xref: /5.5.2/ns_server/etc/audit_descriptor.json (revision c4da2ea0)
1{
2    "version" : 1,
3    "module" : "ns_server",
4    "events" : [
5      {
6          "id" : 8192,
7          "name" : "login success",
8          "description" : "Successful login to couchbase cluster",
9          "sync" : false,
10          "enabled" : true,
11          "mandatory_fields" : {
12              "timestamp" : "",
13              "real_userid" : {"domain" : "", "user" : ""},
14              "remote" : {"ip" : "", "port" : 1},
15              "roles" : ""
16          },
17          "optional_fields" : {
18              "sessionid" : ""
19          }
20      },
21      {
22          "id" : 8193,
23          "name" : "login failure",
24          "description" : "Unsuccessful attempt to login to couchbase cluster",
25          "sync" : false,
26          "enabled" : true,
27          "mandatory_fields" : {
28              "timestamp" : "",
29              "real_userid" : "",
30              "remote" : {"ip" : "", "port" : 1}
31          },
32          "optional_fields" : {
33          }
34      },
35      {
36          "id" : 8194,
37          "name" : "delete user",
38          "description" : "User was deleted",
39          "sync" : false,
40          "enabled" : true,
41          "mandatory_fields" : {
42              "timestamp" : "",
43              "real_userid" : {"domain" : "", "user" : ""},
44              "remote" : {"ip" : "", "port" : 1},
45              "identity" : {"domain" : "", "user" : ""}
46          },
47          "optional_fields" : {
48              "sessionid" : ""
49          }
50      },
51      {
52          "id" : 8195,
53          "name" : "user credentials change",
54          "description" : "User credentials were changed",
55          "sync" : false,
56          "enabled" : true,
57          "mandatory_fields" : {
58              "timestamp" : "",
59              "identity" : {"domain" : "", "user" : ""}
60          },
61          "optional_fields" : {
62              "real_userid" : {"domain" : "", "user" : ""},
63              "remote" : {"ip" : "", "port" : 1},
64              "sessionid" : ""
65          }
66      },
67      {
68          "id" : 8196,
69          "name" : "add node",
70          "description" : "Node was added to the cluster",
71          "sync" : false,
72          "enabled" : true,
73          "mandatory_fields" : {
74              "timestamp" : "",
75              "real_userid" : {"domain" : "", "user" : ""},
76              "remote" : {"ip" : "", "port" : 1},
77              "user" : "",
78              "node" : "",
79              "groupUUID" : "",
80              "hostname" : "",
81              "port" : 1,
82              "services" : ""
83          },
84          "optional_fields" : {
85              "sessionid" : ""
86          }
87      },
88      {
89          "id" : 8197,
90          "name" : "remove node",
91          "description" : "Node was removed from the cluster",
92          "sync" : false,
93          "enabled" : true,
94          "mandatory_fields" : {
95              "timestamp" : "",
96              "real_userid" : {"domain" : "", "user" : ""},
97              "remote" : {"ip" : "", "port" : 1},
98              "node" : ""
99          },
100          "optional_fields" : {
101              "sessionid" : ""
102          }
103      },
104      {
105          "id" : 8198,
106          "name" : "failover nodes",
107          "description" : "Nodes that were failed over",
108          "sync" : false,
109          "enabled" : true,
110          "mandatory_fields" : {
111              "timestamp" : "",
112              "real_userid" : {"domain" : "", "user" : ""},
113              "remote" : {"ip" : "", "port" : 1},
114              "nodes" : [],
115              "type" : ""
116          },
117          "optional_fields" : {
118              "sessionid" : ""
119          }
120      },
121      {
122          "id" : 8199,
123          "name" : "enter node recovery",
124          "description" : "Entered node recovery",
125          "sync" : false,
126          "enabled" : true,
127          "mandatory_fields" : {
128              "timestamp" : "",
129              "real_userid" : {"domain" : "", "user" : ""},
130              "remote" : {"ip" : "", "port" : 1},
131              "node" : "",
132              "type" : ""
133          },
