc123abc12"},"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/users/123abc123-12ab-1234-1abc-abc123abc12","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","population":{"id":"123abc123-12ab-1234-1abc-abc123abc12"},"type":"USER"}},"id":"123abc123-12ab-1234-1abc-abc123abc12","recordedAt":"2022-08-08T15:31:08.237Z","resources":[{"environment":{"id":"123abc123-12ab-1234-1abc-abc123abc12"},"href":"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/users/123abc123-12ab-1234-1abc-abc123abc12","id":"123abc123-12ab-1234-1abc-abc123abc12","name":"example@gmail.com","population":{"id":"123abc123-12ab-1234-1abc-abc123abc12"},"type":"USER"}],"result":{"description":"Passed role access control","status":"SUCCESS"}} diff --git a/packages/ping_one/data_stream/audit/_dev/test/pipeline/test-pipeline-audit.log-expected.json b/packages/ping_one/data_stream/audit/_dev/test/pipeline/test-pipeline-audit.log-expected.json new file mode 100644 index 00000000000..b87d7d9b30f --- /dev/null +++ b/packages/ping_one/data_stream/audit/_dev/test/pipeline/test-pipeline-audit.log-expected.json @@ -0,0 +1,8985 @@ +{ + "expected": [ + { + "@timestamp": "2022-07-06T06:12:00.400Z", + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "action.created", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-06T06:12:00.400Z\",\"createdAt\":\"2022-07-06T06:12:00.697Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"action\":{\"type\":\"ACTION.CREATED\",\"description\":\"Action Created\"},\"resources\":[{\"type\":\"SIGN_ON_POLICY\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/signOnPolicies/123abc123-12ab-1234-1abc-abc123abc12/actions/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Created Action 123abc123-12ab-1234-1abc-abc123abc12\"}}", + "outcome": "success", + "type": [ + "creation" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Action Created", + "type": "ACTION.CREATED" + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-06T06:12:00.697Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-06T06:12:00.400Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/signOnPolicies/123abc123-12ab-1234-1abc-abc123abc12/actions/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "123abc123-12ab-1234-1abc-abc123abc12", + "type": "SIGN_ON_POLICY" + } + ], + "result": { + "description": "Created Action 123abc123-12ab-1234-1abc-abc123abc12", + "status": "SUCCESS" + } + } + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/signOnPolicies/123abc123-12ab-1234-1abc-abc123abc12/actions/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/signOnPolicies/123abc123-12ab-1234-1abc-abc123abc12/actions/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + } + }, + { + "@timestamp": "2022-07-18T13:25:08.750Z", + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "action.updated", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T13:25:08.750Z\",\"createdAt\":\"2022-07-18T13:25:08.767Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"action\":{\"type\":\"ACTION.UPDATED\",\"description\":\"Action Updated\"},\"resources\":[{\"type\":\"SIGN_ON_POLICY\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/signOnPolicies/123abc123-12ab-1234-1abc-abc123abc12/actions/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Updated Action 123abc123-12ab-1234-1abc-abc123abc12\"}}", + "outcome": "success", + "type": [ + "change" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Action Updated", + "type": "ACTION.UPDATED" + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T13:25:08.767Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T13:25:08.750Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/signOnPolicies/123abc123-12ab-1234-1abc-abc123abc12/actions/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "123abc123-12ab-1234-1abc-abc123abc12", + "type": "SIGN_ON_POLICY" + } + ], + "result": { + "description": "Updated Action 123abc123-12ab-1234-1abc-abc123abc12", + "status": "SUCCESS" + } + } + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/signOnPolicies/123abc123-12ab-1234-1abc-abc123abc12/actions/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/signOnPolicies/123abc123-12ab-1234-1abc-abc123abc12/actions/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + } + }, + { + "@timestamp": "2022-07-06T06:12:00.405Z", + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "application.created", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-06T06:12:00.405Z\",\"createdAt\":\"2022-07-06T06:12:00.723Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"action\":{\"type\":\"APPLICATION.CREATED\",\"description\":\"Application Created\"},\"resources\":[{\"type\":\"APPLICATION\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"PingOne Application Portal\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Created Application PingOne Application Portal using 'OPENID_CONNECT' protocol of type 'PING_ONE_PORTAL' with enabled state\"}}", + "outcome": "success", + "type": [ + "creation" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Application Created", + "type": "APPLICATION.CREATED" + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-06T06:12:00.723Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-06T06:12:00.405Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "PingOne Application Portal", + "type": "APPLICATION" + } + ], + "result": { + "description": "Created Application PingOne Application Portal using 'OPENID_CONNECT' protocol of type 'PING_ONE_PORTAL' with enabled state", + "status": "SUCCESS" + } + } + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + } + }, + { + "@timestamp": "2022-07-06T11:31:55.312Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "application.updated", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-06T11:31:55.312Z\",\"createdAt\":\"2022-07-06T11:31:55.329Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"APPLICATION.UPDATED\",\"description\":\"Application Updated\"},\"resources\":[{\"type\":\"APPLICATION\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"testapp\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Updated Application testapp using 'OPENID_CONNECT' protocol of type 'SINGLE_PAGE_APP' with disabled state\"}}", + "outcome": "success", + "type": [ + "change" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Application Updated", + "type": "APPLICATION.UPDATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-06T11:31:55.329Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-06T11:31:55.312Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "testapp", + "type": "APPLICATION" + } + ], + "result": { + "description": "Updated Application testapp using 'OPENID_CONNECT' protocol of type 'SINGLE_PAGE_APP' with disabled state", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-13T20:51:43.106Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "application.deleted", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-13T20:51:43.106Z\",\"createdAt\":\"2022-07-13T20:51:43.121Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"APPLICATION.DELETED\",\"description\":\"Application Deleted\"},\"resources\":[{\"type\":\"APPLICATION\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"testapp\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Deleted Application testapp using 'OPENID_CONNECT' protocol of type 'SINGLE_PAGE_APP' with enabled state\"}}", + "outcome": "success", + "type": [ + "deletion" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Application Deleted", + "type": "APPLICATION.DELETED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-13T20:51:43.121Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-13T20:51:43.106Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "testapp", + "type": "APPLICATION" + } + ], + "result": { + "description": "Deleted Application testapp using 'OPENID_CONNECT' protocol of type 'SINGLE_PAGE_APP' with enabled state", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T18:18:23.473Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "authorize_attribute.created", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T18:18:23.473Z\",\"createdAt\":\"2022-07-18T18:18:23.489Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"AUTHORIZE_ATTRIBUTE.CREATED\",\"description\":\"Authorize Attribute Created\"},\"resources\":[{\"type\":\"ATTRIBUTE\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"jdfjb\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Authorize Attribute 'jdfjb' created\"}}", + "outcome": "success", + "type": [ + "creation" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Authorize Attribute Created", + "type": "AUTHORIZE_ATTRIBUTE.CREATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T18:18:23.489Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T18:18:23.473Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "jdfjb", + "type": "ATTRIBUTE" + } + ], + "result": { + "description": "Authorize Attribute 'jdfjb' created", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T18:18:46.553Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "authorize_attribute.deleted", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T18:18:46.553Z\",\"createdAt\":\"2022-07-18T18:18:46.569Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"AUTHORIZE_ATTRIBUTE.DELETED\",\"description\":\"Authorize Attribute Deleted\"},\"resources\":[{\"type\":\"ATTRIBUTE\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"jdfjb\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Authorize Attribute 'jdfjb' deleted\"}}", + "outcome": "success", + "type": [ + "deletion" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Authorize Attribute Deleted", + "type": "AUTHORIZE_ATTRIBUTE.DELETED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T18:18:46.569Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T18:18:46.553Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "jdfjb", + "type": "ATTRIBUTE" + } + ], + "result": { + "description": "Authorize Attribute 'jdfjb' deleted", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T18:18:35.052Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "authorize_attribute.updated", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T18:18:35.052Z\",\"createdAt\":\"2022-07-18T18:18:35.067Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"AUTHORIZE_ATTRIBUTE.UPDATED\",\"description\":\"Authorize Attribute Updated\"},\"resources\":[{\"type\":\"ATTRIBUTE\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"jdfjb\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Authorize Attribute 'jdfjb' updated\"}}", + "outcome": "success", + "type": [ + "change" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Authorize Attribute Updated", + "type": "AUTHORIZE_ATTRIBUTE.UPDATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T18:18:35.067Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T18:18:35.052Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "jdfjb", + "type": "ATTRIBUTE" + } + ], + "result": { + "description": "Authorize Attribute 'jdfjb' updated", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T18:19:31.264Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "authorize_condition.created", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T18:19:31.264Z\",\"createdAt\":\"2022-07-18T18:19:31.281Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"AUTHORIZE_CONDITION.CREATED\",\"description\":\"Authorize Condition Created\"},\"resources\":[{\"type\":\"CONDITION\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"db\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Authorize Condition 'db' created\"}}", + "outcome": "success", + "type": [ + "creation" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Authorize Condition Created", + "type": "AUTHORIZE_CONDITION.CREATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T18:19:31.281Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T18:19:31.264Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "db", + "type": "CONDITION" + } + ], + "result": { + "description": "Authorize Condition 'db' created", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T18:19:45.644Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "authorize_condition.deleted", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T18:19:45.644Z\",\"createdAt\":\"2022-07-18T18:19:45.659Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"AUTHORIZE_CONDITION.DELETED\",\"description\":\"Authorize Condition Deleted\"},\"resources\":[{\"type\":\"CONDITION\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"db\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Authorize Condition 'db' deleted\"}}", + "outcome": "success", + "type": [ + "deletion" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Authorize Condition Deleted", + "type": "AUTHORIZE_CONDITION.DELETED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T18:19:45.659Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T18:19:45.644Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "db", + "type": "CONDITION" + } + ], + "result": { + "description": "Authorize Condition 'db' deleted", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T18:19:39.465Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "authorize_condition.updated", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T18:19:39.465Z\",\"createdAt\":\"2022-07-18T18:19:39.483Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"AUTHORIZE_CONDITION.UPDATED\",\"description\":\"Authorize Condition Updated\"},\"resources\":[{\"type\":\"CONDITION\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"db\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Authorize Condition 'db' updated\"}}", + "outcome": "success", + "type": [ + "change" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Authorize Condition Updated", + "type": "AUTHORIZE_CONDITION.UPDATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T18:19:39.483Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T18:19:39.465Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "db", + "type": "CONDITION" + } + ], + "result": { + "description": "Authorize Condition 'db' updated", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T18:25:22.313Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "authorize_policy.updated", + "category": [ + "iam", + "configuration" + ], + "id": "7a0463f2-642c-4b5d-b446-57414e114451", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"7a0463f2-642c-4b5d-b446-57414e114451\",\"recordedAt\":\"2022-07-18T18:25:22.313Z\",\"createdAt\":\"2022-07-18T18:25:22.328Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"AUTHORIZE_POLICY.UPDATED\",\"description\":\"Authorize Policy Updated\"},\"resources\":[{\"type\":\"POLICYSET\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"Policies\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/policy-manager/policysets/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Authorize Policy 'Policies' updated\"}}", + "outcome": "success", + "type": [ + "change" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Authorize Policy Updated", + "type": "AUTHORIZE_POLICY.UPDATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T18:25:22.328Z", + "id": "7a0463f2-642c-4b5d-b446-57414e114451", + "recorded_at": "2022-07-18T18:25:22.313Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/policy-manager/policysets/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "Policies", + "type": "POLICYSET" + } + ], + "result": { + "description": "Authorize Policy 'Policies' updated", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/policy-manager/policysets/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/policy-manager/policysets/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T18:20:22.863Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "authorize_processor.created", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T18:20:22.863Z\",\"createdAt\":\"2022-07-18T18:20:22.880Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"AUTHORIZE_PROCESSOR.CREATED\",\"description\":\"Authorize Processor Created\"},\"resources\":[{\"type\":\"AUTHORIZE_PROCESSOR\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"dnn\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Authorize Processor 'dnn' created\"}}", + "outcome": "success", + "type": [ + "creation" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Authorize Processor Created", + "type": "AUTHORIZE_PROCESSOR.CREATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T18:20:22.880Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T18:20:22.863Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "dnn", + "type": "AUTHORIZE_PROCESSOR" + } + ], + "result": { + "description": "Authorize Processor 'dnn' created", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T18:20:37.110Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "authorize_processor.deleted", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T18:20:37.110Z\",\"createdAt\":\"2022-07-18T18:20:37.126Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"AUTHORIZE_PROCESSOR.DELETED\",\"description\":\"Authorize Processor Deleted\"},\"resources\":[{\"type\":\"AUTHORIZE_PROCESSOR\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"dnn\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Authorize Processor 'dnn' deleted\"}}", + "outcome": "success", + "type": [ + "deletion" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Authorize Processor Deleted", + "type": "AUTHORIZE_PROCESSOR.DELETED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T18:20:37.126Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T18:20:37.110Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "dnn", + "type": "AUTHORIZE_PROCESSOR" + } + ], + "result": { + "description": "Authorize Processor 'dnn' deleted", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T18:20:32.948Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "authorize_processor.updated", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T18:20:32.948Z\",\"createdAt\":\"2022-07-18T18:20:32.964Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"AUTHORIZE_PROCESSOR.UPDATED\",\"description\":\"Authorize Processor Updated\"},\"resources\":[{\"type\":\"AUTHORIZE_PROCESSOR\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"dnn\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Authorize Processor 'dnn' updated\"}}", + "outcome": "success", + "type": [ + "change" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Authorize Processor Updated", + "type": "AUTHORIZE_PROCESSOR.UPDATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T18:20:32.964Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T18:20:32.948Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "dnn", + "type": "AUTHORIZE_PROCESSOR" + } + ], + "result": { + "description": "Authorize Processor 'dnn' updated", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T18:16:54.699Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "authorize_service.created", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T18:16:54.699Z\",\"createdAt\":\"2022-07-18T18:16:54.715Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"AUTHORIZE_SERVICE.CREATED\",\"description\":\"Authorize Service Created\"},\"resources\":[{\"type\":\"SERVICE\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"Untitled\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Authorize Service 'Untitled' created\"}}", + "outcome": "success", + "type": [ + "creation" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Authorize Service Created", + "type": "AUTHORIZE_SERVICE.CREATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T18:16:54.715Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T18:16:54.699Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "Untitled", + "type": "SERVICE" + } + ], + "result": { + "description": "Authorize Service 'Untitled' created", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T18:17:16.075Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "authorize_service.deleted", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T18:17:16.075Z\",\"createdAt\":\"2022-07-18T18:17:16.090Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"AUTHORIZE_SERVICE.DELETED\",\"description\":\"Authorize Service Deleted\"},\"resources\":[{\"type\":\"SERVICE\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"Untitled\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Authorize Service 'Untitled' deleted\"}}", + "outcome": "success", + "type": [ + "deletion" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Authorize Service Deleted", + "type": "AUTHORIZE_SERVICE.DELETED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T18:17:16.090Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T18:17:16.075Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "Untitled", + "type": "SERVICE" + } + ], + "result": { + "description": "Authorize Service 'Untitled' deleted", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T18:17:08.873Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "authorize_service.updated", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T18:17:08.873Z\",\"createdAt\":\"2022-07-18T18:17:08.914Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"AUTHORIZE_SERVICE.UPDATED\",\"description\":\"Authorize Service Updated\"},\"resources\":[{\"type\":\"SERVICE\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"Untitled\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Authorize Service 'Untitled' updated\"}}", + "outcome": "success", + "type": [ + "change" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Authorize Service Updated", + "type": "AUTHORIZE_SERVICE.UPDATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T18:17:08.914Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T18:17:08.873Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "Untitled", + "type": "SERVICE" + } + ], + "result": { + "description": "Authorize Service 'Untitled' updated", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/trust-framework/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T18:14:45.756Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "authorize_shared_advice.created", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T18:14:45.756Z\",\"createdAt\":\"2022-07-18T18:14:45.771Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"AUTHORIZE_SHARED_ADVICE.CREATED\",\"description\":\"Authorize Shared Advice Created\"},\"resources\":[{\"type\":\"AUTHORIZE_SHARED_ADVICE\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"hgh\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/policy-manager/statements/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Authorize shared Advice 'hgh' created\"}}", + "outcome": "success", + "type": [ + "creation" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Authorize Shared Advice Created", + "type": "AUTHORIZE_SHARED_ADVICE.CREATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T18:14:45.771Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T18:14:45.756Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/policy-manager/statements/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "hgh", + "type": "AUTHORIZE_SHARED_ADVICE" + } + ], + "result": { + "description": "Authorize shared Advice 'hgh' created", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/policy-manager/statements/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/policy-manager/statements/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T18:15:27.900Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "authorize_shared_advice.deleted", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T18:15:27.900Z\",\"createdAt\":\"2022-07-18T18:15:27.914Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"AUTHORIZE_SHARED_ADVICE.DELETED\",\"description\":\"Authorize Shared Advice Deleted\"},\"resources\":[{\"type\":\"AUTHORIZE_SHARED_ADVICE\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"hgh\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/policy-manager/statements/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Authorize shared Advice 'hgh' deleted\"}}", + "outcome": "success", + "type": [ + "deletion" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Authorize Shared Advice Deleted", + "type": "AUTHORIZE_SHARED_ADVICE.DELETED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T18:15:27.914Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T18:15:27.900Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/policy-manager/statements/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "hgh", + "type": "AUTHORIZE_SHARED_ADVICE" + } + ], + "result": { + "description": "Authorize shared Advice 'hgh' deleted", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/policy-manager/statements/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/policy-manager/statements/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T18:15:21.082Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "authorize_shared_advice.updated", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T18:15:21.082Z\",\"createdAt\":\"2022-07-18T18:15:21.098Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"AUTHORIZE_SHARED_ADVICE.UPDATED\",\"description\":\"Authorize Shared Advice Updated\"},\"resources\":[{\"type\":\"AUTHORIZE_SHARED_ADVICE\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"hgh\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/policy-manager/statements/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Authorize shared Advice 'hgh' updated\"}}", + "outcome": "success", + "type": [ + "change" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Authorize Shared Advice Updated", + "type": "AUTHORIZE_SHARED_ADVICE.UPDATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T18:15:21.098Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T18:15:21.082Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/policy-manager/statements/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "hgh", + "type": "AUTHORIZE_SHARED_ADVICE" + } + ], + "result": { + "description": "Authorize shared Advice 'hgh' updated", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/policy-manager/statements/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/policy-manager/statements/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T18:12:38.635Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "authorize_shared_rule.created", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T18:12:38.635Z\",\"createdAt\":\"2022-07-18T18:12:38.665Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"AUTHORIZE_SHARED_RULE.CREATED\",\"description\":\"Authorize Shared Rule Created\"},\"resources\":[{\"type\":\"AUTHORIZE_SHARED_RULE\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"jijj\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/policy-manager/rules/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Authorize shared Rule 'jijj' created\"}}", + "outcome": "success", + "type": [ + "creation" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Authorize Shared Rule Created", + "type": "AUTHORIZE_SHARED_RULE.CREATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T18:12:38.665Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T18:12:38.635Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/policy-manager/rules/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "jijj", + "type": "AUTHORIZE_SHARED_RULE" + } + ], + "result": { + "description": "Authorize shared Rule 'jijj' created", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/policy-manager/rules/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/policy-manager/rules/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T18:13:47.396Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "authorize_shared_rule.deleted", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T18:13:47.396Z\",\"createdAt\":\"2022-07-18T18:13:47.409Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"AUTHORIZE_SHARED_RULE.DELETED\",\"description\":\"Authorize Shared Rule