Configuration

active_directory

---

ActiveDirectoryRefreshDomainStarted

${username} started a job to refresh the Active Directory domain  ${domainName}.

Severity	Status	Audit Event
Info	Success	Yes

ActiveDirectoryRefreshDomainStartFailed

${username} unable to start a job to refresh the Active Directory domain  ${domainName}. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

appflows

---

BlueprintArchiveSucceeded

${userEmail} successfully archived recovery plan '${blueprintName}' on ${clusterName}

Severity	Status	Audit Event
Info	Success	Yes

BlueprintCreationSucceeded

${userEmail} successfully created recovery plan '${blueprintName}' on ${clusterName}

Severity	Status	Audit Event
Info	Success	Yes

BlueprintUpdateSucceeded

${userEmail} successfully updated recovery plan '${blueprintName}' on ${clusterName}

Severity	Status	Audit Event
Info	Success	Yes

InstallIofilterStarted

${userEmail} started a job to install iofilter on ${computeClusterName}.

Severity	Status	Audit Event
Info	Success	Yes

InstallIofilterStartFailed

${userEmail} failed to start a job to install iofilter on  ${computeClusterName}. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

InstanceResourceConfigurationDeletionSucceeded

${userEmail} successfully deleted resource configuration for recovery  plan '${blueprintName}' on ${clusterName} with failover Id ${failoverId}

Severity	Status	Audit Event
Info	Success	Yes

PostScriptUpdateSucceeded

${userEmail} successfully updated post script for the snappable '${snappableName}' of the recovery plan '${blueprintName}' on ${clusterName} with failover type ${failoverType}. The hashcode of the post script is ${postscriptSignature}

Severity	Status	Audit Event
Info	Success	Yes

RecoveryPlanCreationSucceeded

${userEmail} successfully created recovery plan '${planName}' on ${clusterName}.

Severity	Status	Audit Event
Info	Success	Yes

RecoveryPlanDeletionSucceeded

${userEmail} successfully deleted recovery plan '${planName}' on ${clusterName}.

Severity	Status	Audit Event
Info	Success	Yes

RecoveryPlanUpdateSucceeded

${userEmail} successfully updated recovery plan '${planName}' on ${clusterName}.

Severity	Status	Audit Event
Info	Success	Yes

ResourceConfigurationCreationSucceeded

${userEmail} successfully created resource configuration for recovery plan '${planName}' on ${clusterName}.

Severity	Status	Audit Event
Info	Success	Yes

ResourceConfigurationDeletionSucceeded

${userEmail} successfully deleted resource configuration for recovery plan '${planName}' on ${clusterName}.

Severity	Status	Audit Event
Info	Success	Yes

ResourceConfigurationUpdateSucceeded

${userEmail} successfully updated resource configuration for recovery plan '${planName}' on ${clusterName}.

Severity	Status	Audit Event
Info	Success	Yes

ResourceMappingCreationSucceeded

${userEmail} successfully created resource mapping for recovery plan '${blueprintName}' on ${clusterName}

Severity	Status	Audit Event
Info	Success	Yes

ResourceMappingDeletionSucceeded

${userEmail} successfully deleted resource mapping for recovery plan '${blueprintName}' on ${clusterName}

Severity	Status	Audit Event
Info	Success	Yes

ResourceMappingModificationSucceeded

${userEmail} successfully modified resource mapping for recovery plan '${blueprintName}' on ${clusterName}

Severity	Status	Audit Event
Info	Success	Yes

UninstallIofilterStarted

${userEmail} started a job to uninstall iofilter on ${computeClusterName}.

Severity	Status	Audit Event
Info	Success	Yes

UninstallIofilterStartFailed

${userEmail} failed to start a job to uninstall iofilter on  ${computeClusterName}. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

UpgradeIofilterStarted

${userEmail} started a job to upgrade iofilter on ${computeClusterName}.

Severity	Status	Audit Event
Info	Success	Yes

UpgradeIofilterStartFailed

${userEmail} failed to start a job to upgrade iofilter on  ${computeClusterName}. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

archivalgroup

---

ArchivalGroupCreationSucceeded

${userEmail} successfully created ${archivalGroupType} Archival Location ${archivalGroupName}.