134          "optional_fields" : {
135              "sessionid" : ""
136          }
137      },
138      {
139          "id" : 8200,
140          "name" : "rebalance initiated",
141          "description" : "Rebalance was initiated",
142          "sync" : false,
143          "enabled" : true,
144          "mandatory_fields" : {
145              "timestamp" : "",
146              "real_userid" : {"domain" : "", "user" : ""},
147              "remote" : {"ip" : "", "port" : 1},
148              "known_nodes" : [],
149              "ejected_nodes" : [],
150              "delta_recovery_buckets" : []
151          },
152          "optional_fields" : {
153              "sessionid" : ""
154          }
155      },
156      {
157          "id" : 8201,
158          "name" : "create bucket",
159          "description" : "Bucket was created",
160          "sync" : false,
161          "enabled" : true,
162          "mandatory_fields" : {
163              "timestamp" : "",
164              "real_userid" : {"domain" : "", "user" : ""},
165              "remote" : {"ip" : "", "port" : 1},
166              "bucket_name" : "",
167              "type" : "",
168              "props" : ""
169          },
170          "optional_fields" : {
171              "sessionid" : ""
172          }
173      },
174      {
175          "id" : 8202,
176          "name" : "modify bucket",
177          "description" : "Bucket was modified",
178          "sync" : false,
179          "enabled" : true,
180          "mandatory_fields" : {
181              "timestamp" : "",
182              "real_userid" : {"domain" : "", "user" : ""},
183              "remote" : {"ip" : "", "port" : 1},
184              "bucket_name" : "",
185              "type" : "",
186              "props" : ""
187          },
188          "optional_fields" : {
189              "sessionid" : ""
190          }
191      },
192      {
193          "id" : 8203,
194          "name" : "delete bucket",
195          "description" : "Bucket was deleted",
196          "sync" : false,
197          "enabled" : true,
198          "mandatory_fields" : {
199              "timestamp" : "",
200              "real_userid" : {"domain" : "", "user" : ""},
201              "remote" : {"ip" : "", "port" : 1},
202              "bucket_name" : ""
203          },
204          "optional_fields" : {
205              "sessionid" : ""
206          }
207      },
208      {
209          "id" : 8204,
210          "name" : "flush bucket",
211          "description" : "Bucket was flushed",
212          "sync" : false,
213          "enabled" : true,
214          "mandatory_fields" : {
215              "timestamp" : "",
216              "remote" : {"ip" : "", "port" : 1},
217              "bucket_name" : ""
218          },
219          "optional_fields" : {
220              "real_userid" : {"domain" : "", "user" : ""},
221              "sessionid" : ""
222          }
223      },
224      {
225          "id" : 8205,
226          "name" : "start loading sample",
227          "description" : "Started loading sample",
228          "sync" : false,
229          "enabled" : true,
230          "mandatory_fields" : {
231              "timestamp" : "",
232              "real_userid" : {"domain" : "", "user" : ""},
233              "remote" : {"ip" : "", "port" : 1},
234              "bucket_name" : ""
235          },
236          "optional_fields" : {
237              "sessionid" : ""
238          }
239      },
240      {
241          "id" : 8206,
242          "name" : "disk storage conf",
243          "description" : "Disk storage configuration was set",
244          "sync" : false,
245          "enabled" : true,
246          "mandatory_fields" : {
247              "timestamp" : "",
248              "real_userid" : {"domain" : "", "user" : ""},
249              "remote" : {"ip" : "", "port" : 1},
250              "node" : "",
251              "db_path" : "",
252              "index_path" : "",
253              "cbas_dirs" : ""
254          },
255          "optional_fields" : {
256              "sessionid" : ""
257          }
258      },
259      {
260          "id" : 8207,
261          "name" : "rename node",
262          "description" : "The node was renamed",
263          "sync" : false,
264          "enabled" : true,
265          "mandatory_fields" : {
266              "timestamp" : "",