Deleted\"},\"resources\":[{\"type\":\"AUTHORIZE_SHARED_RULE\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"jijj\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/policy-manager/rules/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Authorize shared Rule 'jijj' deleted\"}}", + "outcome": "success", + "type": [ + "deletion" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Authorize Shared Rule Deleted", + "type": "AUTHORIZE_SHARED_RULE.DELETED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T18:13:47.409Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T18:13:47.396Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/policy-manager/rules/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "jijj", + "type": "AUTHORIZE_SHARED_RULE" + } + ], + "result": { + "description": "Authorize shared Rule 'jijj' deleted", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/policy-manager/rules/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/policy-manager/rules/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T18:13:41.663Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "authorize_shared_rule.updated", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T18:13:41.663Z\",\"createdAt\":\"2022-07-18T18:13:41.677Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"AUTHORIZE_SHARED_RULE.UPDATED\",\"description\":\"Authorize Shared Rule Updated\"},\"resources\":[{\"type\":\"AUTHORIZE_SHARED_RULE\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"jijj\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/policy-manager/rules/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Authorize shared Rule 'jijj' updated\"}}", + "outcome": "success", + "type": [ + "change" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Authorize Shared Rule Updated", + "type": "AUTHORIZE_SHARED_RULE.UPDATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T18:13:41.677Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T18:13:41.663Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/policy-manager/rules/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "jijj", + "type": "AUTHORIZE_SHARED_RULE" + } + ], + "result": { + "description": "Authorize shared Rule 'jijj' updated", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/policy-manager/rules/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/legacy/policy-manager/rules/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T18:11:03.242Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "decision_endpoint.created", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T18:11:03.242Z\",\"createdAt\":\"2022-07-18T18:11:03.275Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"DECISION_ENDPOINT.CREATED\",\"description\":\"Decision Endpoint Created\"},\"resources\":[{\"type\":\"DECISION_ENDPOINT\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"hfvhv\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/decisionEndpoints/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Decision endpoint 'hfvhv' created\"}}", + "outcome": "success", + "type": [ + "creation" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Decision Endpoint Created", + "type": "DECISION_ENDPOINT.CREATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T18:11:03.275Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T18:11:03.242Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/decisionEndpoints/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "hfvhv", + "type": "DECISION_ENDPOINT" + } + ], + "result": { + "description": "Decision endpoint 'hfvhv' created", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/decisionEndpoints/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/decisionEndpoints/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T18:11:35.390Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "decision_endpoint.deleted", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T18:11:35.390Z\",\"createdAt\":\"2022-07-18T18:11:35.422Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"DECISION_ENDPOINT.DELETED\",\"description\":\"Decision Endpoint Deleted\"},\"resources\":[{\"type\":\"DECISION_ENDPOINT\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"hfvhv\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/decisionEndpoints/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Decision endpoint 'hfvhv' deleted\"}}", + "outcome": "success", + "type": [ + "deletion" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Decision Endpoint Deleted", + "type": "DECISION_ENDPOINT.DELETED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T18:11:35.422Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T18:11:35.390Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/decisionEndpoints/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "hfvhv", + "type": "DECISION_ENDPOINT" + } + ], + "result": { + "description": "Decision endpoint 'hfvhv' deleted", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/decisionEndpoints/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/decisionEndpoints/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T18:22:54.150Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "decision_endpoint.updated", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T18:22:54.150Z\",\"createdAt\":\"2022-07-18T18:22:54.167Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"DECISION_ENDPOINT.UPDATED\",\"description\":\"Decision Endpoint Updated\"},\"resources\":[{\"type\":\"DECISION_ENDPOINT\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"API Access Management\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/decisionEndpoints/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Decision endpoint 'API Access Management' updated\"}}", + "outcome": "success", + "type": [ + "change" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Decision Endpoint Updated", + "type": "DECISION_ENDPOINT.UPDATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T18:22:54.167Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T18:22:54.150Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/decisionEndpoints/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "API Access Management", + "type": "DECISION_ENDPOINT" + } + ], + "result": { + "description": "Decision endpoint 'API Access Management' updated", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/decisionEndpoints/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/decisionEndpoints/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T16:28:31.564Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "environment.created", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T16:28:31.564Z\",\"createdAt\":\"2022-07-18T16:28:31.597Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"ENVIRONMENT.CREATED\",\"description\":\"Environment Created\"},\"resources\":[{\"type\":\"ENVIRONMENT\",\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\",\"name\":\"Temp_environment\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Created Environment Temp_environment\"}}", + "outcome": "success", + "type": [ + "creation" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Environment Created", + "type": "ENVIRONMENT.CREATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T16:28:31.597Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T16:28:31.564Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123", + "id": "abc12abc-12ab-1234-1abc-abc123abc123", + "name": "Temp_environment", + "type": "ENVIRONMENT" + } + ], + "result": { + "description": "Created Environment Temp_environment", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-19T12:05:00.440Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "environment.updated", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-19T12:05:00.440Z\",\"createdAt\":\"2022-07-19T12:05:00.473Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"ENVIRONMENT.UPDATED\",\"description\":\"Environment Updated\"},\"resources\":[{\"type\":\"ENVIRONMENT\",\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\",\"name\":\"Temp_environment\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Updated Environment Temp_environment\"}}", + "outcome": "success", + "type": [ + "change" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Environment Updated", + "type": "ENVIRONMENT.UPDATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-19T12:05:00.473Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-19T12:05:00.440Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123", + "id": "abc12abc-12ab-1234-1abc-abc123abc123", + "name": "Temp_environment", + "type": "ENVIRONMENT" + } + ], + "result": { + "description": "Updated Environment Temp_environment", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T10:56:26.984Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "fido_policy.created", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T10:56:26.984Z\",\"createdAt\":\"2022-07-18T10:56:27.008Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"FIDO_POLICY.CREATED\",\"description\":\"Fido Policy Created\"},\"resources\":[{\"type\":\"FIDO Policy\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"New Policy\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/fidoPolicies/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"FIDO Policy created: \\\"New Policy\\\"\"}}", + "outcome": "success", + "type": [ + "creation" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Fido Policy Created", + "type": "FIDO_POLICY.CREATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T10:56:27.008Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T10:56:26.984Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/fidoPolicies/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "New Policy", + "type": "FIDO Policy" + } + ], + "result": { + "description": "FIDO Policy created: \"New Policy\"", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/fidoPolicies/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/fidoPolicies/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T10:57:39.193Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "fido_policy.deleted", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T10:57:39.193Z\",\"createdAt\":\"2022-07-18T10:57:39.211Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"FIDO_POLICY.DELETED\",\"description\":\"Fido Policy Deleted\"},\"resources\":[{\"type\":\"FIDO Policy\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"New Policy\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/fidoPolicies/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"FIDO Policy deleted: \\\"New Policy\\\"\"}}", + "outcome": "success", + "type": [ + "deletion" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Fido Policy Deleted", + "type": "FIDO_POLICY.DELETED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T10:57:39.211Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T10:57:39.193Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/fidoPolicies/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "New Policy", + "type": "FIDO Policy" + } + ], + "result": { + "description": "FIDO Policy deleted: \"New Policy\"", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/fidoPolicies/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/fidoPolicies/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T10:57:22.740Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "fido_policy.updated", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T10:57:22.740Z\",\"createdAt\":\"2022-07-18T10:57:22.757Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"FIDO_POLICY.UPDATED\",\"description\":\"Fido Policy Updated\"},\"resources\":[{\"type\":\"FIDO Policy\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"New Policy\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/fidoPolicies/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"FIDO Policy updated: \\\"New Policy\\\"\"}}", + "outcome": "success", + "type": [ + "change" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Fido Policy Updated", + "type": "FIDO_POLICY.UPDATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T10:57:22.757Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T10:57:22.740Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/fidoPolicies/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "New Policy", + "type": "FIDO Policy" + } + ], + "result": { + "description": "FIDO Policy updated: \"New Policy\"", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/fidoPolicies/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/fidoPolicies/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-20T12:24:53.296Z", + "client": { + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "PingOne Admin Console" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "flow.deleted", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-20T12:24:53.296Z\",\"createdAt\":\"2022-07-20T12:24:53.329Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"PingOne Admin Console\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"FLOW.DELETED\",\"description\":\"Sign-on flow finished\"},\"resources\":[{\"type\":\"FLOW\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/flows/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Flow completed with policy Single_Factor\"}}", + "outcome": "success", + "type": [ + "deletion" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Sign-on flow finished", + "type": "FLOW.DELETED" + }, + "actors": { + "client": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "PingOne Admin Console", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-20T12:24:53.329Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-20T12:24:53.296Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/flows/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "123abc123-12ab-1234-1abc-abc123abc12", + "type": "FLOW" + } + ], + "result": { + "description": "Flow completed with policy Single_Factor", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "123abc123-12ab-1234-1abc-abc123abc12", + "PingOne Admin Console", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/flows/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/flows/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-20T11:52:16.978Z", + "client": { + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "PingOne Admin Console" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "flow.created", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-20T11:52:16.978Z\",\"createdAt\":\"2022-07-20T11:52:16.997Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"PingOne Admin Console\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"FLOW.CREATED\",\"description\":\"Sign-on flow started with policies [Single_Factor]\"},\"resources\":[{\"type\":\"FLOW\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/flows/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Flow completed with policy Single_Factor\"}}", + "outcome": "success", + "type": [ + "creation" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Sign-on flow started with policies [Single_Factor]", + "type": "FLOW.CREATED" + }, + "actors": { + "client": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "PingOne Admin Console", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-20T11:52:16.997Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-20T11:52:16.978Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/flows/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "123abc123-12ab-1234-1abc-abc123abc12", + "type": "FLOW" + } + ], + "result": { + "description": "Flow completed with policy Single_Factor", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "123abc123-12ab-1234-1abc-abc123abc12", + "PingOne Admin Console", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/flows/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/flows/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-20T05:43:06.427Z", + "client": { + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "PingOne Admin Console" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "flow.updated", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-20T05:43:06.427Z\",\"createdAt\":\"2022-07-20T05:43:06.454Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"PingOne Admin Console\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"FLOW.UPDATED\",\"description\":\"Sign-on flow continued\"},\"resources\":[{\"type\":\"FLOW\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/flows/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Flow completed with policy Single_Factor\"}}", + "outcome": "success", + "type": [ + "change" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Sign-on flow continued", + "type": "FLOW.UPDATED" + }, + "actors": { + "client": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "PingOne Admin Console", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-20T05:43:06.454Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-20T05:43:06.427Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/flows/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "123abc123-12ab-1234-1abc-abc123abc12", + "type": "FLOW" + } + ], + "result": { + "description": "Flow completed with policy Single_Factor", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "123abc123-12ab-1234-1abc-abc123abc12", + "PingOne Admin Console", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/flows/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/flows/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-14T13:46:49.175Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "grant.created", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-14T13:46:49.175Z\",\"createdAt\":\"2022-07-14T13:46:49.194Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"GRANT.CREATED\",\"description\":\"Grant Created\"},\"resources\":[{\"type\":\"APPLICATION\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"New\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Created Grant for application '123abc123-12ab-1234-1abc-abc123abc12' to resource '123abc123-12ab-1234-1abc-abc123abc12'\"}}", + "outcome": "success", + "type": [ + "creation" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Grant Created", + "type": "GRANT.CREATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-14T13:46:49.194Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-14T13:46:49.175Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "New", + "type": "APPLICATION" + } + ], + "result": { + "description": "Created Grant for application '123abc123-12ab-1234-1abc-abc123abc12' to resource '123abc123-12ab-1234-1abc-abc123abc12'", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-13T20:51:43.150Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "grant.deleted", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-13T20:51:43.150Z\",\"createdAt\":\"2022-07-13T20:51:43.196Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"GRANT.DELETED\",\"description\":\"Grant Deleted\"},\"resources\":[{\"type\":\"APPLICATION\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"testapp\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Deleted Grant for application '123abc123-12ab-1234-1abc-abc123abc12' to resource '123abc123-12ab-1234-1abc-abc123abc12'\"}}", + "outcome": "success", + "type": [ + "deletion" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Grant Deleted", + "type": "GRANT.DELETED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-13T20:51:43.196Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-13T20:51:43.150Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "testapp", + "type": "APPLICATION" + } + ], + "result": { + "description": "Deleted Grant for application '123abc123-12ab-1234-1abc-abc123abc12' to resource '123abc123-12ab-1234-1abc-abc123abc12'", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-11T07:27:51.868Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "grant.updated", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-11T07:27:51.868Z\",\"createdAt\":\"2022-07-11T07:27:51.886Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"GRANT.UPDATED\",\"description\":\"Grant Updated\"},\"resources\":[{\"type\":\"APPLICATION\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"testapp\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Updated Grant for application '123abc123-12ab-1234-1abc-abc123abc12' to resource '123abc123-12ab-1234-1abc-abc123abc12'\"}}", + "outcome": "success", + "type": [ + "change" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Grant Updated", + "type": "GRANT.UPDATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-11T07:27:51.886Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-11T07:27:51.868Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "testapp", + "type": "APPLICATION" + } + ], + "result": { + "description": "Updated Grant for application '123abc123-12ab-1234-1abc-abc123abc12' to resource '123abc123-12ab-1234-1abc-abc123abc12'", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T10:22:39.285Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "group.created", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T10:22:39.285Z\",\"createdAt\":\"2022-07-18T10:22:39.301Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"GROUP.CREATED\",\"description\":\"Group Created\"},\"resources\":[{\"type\":\"GROUP\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"abc\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/groups/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Created Group abc\"}}", + "outcome": "success", + "type": [ + "creation", + "group" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Group Created", + "type": "GROUP.CREATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T10:22:39.301Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T10:22:39.285Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/groups/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "abc", + "type": "GROUP" + } + ], + "result": { + "description": "Created Group abc", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/groups/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/groups/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T10:23:36.760Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "group.deleted", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T10:23:36.760Z\",\"createdAt\":\"2022-07-18T10:23:36.777Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"GROUP.DELETED\",\"description\":\"Group Deleted\"},\"resources\":[{\"type\":\"GROUP\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"abc_group\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/groups/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Deleted Group abc_group\"}}", + "outcome": "success", + "type": [ + "deletion", + "group" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Group Deleted", + "type": "GROUP.DELETED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T10:23:36.777Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T10:23:36.760Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/groups/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "abc_group", + "type": "GROUP" + } + ], + "result": { + "description": "Deleted Group abc_group", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/groups/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/groups/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T10:23:26.394Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "group.updated", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T10:23:26.394Z\",\"createdAt\":\"2022-07-18T10:23:26.408Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"GROUP.UPDATED\",\"description\":\"Group Updated\"},\"resources\":[{\"type\":\"GROUP\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"abc_group\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/groups/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Updated Group abc_group\"}}", + "outcome": "success", + "type": [ + "change", + "group" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Group Updated", + "type": "GROUP.UPDATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T10:23:26.408Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T10:23:26.394Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/groups/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "abc_group", + "type": "GROUP" + } + ], + "result": { + "description": "Updated Group abc_group", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/groups/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/groups/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T11:54:55.713Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "identity_provider.created", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T11:54:55.713Z\",\"createdAt\":\"2022-07-18T11:54:55.731Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"IDENTITY_PROVIDER.CREATED\",\"description\":\"Identity Provider Created\"},\"resources\":[{\"type\":\"IDENTITY_PROVIDER\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"google\",\"environment\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\"},\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/identityProviders/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Created Identity Provider google of type 'GOOGLE'.\"}}", + "outcome": "success", + "type": [ + "creation" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Identity Provider Created", + "type": "IDENTITY_PROVIDER.CREATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T11:54:55.731Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T11:54:55.713Z", + "resources": [ + { + "environment": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "href": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/identityProviders/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "google", + "type": "IDENTITY_PROVIDER" + } + ], + "result": { + "description": "Created Identity Provider google of type 'GOOGLE'.", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/identityProviders/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/identityProviders/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T11:55:48.406Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "identity_provider.deleted", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T11:55:48.406Z\",\"createdAt\":\"2022-07-18T11:55:48.431Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"IDENTITY_PROVIDER.DELETED\",\"description\":\"Identity Provider Deleted\"},\"resources\":[{\"type\":\"IDENTITY_PROVIDER\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"google\",\"environment\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\"},\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/identityProviders/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Deleted Identity Provider google of type 'GOOGLE'.\"}}", + "outcome": "success", + "type": [ + "deletion" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Identity Provider Deleted", + "type": "IDENTITY_PROVIDER.DELETED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T11:55:48.431Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T11:55:48.406Z", + "resources": [ + { + "environment": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "href": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/identityProviders/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "google", + "type": "IDENTITY_PROVIDER" + } + ], + "result": { + "description": "Deleted Identity Provider google of type 'GOOGLE'.", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/identityProviders/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/identityProviders/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T11:55:28.970Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "identity_provider.updated", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T11:55:28.970Z\",\"createdAt\":\"2022-07-18T11:55:28.985Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"IDENTITY_PROVIDER.UPDATED\",\"description\":\"Identity Provider Updated\"},\"resources\":[{\"type\":\"IDENTITY_PROVIDER\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"google\",\"environment\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\"},\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/identityProviders/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Updated Identity Provider google of type 'GOOGLE'.