Event types

Management events

Management events report on the following actions:

• Actions that are generated when an API call reads or changes the state of a resource and does not access or modify customer data

• Actions on non-API actions that report DevOps actions on resources in the account

• Report activity on CRUD operational platform actions, for example:

  CRUD user management actions

  Changes to account configuration settings

  CRUD IAM actions

  CRUD managing tags

  CRUD actions managing service instances

• Report activity on CRUD actions on resources that do not access, or modify customer data, for example:

  Create a resource that does not include customer metadata such as create a toolchain

  Send a notification

• Report configuration changes to resources that do not access, or modify customer data, for example:

  Enable archiving

• Report activity on scheduled jobs that access or modify resources in the account, for example:

  Database backup scheduled job

You identify management events by the value of the field dataEvent. When this field is set to false, the event is a management event.

Management events are enabled in all the IBM Cloud accounts. Some services, such as Watson services, require an upgrade of the service plan if you want to receive them.

Data events

Data events report on actions where the initiator's request modifies, or operates on your data.

You identify data events by the value of the field dataEvent. When this field is set to true, the event is a data event.

Data events are enabled in all the IBM Cloud accounts. However, there are some exceptions:

• Services that generates high volumes of data events require that you opt-in:

  IBM Cloud Object Storage

  IBM Cloud App ID

  IBM Cloudant

• Services might require a service plan to opt-in to data events, such as some Watson services.

Global events

Global events report on activity in your account that relate to data and resources that are generally synchronized across all regions.

Global events are generated by integrated platform services such as IAM.

The following services generate global events in the IBM Cloud:

• Integrated platform services fo managing account settings and resources such as service instances, users, billing, and tags
• IBM Cloud® Identity and Access Management (IAM)
• IBM Cloud Object Storage
• IBM Db2 Warehouse on Cloud
• IBM Cloud® Transit Gateway
• IBM Cloud® DNS Services
• IBM Cloud® Internet Services (CIS)
• Content Delivery Network
• Provisioning
• Global Search Service
• Catalog Management
• Software instances
• Context-based restrictions
• IBM Cloud for VMware Solutions
• IBM Cloud® Direct Link solution

For more information on services generating global events, see Services that generate events that are managed through IBM Cloud Activity Tracker Event Routing and Services that generate events that are managed through IBM Cloud Activity Tracker hosted event search.

For Activity Tracker Event Routing, you can choose the region where events are collected. Learn more.

For example, when account administrators invite users to join the account, they can do it from any IBM Cloud location. They might invite a user that is located in Frankfurt and grant this user permissions to work with a service that is provisioned in Dallas. Events that report on this type of action are considered global events and are available through the global domain in your account.

Or, you might provision or delete a service instance in a specific location. Although a service instance is created in a specific location, these types of actions are reported as global events to offer a single view of all the service instances that are provisioned across the account.

Location-based events

Location-based events report on activity in your account that is generated by IBM Cloud services that are hosted within an IBM data center location, such as Dallas or Frankfurt.

Location-based events maintain data locality to the services that run in that IBM Cloud location.

Exception: IBM Cloud Object Storage

In IBM Cloud Object Storage, some management events are global events. Other management events are location-based events.

To see the list of actions that generate global management events, see Global events.

For example, the following are some actions that generate global events:

• List the buckets in the service instance.
• Create a bucket in the service instance.
• Delete a bucket in the service instance.
• Delete a Key Protect root encryption key.

Learn more.