267              "real_userid" : {"domain" : "", "user" : ""},
268              "remote" : {"ip" : "", "port" : 1},
269              "node" : "",
270              "hostname" : ""
271          },
272          "optional_fields" : {
273              "sessionid" : ""
274          }
275      },
276      {
277          "id" : 8208,
278          "name" : "setup node services",
279          "description" : "The services were set for the node",
280          "sync" : false,
281          "enabled" : true,
282          "mandatory_fields" : {
283              "timestamp" : "",
284              "real_userid" : {"domain" : "", "user" : ""},
285              "remote" : {"ip" : "", "port" : 1},
286              "node" : "",
287              "services" : ""
288          },
289          "optional_fields" : {
290              "sessionid" : ""
291          }
292      },
293      {
294          "id" : 8209,
295          "name" : "change cluster settings",
296          "description" : "Cluster settings were changed",
297          "sync" : false,
298          "enabled" : true,
299          "mandatory_fields" : {
300              "timestamp" : "",
301              "real_userid" : {"domain" : "", "user" : ""},
302              "quotas" : {"kv" : 1, "index" : 1, "fts" : 1, "cbas" : 1, "eventing" : 1},
303              "cluster_name" : "",
304              "remote" : {"ip" : "", "port" : 1}
305          },
306          "optional_fields" : {
307              "sessionid" : ""
308          }
309      },
310      {
311          "id" : 8210,
312          "name" : "add group",
313          "description" : "Server group was added",
314          "sync" : false,
315          "enabled" : true,
316          "mandatory_fields" : {
317              "timestamp" : "",
318              "real_userid" : {"domain" : "", "user" : ""},
319              "remote" : {"ip" : "", "port" : 1},
320              "group_name" : "",
321              "uuid" : ""
322          },
323          "optional_fields" : {
324              "sessionid" : ""
325          }
326      },
327      {
328          "id" : 8211,
329          "name" : "delete group",
330          "description" : "Server group was deleted",
331          "sync" : false,
332          "enabled" : true,
333          "mandatory_fields" : {
334              "timestamp" : "",
335              "real_userid" : {"domain" : "", "user" : ""},
336              "remote" : {"ip" : "", "port" : 1},
337              "group_name" : "",
338              "uuid" : ""
339          },
340          "optional_fields" : {
341              "sessionid" : ""
342          }
343      },
344      {
345          "id" : 8212,
346          "name" : "update group",
347          "description" : "Server group was updated",
348          "sync" : false,
349          "enabled" : true,
350          "mandatory_fields" : {
351              "timestamp" : "",
352              "real_userid" : {"domain" : "", "user" : ""},
353              "remote" : {"ip" : "", "port" : 1},
354              "group_name" : "",
355              "uuid" : "",
356              "nodes" : ""
357          },
358          "optional_fields" : {
359              "sessionid" : ""
360          }
361      },
362      {
363          "id" : 8213,
364          "name" : "xdcr create cluster ref",
365          "description" : "Remote cluster reference was created",
366          "sync" : false,
367          "enabled" : true,
368          "mandatory_fields" : {
369              "timestamp" : "",
370              "real_userid" : {"domain" : "", "user" : ""},
371              "remote" : {"ip" : "", "port" : 1},
372              "demand_encription" : false,
373              "hostname" : "",
374              "username" : "",
375              "uuid" : ""
376          },
377          "optional_fields" : {
378              "sessionid" : ""
379          }
380      },
381      {
382          "id" : 8214,
383          "name" : "xdcr update cluster ref",
384          "description" : "Remote cluster reference was updated",
385          "sync" : false,
386          "enabled" : true,
387          "mandatory_fields" : {
388              "timestamp" : "",
389              "real_userid" : {"domain" : "", "user" : ""},
390              "remote" : {"ip" : "", "port" : 1},
391              "demand_encription" : false,
392              "hostname" : "",
393              "username" : "",
394              "uuid" : ""