\"}}", + "outcome": "success", + "type": [ + "change" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Identity Provider Updated", + "type": "IDENTITY_PROVIDER.UPDATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T11:55:28.985Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T11:55:28.970Z", + "resources": [ + { + "environment": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "href": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/identityProviders/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "google", + "type": "IDENTITY_PROVIDER" + } + ], + "result": { + "description": "Updated Identity Provider google of type 'GOOGLE'.", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/identityProviders/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/identityProviders/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T12:06:15.066Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "idp_attribute.created", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T12:06:15.066Z\",\"createdAt\":\"2022-07-18T12:06:15.084Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"IDP_ATTRIBUTE.CREATED\",\"description\":\"Idp Attribute Created\"},\"resources\":[{\"type\":\"IDENTITY_PROVIDER\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"environment\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\"},\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/identityProviders/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"IDP Attribute 'accountId' created for Identity Provider '123abc123-12ab-1234-1abc-abc123abc12' in environment '123abc123-12ab-1234-1abc-abc123abc12'\"}}", + "outcome": "success", + "type": [ + "creation" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Idp Attribute Created", + "type": "IDP_ATTRIBUTE.CREATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T12:06:15.084Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T12:06:15.066Z", + "resources": [ + { + "environment": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "href": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/identityProviders/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "123abc123-12ab-1234-1abc-abc123abc12", + "type": "IDENTITY_PROVIDER" + } + ], + "result": { + "description": "IDP Attribute 'accountId' created for Identity Provider '123abc123-12ab-1234-1abc-abc123abc12' in environment '123abc123-12ab-1234-1abc-abc123abc12'", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/identityProviders/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/identityProviders/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T12:07:55.167Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "idp_attribute.deleted", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T12:07:55.167Z\",\"createdAt\":\"2022-07-18T12:07:55.209Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"IDP_ATTRIBUTE.DELETED\",\"description\":\"Idp Attribute Deleted\"},\"resources\":[{\"type\":\"IDENTITY_PROVIDER\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"environment\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\"},\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/identityProviders/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"IDP Attribute 'username' deleted for Identity Provider '123abc123-12ab-1234-1abc-abc123abc12' in environment '123abc123-12ab-1234-1abc-abc123abc12'\"}}", + "outcome": "success", + "type": [ + "deletion" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Idp Attribute Deleted", + "type": "IDP_ATTRIBUTE.DELETED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T12:07:55.209Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T12:07:55.167Z", + "resources": [ + { + "environment": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "href": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/identityProviders/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "123abc123-12ab-1234-1abc-abc123abc12", + "type": "IDENTITY_PROVIDER" + } + ], + "result": { + "description": "IDP Attribute 'username' deleted for Identity Provider '123abc123-12ab-1234-1abc-abc123abc12' in environment '123abc123-12ab-1234-1abc-abc123abc12'", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/identityProviders/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/identityProviders/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T12:06:15.050Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "idp_attribute.updated", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T12:06:15.050Z\",\"createdAt\":\"2022-07-18T12:06:15.064Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"IDP_ATTRIBUTE.UPDATED\",\"description\":\"Idp Attribute Updated\"},\"resources\":[{\"type\":\"IDENTITY_PROVIDER\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"environment\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\"},\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/identityProviders/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"IDP Attribute 'username' updated for Identity Provider '123abc123-12ab-1234-1abc-abc123abc12' in environment '123abc123-12ab-1234-1abc-abc123abc12'\"}}", + "outcome": "success", + "type": [ + "change" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Idp Attribute Updated", + "type": "IDP_ATTRIBUTE.UPDATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T12:06:15.064Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T12:06:15.050Z", + "resources": [ + { + "environment": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "href": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/identityProviders/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "123abc123-12ab-1234-1abc-abc123abc12", + "type": "IDENTITY_PROVIDER" + } + ], + "result": { + "description": "IDP Attribute 'username' updated for Identity Provider '123abc123-12ab-1234-1abc-abc123abc12' in environment '123abc123-12ab-1234-1abc-abc123abc12'", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/identityProviders/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/identityProviders/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T11:26:26.841Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "image.created", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T11:26:26.841Z\",\"createdAt\":\"2022-07-18T11:26:26.872Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"IMAGE.CREATED\",\"description\":\"Image Created\"},\"resources\":[{\"type\":\"IMAGE\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"environment\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\"},\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/images/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Created Image 123abc123-12ab-1234-1abc-abc123abc12\"}}", + "outcome": "success", + "type": [ + "creation" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Image Created", + "type": "IMAGE.CREATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T11:26:26.872Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T11:26:26.841Z", + "resources": [ + { + "environment": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "href": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/images/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "123abc123-12ab-1234-1abc-abc123abc12", + "type": "IMAGE" + } + ], + "result": { + "description": "Created Image 123abc123-12ab-1234-1abc-abc123abc12", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/images/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/images/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-13T21:09:18.211Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "key.created", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-13T21:09:18.211Z\",\"createdAt\":\"2022-07-13T21:09:18.530Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"KEY.CREATED\",\"description\":\"Key Created\"},\"resources\":[{\"type\":\"KEY\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"PingOne SSO Certificate for Test environment\",\"environment\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\"},\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/keys/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Created Key PingOne SSO Certificate for Test environment\"}}", + "outcome": "success", + "type": [ + "creation" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Key Created", + "type": "KEY.CREATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-13T21:09:18.530Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-13T21:09:18.211Z", + "resources": [ + { + "environment": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "href": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/keys/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "PingOne SSO Certificate for Test environment", + "type": "KEY" + } + ], + "result": { + "description": "Created Key PingOne SSO Certificate for Test environment", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/keys/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/keys/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-13T21:09:17.946Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "mfa_settings.updated", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-13T21:09:17.946Z\",\"createdAt\":\"2022-07-13T21:09:18.261Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"MFA_SETTINGS.UPDATED\",\"description\":\"MFA settings updated\"},\"resources\":[{\"type\":\"MFA_SETTINGS\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"environment\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\"},\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/mfaSettings\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"MFA settings updated for environment 123abc123-12ab-1234-1abc-abc123abc12\"}}", + "outcome": "success", + "type": [ + "change" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "MFA settings updated", + "type": "MFA_SETTINGS.UPDATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-13T21:09:18.261Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-13T21:09:17.946Z", + "resources": [ + { + "environment": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "href": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/mfaSettings", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "123abc123-12ab-1234-1abc-abc123abc12", + "type": "MFA_SETTINGS" + } + ], + "result": { + "description": "MFA settings updated for environment 123abc123-12ab-1234-1abc-abc123abc12", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/mfaSettings", + "path": "/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/mfaSettings", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T10:40:13.538Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "notification_policy.created", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T10:40:13.538Z\",\"createdAt\":\"2022-07-18T10:40:13.565Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"NOTIFICATION_POLICY.CREATED\",\"description\":\"Notification Policy Created\"},\"resources\":[{\"type\":\"Notification Policy\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"temp_notification\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/notificationsPolicies/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Notification Policy created: \\\"temp_notification\\\"\"}}", + "outcome": "success", + "type": [ + "creation" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Notification Policy Created", + "type": "NOTIFICATION_POLICY.CREATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T10:40:13.565Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T10:40:13.538Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/notificationsPolicies/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "temp_notification", + "type": "Notification Policy" + } + ], + "result": { + "description": "Notification Policy created: \"temp_notification\"", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/notificationsPolicies/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/notificationsPolicies/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T10:46:16.176Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "notification_policy.deleted", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T10:46:16.176Z\",\"createdAt\":\"2022-07-18T10:46:16.196Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"NOTIFICATION_POLICY.DELETED\",\"description\":\"Notification Policy Deleted\"},\"resources\":[{\"type\":\"Notification Policy\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"temp_notifications\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/notificationsPolicies/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Notification Policy deleted: \\\"temp_notifications\\\"\"}}", + "outcome": "success", + "type": [ + "deletion" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Notification Policy Deleted", + "type": "NOTIFICATION_POLICY.DELETED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T10:46:16.196Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T10:46:16.176Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/notificationsPolicies/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "temp_notifications", + "type": "Notification Policy" + } + ], + "result": { + "description": "Notification Policy deleted: \"temp_notifications\"", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/notificationsPolicies/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/notificationsPolicies/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T10:42:35.334Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "notification_policy.updated", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T10:42:35.334Z\",\"createdAt\":\"2022-07-18T10:42:35.351Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"NOTIFICATION_POLICY.UPDATED\",\"description\":\"Notification Policy Updated\"},\"resources\":[{\"type\":\"Notification Policy\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"temp_notifications\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/notificationsPolicies/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Notification Policy updated: \\\"temp_notifications\\\"\"}}", + "outcome": "success", + "type": [ + "change" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Notification Policy Updated", + "type": "NOTIFICATION_POLICY.UPDATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T10:42:35.351Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T10:42:35.334Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/notificationsPolicies/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "temp_notifications", + "type": "Notification Policy" + } + ], + "result": { + "description": "Notification Policy updated: \"temp_notifications\"", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/notificationsPolicies/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/notificationsPolicies/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-07T13:12:36.168Z", + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "password.check_failed", + "category": [ + "iam" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-07T13:12:36.168Z\",\"createdAt\":\"2022-07-07T13:12:36.185Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"action\":{\"type\":\"PASSWORD.CHECK_FAILED\",\"description\":\"Password Check Failed\"},\"resources\":[{\"type\":\"USER\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Check Failed Password 123abc123-12ab-1234-1abc-abc123abc12\"}}", + "outcome": "success", + "type": [ + "info" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Password Check Failed", + "type": "PASSWORD.CHECK_FAILED" + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-07T13:12:36.185Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-07T13:12:36.168Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + ], + "result": { + "description": "Check Failed Password 123abc123-12ab-1234-1abc-abc123abc12", + "status": "SUCCESS" + } + } + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + } + }, + { + "@timestamp": "2022-07-07T13:12:48.320Z", + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "password.check_succeeded", + "category": [ + "iam", + "authentication" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-07T13:12:48.320Z\",\"createdAt\":\"2022-07-07T13:12:48.334Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"action\":{\"type\":\"PASSWORD.CHECK_SUCCEEDED\",\"description\":\"Password Check Succeeded\"},\"resources\":[{\"type\":\"USER\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Check Succeeded Password 123abc123-12ab-1234-1abc-abc123abc12\"}}", + "outcome": "success", + "type": [ + "info" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Password Check Succeeded", + "type": "PASSWORD.CHECK_SUCCEEDED" + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-07T13:12:48.334Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-07T13:12:48.320Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + ], + "result": { + "description": "Check Succeeded Password 123abc123-12ab-1234-1abc-abc123abc12", + "status": "SUCCESS" + } + } + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + } + }, + { + "@timestamp": "2022-07-13T21:09:18.030Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "policy.created", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-13T21:09:18.030Z\",\"createdAt\":\"2022-07-13T21:09:18.513Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"POLICY.CREATED\",\"description\":\"Policy Created\"},\"resources\":[{\"type\":\"SIGN_ON_POLICY\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"Multi_Factor\",\"environment\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\"},\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/signOnPolicies/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Created Policy Multi_Factor\"}}", + "outcome": "success", + "type": [ + "creation" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Policy Created", + "type": "POLICY.CREATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-13T21:09:18.513Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-13T21:09:18.030Z", + "resources": [ + { + "environment": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "href": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/signOnPolicies/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "Multi_Factor", + "type": "SIGN_ON_POLICY" + } + ], + "result": { + "description": "Created Policy Multi_Factor", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/signOnPolicies/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/signOnPolicies/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-19T12:21:46.891Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "policy.deleted", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-19T12:21:46.891Z\",\"createdAt\":\"2022-07-19T12:21:46.916Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"POLICY.DELETED\",\"description\":\"Policy Deleted\"},\"resources\":[{\"type\":\"SIGN_ON_POLICY\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"bbb\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/signOnPolicies/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Deleted Policy bbb\"}}", + "outcome": "success", + "type": [ + "deletion" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Policy Deleted", + "type": "POLICY.DELETED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-19T12:21:46.916Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-19T12:21:46.891Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/signOnPolicies/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "bbb", + "type": "SIGN_ON_POLICY" + } + ], + "result": { + "description": "Deleted Policy bbb", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/signOnPolicies/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/signOnPolicies/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-27T17:50:45.426Z", + "client": { + "user": { + "id": "p14c-myaccount", + "name": "p14c-myaccount" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "password.reset", + "category": [ + "iam" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-27T17:50:45.426Z\",\"createdAt\":\"2022-07-27T17:50:45.441Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"p14c-myaccount\",\"name\":\"p14c-myaccount\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"PASSWORD.RESET\",\"description\":\"Password Reset\"},\"resources\":[{\"type\":\"USER\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Reset Password 123abc123-12ab-1234-1abc-abc123abc12\"}}", + "outcome": "success", + "type": [ + "info" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Password Reset", + "type": "PASSWORD.RESET" + }, + "actors": { + "client": { + "id": "p14c-myaccount", + "name": "p14c-myaccount", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-27T17:50:45.441Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-27T17:50:45.426Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + ], + "result": { + "description": "Reset Password 123abc123-12ab-1234-1abc-abc123abc12", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "p14c-myaccount", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-06T06:12:00.573Z", + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "password.set", + "category": [ + "iam" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-06T06:12:00.573Z\",\"createdAt\":\"2022-07-06T06:12:00.983Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"action\":{\"type\":\"PASSWORD.SET\",\"description\":\"Password Set\"},\"resources\":[{\"type\":\"USER\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Set password for: 123abc123-12ab-1234-1abc-abc123abc12\"}}", + "outcome": "success", + "type": [ + "info" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Password Set", + "type": "PASSWORD.SET" + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-06T06:12:00.983Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-06T06:12:00.573Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + ], + "result": { + "description": "Set password for: 123abc123-12ab-1234-1abc-abc123abc12", + "status": "SUCCESS" + } + } + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + } + }, + { + "@timestamp": "2022-07-13T21:09:19.500Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "population.created", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-13T21:09:19.500Z\",\"createdAt\":\"2022-07-13T21:09:19.513Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"POPULATION.CREATED\",\"description\":\"Population Created\"},\"resources\":[{\"type\":\"POPULATION\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"Default\",\"environment\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\"},\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/populations/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Created Population Default\"}}", + "outcome": "success", + "type": [ + "creation" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Population Created", + "type": "POPULATION.CREATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-13T21:09:19.513Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-13T21:09:19.500Z", + "resources": [ + { + "environment": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "href": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/populations/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "Default", + "type": "POPULATION" + } + ], + "result": { + "description": "Created Population Default", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/populations/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/populations/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T10:30:30.896Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "population.deleted", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T10:30:30.896Z\",\"createdAt\":\"2022-07-18T10:30:30.910Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"POPULATION.DELETED\",\"description\":\"Population Deleted\"},\"resources\":[{\"type\":\"POPULATION\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"temp\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/populations/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Deleted Population temp\"}}", + "outcome": "success", + "type": [ + "deletion" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Population Deleted", + "type": "POPULATION.DELETED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T10:30:30.910Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T10:30:30.896Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/populations/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "temp", + "type": "POPULATION" + } + ], + "result": { + "description": "Deleted Population temp", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/populations/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/populations/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T10:30:24.482Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "population.updated", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T10:30:24.482Z\",\"createdAt\":\"2022-07-18T10:30:24.497Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"POPULATION.UPDATED\",\"description\":\"Population Updated\"},\"resources\":[{\"type\":\"POPULATION\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"temp\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/populations/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Updated Population temp\"}}", + "outcome": "success", + "type": [ + "change" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Population Updated", + "type": "POPULATION.UPDATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T10:30:24.497Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T10:30:24.482Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/populations/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "temp", + "type": "POPULATION" + } + ], + "result": { + "description": "Updated Population temp", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/populations/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/populations/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T16:32:19.529Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "provisioning_connection.created", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T16:32:19.529Z\",\"createdAt\":\"2022-07-18T16:32:19.545Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"PROVISIONING_CONNECTION.CREATED\",\"description\":\"Provisioning Connection Created\"},\"resources\":[{\"type\":\"PROVISIONING_IDENTITY_CONNECTION\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"xyz\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/propagation/stores/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Created connection xyz of type xyz.\"}}", + "outcome": "success", + "type": [ + "creation" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Provisioning Connection Created", + "type": "PROVISIONING_CONNECTION.CREATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T16:32:19.545Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T16:32:19.529Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/propagation/stores/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "xyz", + "type": "PROVISIONING_IDENTITY_CONNECTION" + } + ], + "result": { + "description": "Created connection xyz of type xyz.", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/propagation/stores/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/propagation/stores/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T16:34:29.509Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "provisioning_rule.deleted", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T16:34:29.509Z\",\"createdAt\":\"2022-07-18T16:34:29.534Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"PROVISIONING_RULE.DELETED\",\"description\":\"Provisioning Rule Deleted\"},\"resources\":[{\"type\":\"PROVISIONING_IDENTITY_RULE\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"rule\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/propagation/rules/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Deleted provisioning rule rule.