Auditing events for Planning Analytics as a Service
As a security officer, auditor, or manager, you can use the IBM Cloud® Activity Tracker service to track how users and applications interact with the Planning Analytics as a Service service in IBM Cloud.
IBM Cloud Activity Tracker records user-initiated activities that change the state of a service in IBM Cloud. You can use this service to investigate abnormal activity and critical actions and to comply with regulatory audit requirements. In addition, you can be alerted about actions as they happen. The events that are collected comply with the Cloud Auditing Data Federation (CADF) standard. For more information, see the getting started tutorial for IBM Cloud Activity Tracker.
List of platform events
The following table lists the actions that generate a platform event:
| Action | Description |
|---|---|
planning-analytics.instance.create |
An event is generated when you provision a service instance. |
planning-analytics.instance.update |
An event is generated when you rename a service instance or when you change the service plan. |
planning-analytics.instance.delete |
An event is generated when a service instance is deleted. |
planning-analytics.instance.schedule_reclaim |
An event is generated when a service instance is pending_reclamation. |
planning-analytics.instance.restore |
An event is generated when a service instance is restored. |
The following table lists the actions that generate an event for managing service credentials that are associated to a service instance:
| Action | Description |
|---|---|
planning-analytics.key.create |
An event is generated when an API key is created for a service instance through the Service credentials section of the service instance UI. |
planning-analytics.key.delete |
An event is generated when an API key that is associated with a service instance is deleted from the Service credentials section of the service instance UI. |
List of management events
The following table lists the Planning Analytics as a Service actions that generate a management event:
| Action | Description |
|---|---|
planning-analytics.group.added |
An event is generated when a group is added to the planning analytics workspace instance. |
planning-analytics.group.deleted |
An event is generated when a group is deleted from the planning analytics workspace instance. |
planning-analytics.group.updated |
An event is generated when the membership of a group is updated in the planning analytics workspace instance. |
planning-analytics.user.added |
An event is generated when a user is added to the planning analytics workspace instance. |
planning-analytics.user.deleted |
An event is generated when a user is deleted from the planning analytics workspace instance. |
planning-analytics.user.login |
An event is generated when a user logs into the Planning Analytics Workspace instance. |
planning-analytics.user.logout |
An event is generated when a user logs out of the Planning Analytics Workspace instance. |
planning-analytics.user-environment.switch |
An event is generated when a user switches to a different Planning Analytics Workspace environment. |
planning-analytics.user.updated |
An event is generated when a user is updated in the planning analytics workspace instance. |
planning-analytics.tm1.create |
An event is generated when you create a tm1 database. |
planning-analytics.tm1.start |
An event is generated when you start a tm1 database. |
List of data events
The following table lists the Planning Analytics as a Service actions that generate a data event:
| Action | Description |
|---|---|
planning-analytics.content.acl.modified |
An event is generated when access control to a planning analytics workspace object is modified. |
planning-analytics.content.created |
An event is generated when a planning analytics workspace object is created. |
planning-analytics.content.deleted |
An event is generated when a planning analytics workspace object is deleted. |
planning-analytics.content.moved |
An event is generated when a planning analytics workspace object is moved. |
Viewing events
Events that are generated by an instance of the Planning Analytics as a Service service are automatically forwarded to the IBM Cloud Activity Tracker service instance that is available in the same location.
IBM Cloud Activity Tracker can have only one instance per location. To view events, you must access the web UI of the IBM Cloud Activity Tracker service in the same location where your service instance is available. For more information, see Launching the UI.