395          },
396          "optional_fields" : {
397              "sessionid" : ""
398          }
399      },
400      {
401          "id" : 8215,
402          "name" : "xdcr delete cluster ref",
403          "description" : "Remote cluster reference was deleted",
404          "sync" : false,
405          "enabled" : true,
406          "mandatory_fields" : {
407              "timestamp" : "",
408              "real_userid" : {"domain" : "", "user" : ""},
409              "remote" : {"ip" : "", "port" : 1},
410              "demand_encription" : false,
411              "hostname" : "",
412              "username" : "",
413              "uuid" : ""
414          },
415          "optional_fields" : {
416              "sessionid" : ""
417          }
418      },
419      {
420          "id" : 8216,
421          "name" : "xdcr create replication",
422          "description" : "XDCR replication was created",
423          "sync" : false,
424          "enabled" : true,
425          "mandatory_fields" : {
426              "timestamp" : "",
427              "real_userid" : {"domain" : "", "user" : ""},
428              "remote" : {"ip" : "", "port" : 1},
429              "rep_id" : "",
430              "from_bucket" : "",
431              "to_bucket" : "",
432              "to_cluster" : "",
433              "settings" : ""
434          },
435          "optional_fields" : {
436              "sessionid" : ""
437          }
438      },
439      {
440          "id" : 8217,
441          "name" : "xdcr update replication",
442          "description" : "XDCR replication was updated",
443          "sync" : false,
444          "enabled" : true,
445          "mandatory_fields" : {
446              "timestamp" : "",
447              "real_userid" : {"domain" : "", "user" : ""},
448              "remote" : {"ip" : "", "port" : 1},
449              "rep_id" : "",
450              "settings" : ""
451          },
452          "optional_fields" : {
453              "sessionid" : ""
454          }
455      },
456      {
457          "id" : 8218,
458          "name" : "xdcr cancel replication",
459          "description" : "XDCR replication was canceled",
460          "sync" : false,
461          "enabled" : true,
462          "mandatory_fields" : {
463              "timestamp" : "",
464              "real_userid" : {"domain" : "", "user" : ""},
465              "remote" : {"ip" : "", "port" : 1},
466              "rep_id" : ""
467          },
468          "optional_fields" : {
469              "sessionid" : ""
470          }
471      },
472      {
473          "id" : 8219,
474          "name" : "xdcr update global settings",
475          "description" : "Global XDCR settings were updated",
476          "sync" : false,
477          "enabled" : true,
478          "mandatory_fields" : {
479              "timestamp" : "",
480              "real_userid" : {"domain" : "", "user" : ""},
481              "remote" : {"ip" : "", "port" : 1},
482              "settings" : ""
483          },
484          "optional_fields" : {
485              "sessionid" : ""
486          }
487      },
488      {
489          "id" : 8220,
490          "name" : "enable auto failover",
491          "description" : "Auto Failover was enabled",
492          "sync" : false,
493          "enabled" : true,
494          "mandatory_fields" : {
495              "timestamp" : "",
496              "real_userid" : {"domain" : "", "user" : ""},
497              "remote" : {"ip" : "", "port" : 1},
498              "timeout" : 1,
499              "max_nodes" : 1
500          },
501          "optional_fields" : {
502              "sessionid" : "",
503              "failover_on_data_disk_issues" : {"enabled" : false,
504                                                "timePeriod" : 1},
505              "failover_server_group" : false
506          }
507      },
508      {
509          "id" : 8221,
510          "name" : "disable auto failover",
511          "description" : "Auto Failover was disabled",
512          "sync" : false,
513          "enabled" : true,
514          "mandatory_fields" : {
515              "timestamp" : "",
516              "real_userid" : {"domain" : "", "user" : ""},
517              "remote" : {"ip" : "", "port" : 1}
518          },
519          "optional_fields" : {
520              "sessionid" : ""
521          }
522      },