\"}}", + "outcome": "success", + "type": [ + "deletion" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Provisioning Rule Deleted", + "type": "PROVISIONING_RULE.DELETED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T16:34:29.534Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T16:34:29.509Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/propagation/rules/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "rule", + "type": "PROVISIONING_IDENTITY_RULE" + } + ], + "result": { + "description": "Deleted provisioning rule rule.", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/propagation/rules/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/propagation/rules/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T16:34:29.509Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "provisioning_rule.deleted", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T16:34:29.509Z\",\"createdAt\":\"2022-07-18T16:34:29.534Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"PROVISIONING_RULE.DELETED\",\"description\":\"Provisioning Rule Deleted\"},\"resources\":[{\"type\":\"PROVISIONING_IDENTITY_RULE\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"rule\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/propagation/rules/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Deleted provisioning rule rule.\"}}", + "outcome": "success", + "type": [ + "deletion" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Provisioning Rule Deleted", + "type": "PROVISIONING_RULE.DELETED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T16:34:29.534Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T16:34:29.509Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/propagation/rules/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "rule", + "type": "PROVISIONING_IDENTITY_RULE" + } + ], + "result": { + "description": "Deleted provisioning rule rule.", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/propagation/rules/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/propagation/rules/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T16:35:32.124Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "provisioning_connection.updated", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T16:35:32.124Z\",\"createdAt\":\"2022-07-18T16:35:32.138Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"PROVISIONING_CONNECTION.UPDATED\",\"description\":\"Provisioning Connection Updated\"},\"resources\":[{\"type\":\"PROVISIONING_IDENTITY_CONNECTION\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"xyz\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/propagation/stores/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Updated connection xyz of type xyz.\"}}", + "outcome": "success", + "type": [ + "change" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Provisioning Connection Updated", + "type": "PROVISIONING_CONNECTION.UPDATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T16:35:32.138Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T16:35:32.124Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/propagation/stores/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "xyz", + "type": "PROVISIONING_IDENTITY_CONNECTION" + } + ], + "result": { + "description": "Updated connection xyz of type xyz.", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/propagation/stores/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/propagation/stores/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T16:33:44.614Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "provisioning_rule.created", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T16:33:44.614Z\",\"createdAt\":\"2022-07-18T16:33:44.630Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"PROVISIONING_RULE.CREATED\",\"description\":\"Provisioning Rule Created\"},\"resources\":[{\"type\":\"PROVISIONING_IDENTITY_RULE\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"rule\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/propagation/rules/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Created provisioning rule rule.\"}}", + "outcome": "success", + "type": [ + "creation" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Provisioning Rule Created", + "type": "PROVISIONING_RULE.CREATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T16:33:44.630Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T16:33:44.614Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/propagation/rules/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "rule", + "type": "PROVISIONING_IDENTITY_RULE" + } + ], + "result": { + "description": "Created provisioning rule rule.", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/propagation/rules/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/propagation/rules/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T16:34:14.045Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "provisioning_rule.updated", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T16:34:14.045Z\",\"createdAt\":\"2022-07-18T16:34:14.060Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"PROVISIONING_RULE.UPDATED\",\"description\":\"Provisioning Rule Updated\"},\"resources\":[{\"type\":\"PROVISIONING_IDENTITY_RULE\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"rule\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/propagation/rules/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Updated provisioning rule rule.\"}}", + "outcome": "success", + "type": [ + "change" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Provisioning Rule Updated", + "type": "PROVISIONING_RULE.UPDATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T16:34:14.060Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T16:34:14.045Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/propagation/rules/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "rule", + "type": "PROVISIONING_IDENTITY_RULE" + } + ], + "result": { + "description": "Updated provisioning rule rule.", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/propagation/rules/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/propagation/rules/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T16:28:31.606Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "resource_attribute.created", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T16:28:31.606Z\",\"createdAt\":\"2022-07-18T16:28:31.683Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"RESOURCE_ATTRIBUTE.CREATED\",\"description\":\"Resource Attribute Created\"},\"resources\":[{\"type\":\"RESOURCE\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"name\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/resources/123abc123-12ab-1234-1abc-abc123abc12/attributes/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Created Resource Attribute: name\"}}", + "outcome": "success", + "type": [ + "creation" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Resource Attribute Created", + "type": "RESOURCE_ATTRIBUTE.CREATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T16:28:31.683Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T16:28:31.606Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/resources/123abc123-12ab-1234-1abc-abc123abc12/attributes/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "name", + "type": "RESOURCE" + } + ], + "result": { + "description": "Created Resource Attribute: name", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/resources/123abc123-12ab-1234-1abc-abc123abc12/attributes/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/resources/123abc123-12ab-1234-1abc-abc123abc12/attributes/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T18:22:54.678Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "resource_attribute.deleted", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T18:22:54.678Z\",\"createdAt\":\"2022-07-18T18:22:54.693Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"RESOURCE_ATTRIBUTE.DELETED\",\"description\":\"Resource Attribute Deleted\"},\"resources\":[{\"type\":\"RESOURCE\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"sub\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/resources/123abc123-12ab-1234-1abc-abc123abc12/attributes/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Deleted Resource Attribute: sub\"}}", + "outcome": "success", + "type": [ + "deletion" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Resource Attribute Deleted", + "type": "RESOURCE_ATTRIBUTE.DELETED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T18:22:54.693Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T18:22:54.678Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/resources/123abc123-12ab-1234-1abc-abc123abc12/attributes/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "sub", + "type": "RESOURCE" + } + ], + "result": { + "description": "Deleted Resource Attribute: sub", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/resources/123abc123-12ab-1234-1abc-abc123abc12/attributes/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/resources/123abc123-12ab-1234-1abc-abc123abc12/attributes/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T18:22:00.289Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "resource.created", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T18:22:00.289Z\",\"createdAt\":\"2022-07-18T18:22:00.304Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"RESOURCE.CREATED\",\"description\":\"Resource Created\"},\"resources\":[{\"type\":\"RESOURCE\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"name\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/resources/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Created Resource name\"}}", + "outcome": "success", + "type": [ + "creation" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Resource Created", + "type": "RESOURCE.CREATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T18:22:00.304Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T18:22:00.289Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/resources/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "name", + "type": "RESOURCE" + } + ], + "result": { + "description": "Created Resource name", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/resources/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/resources/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T18:22:54.683Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "resource.deleted", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T18:22:54.683Z\",\"createdAt\":\"2022-07-18T18:22:54.704Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"RESOURCE.DELETED\",\"description\":\"Resource Deleted\"},\"resources\":[{\"type\":\"RESOURCE\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"name\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/resources/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Deleted Resource name\"}}", + "outcome": "success", + "type": [ + "deletion" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Resource Deleted", + "type": "RESOURCE.DELETED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T18:22:54.704Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T18:22:54.683Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/resources/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "name", + "type": "RESOURCE" + } + ], + "result": { + "description": "Deleted Resource name", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/resources/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/resources/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-14T13:44:05.978Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "resource.updated", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-14T13:44:05.978Z\",\"createdAt\":\"2022-07-14T13:44:05.991Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"RESOURCE.UPDATED\",\"description\":\"Resource Updated\"},\"resources\":[{\"type\":\"RESOURCE\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"jhjb\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/resources/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Updated Resource jhjb\"}}", + "outcome": "success", + "type": [ + "change" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Resource Updated", + "type": "RESOURCE.UPDATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-14T13:44:05.991Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-14T13:44:05.978Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/resources/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "jhjb", + "type": "RESOURCE" + } + ], + "result": { + "description": "Updated Resource jhjb", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/resources/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/resources/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T11:01:14.102Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "risk_policy_set.created", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T11:01:14.102Z\",\"createdAt\":\"2022-07-18T11:01:14.177Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"RISK_POLICY_SET.CREATED\",\"description\":\"Risk Policy Created\"},\"resources\":[{\"type\":\"RISK_POLICY\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"policy\",\"environment\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\"},\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/riskPolicySets/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Created Risk Policy \\\"policy\\\".\"}}", + "outcome": "success", + "type": [ + "creation" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Risk Policy Created", + "type": "RISK_POLICY_SET.CREATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T11:01:14.177Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T11:01:14.102Z", + "resources": [ + { + "environment": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "href": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/riskPolicySets/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "policy", + "type": "RISK_POLICY" + } + ], + "result": { + "description": "Created Risk Policy \"policy\".", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/riskPolicySets/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/riskPolicySets/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T11:03:00.639Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "risk_policy_set.deleted", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T11:03:00.639Z\",\"createdAt\":\"2022-07-18T11:03:00.657Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"RISK_POLICY_SET.DELETED\",\"description\":\"Risk Policy Deleted\"},\"resources\":[{\"type\":\"RISK_POLICY\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"policy\",\"environment\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\"},\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/riskPolicySets/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Deleted Risk Policy \\\"policy\\\".\"}}", + "outcome": "success", + "type": [ + "deletion" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Risk Policy Deleted", + "type": "RISK_POLICY_SET.DELETED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T11:03:00.657Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T11:03:00.639Z", + "resources": [ + { + "environment": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "href": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/riskPolicySets/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "policy", + "type": "RISK_POLICY" + } + ], + "result": { + "description": "Deleted Risk Policy \"policy\".", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/riskPolicySets/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/riskPolicySets/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T11:02:43.696Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "risk_policy_set.updated", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T11:02:43.696Z\",\"createdAt\":\"2022-07-18T11:02:43.717Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"RISK_POLICY_SET.UPDATED\",\"description\":\"Risk Policy Updated\"},\"resources\":[{\"type\":\"RISK_POLICY\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"policy\",\"environment\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\"},\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/riskPolicySets/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Updated Risk Policy \\\"policy\\\".\"}}", + "outcome": "success", + "type": [ + "change" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Risk Policy Updated", + "type": "RISK_POLICY_SET.UPDATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T11:02:43.717Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T11:02:43.696Z", + "resources": [ + { + "environment": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "href": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/riskPolicySets/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "policy", + "type": "RISK_POLICY" + } + ], + "result": { + "description": "Updated Risk Policy \"policy\".", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/riskPolicySets/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/riskPolicySets/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T11:12:39.136Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "risk_predictor.created", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T11:12:39.136Z\",\"createdAt\":\"2022-07-18T11:12:39.162Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"RISK_PREDICTOR.CREATED\",\"description\":\"Risk Predictor Created\"},\"resources\":[{\"type\":\"RISK_PREDICTOR\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"Geo_temp\",\"environment\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\"},\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/riskPredictors/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Created Risk Predictor \\\"Geo_temp\\\".\"}}", + "outcome": "success", + "type": [ + "creation" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Risk Predictor Created", + "type": "RISK_PREDICTOR.CREATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T11:12:39.162Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T11:12:39.136Z", + "resources": [ + { + "environment": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "href": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/riskPredictors/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "Geo_temp", + "type": "RISK_PREDICTOR" + } + ], + "result": { + "description": "Created Risk Predictor \"Geo_temp\".", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/riskPredictors/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/riskPredictors/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T11:13:22.881Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "risk_predictor.deleted", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T11:13:22.881Z\",\"createdAt\":\"2022-07-18T11:13:22.900Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"RISK_PREDICTOR.DELETED\",\"description\":\"Risk Predictor Deleted\"},\"resources\":[{\"type\":\"RISK_PREDICTOR\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"Geo_temp\",\"environment\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\"},\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/riskPredictors/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Deleted Risk Predictor \\\"Geo_temp\\\".\"}}", + "outcome": "success", + "type": [ + "deletion" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Risk Predictor Deleted", + "type": "RISK_PREDICTOR.DELETED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T11:13:22.900Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T11:13:22.881Z", + "resources": [ + { + "environment": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "href": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/riskPredictors/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "Geo_temp", + "type": "RISK_PREDICTOR" + } + ], + "result": { + "description": "Deleted Risk Predictor \"Geo_temp\".", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/riskPredictors/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/riskPredictors/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T11:13:12.876Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "risk_predictor.updated", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T11:13:12.876Z\",\"createdAt\":\"2022-07-18T11:13:12.921Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"RISK_PREDICTOR.UPDATED\",\"description\":\"Risk Predictor Updated\"},\"resources\":[{\"type\":\"RISK_PREDICTOR\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"Geovelocity Anomaly\",\"environment\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\"},\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/riskPredictors/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Updated Risk Predictor \\\"Geovelocity Anomaly\\\".\"}}", + "outcome": "success", + "type": [ + "change" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Risk Predictor Updated", + "type": "RISK_PREDICTOR.UPDATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T11:13:12.921Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T11:13:12.876Z", + "resources": [ + { + "environment": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "href": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/riskPredictors/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "Geovelocity Anomaly", + "type": "RISK_PREDICTOR" + } + ], + "result": { + "description": "Updated Risk Predictor \"Geovelocity Anomaly\".", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/riskPredictors/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/riskPredictors/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-06T06:12:00.615Z", + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "role_assignment.created", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-06T06:12:00.615Z\",\"createdAt\":\"2022-07-06T06:12:00.994Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"action\":{\"type\":\"ROLE_ASSIGNMENT.CREATED\",\"description\":\"Role Assignment Created\"},\"resources\":[{\"type\":\"USER\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12/roleAssignments/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Created role assignment '123abc123-12ab-1234-1abc-abc123abc12' for role '123abc123-12ab-1234-1abc-abc123abc12' scoped for ORGANIZATION '123abc123-12ab-1234-1abc-abc123abc12'\"},\"tags\":[\"adminIdentityEvent\"]}", + "outcome": "success", + "type": [ + "creation" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Role Assignment Created", + "type": "ROLE_ASSIGNMENT.CREATED" + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-06T06:12:00.994Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-06T06:12:00.615Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12/roleAssignments/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + ], + "result": { + "description": "Created role assignment '123abc123-12ab-1234-1abc-abc123abc12' for role '123abc123-12ab-1234-1abc-abc123abc12' scoped for ORGANIZATION '123abc123-12ab-1234-1abc-abc123abc12'", + "status": "SUCCESS" + }, + "tags": [ + "adminIdentityEvent" + ] + } + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields", + "adminIdentityEvent" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12/roleAssignments/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12/roleAssignments/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + } + }, + { + "@timestamp": "2022-07-19T17:56:47.122Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "role_assignment.deleted", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-19T17:56:47.122Z\",\"createdAt\":\"2022-07-19T17:56:47.384Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"ROLE_ASSIGNMENT.DELETED\",\"description\":\"Role Assignment Deleted\"},\"resources\":[{\"type\":\"GATEWAY\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/gateways/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Deleted role assignment '123abc123-12ab-1234-1abc-abc123abc12' scoped for ENVIRONMENT for gateway:'123abc123-12ab-1234-1abc-abc123abc12'\"}}", + "outcome": "success", + "type": [ + "deletion" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Role Assignment Deleted", + "type": "ROLE_ASSIGNMENT.DELETED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-19T17:56:47.384Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-19T17:56:47.122Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/gateways/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "123abc123-12ab-1234-1abc-abc123abc12", + "type": "GATEWAY" + } + ], + "result": { + "description": "Deleted role assignment '123abc123-12ab-1234-1abc-abc123abc12' scoped for ENVIRONMENT for gateway:'123abc123-12ab-1234-1abc-abc123abc12'", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/gateways/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/gateways/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-19T18:02:42.987Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "saml_attribute.created", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-19T18:02:42.987Z\",\"createdAt\":\"2022-07-19T18:02:43.004Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"SAML_ATTRIBUTE.CREATED\",\"description\":\"Saml Attribute Created\"},\"resources\":[{\"type\":\"APPLICATION\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"oidc_app\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Saml Attribute 'hvhgv' created for application '123abc123-12ab-1234-1abc-abc123abc12' in environment 'abc12abc-12ab-1234-1abc-abc123abc123'\"}}", + "outcome": "success", + "type": [ + "creation" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Saml Attribute Created", + "type": "SAML_ATTRIBUTE.CREATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-19T18:02:43.004Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-19T18:02:42.987Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "oidc_app", + "type": "APPLICATION" + } + ], + "result": { + "description": "Saml Attribute 'hvhgv' created for application '123abc123-12ab-1234-1abc-abc123abc12' in environment 'abc12abc-12ab-1234-1abc-abc123abc123'", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-13T20:51:43.129Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "saml_attribute.deleted", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-13T20:51:43.129Z\",\"createdAt\":\"2022-07-13T20:51:43.143Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"SAML_ATTRIBUTE.DELETED\",\"description\":\"Saml Attribute Deleted\"},\"resources\":[{\"type\":\"APPLICATION\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"testapp\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Saml Attribute 'sub' deleted for application '123abc123-12ab-1234-1abc-abc123abc12' in environment 'abc12abc-12ab-1234-1abc-abc123abc123'\"}}", + "outcome": "success", + "type": [ + "deletion" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Saml Attribute Deleted", + "type": "SAML_ATTRIBUTE.DELETED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-13T20:51:43.143Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-13T20:51:43.129Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "testapp", + "type": "APPLICATION" + } + ], + "result": { + "description": "Saml Attribute 'sub' deleted for application '123abc123-12ab-1234-1abc-abc123abc12' in environment 'abc12abc-12ab-1234-1abc-abc123abc123'", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-19T18:02:43.011Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "saml_attribute.updated", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-19T18:02:43.011Z\",\"createdAt\":\"2022-07-19T18:02:43.025Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"SAML_ATTRIBUTE.UPDATED\",\"description\":\"Saml Attribute Updated\"},\"resources\":[{\"type\":\"APPLICATION\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"oidc_app\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Saml