Severity	Status	Audit Event
Info	Success	Yes

ArchivalGroupDeletionSucceeded

${userEmail} successfully deleted Archival Location ${archivalGroupName}.

Severity	Status	Audit Event
Info	Success	Yes

ArchivalGroupModificationSucceeded

${userEmail} successfully modified Archival Location ${archivalGroupName}.

Severity	Status	Audit Event
Info	Success	Yes

archivallocation

---

ArchivalLocationCreationSucceeded

${userEmail} successfully created ${archivalLocationType} archival  location ${archivalLocationName} with ${keyType} encryption key type.

Severity	Status	Audit Event
Info	Success	Yes

ArchivalLocationCreationWithKeyVaultSucceeded

${userEmail} successfully created ${archivalLocationType} archival  location ${archivalLocationName} with ${keyName} of ${keyType}  encryption key type from ${keyVaultUrl}.

Severity	Status	Audit Event
Info	Success	Yes

ArchivalLocationModificationSucceeded

${userEmail} successfully modified archival location ${archivalLocationName}.

Severity	Status	Audit Event
Info	Success	Yes

ArchivalLocationReaderDataSourcesRefreshTriggerFailed

${userEmail} failed to trigger data source refresh for reader archival location ${archivalLocationName}.

Severity	Status	Audit Event
Info	Failure	Yes

ArchivalLocationReaderDataSourcesRefreshTriggerSucceeded

${userEmail} successfully triggered data source refresh for reader archival location ${archivalLocationName}.

Severity	Status	Audit Event
Info	Success	Yes

ArchivalLocationReaderPromotionFailed

${userEmail} failed to promote reader archival location ${archivalLocationName} to read/write state from Polaris.

Severity	Status	Audit Event
Info	Failure	Yes

ArchivalLocationReaderPromotionSucceeded

${userEmail} successfully promoted reader archival location ${archivalLocationName} to read/write state from Polaris.

Severity	Status	Audit Event
Info	Success	Yes

ArchivalLocationReaderRefreshTriggerFailed

${userEmail} failed to trigger refresh for reader archival location ${archivalLocationName}.

Severity	Status	Audit Event
Info	Failure	Yes

ArchivalLocationReaderRefreshTriggerSucceeded

${userEmail} successfully triggered refresh for reader archival location ${archivalLocationName}.

Severity	Status	Audit Event
Info	Success	Yes

ArchivalLocationStateChangeFailed

${userEmail} failed to ${archivalLocationStatus} archival location ${archivalLocationName} from Polaris.

Severity	Status	Audit Event
Info	Failure	Yes

ArchivalLocationStateChangeSucceeded

${userEmail} successfully ${archivalLocationStatus} archival location ${archivalLocationName} from Polaris.

Severity	Status	Audit Event
Info	Success	Yes

DataCenterCloudAccountStateChange

${userEmail} successfully ${cloudAccountStatus}  ${providerType} data center cloud account '${name}'.

Severity	Status	Audit Event
Info	Success	Yes

ReaderArchivalLocationMasterKeyUpdateSucceeded

${userEmail} successfully modified the master encryption key for the  reader archival location ${archivalLocationName} to ${keyType}  encryption key.

Severity	Status	Audit Event
Info	Success	Yes

ReaderArchivalLocationMasterKeyWithKeyVaultUpdateSucceeded

${userEmail} successfully modified the master encryption key for the  reader archival location ${archivalLocationName} to ${keyType}  encryption key. ${keyName} from ${keyVaultUrl} is being used as the  encryption key.

Severity	Status	Audit Event
Info	Success	Yes

awsnative

---

AwsNativeDeleteAccountJobStarted

${userEmail} started to disable ${featureDisplayName} protection of AWS account ${awsAccountDisplayName}. ${featureSnapshots} from AWS will ${deleteSnapshotsMsg} be deleted.

Severity	Status	Audit Event
Info	Success	Yes

AwsNativeDeleteAccountJobStartFailed

${userEmail} failed to start disable of ${featureDisplayName} protection of AWS account ${awsAccountDisplayName}. Failure reason: ${reason}.

Severity	Status	Audit Event
Critical	Failure	Yes

AwsNativeRefreshAccountJobStarted

${userEmail} started refresh of AWS account ${awsAccountDisplayName}.