523      {
524          "id" : 8222,
525          "name" : "reset auto failover count",
526          "description" : "Count for Auto Failover was reset",
527          "sync" : false,
528          "enabled" : true,
529          "mandatory_fields" : {
530              "timestamp" : "",
531              "real_userid" : {"domain" : "", "user" : ""},
532              "remote" : {"ip" : "", "port" : 1}
533          },
534          "optional_fields" : {
535              "sessionid" : ""
536          }
537      },
538      {
539          "id" : 8223,
540          "name" : "enable cluster alerts",
541          "description" : "Cluster alerts were enabled",
542          "sync" : false,
543          "enabled" : true,
544          "mandatory_fields" : {
545              "timestamp" : "",
546              "real_userid" : {"domain" : "", "user" : ""},
547              "remote" : {"ip" : "", "port" : 1},
548              "sender" : "",
549              "recipients" : "",
550              "alerts" : "",
551              "email_server" : {"user" : "", "host" : "", "port" : 1, "encrypt" : false}
552          },
553          "optional_fields" : {
554              "sessionid" : ""
555          }
556      },
557      {
558          "id" : 8224,
559          "name" : "disable cluster alerts",
560          "description" : "Cluster alerts were disabled",
561          "sync" : false,
562          "enabled" : true,
563          "mandatory_fields" : {
564              "timestamp" : "",
565              "real_userid" : {"domain" : "", "user" : ""},
566              "remote" : {"ip" : "", "port" : 1}
567          },
568          "optional_fields" : {
569              "sessionid" : ""
570          }
571      },
572      {
573          "id" : 8225,
574          "name" : "modify compaction settings",
575          "description" : "Compaction settings were modified",
576          "sync" : false,
577          "enabled" : true,
578          "mandatory_fields" : {
579              "timestamp" : "",
580              "real_userid" : {"domain" : "", "user" : ""},
581              "remote" : {"ip" : "", "port" : 1}
582          },
583          "optional_fields" : {
584              "sessionid" : "",
585              "allowed_time_period" : {"from_hour" : 1, "to_hour" : 1, "from_minute" : 1,
586                                       "to_minute" : 1, "abort_outside" : false},
587              "database_fragmentation_threshold" : {"percentage" : 1, "size" : 1},
588              "view_fragmentation_threshold" : {"percentage" : 1, "size" : 1},
589              "parallel_db_and_view_compaction" : false,
590              "purge_interval" : "",
591              "index_fragmentation_percentage" : "",
592              "index_compaction_mode" : "",
593              "index_circular_compaction_days" : "",
594              "index_circular_compaction_abort" : false,
595              "index_circular_compaction_interval" : {"from_hour" : 1,
596                                                      "to_hour" : 1,
597                                                      "from_minute" : 1,
598                                                      "to_minute" : 1}
599          }
600      },
601      {
602          "id" : 8226,
603          "name" : "regenerate certificate",
604          "description" : "Self-signed SSL certificate was regenerated",
605          "sync" : false,
606          "enabled" : true,
607          "mandatory_fields" : {
608              "timestamp" : "",
609              "real_userid" : {"domain" : "", "user" : ""},
610              "remote" : {"ip" : "", "port" : 1}
611          },
612          "optional_fields" : {
613              "sessionid" : ""
614          }
615      },
616      {
617          "id" : 8227,
618          "name" : "setup ldap",
619          "description" : "LDAP Auth settings were modified",
620          "sync" : false,
621          "enabled" : true,
622          "mandatory_fields" : {
623              "timestamp" : "",
624              "real_userid" : {"domain" : "", "user" : ""},
625              "remote" : {"ip" : "", "port" : 1},
626              "enabled" : false,
627              "admins" : "",
628              "ro_admins" : ""
629          },
630          "optional_fields" : {
631              "sessionid" : ""
632          }
633      },
634      {
635          "id" : 8228,
636          "name" : "internal settings",