Attribute 'sub' updated for application '123abc123-12ab-1234-1abc-abc123abc12' in environment 'abc12abc-12ab-1234-1abc-abc123abc123'\"}}", + "outcome": "success", + "type": [ + "change" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Saml Attribute Updated", + "type": "SAML_ATTRIBUTE.UPDATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-19T18:02:43.025Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-19T18:02:43.011Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "oidc_app", + "type": "APPLICATION" + } + ], + "result": { + "description": "Saml Attribute 'sub' updated for application '123abc123-12ab-1234-1abc-abc123abc12' in environment 'abc12abc-12ab-1234-1abc-abc123abc123'", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T10:31:45.379Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "schema_attribute.created", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T10:31:45.379Z\",\"createdAt\":\"2022-07-18T10:31:45.394Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"SCHEMA_ATTRIBUTE.CREATED\",\"description\":\"Schema Attribute Created\"},\"resources\":[{\"type\":\"SCHEMA\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"abc\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/schemas/56eabe11-2955-4fe8-b061-68a1e205925f/attributes/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Created Schema Attribute abc\"}}", + "outcome": "success", + "type": [ + "creation" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Schema Attribute Created", + "type": "SCHEMA_ATTRIBUTE.CREATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T10:31:45.394Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T10:31:45.379Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/schemas/56eabe11-2955-4fe8-b061-68a1e205925f/attributes/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "abc", + "type": "SCHEMA" + } + ], + "result": { + "description": "Created Schema Attribute abc", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/schemas/56eabe11-2955-4fe8-b061-68a1e205925f/attributes/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/schemas/56eabe11-2955-4fe8-b061-68a1e205925f/attributes/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T10:32:12.175Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "schema_attribute.deleted", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T10:32:12.175Z\",\"createdAt\":\"2022-07-18T10:32:12.189Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"SCHEMA_ATTRIBUTE.DELETED\",\"description\":\"Schema Attribute Deleted\"},\"resources\":[{\"type\":\"SCHEMA\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"abc\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/schemas/56eabe11-2955-4fe8-b061-68a1e205925f/attributes/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Deleted Schema Attribute abc\"}}", + "outcome": "success", + "type": [ + "deletion" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Schema Attribute Deleted", + "type": "SCHEMA_ATTRIBUTE.DELETED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T10:32:12.189Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T10:32:12.175Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/schemas/56eabe11-2955-4fe8-b061-68a1e205925f/attributes/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "abc", + "type": "SCHEMA" + } + ], + "result": { + "description": "Deleted Schema Attribute abc", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/schemas/56eabe11-2955-4fe8-b061-68a1e205925f/attributes/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/schemas/56eabe11-2955-4fe8-b061-68a1e205925f/attributes/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-18T10:31:58.976Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "schema_attribute.updated", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-18T10:31:58.976Z\",\"createdAt\":\"2022-07-18T10:31:58.991Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"SCHEMA_ATTRIBUTE.UPDATED\",\"description\":\"Schema Attribute Updated\"},\"resources\":[{\"type\":\"SCHEMA\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"abc\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/schemas/56eabe11-2955-4fe8-b061-68a1e205925f/attributes/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Updated Schema Attribute abc\"}}", + "outcome": "success", + "type": [ + "change" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Schema Attribute Updated", + "type": "SCHEMA_ATTRIBUTE.UPDATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-18T10:31:58.991Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-18T10:31:58.976Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/schemas/56eabe11-2955-4fe8-b061-68a1e205925f/attributes/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "abc", + "type": "SCHEMA" + } + ], + "result": { + "description": "Updated Schema Attribute abc", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/schemas/56eabe11-2955-4fe8-b061-68a1e205925f/attributes/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/schemas/56eabe11-2955-4fe8-b061-68a1e205925f/attributes/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-13T21:06:16.530Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "scope.created", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-13T21:06:16.530Z\",\"createdAt\":\"2022-07-13T21:06:16.545Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"SCOPE.CREATED\",\"description\":\"Scope Created\"},\"resources\":[{\"type\":\"SCOPE\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"bhfbhrbb\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/resources/123abc123-12ab-1234-1abc-abc123abc12/scopes/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Created Scope bhfbhrbb in resource '123abc123-12ab-1234-1abc-abc123abc12'\"}}", + "outcome": "success", + "type": [ + "creation" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Scope Created", + "type": "SCOPE.CREATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-13T21:06:16.545Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-13T21:06:16.530Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/resources/123abc123-12ab-1234-1abc-abc123abc12/scopes/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "bhfbhrbb", + "type": "SCOPE" + } + ], + "result": { + "description": "Created Scope bhfbhrbb in resource '123abc123-12ab-1234-1abc-abc123abc12'", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/resources/123abc123-12ab-1234-1abc-abc123abc12/scopes/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/resources/123abc123-12ab-1234-1abc-abc123abc12/scopes/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-13T21:00:40.114Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "scope.deleted", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-13T21:00:40.114Z\",\"createdAt\":\"2022-07-13T21:00:40.128Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"SCOPE.DELETED\",\"description\":\"Scope Deleted\"},\"resources\":[{\"type\":\"SCOPE\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"abc\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/resources/123abc123-12ab-1234-1abc-abc123abc12/scopes/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Deleted Scope abc in resource '123abc123-12ab-1234-1abc-abc123abc12'\"}}", + "outcome": "success", + "type": [ + "deletion" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Scope Deleted", + "type": "SCOPE.DELETED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-13T21:00:40.128Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-13T21:00:40.114Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/resources/123abc123-12ab-1234-1abc-abc123abc12/scopes/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "abc", + "type": "SCOPE" + } + ], + "result": { + "description": "Deleted Scope abc in resource '123abc123-12ab-1234-1abc-abc123abc12'", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/resources/123abc123-12ab-1234-1abc-abc123abc12/scopes/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/resources/123abc123-12ab-1234-1abc-abc123abc12/scopes/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-13T21:06:26.044Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "scope.updated", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-13T21:06:26.044Z\",\"createdAt\":\"2022-07-13T21:06:26.060Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"SCOPE.UPDATED\",\"description\":\"Scope Updated\"},\"resources\":[{\"type\":\"SCOPE\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"bhfbhrbbjhjr\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/resources/123abc123-12ab-1234-1abc-abc123abc12/scopes/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Updated Scope bhfbhrbbjhjr in resource '123abc123-12ab-1234-1abc-abc123abc12'\"}}", + "outcome": "success", + "type": [ + "change" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Scope Updated", + "type": "SCOPE.UPDATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-13T21:06:26.060Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-13T21:06:26.044Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/resources/123abc123-12ab-1234-1abc-abc123abc12/scopes/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "bhfbhrbbjhjr", + "type": "SCOPE" + } + ], + "result": { + "description": "Updated Scope bhfbhrbbjhjr in resource '123abc123-12ab-1234-1abc-abc123abc12'", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/resources/123abc123-12ab-1234-1abc-abc123abc12/scopes/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/resources/123abc123-12ab-1234-1abc-abc123abc12/scopes/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-15T08:11:20.947Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "secret.read", + "category": [ + "iam" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-15T08:11:20.947Z\",\"createdAt\":\"2022-07-15T08:11:20.962Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"SECRET.READ\",\"description\":\"Secret Read\"},\"resources\":[{\"type\":\"APPLICATION\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"New\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Client secret read for application '123abc123-12ab-1234-1abc-abc123abc12'\"}}", + "outcome": "success", + "type": [ + "info" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Secret Read", + "type": "SECRET.READ" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-15T08:11:20.962Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-15T08:11:20.947Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "New", + "type": "APPLICATION" + } + ], + "result": { + "description": "Client secret read for application '123abc123-12ab-1234-1abc-abc123abc12'", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-20T18:27:20.929Z", + "client": { + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "PingOne Admin Console" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "user.access_allowed", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-20T18:27:20.929Z\",\"createdAt\":\"2022-07-20T18:27:20.945Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"PingOne Admin Console\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"USER.ACCESS_ALLOWED\",\"description\":\"User Access Allowed\"},\"resources\":[{\"type\":\"USER\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Passed role access control\"}}", + "outcome": "success", + "type": [ + "user", + "allowed", + "access" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "User Access Allowed", + "type": "USER.ACCESS_ALLOWED" + }, + "actors": { + "client": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/applications/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "PingOne Admin Console", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-20T18:27:20.945Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-20T18:27:20.929Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + ], + "result": { + "description": "Passed role access control", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "123abc123-12ab-1234-1abc-abc123abc12", + "PingOne Admin Console", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-13T21:03:54.524Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "user.created", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-13T21:03:54.524Z\",\"createdAt\":\"2022-07-13T21:03:54.559Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"USER.CREATED\",\"description\":\"User Created\"},\"resources\":[{\"type\":\"USER\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"djcdjh\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Created User djcdjh\"}}", + "outcome": "success", + "type": [ + "creation", + "user" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "User Created", + "type": "USER.CREATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-13T21:03:54.559Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-13T21:03:54.524Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "djcdjh", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + ], + "result": { + "description": "Created User djcdjh", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-13T19:32:54.079Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "user.deleted", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-13T19:32:54.079Z\",\"createdAt\":\"2022-07-13T19:32:54.101Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"USER.DELETED\",\"description\":\"User Deleted\"},\"resources\":[{\"type\":\"USER\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"jhbjhb\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Deleted User jhbjhb\"},\"tags\":[\"adminIdentityEvent\"]}", + "outcome": "success", + "type": [ + "deletion", + "user" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "User Deleted", + "type": "USER.DELETED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-13T19:32:54.101Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-13T19:32:54.079Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "jhbjhb", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + ], + "result": { + "description": "Deleted User jhbjhb", + "status": "SUCCESS" + }, + "tags": [ + "adminIdentityEvent" + ] + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields", + "adminIdentityEvent" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-13T17:25:28.877Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "user.updated", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-13T17:25:28.877Z\",\"createdAt\":\"2022-07-13T17:25:28.895Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"USER.UPDATED\",\"description\":\"User Updated\"},\"resources\":[{\"type\":\"USER\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"jhbjhb\",\"environment\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"population\":{\"id\":\"abc12abc-12ab-1234-1abc-abc123abc123\"},\"href\":\"https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Updated enabled for User jhbjhb\"}}", + "outcome": "success", + "type": [ + "change", + "user" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "User Updated", + "type": "USER.UPDATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-13T17:25:28.895Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-13T17:25:28.877Z", + "resources": [ + { + "environment": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "href": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "jhbjhb", + "population": { + "id": "abc12abc-12ab-1234-1abc-abc123abc123" + }, + "type": "USER" + } + ], + "result": { + "description": "Updated enabled for User jhbjhb", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/abc12abc-12ab-1234-1abc-abc123abc123/users/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-28T04:25:41.533Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "member_of_group.created", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-28T04:25:41.533Z\",\"createdAt\":\"2022-07-28T04:25:41.546Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"MEMBER_OF_GROUP.CREATED\",\"description\":\"Member Of Group Created\"},\"resources\":[{\"type\":\"MEMBER_OF_GROUP\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"new\",\"environment\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\"},\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/users/123abc123-12ab-1234-1abc-abc123abc12/memberOfGroups/af26d367-a058-4f73-a697-ab18e3ab29a2\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Created Member Of Group new\"}}", + "outcome": "success", + "type": [ + "creation", + "group" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Member Of Group Created", + "type": "MEMBER_OF_GROUP.CREATED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "href": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-28T04:25:41.546Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-28T04:25:41.533Z", + "resources": [ + { + "environment": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "href": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/users/123abc123-12ab-1234-1abc-abc123abc12/memberOfGroups/af26d367-a058-4f73-a697-ab18e3ab29a2", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "new", + "type": "MEMBER_OF_GROUP" + } + ], + "result": { + "description": "Created Member Of Group new", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/users/123abc123-12ab-1234-1abc-abc123abc12/memberOfGroups/af26d367-a058-4f73-a697-ab18e3ab29a2", + "path": "/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/users/123abc123-12ab-1234-1abc-abc123abc12/memberOfGroups/af26d367-a058-4f73-a697-ab18e3ab29a2", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-07-28T04:27:16.164Z", + "client": { + "user": { + "id": "adminui", + "name": "adminui" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "member_of_group.deleted", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/activities/123abc123-12ab-1234-1abc-abc123abc12\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-07-28T04:27:16.164Z\",\"createdAt\":\"2022-07-28T04:27:16.180Z\",\"correlationId\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"actors\":{\"client\":{\"id\":\"adminui\",\"name\":\"adminui\",\"type\":\"CLIENT\"},\"user\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"environment\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\"},\"population\":{},\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/users/123abc123-12ab-1234-1abc-abc123abc12\",\"type\":\"USER\"}},\"action\":{\"type\":\"MEMBER_OF_GROUP.DELETED\",\"description\":\"Member Of Group Deleted\"},\"resources\":[{\"type\":\"MEMBER_OF_GROUP\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"new\",\"environment\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\"},\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/users/123abc123-12ab-1234-1abc-abc123abc12/memberOfGroups/af26d367-a058-4f73-a697-ab18e3ab29a2\"}],\"result\":{\"status\":\"SUCCESS\",\"description\":\"Deleted Member Of Group new\"}}", + "outcome": "success", + "type": [ + "deletion", + "group" + ] + }, + "ping_one": { + "audit": { + "action": { + "description": "Member Of Group Deleted", + "type": "MEMBER_OF_GROUP.DELETED" + }, + "actors": { + "client": { + "id": "adminui", + "name": "adminui", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "href": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "type": "USER" + } + }, + "correlation": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "created_at": "2022-07-28T04:27:16.180Z", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-07-28T04:27:16.164Z", + "resources": [ + { + "environment": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "href": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/users/123abc123-12ab-1234-1abc-abc123abc12/memberOfGroups/af26d367-a058-4f73-a697-ab18e3ab29a2", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "new", + "type": "MEMBER_OF_GROUP" + } + ], + "result": { + "description": "Deleted Member Of Group new", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "adminui", + "123abc123-12ab-1234-1abc-abc123abc12", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/users/123abc123-12ab-1234-1abc-abc123abc12/memberOfGroups/af26d367-a058-4f73-a697-ab18e3ab29a2", + "path": "/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/users/123abc123-12ab-1234-1abc-abc123abc12/memberOfGroups/af26d367-a058-4f73-a697-ab18e3ab29a2", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + }, + { + "@timestamp": "2022-08-08T15:31:08.237Z", + "client": { + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "PingOne Admin Console" + } + }, + "ecs": { + "version": "8.4.0" + }, + "event": { + "action": "user.access_allowed", + "category": [ + "iam", + "configuration" + ], + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "kind": "event", + "original": "{\"_embedded\":{},\"action\":{\"type\":\"USER.ACCESS_ALLOWED\"},\"actors\":{\"client\":{\"environment\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\"},\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/applications/123abc123-12ab-1234-1abc-abc123abc12\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"PingOne Admin Console\",\"type\":\"CLIENT\"},\"user\":{\"environment\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\"},\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/users/123abc123-12ab-1234-1abc-abc123abc12\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"population\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\"},\"type\":\"USER\"}},\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"recordedAt\":\"2022-08-08T15:31:08.237Z\",\"resources\":[{\"environment\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\"},\"href\":\"https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/users/123abc123-12ab-1234-1abc-abc123abc12\",\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\",\"name\":\"example@gmail.com\",\"population\":{\"id\":\"123abc123-12ab-1234-1abc-abc123abc12\"},\"type\":\"USER\"}],\"result\":{\"description\":\"Passed role access control\",\"status\":\"SUCCESS\"}}", + "outcome": "success", + "type": [ + "user", + "allowed", + "access" + ] + }, + "ping_one": { + "audit": { + "action": { + "type": "USER.ACCESS_ALLOWED" + }, + "actors": { + "client": { + "environment": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "href": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/applications/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "PingOne Admin Console", + "type": "CLIENT" + }, + "user": { + "environment": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "href": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "type": "USER" + } + }, + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "recorded_at": "2022-08-08T15:31:08.237Z", + "resources": [ + { + "environment": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "href": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/users/123abc123-12ab-1234-1abc-abc123abc12", + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com", + "population": { + "id": "123abc123-12ab-1234-1abc-abc123abc12" + }, + "type": "USER" + } + ], + "result": { + "description": "Passed role access control", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "123abc123-12ab-1234-1abc-abc123abc12", + "PingOne Admin Console", + "example@gmail.com" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields" + ], + "url": { + "domain": "api.pingone.asia", + "original": "https://api.pingone.asia/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/users/123abc123-12ab-1234-1abc-abc123abc12", + "path": "/v1/environments/123abc123-12ab-1234-1abc-abc123abc12/users/123abc123-12ab-1234-1abc-abc123abc12", + "scheme": "https" + }, + "user": { + "id": "123abc123-12ab-1234-1abc-abc123abc12", + "name": "example@gmail.com" + } + } + ] +} \ No newline at end of file diff --git a/packages/ping_one/data_stream/audit/_dev/test/system/test-http-endpoint-config.yml b/packages/ping_one/data_stream/audit/_dev/test/system/test-http-endpoint-config.yml new file mode 100644 index 00000000000..6c5788bf5aa --- /dev/null +++ b/packages/ping_one/data_stream/audit/_dev/test/system/test-http-endpoint-config.yml @@ -0,0 +1,10 @@ +service: ping-one-audit-http-endpoint +service_notify_signal: SIGHUP +input: http_endpoint +vars: + listen_address: 0.0.0.0 +data_stream: + vars: + listen_port: 9577 + preserve_original_event: true + preserve_duplicate_custom_fields: true diff --git a/packages/ping_one/data_stream/audit/_dev/test/system/test-httpjson-config.yml b/packages/ping_one/data_stream/audit/_dev/test/system/test-httpjson-config.yml new file mode 100644 index 00000000000..66832fb30ad --- /dev/null +++ b/packages/ping_one/data_stream/audit/_dev/test/system/test-httpjson-config.yml @@ -0,0 +1,12 @@ +input: httpjson +service: ping_one +vars: + api_path: http://{{Hostname}}:{{Port}} + token_url: http://{{Hostname}}:{{Port}}/xxxx/as/token + environment_id: xxxx + client_id: xxxx + client_secret: xxxx +data_stream: + vars: + preserve_original_event: true + preserve_duplicate_custom_fields: true diff --git a/packages/ping_one/data_stream/audit/agent/stream/http_endpoint.yml.hbs b/packages/ping_one/data_stream/audit/agent/stream/http_endpoint.yml.hbs new file mode 100644 index 00000000000..f0a651ee8ff --- /dev/null +++ b/packages/ping_one/data_stream/audit/agent/stream/http_endpoint.yml.hbs @@ -0,0 +1,32 @@ +listen_address: {{listen_address}} +listen_port: {{listen_port}} +url: {{url}} +{{#if secret_header}} +secret.header: {{secret_header}} +{{/if}} +{{#if secret_value}} +secret.value: {{secret_value}} +{{/if}} +{{#if preserve_original_event}} +preserve_original_event: true +{{/if}} +tags: +{{#if preserve_original_event}} + - preserve_original_event +{{/if}} +{{#if preserve_duplicate_custom_fields}} + - preserve_duplicate_custom_fields +{{/if}} +{{#each tags as |tag|}} + - {{tag}} +{{/each}} +{{#contains "forwarded" tags}} +publisher_pipeline.disable_host: true +{{/contains}} +{{#if ssl}} +ssl: {{ssl}} +{{/if}} +{{#if processors}} +processors: +{{processors}} +{{/if}} diff --git a/packages/ping_one/data_stream/audit/agent/stream/httpjson.yml.hbs b/packages/ping_one/data_stream/audit/agent/stream/httpjson.yml.hbs new file mode 100644 index 00000000000..194c3b91dfd --- /dev/null +++ b/packages/ping_one/data_stream/audit/agent/stream/httpjson.yml.hbs @@ -0,0 +1,54 @@ +config_version: 2 +interval: {{interval}} +{{#if proxy_url }} +request.proxy_url: {{proxy_url}} +{{/if}} +{{#if ssl}} +request.ssl: {{ssl}} +{{/if}} +request.method: GET +request.url: {{api_path}}/v1/environments/{{environment_id}}/activities +{{#if http_client_timeout}} +request.timeout: {{http_client_timeout}} +{{/if}} +auth.oauth2: + client.id: {{client_id}} + client.secret: {{client_secret}} + token_url: {{token_url}} + endpoint_params: + grant_type: client_credentials +request.transforms: + - set: + target: url.params.limit + value: '500' + - set: + target: url.params.filter + value: '[[sprintf "recordedAt gt %q AND recordedAt lt %q" (formatDate (parseDate .cursor.last_recorded_at) "2006-01-02T15:04:05.999Z") (formatDate (now) "2006-01-02T15:04:05.999Z")]]' + default: '[[sprintf "recordedAt gt %q AND recordedAt lt %q" (formatDate (now (parseDuration "-{{initial_interval}}")) "2006-01-02T15:04:05.999Z") (formatDate (now) "2006-01-02T15:04:05.999Z")]]' +response.pagination: + - set: + target: url.value + value: '[[if index .last_response.body._links "next"]][[.last_response.body._links.next.href]][[else]][[.last_response.terminate_pagination]][[end]]' + fail_on_template_error: true +cursor: + last_recorded_at: + value: '[[if (eq .last_response.page 1)]][[.first_event.recordedAt]][[end]]' +response.split: + target: body._embedded.activities +tags: +{{#if preserve_original_event}} + - preserve_original_event +{{/if}} +{{#if preserve_duplicate_custom_fields}} + - preserve_duplicate_custom_fields +{{/if}} +{{#each tags as |tag|}} + - {{tag}} +{{/each}} +{{#contains "forwarded" tags}} +publisher_pipeline.disable_host: true +{{/contains}} +{{#if processors}} +processors: +{{processors}} +{{/if}} diff --git a/packages/ping_one/data_stream/audit/elasticsearch/ingest_pipeline/default.yml b/packages/ping_one/data_stream/audit/elasticsearch/ingest_pipeline/default.yml new file mode 100644 index 