Severity	Status	Audit Event
Info	Success	Yes

AwsNativeRefreshAccountJobStartFailed

${userEmail} failed to start refresh of AWS account ${awsAccountDisplayName}. Failure reason: ${reason}.

Severity	Status	Audit Event
Critical	Failure	Yes

DeleteAwsAccountArchiveSnapshotTaskFailed

Failed to delete ${featureSnapshots} for ${featureDisplayName} protection in the AWS account ${awsAccountDisplayName}.

Severity	Status	Audit Event
Warning	TaskFailure	No

DeleteAwsAccountArchiveSnapshotTaskStarted

Deleting ${featureSnapshots} for ${featureDisplayName} protection in the AWS account ${awsAccountDisplayName}.

Severity	Status	Audit Event
Info	Running	No

DeleteAwsAccountArchiveSnapshotTaskSucceeded

Successfully Deleted ${featureSnapshots} for ${featureDisplayName} protection in the AWS account ${awsAccountDisplayName}.

Severity	Status	Audit Event
Info	TaskSuccess	No

DeleteAwsNativeAccountJobFailed

Failed to disable ${featureDisplayName} protection for AWS account ${awsAccountDisplayName}. Reason: ${reason}.

Severity	Status	Audit Event
Critical	Failure	No

DeleteAwsNativeAccountJobQueued

Queued disabling ${featureDisplayName} protection of AWS account ${awsAccountDisplayName}. ${featureSnapshots} from AWS will ${deleteSnapshotsMsg} be deleted.

Severity	Status	Audit Event
Info	Queued	No

DeleteAwsNativeAccountJobStarted

Started a job to disable ${featureDisplayName} protection for AWS account ${awsAccountDisplayName}. ${featureSnapshots} from AWS will ${deleteSnapshotsMsg} be deleted.

Severity	Status	Audit Event
Info	TaskSuccess	No

DeleteAwsNativeAccountJobSucceeded

Successfully disabled ${featureDisplayName} protection for AWS account ${awsAccountDisplayName}.

Severity	Status	Audit Event
Info	Success	No

RefreshAwsNativeAccountJobCanceled

Canceled  ${maintenanceType} refresh of AWS account ${awsAccountDisplayName}.

Severity	Status	Audit Event
Info	Canceled	No

RefreshAwsNativeAccountJobCanceling

Canceling  ${maintenanceType} refresh of AWS account ${awsAccountDisplayName}.

Severity	Status	Audit Event
Info	Canceling	No

RefreshAwsNativeAccountJobFailed

Failed to refresh AWS account ${awsAccountDisplayName}. Reason: ${reason}.

Severity	Status	Audit Event
Critical	Failure	No

RefreshAwsNativeAccountJobStarted

Started  ${maintenanceType} refresh of AWS account ${awsAccountDisplayName}.

Severity	Status	Audit Event
Info	TaskSuccess	No

RefreshAwsNativeAccountJobSucceeded

Successfully refreshed AWS account ${awsAccountDisplayName}.

Severity	Status	Audit Event
Info	Success	No

RefreshAwsNativeAccountRefreshFeaturesTaskStarted

Refreshing ${awsAccountFeatures} features for ${awsAccountDisplayName}.

Severity	Status	Audit Event
Info	TaskSuccess	No

azuread

---

AzureAdDeleteDirectoryFailed

${userID} attempted to delete the Azure AD Directory ${directoryName},  but the operation failed.

Severity	Status	Audit Event
Critical	Failure	Yes

AzureAdDeleteDirectoryStarted

${userName} started deletion of Azure AD Directory ${directoryName}.

Severity	Status	Audit Event
Info	Success	Yes

AzureAdOnboardingFailed

Onboarding of the Azure AD Directory ${directoryName} failed.

Severity	Status	Audit Event
Critical	Failure	Yes

AzureAdOnboardingSucceeded

Onboarding of the Azure AD Directory ${directoryName} Succeeded.

Severity	Status	Audit Event
Info	Success	Yes

azurenative

---

AzureNativeDBPrereqVerifyJobCanceled

Canceled prerequisite verification of the ${serverDisplayName} -  ${serverTypeDisplayName} in the ${resGroupDisplayName} resource group of the ${subscriptionDisplayName} subscription.