637          "description" : "Internal Settings",
638          "sync" : false,
639          "enabled" : true,
640          "mandatory_fields" : {
641              "timestamp" : "",
642              "real_userid" : {"domain" : "", "user" : ""},
643              "remote" : {"ip" : "", "port" : 1},
644              "settings" : ""
645          },
646          "optional_fields" : {
647              "sessionid" : ""
648          }
649      },
650      {
651          "id" : 8229,
652          "name" : "upload cluster ca",
653          "description" : "Upload cluster CA",
654          "sync" : false,
655          "enabled" : true,
656          "mandatory_fields" : {
657              "timestamp" : "",
658              "real_userid" : {"domain" : "", "user" : ""},
659              "remote" : {"ip" : "", "port" : 1},
660              "subject" : "",
661              "expires" : ""
662          },
663          "optional_fields" : {
664              "sessionid" : ""
665          }
666      },
667      {
668          "id" : 8230,
669          "name" : "reload node certificate",
670          "description" : "Reload node certificate chain and pkey from inbox",
671          "sync" : false,
672          "enabled" : true,
673          "mandatory_fields" : {
674              "timestamp" : "",
675              "real_userid" : {"domain" : "", "user" : ""},
676              "remote" : {"ip" : "", "port" : 1},
677              "subject" : "",
678              "expires" : ""
679          },
680          "optional_fields" : {
681              "sessionid" : ""
682          }
683      },
684      {
685          "id" : 8231,
686          "name" : "modify index storage mode",
687          "description" : "Modify Index Storage Mode",
688          "sync" : false,
689          "enabled" : true,
690          "mandatory_fields" : {
691              "timestamp" : "",
692              "real_userid" : {"domain" : "", "user" : ""},
693              "remote" : {"ip" : "", "port" : 1},
694              "storageMode" : ""
695          },
696          "optional_fields" : {
697              "sessionid" : ""
698          }
699      },
700      {
701          "id" : 8232,
702          "name" : "set user",
703          "description" : "User was added or updated",
704          "sync" : false,
705          "enabled" : true,
706          "mandatory_fields" : {
707              "timestamp" : "",
708              "real_userid" : {"domain" : "", "user" : ""},
709              "remote" : {"ip" : "", "port" : 1},
710              "identity" : {"domain" : "", "user" : ""},
711              "roles" : ""
712          },
713          "optional_fields" : {
714              "sessionid" : "",
715              "full_name" : ""
716          }
717      },
718      {
719          "id" : 8233,
720          "name" : "master password change",
721          "description" : "Master password change was requested",
722          "sync" : false,
723          "enabled" : true,
724          "mandatory_fields" : {
725              "timestamp" : "",
726              "real_userid" : "",
727              "remote" : {"ip" : "", "port" : 1}
728          },
729          "optional_fields" : {
730              "sessionid" : "",
731              "error" : ""
732          }
733      },
734      {
735          "id" : 8234,
736          "name" : "encryption key rotation",
737          "description" : "Encryption key rotation was requested",
738          "sync" : false,
739          "enabled" : true,
740          "mandatory_fields" : {
741              "timestamp" : "",
742              "real_userid" : "",
743              "remote" : {"ip" : "", "port" : 1}
744          },
745          "optional_fields" : {
746              "sessionid" : "",
747              "error" : ""
748          }
749      },
750      {
751          "id" : 8235,
752          "name" : "password policy",
753          "description" : "Password policy was changed",
754          "sync" : false,
755          "enabled" : true,
756          "mandatory_fields" : {
757              "timestamp" : "",
758              "real_userid" : "",
759              "remote" : {"ip" : "", "port" : 1},
760              "min_length" : 0,
761              "must_present" : ""
762          },
763          "optional_fields" : {
764              "sessionid" : ""
765          }
766      },
767      {
768          "id" : 8236,