00000000000..02c18fbfb8a --- /dev/null +++ b/packages/ping_one/data_stream/audit/elasticsearch/ingest_pipeline/default.yml @@ -0,0 +1,319 @@ +--- +description: Pipeline for processing audit logs. +processors: + - set: + field: ecs.version + value: '8.4.0' + - set: + field: event.kind + value: event + - rename: + field: message + target_field: event.original + ignore_missing: true + - json: + field: event.original + target_field: json + ignore_failure: true + - append: + field: event.category + value: [iam] + - append: + field: event.category + if: ctx.json?.action?.type?.toLowerCase().contains('created') || ctx.json.action.type.toLowerCase().contains('deleted') || ctx.json.action.type.toLowerCase().contains('updated') || ctx.json.action.type.toLowerCase().contains('access_allowed') + value: [configuration] + - append: + field: event.type + if: ctx.json?.action?.type?.toLowerCase().contains('created') + value: [creation] + - append: + field: event.type + if: ctx.json?.action?.type?.toLowerCase().contains('deleted') + value: [deletion] + - append: + field: event.type + if: ctx.json?.action?.type?.toLowerCase().contains('updated') + value: [change] + - append: + field: event.type + if: ctx.json?.action?.type?.toLowerCase().contains('user') + value: [user] + - append: + field: event.type + if: ctx.json?.action?.type?.toLowerCase().contains('group') + value: [group] + - append: + field: event.type + if: ctx.json?.action?.type?.toLowerCase().contains('allowed') + value: [allowed] + - append: + field: event.type + if: ctx.json?.action?.type?.toLowerCase().contains('denied') + value: [denied] + - append: + field: event.type + if: ctx.json?.action?.type?.toLowerCase().contains('started') + value: [start] + - append: + field: event.type + if: ctx.json?.action?.type?.toLowerCase().contains('access_allowed') + value: [access] + - append: + field: event.category + if: ctx.json?.action?.type?.toLowerCase().contains('password.check_succeeded') + value: [authentication] + - append: + field: event.category + if: ctx.json?.action?.type?.toLowerCase().contains('email') + value: [email] + - set: + field: event.type + if: ctx.event?.type == null + value: [info] + - fingerprint: + fields: + - json.recordedAt + - json.id + target_field: _id + ignore_missing: true + - date: + field: json.createdAt + target_field: ping_one.audit.created_at + if: ctx.json?.createdAt != null && ctx.json?.createdAt != '' + formats: + - ISO8601 + on_failure: + - append: + field: error.message + value: '{{{_ingest.on_failure_message}}}' + - rename: + field: json._embedded + target_field: ping_one.audit.embedded + ignore_missing: true + - rename: + field: json.tags + target_field: ping_one.audit.tags + ignore_missing: true + - foreach: + field: ping_one.audit.tags + processor: + append: + field: tags + value: '{{{_ingest._value}}}' + allow_duplicates: false + ignore_failure: true + ignore_failure: true + if: ctx.ping_one?.audit?.tags != null && ctx.ping_one?.audit?.tags instanceof List + - rename: + field: json.id + target_field: ping_one.audit.id + ignore_missing: true + - set: + field: event.id + copy_from: ping_one.audit.id + ignore_failure: true + - date: + field: json.recordedAt + target_field: ping_one.audit.recorded_at + if: ctx.json?.recordedAt != null && ctx.json?.recordedAt != '' + formats: + - ISO8601 + on_failure: + - append: + field: error.message + value: '{{{_ingest.on_failure_message}}}' + - set: + field: '@timestamp' + copy_from: ping_one.audit.recorded_at + ignore_failure: true + - rename: + field: json.correlationId + target_field: ping_one.audit.correlation.id + ignore_missing: true + - rename: + field: json.actors.client.id + target_field: ping_one.audit.actors.client.id + ignore_missing: true + - set: + field: client.user.id + copy_from: ping_one.audit.actors.client.id + ignore_failure: true + - rename: + field: json.actors.client.name + target_field: ping_one.audit.actors.client.name + ignore_missing: true + - set: + field: client.user.name + copy_from: ping_one.audit.actors.client.name + ignore_failure: true + - rename: + field: json.actors.client.environment.id + target_field: ping_one.audit.actors.client.environment.id + ignore_missing: true + - rename: + field: json.actors.client.href + target_field: ping_one.audit.actors.client.href + ignore_missing: true + - rename: + field: json.actors.client.type + target_field: ping_one.audit.actors.client.type + ignore_missing: true + - append: + field: related.user + value: '{{{client.user.id}}}' + if: ctx.client?.user?.id != null + allow_duplicates: false + ignore_failure: true + - append: + field: related.user + value: '{{{client.user.name}}}' + if: ctx.client?.user?.name != null + allow_duplicates: false + ignore_failure: true + - rename: + field: json.actors.user.id + target_field: ping_one.audit.actors.user.id + ignore_missing: true + - set: + field: user.id + copy_from: ping_one.audit.actors.user.id + ignore_failure: true + - rename: + field: json.actors.user.name + target_field: ping_one.audit.actors.user.name + ignore_missing: true + - set: + field: user.name + copy_from: ping_one.audit.actors.user.name + ignore_failure: true + - rename: + field: json.actors.user.population.id + target_field: ping_one.audit.actors.user.population.id + ignore_missing: true + - rename: + field: json.actors.user.environment.id + target_field: ping_one.audit.actors.user.environment.id + ignore_missing: true + - rename: + field: json.actors.user.href + target_field: ping_one.audit.actors.user.href + ignore_missing: true + - rename: + field: json.actors.user.type + target_field: ping_one.audit.actors.user.type + ignore_missing: true + - append: + field: related.user + value: '{{{user.id}}}' + if: ctx.user?.id != null + allow_duplicates: false + ignore_failure: true + - append: + field: related.user + value: '{{{user.name}}}' + if: ctx.user?.name != null + allow_duplicates: false + ignore_failure: true + - rename: + field: json.action.type + target_field: ping_one.audit.action.type + ignore_missing: true + - set: + field: event.action + copy_from: ping_one.audit.action.type + ignore_failure: true + - lowercase: + field: event.action + ignore_missing: true + - rename: + field: json.action.description + target_field: ping_one.audit.action.description + ignore_missing: true + - foreach: + field: json.resources + processor: + uri_parts: + field: _ingest._value.href + ignore_failure: true + ignore_failure: true + if: ctx.json?.resources != null && ctx.json?.resources instanceof List + - rename: + field: json.resources + target_field: ping_one.audit.resources + ignore_missing: true + - rename: + field: json.result.id + target_field: ping_one.audit.result.id + ignore_missing: true + - rename: + field: json.result.status + target_field: ping_one.audit.result.status + ignore_missing: true + - set: + field: event.outcome + value: success + if: ctx.ping_one?.audit?.result?.status == 'SUCCESS' || ctx.ping_one?.audit?.result?.status == 'succeeded' + ignore_failure: true + - set: + field: event.outcome + value: failure + if: ctx.ping_one?.audit?.result?.status == 'FAILURE' || ctx.ping_one?.audit?.result?.status == 'failed' + ignore_failure: true + - rename: + field: json.result.description + target_field: ping_one.audit.result.description + ignore_missing: true + - remove: + field: + - json + ignore_missing: true +# Remove ping_one.audit fields that are copied into an ECS field. + - foreach: + field: ping_one.audit.resources + processor: + remove: + field: _ingest._value.href + ignore_failure: true + ignore_missing: true + ignore_failure: true + if: ctx.ping_one?.audit?.resources != null && ctx.ping_one?.audit?.resources instanceof List && (ctx.tags == null || !(ctx.tags.contains('preserve_duplicate_custom_fields'))) + - remove: + if: ctx.tags == null || !(ctx.tags.contains('preserve_duplicate_custom_fields')) + field: + - ping_one.audit.recorded_at + - ping_one.audit.tags + - ping_one.audit.id + - ping_one.audit.result.status + - ping_one.audit.action.type + - ping_one.audit.actors.user.id + - ping_one.audit.actors.user.name + - ping_one.audit.actors.client.id + - ping_one.audit.actors.client.name + ignore_failure: true + ignore_missing: true + - remove: + field: event.original + if: ctx.tags == null || !(ctx.tags.contains('preserve_original_event')) + ignore_failure: true + ignore_missing: true + - script: + description: Drops null/empty values recursively. + lang: painless + source: + boolean dropEmptyFields(Object object) { + if (object == null || object == '') { + return true; + } else if (object instanceof Map) { + ((Map) object).values().removeIf(value -> dropEmptyFields(value)); + return (((Map) object).size() == 0); + } else if (object instanceof List) { + ((List) object).removeIf(value -> dropEmptyFields(value)); + return (((List) object).length == 0); + } + return false; + } + dropEmptyFields(ctx); +on_failure: +- append: + field: error.message + value: '{{{ _ingest.on_failure_message }}}' diff --git a/packages/ping_one/data_stream/audit/fields/agent.yml b/packages/ping_one/data_stream/audit/fields/agent.yml new file mode 100644 index 00000000000..bb99e5f0b19 --- /dev/null +++ b/packages/ping_one/data_stream/audit/fields/agent.yml @@ -0,0 +1,183 @@ +- name: cloud + title: Cloud + group: 2 + description: Fields related to the cloud or infrastructure the events are coming from. + footnote: 'Examples: If Metricbeat is running on an EC2 host and fetches data from its host, the cloud info contains the data about this machine. If Metricbeat runs on a remote machine outside the cloud and fetches data from a service running in the cloud, the field contains cloud data from the machine the service is running on.' + type: group + fields: + - name: account.id + level: extended + type: keyword + ignore_above: 1024 + description: 'The cloud account or organization ID used to identify different entities in a multi-tenant environment. Examples: AWS account ID, Google Cloud ORG ID, or other unique identifier.' + example: 666777888999 + - name: availability_zone + level: extended + type: keyword + ignore_above: 1024 + description: Availability zone in which this host is running. + example: us-east-1c + - name: instance.id + level: extended + type: keyword + ignore_above: 1024 + description: Instance ID of the host machine. + example: i-1234567890abcdef0 + - name: instance.name + level: extended + type: keyword + ignore_above: 1024 + description: Instance name of the host machine. + - name: machine.type + level: extended + type: keyword + ignore_above: 1024 + description: Machine type of the host machine. + example: t2.medium + - name: provider + level: extended + type: keyword + ignore_above: 1024 + description: Name of the cloud provider. Example values are aws, azure, gcp, or digitalocean. + example: aws + - name: region + level: extended + type: keyword + ignore_above: 1024 + description: Region in which this host is running. + example: us-east-1 + - name: project.id + type: keyword + description: Name of the project in Google Cloud. + - name: image.id + type: keyword + description: Image ID for the cloud instance. +- name: container + title: Container + group: 2 + description: 'Container fields are used for meta information about the specific container that is the source of information. These fields help correlate data based containers from any runtime.' + type: group + fields: + - name: id + level: core + type: keyword + ignore_above: 1024 + description: Unique container ID. + - name: image.name + level: extended + type: keyword + ignore_above: 1024 + description: Name of the image the container was built on. + - name: labels + level: extended + type: object + object_type: keyword + description: Image labels. + - name: name + level: extended + type: keyword + ignore_above: 1024 + description: Container name. +- name: host + title: Host + group: 2 + description: 'A host is defined as a general computing instance. ECS host.* fields should be populated with details about the host on which the event happened, or from which the measurement was taken. Host types include hardware, virtual machines, Docker containers, and Kubernetes nodes.' + type: group + fields: + - name: architecture + level: core + type: keyword + ignore_above: 1024 + description: Operating system architecture. + example: x86_64 + - name: domain + level: extended + type: keyword + ignore_above: 1024 + description: 'Name of the domain of which the host is a member. For example, on Windows this could be the host''s Active Directory domain or NetBIOS domain name. For Linux this could be the domain of the host''s LDAP provider.' + example: CONTOSO + default_field: false + - name: hostname + level: core + type: keyword + ignore_above: 1024 + description: 'Hostname of the host. It normally contains what the `hostname` command returns on the host machine.' + - name: id + level: core + type: keyword + ignore_above: 1024 + description: 'Unique host ID. As hostname is not always unique, use values that are meaningful in your environment. Example: The current usage of `beat.name`.' + - name: ip + level: core + type: ip + description: Host IP addresses. + - name: mac + level: core + type: keyword + ignore_above: 1024 + description: Host mac addresses. + - name: name + level: core + type: keyword + ignore_above: 1024 + description: 'Name of the host. It can contain what `hostname` returns on Unix systems, the fully qualified domain name, or a name specified by the user. The sender decides which value to use.' + - name: os.family + level: extended + type: keyword + ignore_above: 1024 + description: OS family (such as redhat, debian, freebsd, windows). + example: debian + - name: os.kernel + level: extended + type: keyword + ignore_above: 1024 + description: Operating system kernel version as a raw string. + example: 4.4.0-112-generic + - name: os.name + level: extended + type: keyword + ignore_above: 1024 + multi_fields: + - name: text + type: text + norms: false + default_field: false + description: Operating system name, without the version. + example: Mac OS X + - name: os.platform + level: extended + type: keyword + ignore_above: 1024 + description: Operating system platform (such centos, ubuntu, windows). + example: darwin + - name: os.version + level: extended + type: keyword + ignore_above: 1024 + description: Operating system version as a raw string. + example: 10.14.1 + - name: type + level: core + type: keyword + ignore_above: 1024 + description: 'Type of host. For Cloud providers this can be the machine type like `t2.medium`. If vm, this could be the container, for example, or other information meaningful in your environment.' + - name: containerized + type: boolean + description: >- + If the host is a container. + - name: os.build + type: keyword + example: '18D109' + description: >- + OS build information. + - name: os.codename + type: keyword + example: 'stretch' + description: >- + OS codename, if any. +- name: input.type + type: keyword + description: Input type +- name: log.offset + type: long + description: Log offset diff --git a/packages/ping_one/data_stream/audit/fields/base-fields.yml b/packages/ping_one/data_stream/audit/fields/base-fields.yml new file mode 100644 index 00000000000..d1715693cd3 --- /dev/null +++ b/packages/ping_one/data_stream/audit/fields/base-fields.yml @@ -0,0 +1,20 @@ +- name: data_stream.type + type: constant_keyword + description: Data stream type. +- name: data_stream.dataset + type: constant_keyword + description: Data stream dataset. +- name: data_stream.namespace + type: constant_keyword + description: Data stream namespace. +- name: '@timestamp' + type: date + description: Event timestamp. +- name: event.module + type: constant_keyword + description: Event module. + value: ping_one +- name: event.dataset + type: constant_keyword + description: Event dataset. + value: ping_one.audit diff --git a/packages/ping_one/data_stream/audit/fields/ecs.yml b/packages/ping_one/data_stream/audit/fields/ecs.yml new file mode 100644 index 00000000000..3f6d623b9f4 --- /dev/null +++ b/packages/ping_one/data_stream/audit/fields/ecs.yml @@ -0,0 +1,38 @@ +- external: ecs + name: client.user.id +- external: ecs + name: client.user.name +- external: ecs + name: ecs.version +- external: ecs + name: event.action +- external: ecs + name: event.category +- external: ecs + name: event.created +- external: ecs + name: event.id +- external: ecs + name: event.kind +- external: ecs + name: event.original +- external: ecs + name: event.outcome +- external: ecs + name: event.type +- external: ecs + name: related.user +- external: ecs + name: tags +- external: ecs + name: url.domain +- external: ecs + name: url.original +- external: ecs + name: url.path +- external: ecs + name: url.scheme +- external: ecs + name: user.id +- external: ecs + name: user.name diff --git a/packages/ping_one/data_stream/audit/fields/fields.yml b/packages/ping_one/data_stream/audit/fields/fields.yml new file mode 100644 index 00000000000..377b2c88373 --- /dev/null +++ b/packages/ping_one/data_stream/audit/fields/fields.yml @@ -0,0 +1,122 @@ +- name: ping_one.audit + type: group + fields: + - name: action + type: group + fields: + - name: description + type: text + description: A string that specifies the description of the action performed. + - name: type + type: keyword + description: A string that specifies the type of action performed (such as authentication or password reset). + - name: actors + type: group + fields: + - name: client + type: group + fields: + - name: environment + type: group + fields: + - name: id + type: keyword + description: A string that specifies the ID of the environment resource associated with the client. + - name: href + type: keyword + description: A string that specifies the URL for the specified client resource. + - name: id + type: keyword + description: A string that specifies the ID of the client. + - name: name + type: keyword + description: A string that specifies the name assigned to the client for PingOne sign on. + - name: type + type: keyword + description: A string that specifies the type of actor. Options are USER or CLIENT. + - name: user + type: group + fields: + - name: environment + type: group + fields: + - name: id + type: keyword + description: A string that specifies the ID of the environment resource associated with the user. + - name: href + type: keyword + description: A string that specifies the URL for the specified user resource. + - name: id + type: keyword + description: A string that specifies the ID of the user. + - name: name + type: keyword + description: A string that specifies the name assigned to the user for PingOne sign on. + - name: population + type: group + fields: + - name: id + type: keyword + description: A string that specifies the ID of the population resource associated with the user. + - name: type + type: keyword + description: A string that specifies the type of actor. Options are USER or CLIENT. + - name: correlation + type: group + fields: + - name: id + type: keyword + description: A string that specifies a PingOne identifier for multiple messages in a transaction. + - name: created_at + type: date + description: The date and time at which the event was created (ISO 8601 format). + - name: embedded + type: flattened + - name: id + type: keyword + description: A string that specifies the ID of the audit activity event. + - name: recorded_at + type: date + description: The date and time at which the event was recorded (ISO 8601 format). + - name: resources + type: group + fields: + - name: environment + type: group + fields: + - name: id + type: keyword + description: The UUID assigned as the key for the environment resource. + - name: href + type: keyword + description: A string that specifies the URL for the specified resource. + - name: id + type: keyword + description: A string that specifies the ID assigned as the key for the identifier resource (such as the environment, population or event message). + - name: name + type: keyword + description: A string that can be either the user name or the name of the environment, based on the resource type. + - name: population + type: group + fields: + - name: id + type: keyword + description: The UUID assigned as the key for the population resource. + - name: type + type: keyword + description: A string that specifies the type of resource associated with the event. Options are USER, ORGANIZATION, or ENVIRONMENT. + - name: result + type: group + fields: + - name: description + type: text + description: A string that specifies the description of the result of the operation. + - name: id + type: keyword + description: A string that specifies the ID for the result of the operation. + - name: status + type: keyword + description: A string that specifies the result of the operation. Options are succeeded or failed. + - name: tags + type: keyword + description: A string identifying the activity as the action of an administrator on other administrators. diff --git a/packages/ping_one/data_stream/audit/manifest.yml b/packages/ping_one/data_stream/audit/manifest.yml new file mode 100644 index 00000000000..2f0bbf0450d --- /dev/null +++ b/packages/ping_one/data_stream/audit/manifest.yml @@ -0,0 +1,119 @@ +title: Collect Audit logs from PingOne +type: logs +streams: + - input: http_endpoint + template_path: http_endpoint.yml.hbs + title: Audit logs + description: Collect audit logs from PingOne via HTTP Endpoint. + vars: + - name: listen_port + type: integer + title: Listen Port + description: The port number on which listener binds to. + multi: false + required: true + show_user: true + default: 9100 + - name: url + type: text + title: URL + description: This options specific which URL path to accept requests on. Defaults to /. + multi: false + required: false + show_user: false + default: / + - name: tags + type: text + title: Tags + multi: true + required: true + show_user: false + default: + - forwarded + - ping_one-audit + - name: preserve_original_event + required: true + show_user: true + title: Preserve original event + description: Preserves a raw copy of the original event, added to the field `event.original`. + type: bool + multi: false + default: false + - name: preserve_duplicate_custom_fields + required: true + show_user: false + title: Preserve duplicate custom fields + description: Preserve ping_one.audit fields that were copied to Elastic Common Schema (ECS) fields. + type: bool + multi: false + default: false + - name: processors + type: yaml + title: Processors + multi: false + required: false + show_user: false + description: >- + Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details. + - input: httpjson + title: Audit logs + description: Collect audit logs from PingOne via REST API. + template_path: httpjson.yml.hbs + vars: + - name: initial_interval + type: text + title: Initial Interval + description: How far back to pull the activities from PingOne. NOTE:- Supported units for this parameter are h/m/s. (Maximum - 2 years) + multi: false + required: true + show_user: true + default: 24h + - name: interval + type: text + title: Interval + description: Duration between requests to the PingOne API. NOTE:- Supported units for this parameter are h/m/s. + default: 1m + multi: false + required: true + show_user: true + - name: http_client_timeout + type: text + title: HTTP Client Timeout + description: Duration before declaring that the HTTP client connection has timed out. NOTE:- Valid time units are ns, us, ms, s, m, h. + multi: false + required: true + show_user: false + default: 30s + - name: tags + type: text + title: Tags + multi: true + required: true + show_user: false + default: + - forwarded + - ping_one-audit + - name: preserve_original_event + required: true + show_user: true + title: Preserve original event + description: Preserves a raw copy of the original event, added to the field `event.original`. + type: bool + multi: false + default: false + - name: preserve_duplicate_custom_fields + required: true + show_user: false + title: Preserve duplicate custom fields + description: Preserve ping_one.audit fields that were copied to Elastic Common Schema (ECS) fields. + type: bool + multi: false + default: false + - name: processors + type: yaml + title: Processors + multi: false + required: false + show_user: false + description: >- + Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details. diff --git a/packages/ping_one/data_stream/audit/sample_event.json b/packages/ping_one/data_stream/audit/sample_event.json new file mode 100644 index 00000000000..d7748f57e47 --- /dev/null +++ b/packages/ping_one/data_stream/audit/sample_event.json @@ -0,0 +1,110 @@ +{ + "@timestamp": "2022-06-10T17:04:25.518Z", + "agent": { + "ephemeral_id": "3ec0008f-3b03-448a-8617-f9798d15e68d", + "hostname": "docker-fleet-agent", + "id": "8e2910ec-3bb9-439a-90a1-acedb9847388", + "name": "docker-fleet-agent", + "type": "filebeat", + "version": "7.17.0" + }, + "client": { + "user": { + "id": "830109c7-f8aa-491e-b2f2-8f7532ae85e9", + "name": "RichardPatchetWorker" + } + }, + "data_stream": { + "dataset": "ping_one.audit", + "namespace": "ep", + "type": "logs" + }, + "ecs": { + "version": "8.4.0" + }, + "elastic_agent": { + "id": "8e2910ec-3bb9-439a-90a1-acedb9847388", + "snapshot": false, + "version": "7.17.0" + }, + "event": { + "action": "group.created", + "agent_id_status": "verified", + "category": [ + "iam", + "configuration" + ], + "created": "2022-10-03T07:21:04.317Z", + "dataset": "ping_one.audit", + "id": "2076da4e-81ae-4cf4-803a-4ccc16419bc9", + "ingested": "2022-10-03T07:21:05Z", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.com/v1/environments/bf4cb8b8-33e9-4576-8d70-c0ab679fe0fa/activities/2076da4e-81ae-4cf4-803a-4ccc16419bc9\"}},\"action\":{\"description\":\"Group Created\",\"type\":\"GROUP.CREATED\"},\"actors\":{\"client\":{\"environment\":{\"id\":\"bf4cb8b8-33e9-4576-8d70-c0ab679fe0fa\"},\"href\":\"https://api.pingone.com/v1/environments/bf4cb8b8-33e9-4576-8d70-c0ab679fe0fa/applications/830109c7-f8aa-491e-b2f2-8f7532ae85e9\",\"id\":\"830109c7-f8aa-491e-b2f2-8f7532ae85e9\",\"name\":\"RichardPatchetWorker\",\"type\":\"CLIENT\"}},\"correlationId\":\"28b1f3ca-2ab6-4cc0-b33f-50153c7c9c14\",\"createdAt\":\"2022-06-10T17:04:25.534Z\",\"id\":\"2076da4e-81ae-4cf4-803a-4ccc16419bc9\",\"recordedAt\":\"2022-06-10T17:04:25.518Z\",\"resources\":[{\"environment\":{\"id\":\"bf4cb8b8-33e9-4576-8d70-c0ab679fe0fa\"},\"href\":\"https://api.pingone.com/v1/environments/bf4cb8b8-33e9-4576-8d70-c0ab679fe0fa/groups/ac05e3ff-60e2-4e03-bbac-f9455e6a6d51\",\"id\":\"ac05e3ff-60e2-4e03-bbac-f9455e6a6d51\",\"name\":\"Managers\",\"type\":\"GROUP\"}],\"result\":{\"description\":\"Created Group Managers\",\"status\":\"SUCCESS\"}}", + "outcome": "success", + "type": [ + "creation", + "group" + ] + }, + "input": { + "type": "httpjson" + }, + "ping_one": { + "audit": { + "action": { + "description": "Group Created", + "type": "GROUP.CREATED" + }, + "actors": { + "client": { + "environment": { + "id": "bf4cb8b8-33e9-4576-8d70-c0ab679fe0fa" + }, + "href": "https://api.pingone.com/v1/environments/bf4cb8b8-33e9-4576-8d70-c0ab679fe0fa/applications/830109c7-f8aa-491e-b2f2-8f7532ae85e9", + "id": "830109c7-f8aa-491e-b2f2-8f7532ae85e9", + "name": "RichardPatchetWorker", + "type": "CLIENT" + } + }, + "correlation": { + "id": "28b1f3ca-2ab6-4cc0-b33f-50153c7c9c14" + }, + "created_at": "2022-06-10T17:04:25.534Z", + "id": "2076da4e-81ae-4cf4-803a-4ccc16419bc9", + "recorded_at": "2022-06-10T17:04:25.518Z", + "resources": [ + { + "environment": { + "id": "bf4cb8b8-33e9-4576-8d70-c0ab679fe0fa" + }, + "href": "https://api.pingone.com/v1/environments/bf4cb8b8-33e9-4576-8d70-c0ab679fe0fa/groups/ac05e3ff-60e2-4e03-bbac-f9455e6a6d51", + "id": "ac05e3ff-60e2-4e03-bbac-f9455e6a6d51", + "name": "Managers", + "type": "GROUP" + } + ], + "result": { + "description": "Created Group