769          "name" : "client cert auth",
770          "description" : "Client certificate authentication settings changed",
771          "sync" : false,
772          "enabled" : true,
773          "mandatory_fields" : {
774              "timestamp" : "",
775              "identity" : {"domain" : "", "user" : ""}
776          },
777          "optional_fields" : {
778              "real_userid" : {"domain" : "", "user" : ""},
779              "remote" : {"ip" : "", "port" : 1},
780              "sessionid" : "",
781              "state": "",
782              "path": "",
783              "prefix": "",
784              "delimiter": "",
785              "prefixes": ""
786          }
787      },
788      {
789          "id" : 8237,
790          "name" : "security settings",
791          "description" : "Security Settings",
792          "sync" : false,
793          "enabled" : true,
794          "mandatory_fields" : {
795              "timestamp" : "",
796              "real_userid" : {"domain" : "", "user" : ""},
797              "remote" : {"ip" : "", "port" : 1},
798              "settings" : ""
799          },
800          "optional_fields" : {
801              "sessionid" : ""
802          }
803      },
804      {
805          "id" : 8238,
806          "name" : "start log collection",
807          "description" : "Log collection run was started",
808          "sync" : false,
809          "enabled" : true,
810          "mandatory_fields" : {
811              "timestamp" : "",
812              "real_userid" : {"domain" : "", "user" : ""},
813              "remote" : {"ip" : "", "port" : 1},
814              "nodes" : "",
815              "base_url" : "",
816              "redact_level" : ""
817          },
818          "optional_fields" : {
819              "sessionid" : "",
820              "tmp_dir" : "",
821              "log_dir" : "",
822              "upload_proxy" : ""
823          }
824      },
825      {
826          "id" : 8239,
827          "name" : "modify log redaction settings",
828          "description" : "Log redaction settings were modified",
829          "sync" : false,
830          "enabled" : true,
831          "mandatory_fields" : {
832              "timestamp" : "",
833              "real_userid" : {"domain" : "", "user" : ""},
834              "remote" : {"ip" : "", "port" : 1},
835              "log_redaction_default_cfg" : {"redact_level" : ""}
836          },
837          "optional_fields" : {
838              "sessionid" : ""
839          }
840      },
841      {
842          "id": 8240,
843          "name": "configured audit daemon",
844          "description": "loaded configuration file for audit daemon",
845          "sync": false,
846          "enabled": true,
847          "mandatory_fields": {
848              "timestamp": "",
849              "real_userid": {"domain": "", "user": ""},
850              "hostname": "",
851              "version": 1
852          },
853          "optional_fields": {
854              "auditd_enabled": true,
855              "rotate_interval": 1,
856              "rotate_size": 1,
857              "log_path": "",
858              "disabled_userids": "",
859              "disabled": "",
860              "enabled": ""
861          }
862      },
863      {
864          "id" : 8241,
865          "name": "modify index settings",
866          "description": "Index service settings were modified",
867          "sync" : false,
868          "enabled" : true,
869          "mandatory_fields" : {
870              "timestamp" : "",
871              "real_userid" : {"source" : "", "user" : ""},
872              "remote" : {"ip" : "", "port" : 1},
873              "settings" : ""
874          },
875          "optional_fields" : {
876              "sessionid" : ""
877          }
878      },
879      {
880          "id" : 8242,
881          "name": "modify query settings",
882          "description": "Query service settings were modified",
883          "sync" : false,
884          "enabled" : true,
885          "mandatory_fields" : {
886              "timestamp" : "",
887              "real_userid" : {"source" : "", "user" : ""},
888              "remote" : {"ip" : "", "port" : 1},
889              "settings" : ""
890          },
891          "optional_fields" : {
892              "sessionid" : ""
893          }
894      }
895    ]
896}
897