Managers", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "830109c7-f8aa-491e-b2f2-8f7532ae85e9", + "RichardPatchetWorker" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields", + "forwarded", + "ping_one-audit" + ], + "url": { + "domain": "api.pingone.com", + "original": "https://api.pingone.com/v1/environments/bf4cb8b8-33e9-4576-8d70-c0ab679fe0fa/groups/ac05e3ff-60e2-4e03-bbac-f9455e6a6d51", + "path": "/v1/environments/bf4cb8b8-33e9-4576-8d70-c0ab679fe0fa/groups/ac05e3ff-60e2-4e03-bbac-f9455e6a6d51", + "scheme": "https" + } +} \ No newline at end of file diff --git a/packages/ping_one/docs/README.md b/packages/ping_one/docs/README.md new file mode 100644 index 00000000000..c8d8475889d --- /dev/null +++ b/packages/ping_one/docs/README.md @@ -0,0 +1,265 @@ +# PingOne + +## Overview + +The [PingOne](https://www.pingidentity.com/en.html) integration allows you to monitor audit activity. PingOne is a cloud-based framework for secure identity access management. + +Use the PingOne integration to collect and parse data from the REST APIs or HTTP Endpoint input. Then visualize that data in Kibana. + +For example, you could use the data from this integration to know which action or activity is performed against a defined PingOne resource, and also track the actor or agent who initiated the action. + +## Data streams + +The PingOne integration collects logs for one type of event: Audit. + +**Audit** reporting stores incoming audit messages in a cache and provides endpoints for requesting audit events for a specific time period. + +## Requirements + +You need Elasticsearch for storing and searching your data and Kibana for visualizing and managing it. You can use our hosted Elasticsearch Service on Elastic Cloud, which is recommended, or self-manage the Elastic Stack on your own hardware. + +This module has been tested against `PingOne API version 1.0`. + +## Setup + +### To collect data from PingOne REST APIs, follow below steps: + +1. Go to the [PingOne console](https://www.pingidentity.com/en/account/sign-on.html), select PingOne as an Account and add username and password. +2. Select Environment. +3. Go to **Connections -> Applications**. +4. Click **+** to create an application. +5. Enter an Application Name. +6. Select **Worker** as an application type. +7. Click Save. +8. Click the toggle switch to enable the application, if it is not already enabled. +9. Go to **Configuration**. +10. Copy **Token Endpoint**. +11. Copy **Environment ID**, **Client ID** and **Client Secret** from General Section. + +For more details, see [Documentation](https://docs.pingidentity.com/bundle/pingone/page/vpz1564020488577.html). + +**Note** : Value of initial interval must be less than 2 years. + +### To collect data from PingOne via HTTP Endpoint, follow below steps: + +1. Reference link for configuring [HTTP Endpoint Remote logging](https://docs.pingidentity.com/bundle/pingone/page/sxi1589922927893.html) for PingOne. +2. In Destination, enter the full URL, including the port. +`Example Format: http[s]://{AGENT_ADDRESS}:{AGENT_PORT}/{URL}`. + +**Note** : +- Select Ping Activity Format (JSON) in the format drop down. +- HTTP Endpoint Remote logging will expose the port to the internet, therefore it is advised to have proper network access configured. + +## Logs Reference + +#### audit + +This is the `audit` dataset. + +An example event for `audit` looks as following: + +```json +{ + "@timestamp": "2022-06-10T17:04:25.518Z", + "agent": { + "ephemeral_id": "3ec0008f-3b03-448a-8617-f9798d15e68d", + "hostname": "docker-fleet-agent", + "id": "8e2910ec-3bb9-439a-90a1-acedb9847388", + "name": "docker-fleet-agent", + "type": "filebeat", + "version": "7.17.0" + }, + "client": { + "user": { + "id": "830109c7-f8aa-491e-b2f2-8f7532ae85e9", + "name": "RichardPatchetWorker" + } + }, + "data_stream": { + "dataset": "ping_one.audit", + "namespace": "ep", + "type": "logs" + }, + "ecs": { + "version": "8.4.0" + }, + "elastic_agent": { + "id": "8e2910ec-3bb9-439a-90a1-acedb9847388", + "snapshot": false, + "version": "7.17.0" + }, + "event": { + "action": "group.created", + "agent_id_status": "verified", + "category": [ + "iam", + "configuration" + ], + "created": "2022-10-03T07:21:04.317Z", + "dataset": "ping_one.audit", + "id": "2076da4e-81ae-4cf4-803a-4ccc16419bc9", + "ingested": "2022-10-03T07:21:05Z", + "kind": "event", + "original": "{\"_links\":{\"self\":{\"href\":\"https://api.pingone.com/v1/environments/bf4cb8b8-33e9-4576-8d70-c0ab679fe0fa/activities/2076da4e-81ae-4cf4-803a-4ccc16419bc9\"}},\"action\":{\"description\":\"Group Created\",\"type\":\"GROUP.CREATED\"},\"actors\":{\"client\":{\"environment\":{\"id\":\"bf4cb8b8-33e9-4576-8d70-c0ab679fe0fa\"},\"href\":\"https://api.pingone.com/v1/environments/bf4cb8b8-33e9-4576-8d70-c0ab679fe0fa/applications/830109c7-f8aa-491e-b2f2-8f7532ae85e9\",\"id\":\"830109c7-f8aa-491e-b2f2-8f7532ae85e9\",\"name\":\"RichardPatchetWorker\",\"type\":\"CLIENT\"}},\"correlationId\":\"28b1f3ca-2ab6-4cc0-b33f-50153c7c9c14\",\"createdAt\":\"2022-06-10T17:04:25.534Z\",\"id\":\"2076da4e-81ae-4cf4-803a-4ccc16419bc9\",\"recordedAt\":\"2022-06-10T17:04:25.518Z\",\"resources\":[{\"environment\":{\"id\":\"bf4cb8b8-33e9-4576-8d70-c0ab679fe0fa\"},\"href\":\"https://api.pingone.com/v1/environments/bf4cb8b8-33e9-4576-8d70-c0ab679fe0fa/groups/ac05e3ff-60e2-4e03-bbac-f9455e6a6d51\",\"id\":\"ac05e3ff-60e2-4e03-bbac-f9455e6a6d51\",\"name\":\"Managers\",\"type\":\"GROUP\"}],\"result\":{\"description\":\"Created Group Managers\",\"status\":\"SUCCESS\"}}", + "outcome": "success", + "type": [ + "creation", + "group" + ] + }, + "input": { + "type": "httpjson" + }, + "ping_one": { + "audit": { + "action": { + "description": "Group Created", + "type": "GROUP.CREATED" + }, + "actors": { + "client": { + "environment": { + "id": "bf4cb8b8-33e9-4576-8d70-c0ab679fe0fa" + }, + "href": "https://api.pingone.com/v1/environments/bf4cb8b8-33e9-4576-8d70-c0ab679fe0fa/applications/830109c7-f8aa-491e-b2f2-8f7532ae85e9", + "id": "830109c7-f8aa-491e-b2f2-8f7532ae85e9", + "name": "RichardPatchetWorker", + "type": "CLIENT" + } + }, + "correlation": { + "id": "28b1f3ca-2ab6-4cc0-b33f-50153c7c9c14" + }, + "created_at": "2022-06-10T17:04:25.534Z", + "id": "2076da4e-81ae-4cf4-803a-4ccc16419bc9", + "recorded_at": "2022-06-10T17:04:25.518Z", + "resources": [ + { + "environment": { + "id": "bf4cb8b8-33e9-4576-8d70-c0ab679fe0fa" + }, + "href": "https://api.pingone.com/v1/environments/bf4cb8b8-33e9-4576-8d70-c0ab679fe0fa/groups/ac05e3ff-60e2-4e03-bbac-f9455e6a6d51", + "id": "ac05e3ff-60e2-4e03-bbac-f9455e6a6d51", + "name": "Managers", + "type": "GROUP" + } + ], + "result": { + "description": "Created Group Managers", + "status": "SUCCESS" + } + } + }, + "related": { + "user": [ + "830109c7-f8aa-491e-b2f2-8f7532ae85e9", + "RichardPatchetWorker" + ] + }, + "tags": [ + "preserve_original_event", + "preserve_duplicate_custom_fields", + "forwarded", + "ping_one-audit" + ], + "url": { + "domain": "api.pingone.com", + "original": "https://api.pingone.com/v1/environments/bf4cb8b8-33e9-4576-8d70-c0ab679fe0fa/groups/ac05e3ff-60e2-4e03-bbac-f9455e6a6d51", + "path": "/v1/environments/bf4cb8b8-33e9-4576-8d70-c0ab679fe0fa/groups/ac05e3ff-60e2-4e03-bbac-f9455e6a6d51", + "scheme": "https" + } +} +``` + +**Exported fields** + +| Field | Description | Type | +|---|---|---| +| @timestamp | Event timestamp. | date | +| client.user.id | Unique identifier of the user. | keyword | +| client.user.name | Short name or login of the user. | keyword | +| client.user.name.text | Multi-field of `client.user.name`. | match_only_text | +| cloud.account.id | The cloud account or organization ID used to identify different entities in a multi-tenant environment. Examples: AWS account ID, Google Cloud ORG ID, or other unique identifier. | keyword | +| cloud.availability_zone | Availability zone in which this host is running. | keyword | +| cloud.image.id | Image ID for the cloud instance. | keyword | +| cloud.instance.id | Instance ID of the host machine. | keyword | +| cloud.instance.name | Instance name of the host machine. | keyword | +| cloud.machine.type | Machine type of the host machine. | keyword | +| cloud.project.id | Name of the project in Google Cloud. | keyword | +| cloud.provider | Name of the cloud provider. Example values are aws, azure, gcp, or digitalocean. | keyword | +| cloud.region | Region in which this host is running. | keyword | +| container.id | Unique container ID. | keyword | +| container.image.name | Name of the image the container was built on. | keyword | +| container.labels | Image labels. | object | +| container.name | Container name. | keyword | +| data_stream.dataset | Data stream dataset. | constant_keyword | +| data_stream.namespace | Data stream namespace. | constant_keyword | +| data_stream.type | Data stream type. | constant_keyword | +| ecs.version | ECS version this event conforms to. `ecs.version` is a required field and must exist in all events. When querying across multiple indices -- which may conform to slightly different ECS versions -- this field lets integrations adjust to the schema version of the events. | keyword | +| event.action | The action captured by the event. This describes the information in the event. It is more specific than `event.category`. Examples are `group-add`, `process-started`, `file-created`. The value is normally defined by the implementer. | keyword | +| event.category | This is one of four ECS Categorization Fields, and indicates the second level in the ECS category hierarchy. `event.category` represents the "big buckets" of ECS categories. For example, filtering on `event.category:process` yields all events relating to process activity. This field is closely related to `event.type`, which is used as a subcategory. This field is an array. This will allow proper categorization of some events that fall in multiple categories. | keyword | +| event.created | event.created contains the date/time when the event was first read by an agent, or by your pipeline. This field is distinct from @timestamp in that @timestamp typically contain the time extracted from the original event. In most situations, these two timestamps will be slightly different. The difference can be used to calculate the delay between your source generating an event, and the time when your agent first processed it. This can be used to monitor your agent's or pipeline's ability to keep up with your event source. In case the two timestamps are identical, @timestamp should be used. | date | +| event.dataset | Event dataset. | constant_keyword | +| event.id | Unique ID to describe the event. | keyword | +| event.kind | This is one of four ECS Categorization Fields, and indicates the highest level in the ECS category hierarchy. `event.kind` gives high-level information about what type of information the event contains, without being specific to the contents of the event. For example, values of this field distinguish alert events from metric events. The value of this field can be used to inform how these kinds of events should be handled. They may warrant different retention, different access control, it may also help understand whether the data coming in at a regular interval or not. | keyword | +| event.module | Event module. | constant_keyword | +| event.original | Raw text message of entire event. Used to demonstrate log integrity or where the full log message (before splitting it up in multiple parts) may be required, e.g. for reindex. This field is not indexed and doc_values are disabled. It cannot be searched, but it can be retrieved from `_source`. If users wish to override this and index this field, please see `Field data types` in the `Elasticsearch Reference`. | keyword | +| event.outcome | This is one of four ECS Categorization Fields, and indicates the lowest level in the ECS category hierarchy. `event.outcome` simply denotes whether the event represents a success or a failure from the perspective of the entity that produced the event. Note that when a single transaction is described in multiple events, each event may populate different values of `event.outcome`, according to their perspective. Also note that in the case of a compound event (a single event that contains multiple logical events), this field should be populated with the value that best captures the overall success or failure from the perspective of the event producer. Further note that not all events will have an associated outcome. For example, this field is generally not populated for metric events, events with `event.type:info`, or any events for which an outcome does not make logical sense. | keyword | +| event.type | This is one of four ECS Categorization Fields, and indicates the third level in the ECS category hierarchy. `event.type` represents a categorization "sub-bucket" that, when used along with the `event.category` field values, enables filtering events down to a level appropriate for single visualization. This field is an array. This will allow proper categorization of some events that fall in multiple event types. | keyword | +| host.architecture | Operating system architecture. | keyword | +| host.containerized | If the host is a container. | boolean | +| host.domain | Name of the domain of which the host is a member. For example, on Windows this could be the host's Active Directory domain or NetBIOS domain name. For Linux this could be the domain of the host's LDAP provider. | keyword | +| host.hostname | Hostname of the host. It normally contains what the `hostname` command returns on the host machine. | keyword | +| host.id | Unique host ID. As hostname is not always unique, use values that are meaningful in your environment. Example: The current usage of `beat.name`. | keyword | +| host.ip | Host IP addresses. | ip | +| host.mac | Host mac addresses. | keyword | +| host.name | Name of the host. It can contain what `hostname` returns on Unix systems, the fully qualified domain name, or a name specified by the user. The sender decides which value to use. | keyword | +| host.os.build | OS build information. | keyword | +| host.os.codename | OS codename, if any. | keyword | +| host.os.family | OS family (such as redhat, debian, freebsd, windows). | keyword | +| host.os.kernel | Operating system kernel version as a raw string. | keyword | +| host.os.name | Operating system name, without the version. | keyword | +| host.os.name.text | Multi-field of `host.os.name`. | text | +| host.os.platform | Operating system platform (such centos, ubuntu, windows). | keyword | +| host.os.version | Operating system version as a raw string. | keyword | +| host.type | Type of host. For Cloud providers this can be the machine type like `t2.medium`. If vm, this could be the container, for example, or other information meaningful in your environment. | keyword | +| input.type | Input type | keyword | +| log.offset | Log offset | long | +| ping_one.audit.action.description | A string that specifies the description of the action performed. | text | +| ping_one.audit.action.type | A string that specifies the type of action performed (such as authentication or password reset). | keyword | +| ping_one.audit.actors.client.environment.id | A string that specifies the ID of the environment resource associated with the client. | keyword | +| ping_one.audit.actors.client.href | A string that specifies the URL for the specified client resource. | keyword | +| ping_one.audit.actors.client.id | A string that specifies the ID of the client. | keyword | +| ping_one.audit.actors.client.name | A string that specifies the name assigned to the client for PingOne sign on. | keyword | +| ping_one.audit.actors.client.type | A string that specifies the type of actor. Options are USER or CLIENT. | keyword | +| ping_one.audit.actors.user.environment.id | A string that specifies the ID of the environment resource associated with the user. | keyword | +| ping_one.audit.actors.user.href | A string that specifies the URL for the specified user resource. | keyword | +| ping_one.audit.actors.user.id | A string that specifies the ID of the user. | keyword | +| ping_one.audit.actors.user.name | A string that specifies the name assigned to the user for PingOne sign on. | keyword | +| ping_one.audit.actors.user.population.id | A string that specifies the ID of the population resource associated with the user. | keyword | +| ping_one.audit.actors.user.type | A string that specifies the type of actor. Options are USER or CLIENT. | keyword | +| ping_one.audit.correlation.id | A string that specifies a PingOne identifier for multiple messages in a transaction. | keyword | +| ping_one.audit.created_at | The date and time at which the event was created (ISO 8601 format). | date | +| ping_one.audit.embedded | | flattened | +| ping_one.audit.id | A string that specifies the ID of the audit activity event. | keyword | +| ping_one.audit.recorded_at | The date and time at which the event was recorded (ISO 8601 format). | date | +| ping_one.audit.resources.environment.id | The UUID assigned as the key for the environment resource. | keyword | +| ping_one.audit.resources.href | A string that specifies the URL for the specified resource. | keyword | +| ping_one.audit.resources.id | A string that specifies the ID assigned as the key for the identifier resource (such as the environment, population or event message). | keyword | +| ping_one.audit.resources.name | A string that can be either the user name or the name of the environment, based on the resource type. | keyword | +| ping_one.audit.resources.population.id | The UUID assigned as the key for the population resource. | keyword | +| ping_one.audit.resources.type | A string that specifies the type of resource associated with the event. Options are USER, ORGANIZATION, or ENVIRONMENT. | keyword | +| ping_one.audit.result.description | A string that specifies the description of the result of the operation. | text | +| ping_one.audit.result.id | A string that specifies the ID for the result of the operation. | keyword | +| ping_one.audit.result.status | A string that specifies the result of the operation. Options are succeeded or failed. | keyword | +| ping_one.audit.tags | A string identifying the activity as the action of an administrator on other administrators. | keyword | +| related.user | All the user names or other user identifiers seen on the event. | keyword | +| tags | List of keywords used to tag each event. | keyword | +| url.domain | Domain of the url, such as "www.elastic.co". In some cases a URL may refer to an IP and/or port directly, without a domain name. In this case, the IP address would go to the `domain` field. If the URL contains a literal IPv6 address enclosed by `[` and `]` (IETF RFC 2732), the `[` and `]` characters should also be captured in the `domain` field. | keyword | +| url.original | Unmodified original url as seen in the event source. Note that in network monitoring, the observed URL may be a full URL, whereas in access logs, the URL is often just represented as a path. This field is meant to represent the URL as it was observed, complete or not. | wildcard | +| url.original.text | Multi-field of `url.original`. | match_only_text | +| url.path | Path of the request, such as "/search". | wildcard | +| url.scheme | Scheme of the request, such as "https". Note: The `:` is not part of the scheme. | keyword | +| user.id | Unique identifier of the user. | keyword | +| user.name | Short name or login of the user. | keyword | +| user.name.text | Multi-field of `user.name`. | match_only_text | diff --git a/packages/ping_one/img/ping-one-dashboard.png b/packages/ping_one/img/ping-one-dashboard.png new file mode 100644 index 00000000000..8412a44992d Binary files /dev/null and b/packages/ping_one/img/ping-one-dashboard.png differ diff --git a/packages/ping_one/img/ping-one-logo.svg b/packages/ping_one/img/ping-one-logo.svg new file mode 100644 index 00000000000..3b973fb01e2 --- /dev/null +++ b/packages/ping_one/img/ping-one-logo.svg @@ -0,0 +1,45 @@ + + + + + + + + + + + + + + + + + diff --git a/packages/ping_one/kibana/dashboard/ping_one-60aa0020-0ea5-11ed-9b69-fdafbf89c645.json b/packages/ping_one/kibana/dashboard/ping_one-60aa0020-0ea5-11ed-9b69-fdafbf89c645.json new file mode 100644 index 00000000000..933ddca0cb5 --- /dev/null +++ b/packages/ping_one/kibana/dashboard/ping_one-60aa0020-0ea5-11ed-9b69-fdafbf89c645.json @@ -0,0 +1,1507 @@ +{ + "attributes": { + "description": "PingOne Audit Events Overview.", + "hits": 0, + "kibanaSavedObjectMeta": { + "searchSourceJSON": { + "filter": [ + { + "$state": { + "store": "appState" + }, + "meta": { + "alias": null, + "disabled": false, + "indexRefName": "kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index", + "key": "data_stream.dataset", + "negate": false, + "params": { + "query": "ping_one.audit" + }, + "type": "phrase" + }, + "query": { + "match_phrase": { + "data_stream.dataset": "ping_one.audit" + } + } + } + ], + "query": { + "language": "kuery", + "query": "" + } + } + }, + "optionsJSON": { + "hidePanelTitles": false, + "syncColors": false, + "useMargins": true + }, + "panelsJSON": [ + { + "embeddableConfig": { + "attributes": { + "references": [ + { + "id": "logs-*", + "name": "indexpattern-datasource-current-indexpattern", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "indexpattern-datasource-layer-51ce7ced-ecbe-47d8-b44c-29280edd4930", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "filter-index-pattern-0", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "filter-index-pattern-1", + "type": "index-pattern" + } + ], + "state": { + "datasourceStates": { + "indexpattern": { + "layers": { + "51ce7ced-ecbe-47d8-b44c-29280edd4930": { + "columnOrder": [ + "df05d0b2-cc00-4985-9cea-d7867eaf26ec" + ], + "columns": { + "df05d0b2-cc00-4985-9cea-d7867eaf26ec": { + "customLabel": true, + "dataType": "number", + "isBucketed": false, + "label": "Failed Login Attempts", + "operationType": "unique_count", + "scale": "ratio", + "sourceField": "@timestamp" + } + }, + "incompleteColumns": {} + } + } + } + }, + "filters": [ + { + "$state": { + "store": "appState" + }, + "meta": { + "alias": null, + "disabled": false, + "indexRefName": "filter-index-pattern-0", + "key": "data_stream.dataset", + "negate": false, + "params": { + "query": "ping_one.audit" + }, + "type": "phrase" + }, + "query": { + "match_phrase": { + "data_stream.dataset": "ping_one.audit" + } + } + }, + { + "$state": { + "store": "appState" + }, + "meta": { + "alias": null, + "disabled": false, + "indexRefName": "filter-index-pattern-1", + "key": "event.action", + "negate": false, + "params": { + "query": "password.check_failed" + }, + "type": "phrase" + }, + "query": { + "match_phrase": { + "event.action": "password.check_failed" + } + } + } + ], + "query": { + "language": "kuery", + "query": "" + }, + "visualization": { + "accessor": "df05d0b2-cc00-4985-9cea-d7867eaf26ec", + "layerId": "51ce7ced-ecbe-47d8-b44c-29280edd4930", + "layerType": "data" + } + }, + "title": "", + "type": "lens", + "visualizationType": "lnsMetric" + }, + "enhancements": {}, + "hidePanelTitles": false + }, + "gridData": { + "h": 15, + "i": "b171dc30-7696-4a0b-b139-c39c3510e7e4", + "w": 24, + "x": 0, + "y": 0 + }, + "panelIndex": "b171dc30-7696-4a0b-b139-c39c3510e7e4", + "title": "Failed Login Attempts by User [Logs PingOne]", + "type": "lens", + "version": "7.17.0" + }, + { + "embeddableConfig": { + "attributes": { + "references": [ + { + "id": "logs-*", + "name": "indexpattern-datasource-current-indexpattern", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "indexpattern-datasource-layer-78678de6-0476-4e1f-a596-0c2fa3a93338", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "filter-index-pattern-0", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "filter-index-pattern-1", + "type": "index-pattern" + } + ], + "state": { + "datasourceStates": { + "indexpattern": { + "layers": { + "78678de6-0476-4e1f-a596-0c2fa3a93338": { + "columnOrder": [ + "c0a9f92a-025d-4a62-9640-caff91c11e80" + ], + "columns": { + "c0a9f92a-025d-4a62-9640-caff91c11e80": { + "customLabel": true, + "dataType": "number", + "isBucketed": false, + "label": "Successful Login Attempts", + "operationType": "unique_count", + "scale": "ratio", + "sourceField": "@timestamp" + } + }, + "incompleteColumns": {} + } + } + } + }, + "filters": [ + { + "$state": { + "store": "appState" + }, + "meta": { + "alias": null, + "disabled": false, + "indexRefName": "filter-index-pattern-0", + "key": "data_stream.dataset", + "negate": false, + "params": { + "query": "ping_one.audit" + }, + "type": "phrase" + }, + "query": { + "match_phrase": { + "data_stream.dataset": "ping_one.audit" + } + } + }, + { + "$state": { + "store": "appState" + }, + "meta": { + "alias": null, + "disabled": false, + "indexRefName": "filter-index-pattern-1", + "key": "event.action", + "negate": false, + "params": { + "query": "password.check_succeeded" + }, + "type": "phrase" + }, + "query": { + "match_phrase": { + "event.action": "password.check_succeeded" + } + } + } + ], + "query": { + "language": "kuery", + "query": "" + }, + "visualization": { + "accessor": "c0a9f92a-025d-4a62-9640-caff91c11e80", + "layerId": "78678de6-0476-4e1f-a596-0c2fa3a93338", + "layerType": "data" + } + }, + "title": "", + "type": "lens", + "visualizationType": "lnsMetric" + }, + "enhancements": {}, + "hidePanelTitles": false + }, + "gridData": { + "h": 15, + "i": "541cb763-c836-415e-a9af-789de24f8260", + "w": 24, + "x": 24, + "y": 0 + }, + "panelIndex": "541cb763-c836-415e-a9af-789de24f8260", + "title": "Successful Login Attempts by User [Logs PingOne]", + "type": "lens", + "version": "7.17.0" + }, + { + "embeddableConfig": { + "attributes": { + "references": [ + { + "id": "logs-*", + "name": "indexpattern-datasource-current-indexpattern", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "indexpattern-datasource-layer-4be2a49d-b64e-4a7c-9b66-c5473cb008a7", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "filter-index-pattern-0", + "type": "index-pattern" + } + ], + "state": { + "datasourceStates": { + "indexpattern": { + "layers": { + "4be2a49d-b64e-4a7c-9b66-c5473cb008a7": { + "columnOrder": [ + "eef64b8a-9115-4a5f-ba6b-847b58222d62", + "1eeab1c9-dfa6-47a2-b810-cf6a8370a0d9" + ], + "columns": { + "1eeab1c9-dfa6-47a2-b810-cf6a8370a0d9": { + "customLabel": true, + "dataType": "number", + "isBucketed": false, + "label": "Count", + "operationType": "count", + "scale": "ratio", + "sourceField": "Records" + }, + "eef64b8a-9115-4a5f-ba6b-847b58222d62": { + "customLabel": true, + "dataType": "string", + "isBucketed": true, + "label": "Action Performed", + "operationType": "terms", + "params": { + "missingBucket": false, + "orderBy": { + "columnId": "1eeab1c9-dfa6-47a2-b810-cf6a8370a0d9", + "type": "column" + }, + "orderDirection": "desc", + "otherBucket": true, + "size": 10 + }, + "scale": "ordinal", + "sourceField": "event.action" + } + }, + "incompleteColumns": {} + } + } + } + }, + "filters": [ + { + "$state": { + "store": "appState" + }, + "meta": { + "alias": null, + "disabled": false, + "indexRefName": "filter-index-pattern-0", + "key": "data_stream.dataset", + "negate": false, + "params": { + "query": "ping_one.audit" + }, + "type": "phrase" + }, + "query": { + "match_phrase": { + "data_stream.dataset": "ping_one.audit" + } + } + } + ], + "query": { + "language": "kuery", + "query": "" + }, + "visualization": { + "axisTitlesVisibilitySettings": { + "x": true, + "yLeft": true, + "yRight": true + }, + "fittingFunction": "None", + "gridlinesVisibilitySettings": { + "x": true, + "yLeft": true, + "yRight": true + }, + "labelsOrientation": { + "x": 0, + "yLeft": 0, + "yRight": 0 + }, + "layers": [ + { + "accessors": [ + "1eeab1c9-dfa6-47a2-b810-cf6a8370a0d9" + ], + "layerId": "4be2a49d-b64e-4a7c-9b66-c5473cb008a7", + "layerType": "data", + "position": "top", + "seriesType": "bar_horizontal_stacked", + "showGridlines": false, + "xAccessor": "eef64b8a-9115-4a5f-ba6b-847b58222d62" + } + ], + "legend": { + "isVisible": true, + "position": "right" + }, + "preferredSeriesType": "bar_horizontal_stacked", + "tickLabelsVisibilitySettings": { + "x": true, + "yLeft": true, + "yRight": true + }, + "valueLabels": "hide", + "yLeftExtent": { + "mode": "full" + }, + "yRightExtent": { + "mode": "full" + } + } + }, + "title": "", + "type": "lens", + "visualizationType": "lnsXY" + }, + "enhancements": {}, + "hidePanelTitles": false + }, + "gridData": { + "h": 15, + "i": "f366cdb3-abe6-422f-bb1e-3e9903fc4214", + "w": 24, + "x": 0, + "y": 15 + }, + "panelIndex": "f366cdb3-abe6-422f-bb1e-3e9903fc4214", + "title": "Distribution of Audit Events by Action Performed [Logs PingOne]", + "type": "lens", + "version": "7.17.0" + }, + { + "embeddableConfig": { + "attributes": { + "references": [ + { + "id": "logs-*", + "name": "indexpattern-datasource-current-indexpattern", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "indexpattern-datasource-layer-e5c62b90-3b50-4521-b278-7fa0efcfdd07", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "filter-index-pattern-0", + "type": "index-pattern" + } + ], + "state": { + "datasourceStates": { + "indexpattern": { + "layers": { + "e5c62b90-3b50-4521-b278-7fa0efcfdd07": { + "columnOrder": [ + "45a4dd7b-656b-451b-8bc5-728a4be9f6f8", + "908f117c-5c96-43c9-aadb-1193f5f90c0b" + ], + "columns": { + "45a4dd7b-656b-451b-8bc5-728a4be9f6f8": { + "customLabel": true, + "dataType": "string", + "isBucketed": true, + "label": "Resource Type", + "operationType": "terms", + "params": { + "missingBucket": false, + "orderBy": { + "columnId": "908f117c-5c96-43c9-aadb-1193f5f90c0b", + "type": "column" + }, + "orderDirection": "desc", + "otherBucket": true, + "size": 5 + }, + "scale": "ordinal", + "sourceField": "ping_one.audit.resources.type" + }, + "908f117c-5c96-43c9-aadb-1193f5f90c0b": { + "customLabel": true, + "dataType": "number", + "isBucketed": false, + "label": "Count", + "operationType": "count", + "scale": "ratio", + "sourceField": "Records" + } + }, + "incompleteColumns": {} + } + } + } + }, + "filters": [ + { + "$state": { + "store": "appState" + }, + "meta": { + "alias": null, + "disabled": false, + "indexRefName": "filter-index-pattern-0", + "key": "data_stream.dataset", + "negate": false, + "params": { + "query": "ping_one.audit" + }, + "type": "phrase" + }, + "query": { + "match_phrase": { + "data_stream.dataset": "ping_one.audit" + } + } + } + ], + "query": { + "language": "kuery", + "query": "" + }, + "visualization": { + "layers": [ + { + "categoryDisplay": "default", + "groups": [ + "45a4dd7b-656b-451b-8bc5-728a4be9f6f8" + ], + "layerId": "e5c62b90-3b50-4521-b278-7fa0efcfdd07", + "layerType": "data", + "legendDisplay": "default", + "metric": "908f117c-5c96-43c9-aadb-1193f5f90c0b", + "nestedLegend": false, + "numberDisplay": "percent" + } + ], + "shape": "pie" + } + }, + "title": "", + "type": "lens", + "visualizationType": "lnsPie" + }, + "enhancements": {}, + "hidePanelTitles": false + }, + "gridData": { + "h": 15, + "i": "2d4a493a-2f5b-4d20-92b9-8d26f69a7c15", + "w": 24, + "x": 24, + "y": 15 + }, + "panelIndex": "2d4a493a-2f5b-4d20-92b9-8d26f69a7c15", + "title": "Distribution of Audit Events by Resource Type [Logs PingOne]", + "type": "lens", + "version": "7.17.0" + }, + { + "embeddableConfig": { + "attributes": { + "references": [ + { + "id": "logs-*", + "name": "indexpattern-datasource-current-indexpattern", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "indexpattern-datasource-layer-b92cb753-e544-4b06-af94-2a33f1626918", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "filter-index-pattern-0", + "type": "index-pattern" + } + ], + "state": { + "datasourceStates": { + "indexpattern": { + "layers": { + "b92cb753-e544-4b06-af94-2a33f1626918": { + "columnOrder": [ + "79efd644-cd0f-40b0-b6c9-9e92840b5f7e", + "05082aee-c5b2-4e19-b30a-8736a5ec9ca5" + ], + "columns": { + "05082aee-c5b2-4e19-b30a-8736a5ec9ca5": { + "customLabel": true, + "dataType": "number", + "isBucketed": false, + "label": "Count", + "operationType": "count", + "scale": "ratio", + "sourceField": "Records" + }, + "79efd644-cd0f-40b0-b6c9-9e92840b5f7e": { + "customLabel": true, + "dataType": "string", + "isBucketed": true, + "label": "User Type", + "operationType": "terms", + "params": { + "missingBucket": false, + "orderBy": { + "columnId": "05082aee-c5b2-4e19-b30a-8736a5ec9ca5", + "type": "column" + }, + "orderDirection": "desc", + "otherBucket": true, + "size": 5 + }, + "scale": "ordinal", + "sourceField": "ping_one.audit.actors.user.type" + } + }, + "incompleteColumns": {} + } + } + } + }, + "filters": [ + { + "$state": { + "store": "appState" + }, + "meta": { + "alias": null, + "disabled": false, + "indexRefName": "filter-index-pattern-0", + "key": "data_stream.dataset", + "negate": false, + "params": { + "query": "ping_one.audit" + }, + "type": "phrase" + }, + "query": { + "match_phrase": { + "data_stream.dataset": "ping_one.audit" + } + } + } + ], + "query": { + "language": "kuery", + "query": "" + }, + "visualization": { + "layers": [ + { + "categoryDisplay": "default", + "groups": [ + "79efd644-cd0f-40b0-b6c9-9e92840b5f7e" + ], + "layerId": "b92cb753-e544-4b06-af94-2a33f1626918", + "layerType": "data", + "legendDisplay": "default", + "metric": "05082aee-c5b2-4e19-b30a-8736a5ec9ca5", + "nestedLegend": false, + "numberDisplay": "percent" + } + ], + "shape": "pie" + } + }, + "title": "", + "type": "lens", + "visualizationType": "lnsPie" + }, + "enhancements": {}, + "hidePanelTitles": false + }, + "gridData": { + "h": 15, + "i": "d670c1b4-16d8-418d-8ae4-a989d2621756", + "w": 24, + "x": 0, + "y": 30 + }, + "panelIndex": "d670c1b4-16d8-418d-8ae4-a989d2621756", + "title": "Distribution of Audit Events by User Type [Logs PingOne]", + "type": "lens", + "version": "7.17.0" + }, + { + "embeddableConfig": { + "attributes": { + "references": [ + { + "id": "logs-*", + "name": "indexpattern-datasource-current-indexpattern", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "indexpattern-datasource-layer-3b550c5b-75eb-45f6-b930-8f68ebfc9f92", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "filter-index-pattern-0", + "type": "index-pattern" + } + ], + "state": { + "datasourceStates": { + "indexpattern": { + "layers": { + "3b550c5b-75eb-45f6-b930-8f68ebfc9f92": { + "columnOrder": [ + "ee6e8d51-01bb-481e-934f-920a14b68991", + "302619f7-a5f4-433e-bdbc-9ee9b712c0ad" + ], + "columns": { + "302619f7-a5f4-433e-bdbc-9ee9b712c0ad": { + "dataType": "number", + "isBucketed": false, + "label": "Count", + "operationType": "count", + "scale": "ratio", + "sourceField": "Records" + }, + "ee6e8d51-01bb-481e-934f-920a14b68991": { + "customLabel": true, + "dataType": "string", + "isBucketed": true, + "label": "Result Status", + "operationType": "terms", + "params": { + "missingBucket": false, + "orderBy": { + "columnId": "302619f7-a5f4-433e-bdbc-9ee9b712c0ad", + "type": "column" + }, + "orderDirection": "desc", + "otherBucket": true, + "size": 5 + }, + "scale": "ordinal", + "sourceField": "event.outcome" + } + }, + "incompleteColumns": {} + } + } + } + }, + "filters": [ + { + "$state": { + "store": "appState" + }, + "meta": { + "alias": null, + "disabled": false, + "indexRefName": "filter-index-pattern-0", + "key": "data_stream.dataset", + "negate": false, + "params": { + "query": "ping_one.audit" + }, + "type": "phrase" + }, + "query": { + "match_phrase": { + "data_stream.dataset": "ping_one.audit" + } + } + } + ], + "query": { + "language": "kuery", + "query": "" + }, + "visualization": { + "layers": [ + { + "categoryDisplay": "default", + "groups": [ + "ee6e8d51-01bb-481e-934f-920a14b68991" + ], + "layerId": "3b550c5b-75eb-45f6-b930-8f68ebfc9f92", + "layerType": "data", + "legendDisplay": "default", + "metric": "302619f7-a5f4-433e-bdbc-9ee9b712c0ad", + "nestedLegend": false, + "numberDisplay": "percent" + } + ], + "shape": "pie" + } + }, + "title": "", + "type": "lens", + "visualizationType": "lnsPie" + }, + "enhancements": {}, + "hidePanelTitles": false + }, + "gridData": { + "h": 15, + "i": "050483a1-63f0-421e-bb38-fc75080f0598", + "w": 24, + "x": 24, + "y": 30 + }, + "panelIndex": "050483a1-63f0-421e-bb38-fc75080f0598", + "title": "Distribution of Audit Events by Result Status [Logs PingOne]", + "type": "lens", + "version": "7.17.0" + }, + { + "embeddableConfig": { + "attributes": { + "references": [ + { + "id": "logs-*", + "name": "indexpattern-datasource-current-indexpattern", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "indexpattern-datasource-layer-3c375199-0e31-42bf-8cb8-407de34be3a5", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "filter-index-pattern-0", + "type": "index-pattern" + } + ], + "state": { + "datasourceStates": { + "indexpattern": { + "layers": { + "3c375199-0e31-42bf-8cb8-407de34be3a5": { + "columnOrder": [ + "e2bc6927-cc94-467a-b2a2-e1534175d8fe", + "c984d344-e5a1-49be-8168-542b51e55362" + ], + "columns": { + "c984d344-e5a1-49be-8168-542b51e55362": { + "customLabel": true, + "dataType": "number", + "isBucketed": false, + "label": "Count", + "operationType": "count", + "scale": "ratio", + "sourceField": "Records" + }, + "e2bc6927-cc94-467a-b2a2-e1534175d8fe": { + "customLabel": true, + "dataType": "string", + "isBucketed": true, + "label": "Resource Name", + "operationType": "terms", + "params": { + "missingBucket": false, + "orderBy": { + "columnId": "c984d344-e5a1-49be-8168-542b51e55362", + "type": "column" + }, + "orderDirection": "desc", + "otherBucket": false, + "size": 10 + }, + "scale": "ordinal", + "sourceField": "ping_one.audit.resources.name" + } + }, + "incompleteColumns": {} + } + } + } + }, + "filters": [ + { + "$state": { + "store": "appState" + }, + "meta": { + "alias": null, + "disabled": false, + "indexRefName": "filter-index-pattern-0", + "key": "data_stream.dataset", + "negate": false, + "params": { + "query": "ping_one.audit" + }, + "type": "phrase" + }, + "query": { + "match_phrase": { + "data_stream.dataset": "ping_one.audit" + } + } + } + ], + "query": { + "language": "kuery", + "query": "" + }, + "visualization": { + "columns": [ + { + "columnId": "e2bc6927-cc94-467a-b2a2-e1534175d8fe", + "isTransposed": false + }, + { + "columnId": "c984d344-e5a1-49be-8168-542b51e55362", + "isTransposed": false + } + ], + "layerId": "3c375199-0e31-42bf-8cb8-407de34be3a5", + "layerType": "data" + } + }, + "title": "", + "type": "lens", + "visualizationType": "lnsDatatable" + }, + "enhancements": {}, + "hidePanelTitles": false + }, + "gridData": { + "h": 15, + "i": "f8fb919d-6f85-4bd0-98ab-b74fdcceff7a", + "w": 24, + "x": 0, + "y": 45 + }, + "panelIndex": "f8fb919d-6f85-4bd0-98ab-b74fdcceff7a", + "title": "Top 10 Resource Name [Logs PingOne]", + "type": "lens", + "version": "7.17.0" + }, + { + "embeddableConfig": { + "attributes": { + "references": [ + { + "id": "logs-*", + "name": "indexpattern-datasource-current-indexpattern", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "indexpattern-datasource-layer-8373d580-15e8-486d-87c8-b8316290e584", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "filter-index-pattern-0", + "type": "index-pattern" + } + ], + "state": { + "datasourceStates": { + "indexpattern": { + "layers": { + "8373d580-15e8-486d-87c8-b8316290e584": { + "columnOrder": [ + "c83a0599-364b-4110-8c86-f7753f1c1602", + "b7b3f784-7a3e-4c86-908a-d8d4e98df94c" + ], + "columns": { + "b7b3f784-7a3e-4c86-908a-d8d4e98df94c": { + "customLabel": true, + "dataType": "number", + "isBucketed": false, + "label": "Count", + "operationType": "count", + "scale": "ratio", + "sourceField": "Records" + }, + "c83a0599-364b-4110-8c86-f7753f1c1602": { + "customLabel": true, + "dataType": "string", + "isBucketed": true, + "label": "Client Type", + "operationType": "terms", + "params": { + "missingBucket": false, + "orderBy": { + "columnId": "b7b3f784-7a3e-4c86-908a-d8d4e98df94c", + "type": "column" + }, + "orderDirection": "desc", + "otherBucket": true, + "size": 5 + }, + "scale": "ordinal", + "sourceField": "ping_one.audit.actors.client.type" + } + }, + "incompleteColumns": {} + } + } + } + }, + "filters": [ + { + "$state": { + "store": "appState" + }, + "meta": { + "alias": null, + "disabled": false, + "indexRefName": "filter-index-pattern-0", + "key": "data_stream.dataset", + "negate": false, + "params": { + "query": "ping_one.audit" + }, + "type": "phrase" + }, + "query": { + "match_phrase": { + "data_stream.dataset": "ping_one.audit" + } + } + } + ], + "query": { + "language": "kuery", + "query": "" + }, + "visualization": { + "layers": [ + { + "categoryDisplay": "default", + "groups": [ + "c83a0599-364b-4110-8c86-f7753f1c1602" + ], + "layerId": "8373d580-15e8-486d-87c8-b8316290e584", + "layerType": "data", + "legendDisplay": "default", + "metric": "b7b3f784-7a3e-4c86-908a-d8d4e98df94c", + "nestedLegend": false, + "numberDisplay": "percent" + } + ], + "shape": "pie" + } + }, + "title": "", + "type": "lens", + "visualizationType": "lnsPie" + }, + "enhancements": {}, + "hidePanelTitles": false + }, + "gridData": { + "h": 15, + "i": "bd14c8b1-fe2b-42e6-b7f6-e04826a91062", + "w": 24, + "x": 24, + "y": 45 + }, + "panelIndex": "bd14c8b1-fe2b-42e6-b7f6-e04826a91062", + "title": "Distribution of Audit Events by Client Type [Logs PingOne]", + "type": "lens", + "version": "7.17.0" + }, + { + "embeddableConfig": { + "attributes": { + "references": [ + { + "id": "logs-*", + "name": "indexpattern-datasource-current-indexpattern", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "indexpattern-datasource-layer-a02e2ffa-5b05-4499-8676-4d25366a4570", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "filter-index-pattern-0", + "type": "index-pattern" + } + ], + "state": { + "datasourceStates": { + "indexpattern": { + "layers": { + "a02e2ffa-5b05-4499-8676-4d25366a4570": { + "columnOrder": [ + "a3c48187-4df4-4cfc-be29-856f28aae21b", + "b1c2327d-0dbf-425f-a17e-408011ab6995" + ], + "columns": { + "a3c48187-4df4-4cfc-be29-856f28aae21b": { + "customLabel": true, + "dataType": "string", + "isBucketed": true, + "label": "User Name", + "operationType": "terms", + "params": { + "missingBucket": false, + "orderBy": { + "columnId": "b1c2327d-0dbf-425f-a17e-408011ab6995", + "type": "column" + }, + "orderDirection": "desc", + "otherBucket": false, + "size": 10 + }, + "scale": "ordinal", + "sourceField": "user.name" + }, + "b1c2327d-0dbf-425f-a17e-408011ab6995": { + "customLabel": true, + "dataType": "number", + "isBucketed": false, + "label": "Count", + "operationType": "count", + "scale": "ratio", + "sourceField": "Records" + } + }, + "incompleteColumns": {} + } + } + } + }, + "filters": [ + { + "$state": { + "store": "appState" + }, + "meta": { + "alias": null, + "disabled": false, + "indexRefName": "filter-index-pattern-0", + "key": "data_stream.dataset", + "negate": false, + "params": { + "query": "ping_one.audit" + }, + "type": "phrase" + }, + "query": { + "match_phrase": { + "data_stream.dataset": "ping_one.audit" + } + } + } + ], + "query": { + "language": "kuery", + "query": "" + }, + "visualization": { + "columns": [ + { + "columnId": "a3c48187-4df4-4cfc-be29-856f28aae21b", + "isTransposed": false + }, + { + "columnId": "b1c2327d-0dbf-425f-a17e-408011ab6995", + "isTransposed": false + } + ], + "layerId": "a02e2ffa-5b05-4499-8676-4d25366a4570", + "layerType": "data" + } + }, + "title": "", + "type": "lens", + "visualizationType": "lnsDatatable" + }, + "enhancements": {}, + "hidePanelTitles": false + }, + "gridData": { + "h": 15, + "i": "457c49dc-7f3d-4525-aab6-80d269e9a190", + "w": 24, + "x": 0, + "y": 60 + }, + "panelIndex": "457c49dc-7f3d-4525-aab6-80d269e9a190", + "title": "Top 10 User Name [Logs PingOne]", + "type": "lens", + "version": "7.17.0" + }, + { + "embeddableConfig": { + "attributes": { + "references": [ + { + "id": "logs-*", + "name": "indexpattern-datasource-current-indexpattern", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "indexpattern-datasource-layer-209f4e8b-cfa2-4c15-89b7-c375645a5404", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "filter-index-pattern-0", + "type": "index-pattern" + } + ], + "state": { + "datasourceStates": { + "indexpattern": { + "layers": { + "209f4e8b-cfa2-4c15-89b7-c375645a5404": { + "columnOrder": [ + "b85ce940-4959-4e3b-bfad-b34c3a9753fd", + "9c2bfaf0-7174-42d8-a6d3-80b553da60f5" + ], + "columns": { + "9c2bfaf0-7174-42d8-a6d3-80b553da60f5": { + "customLabel": true, + "dataType": "number", + "isBucketed": false, + "label": "Count", + "operationType": "count", + "scale": "ratio", + "sourceField": "Records" + }, + "b85ce940-4959-4e3b-bfad-b34c3a9753fd": { + "customLabel": true, + "dataType": "string", + "isBucketed": true, + "label": "Client Name", + "operationType": "terms", + "params": { + "missingBucket": false, + "orderBy": { + "columnId": "9c2bfaf0-7174-42d8-a6d3-80b553da60f5", + "type": "column" + }, + "orderDirection": "desc", + "otherBucket": false, + "size": 10 + }, + "scale": "ordinal", + "sourceField": "client.user.name" + } + }, + "incompleteColumns": {} + } + } + } + }, + "filters": [ + { + "$state": { + "store": "appState" + }, + "meta": { + "alias": null, + "disabled": false, + "indexRefName": "filter-index-pattern-0", + "key": "data_stream.dataset", + "negate": false, + "params": { + "query": "ping_one.audit" + }, + "type": "phrase" + }, + "query": { + "match_phrase": { + "data_stream.dataset": "ping_one.audit" + } + } + } + ], + "query": { + "language": "kuery", + "query": "" + }, + "visualization": { + "columns": [ + { + "columnId": "b85ce940-4959-4e3b-bfad-b34c3a9753fd" + }, + { + "columnId": "9c2bfaf0-7174-42d8-a6d3-80b553da60f5" + } + ], + "layerId": "209f4e8b-cfa2-4c15-89b7-c375645a5404", + "layerType": "data" + } + }, + "title": "", + "type": "lens", + "visualizationType": "lnsDatatable" + }, + "enhancements": {}, + "hidePanelTitles": false + }, + "gridData": { + "h": 15, + "i": "a39acafa-15cb-485d-8048-491c3ce28fff", + "w": 24, + "x": 24, + "y": 60 + }, + "panelIndex": "a39acafa-15cb-485d-8048-491c3ce28fff", + "title": "Top 10 Client Name [Logs PingOne]", + "type": "lens", + "version": "7.17.0" + } + ], + "timeRestore": false, + "title": "[Logs PingOne] Audit Events", + "version": 1 + }, + "coreMigrationVersion": "7.17.0", + "id": "ping_one-60aa0020-0ea5-11ed-9b69-fdafbf89c645", + "migrationVersion": { + "dashboard": "7.17.0" + }, + "references": [ + { + "id": "logs-*", + "name": "kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "b171dc30-7696-4a0b-b139-c39c3510e7e4:indexpattern-datasource-current-indexpattern", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "b171dc30-7696-4a0b-b139-c39c3510e7e4:indexpattern-datasource-layer-51ce7ced-ecbe-47d8-b44c-29280edd4930", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "b171dc30-7696-4a0b-b139-c39c3510e7e4:filter-index-pattern-0", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "b171dc30-7696-4a0b-b139-c39c3510e7e4:filter-index-pattern-1", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "541cb763-c836-415e-a9af-789de24f8260:indexpattern-datasource-current-indexpattern", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "541cb763-c836-415e-a9af-789de24f8260:indexpattern-datasource-layer-78678de6-0476-4e1f-a596-0c2fa3a93338", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "541cb763-c836-415e-a9af-789de24f8260:filter-index-pattern-0", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "541cb763-c836-415e-a9af-789de24f8260:filter-index-pattern-1", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "f366cdb3-abe6-422f-bb1e-3e9903fc4214:indexpattern-datasource-current-indexpattern", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "f366cdb3-abe6-422f-bb1e-3e9903fc4214:indexpattern-datasource-layer-4be2a49d-b64e-4a7c-9b66-c5473cb008a7", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "f366cdb3-abe6-422f-bb1e-3e9903fc4214:filter-index-pattern-0", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "2d4a493a-2f5b-4d20-92b9-8d26f69a7c15:indexpattern-datasource-current-indexpattern", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "2d4a493a-2f5b-4d20-92b9-8d26f69a7c15:indexpattern-datasource-layer-e5c62b90-3b50-4521-b278-7fa0efcfdd07", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "2d4a493a-2f5b-4d20-92b9-8d26f69a7c15:filter-index-pattern-0", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "d670c1b4-16d8-418d-8ae4-a989d2621756:indexpattern-datasource-current-indexpattern", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "d670c1b4-16d8-418d-8ae4-a989d2621756:indexpattern-datasource-layer-b92cb753-e544-4b06-af94-2a33f1626918", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "d670c1b4-16d8-418d-8ae4-a989d2621756:filter-index-pattern-0", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "050483a1-63f0-421e-bb38-fc75080f0598:indexpattern-datasource-current-indexpattern", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "050483a1-63f0-421e-bb38-fc75080f0598:indexpattern-datasource-layer-3b550c5b-75eb-45f6-b930-8f68ebfc9f92", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "050483a1-63f0-421e-bb38-fc75080f0598:filter-index-pattern-0", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "f8fb919d-6f85-4bd0-98ab-b74fdcceff7a:indexpattern-datasource-current-indexpattern", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "f8fb919d-6f85-4bd0-98ab-b74fdcceff7a:indexpattern-datasource-layer-3c375199-0e31-42bf-8cb8-407de34be3a5", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "f8fb919d-6f85-4bd0-98ab-b74fdcceff7a:filter-index-pattern-0", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "bd14c8b1-fe2b-42e6-b7f6-e04826a91062:indexpattern-datasource-current-indexpattern", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "bd14c8b1-fe2b-42e6-b7f6-e04826a91062:indexpattern-datasource-layer-8373d580-15e8-486d-87c8-b8316290e584", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "bd14c8b1-fe2b-42e6-b7f6-e04826a91062:filter-index-pattern-0", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "457c49dc-7f3d-4525-aab6-80d269e9a190:indexpattern-datasource-current-indexpattern", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "457c49dc-7f3d-4525-aab6-80d269e9a190:indexpattern-datasource-layer-a02e2ffa-5b05-4499-8676-4d25366a4570", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "457c49dc-7f3d-4525-aab6-80d269e9a190:filter-index-pattern-0", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "a39acafa-15cb-485d-8048-491c3ce28fff:indexpattern-datasource-current-indexpattern", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "a39acafa-15cb-485d-8048-491c3ce28fff:indexpattern-datasource-layer-209f4e8b-cfa2-4c15-89b7-c375645a5404", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "a39acafa-15cb-485d-8048-491c3ce28fff:filter-index-pattern-0", + "type": "index-pattern" + } + ], + "type": "dashboard" +} \ No newline at end of file diff --git a/packages/ping_one/manifest.yml b/packages/ping_one/manifest.yml new file mode 100644 index 00000000000..a2b96748dc9 --- /dev/null +++ b/packages/ping_one/manifest.yml @@ -0,0 +1,146 @@ +format_version: 1.0.0 +name: ping_one +title: PingOne +version: 0.1.0 +license: basic +description: Collect logs from PingOne with Elastic-Agent. +type: integration +categories: + - security +conditions: + kibana.version: ^7.17.0 || ^8.0.0 +screenshots: + - src: /img/ping-one-dashboard.png + title: PingOne Audit Dashboard Screenshot + size: 600x600 + type: image/png +icons: + - src: /img/ping-one-logo.svg + title: PingOne logo + size: 32x32 + type: image/svg+xml +policy_templates: + - name: ping_one + title: PingOne + description: Collect logs from PingOne. + inputs: + - type: http_endpoint + title: Collect PingOne logs via HTTP Endpoint + description: Collecting PingOne logs via HTTP Endpoint. + vars: + - name: listen_address + type: text + title: Listen Address + description: The bind address to listen for http endpoint connections. Set to `0.0.0.0` to bind to all available interfaces. + multi: false + required: true + show_user: true + default: localhost + - name: ssl + type: yaml + title: SSL Configuration + description: i.e. certificate_authorities, supported_protocols, verification_mode etc. + multi: false + required: false + show_user: false + default: | + #certificate_authorities: + # - | + # -----BEGIN CERTIFICATE----- + # MIIDCjCCAfKgAwIBAgITJ706Mu2wJlKckpIvkWxEHvEyijANBgkqhkiG9w0BAQsF + # ADAUMRIwEAYDVQQDDAlsb2NhbGhvc3QwIBcNMTkwNzIyMTkyOTA0WhgPMjExOTA2 + # MjgxOTI5MDRaMBQxEjAQBgNVBAMMCWxvY2FsaG9zdDCCASIwDQYJKoZIhvcNAQEB + # BQADggEPADCCAQoCggEBANce58Y/JykI58iyOXpxGfw0/gMvF0hUQAcUrSMxEO6n + # fZRA49b4OV4SwWmA3395uL2eB2NB8y8qdQ9muXUdPBWE4l9rMZ6gmfu90N5B5uEl + # 94NcfBfYOKi1fJQ9i7WKhTjlRkMCgBkWPkUokvBZFRt8RtF7zI77BSEorHGQCk9t + # /D7BS0GJyfVEhftbWcFEAG3VRcoMhF7kUzYwp+qESoriFRYLeDWv68ZOvG7eoWnP + # PsvZStEVEimjvK5NSESEQa9xWyJOmlOKXhkdymtcUd/nXnx6UTCFgnkgzSdTWV41 + # CI6B6aJ9svCTI2QuoIq2HxX/ix7OvW1huVmcyHVxyUECAwEAAaNTMFEwHQYDVR0O + # BBYEFPwN1OceFGm9v6ux8G+DZ3TUDYxqMB8GA1UdIwQYMBaAFPwN1OceFGm9v6ux + # 8G+DZ3TUDYxqMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBAG5D + # 874A4YI7YUwOVsVAdbWtgp1d0zKcPRR+r2OdSbTAV5/gcS3jgBJ3i1BN34JuDVFw + # 3DeJSYT3nxy2Y56lLnxDeF8CUTUtVQx3CuGkRg1ouGAHpO/6OqOhwLLorEmxi7tA + # H2O8mtT0poX5AnOAhzVy7QW0D/k4WaoLyckM5hUa6RtvgvLxOwA0U+VGurCDoctu + # 8F4QOgTAWyh8EZIwaKCliFRSynDpv3JTUwtfZkxo6K6nce1RhCWFAsMvDZL8Dgc0 + # yvgJ38BRsFOtkRuAGSf6ZUwTO8JJRRIFnpUzXflAnGivK9M13D5GEQMmIl6U9Pvk + # sxSmbIUfc2SGJGCJD4I= + # -----END CERTIFICATE----- + - name: secret_header + type: text + title: Secret Header + description: The header to check for a specific value specified by `secret.value`. + required: false + show_user: false + - name: secret_value + type: password + title: Secret Value + description: The secret stored in the header name specified by `secret.header`. + required: false + show_user: false + - type: httpjson + title: Collect PingOne logs via API + description: Collecting PingOne logs via API. + vars: + - name: api_path + type: text + title: URL + description: API Path of the PingOne App. Format of the API Path - https://api.pingone.{{regional_domain}} + required: true + - name: token_url + type: text + title: Token URL + description: Token URL of the PingOne App. + required: true + - name: environment_id + type: text + title: Environment ID + description: Environment ID of the PingOne App. + required: true + - name: client_id + type: text + title: Client ID + description: Client ID. + required: true + - name: client_secret + type: password + title: Client Secret + description: Client Secret. + required: true + - name: proxy_url + type: text + title: Proxy URL + multi: false + required: false + show_user: false + description: URL to proxy connections in the form of http[s]://:@:. Please ensure your username and password are in URL encoded format. + - name: ssl + type: yaml + title: SSL Configuration + description: i.e. certificate_authorities, supported_protocols, verification_mode etc. + multi: false + required: false + show_user: false + default: | + #certificate_authorities: + # - | + # -----BEGIN CERTIFICATE----- + # MIIDCjCCAfKgAwIBAgITJ706Mu2wJlKckpIvkWxEHvEyijANBgkqhkiG9w0BAQsF + # ADAUMRIwEAYDVQQDDAlsb2NhbGhvc3QwIBcNMTkwNzIyMTkyOTA0WhgPMjExOTA2 + # MjgxOTI5MDRaMBQxEjAQBgNVBAMMCWxvY2FsaG9zdDCCASIwDQYJKoZIhvcNAQEB + # BQADggEPADCCAQoCggEBANce58Y/JykI58iyOXpxGfw0/gMvF0hUQAcUrSMxEO6n + # fZRA49b4OV4SwWmA3395uL2eB2NB8y8qdQ9muXUdPBWE4l9rMZ6gmfu90N5B5uEl + # 94NcfBfYOKi1fJQ9i7WKhTjlRkMCgBkWPkUokvBZFRt8RtF7zI77BSEorHGQCk9t + # /D7BS0GJyfVEhftbWcFEAG3VRcoMhF7kUzYwp+qESoriFRYLeDWv68ZOvG7eoWnP + # PsvZStEVEimjvK5NSESEQa9xWyJOmlOKXhkdymtcUd/nXnx6UTCFgnkgzSdTWV41 + # CI6B6aJ9svCTI2QuoIq2HxX/ix7OvW1huVmcyHVxyUECAwEAAaNTMFEwHQYDVR0O + # BBYEFPwN1OceFGm9v6ux8G+DZ3TUDYxqMB8GA1UdIwQYMBaAFPwN1OceFGm9v6ux + # 8G+DZ3TUDYxqMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBAG5D + # 874A4YI7YUwOVsVAdbWtgp1d0zKcPRR+r2OdSbTAV5/gcS3jgBJ3i1BN34JuDVFw + # 3DeJSYT3nxy2Y56lLnxDeF8CUTUtVQx3CuGkRg1ouGAHpO/6OqOhwLLorEmxi7tA + # H2O8mtT0poX5AnOAhzVy7QW0D/k4WaoLyckM5hUa6RtvgvLxOwA0U+VGurCDoctu + # 8F4QOgTAWyh8EZIwaKCliFRSynDpv3JTUwtfZkxo6K6nce1RhCWFAsMvDZL8Dgc0 + # yvgJ38BRsFOtkRuAGSf6ZUwTO8JJRRIFnpUzXflAnGivK9M13D5GEQMmIl6U9Pvk + # sxSmbIUfc2SGJGCJD4I= + # -----END CERTIFICATE----- +owner: + github: elastic/security-external-integrations