Severity	Status	Audit Event
Info	Canceled	No

AzureNativeDBPrereqVerifyJobCanceling

Canceling prerequisite verification of the ${serverDisplayName} -  ${serverTypeDisplayName} in the ${resGroupDisplayName} resource group of the ${subscriptionDisplayName} subscription.

Severity	Status	Audit Event
Info	Canceling	No

AzureNativeDBPrereqVerifyJobFailed

Failed prerequisite verification of the ${serverDisplayName} -  ${serverTypeDisplayName} in the ${resGroupDisplayName} resource group of the ${subscriptionDisplayName} subscription. Reason: ${reason}.

Severity	Status	Audit Event
Critical	Failure	No

AzureNativeDBPrereqVerifyJobQueued

Queued prerequisite verification of the ${serverDisplayName} -  ${serverTypeDisplayName} in the ${resGroupDisplayName} resource group of the ${subscriptionDisplayName} subscription.

Severity	Status	Audit Event
Info	Queued	No

AzureNativeDBPrereqVerifyJobStarted

Started prerequisite verification of the ${serverDisplayName} -  ${serverTypeDisplayName} in the ${resGroupDisplayName} resource group of the ${subscriptionDisplayName} subscription.

Severity	Status	Audit Event
Info	TaskSuccess	No

AzureNativeDBPrereqVerifyJobSucceeded

Successfully completed prerequisite verification of the ${serverDisplayName} -  ${serverTypeDisplayName} in the ${resGroupDisplayName} resource group of the ${subscriptionDisplayName} subscription.

Severity	Status	Audit Event
Info	Success	No

AzureNativeDeleteSubscriptionArchiveSnapshotTaskFailed

Failed to delete snapshots in the ${subscriptionDisplayName} subscription.

Severity	Status	Audit Event
Warning	TaskFailure	No

AzureNativeDeleteSubscriptionArchiveSnapshotTaskStarted

Deleting snapshots in the ${subscriptionDisplayName} subscription.

Severity	Status	Audit Event
Info	Running	No

AzureNativeDeleteSubscriptionArchiveSnapshotTaskSucceeded

Deleted snapshots in the ${subscriptionDisplayName} subscription.

Severity	Status	Audit Event
Info	TaskSuccess	No

AzureNativeDeleteSubscriptionJobCanceled

Canceled the job to disable ${featureDisplayName} protection for the ${subscriptionDisplayName} subscription.

Severity	Status	Audit Event
Info	Canceled	No

AzureNativeDeleteSubscriptionJobCanceling

Canceling the job to disable ${featureDisplayName} protection for the ${subscriptionDisplayName} subscription.

Severity	Status	Audit Event
Info	Canceling	No

AzureNativeDeleteSubscriptionJobFailed

${userEmail} failed to start disabling protection of the ${subscriptionDisplayName} Azure subscription. Failure reason: ${reason}.

Severity	Status	Audit Event
Critical	Failure	Yes

AzureNativeDeleteSubscriptionJobFailed

Failed to disable ${featureDisplayName} protection for the ${subscriptionDisplayName} subscription. Reason: ${reason}.

Severity	Status	Audit Event
Critical	Failure	No

AzureNativeDeleteSubscriptionJobStarted

${userEmail} started disabling protection of the ${subscriptionDisplayName} Azure subscription.

Severity	Status	Audit Event
Info	Success	Yes

AzureNativeDeleteSubscriptionJobStarted

Started a job to disable ${featureDisplayName} protection for the ${subscriptionDisplayName} subscription.

Severity	Status	Audit Event
Info	TaskSuccess	No

AzureNativeDeleteSubscriptionJobSucceeded

Successfully disabled ${featureDisplayName} protection for the ${subscriptionDisplayName} subscription.

Severity	Status	Audit Event
Info	Success	No

AzureNativeRefreshSubscriptionCanceled

Canceled ${maintenanceType} refresh of the ${subscriptionDisplayName} subscription.

Severity	Status	Audit Event
Info	Canceled	No

AzureNativeRefreshSubscriptionCanceling

Canceling ${maintenanceType} refresh of the ${subscriptionDisplayName} subscription.

Severity	Status	Audit Event
Info	Canceling	No

AzureNativeRefreshSubscriptionFailed

Failed ${maintenanceType} refresh of the ${subscriptionDisplayName} subscription (${statusPerFeature}). Reason: ${reason}.

Severity	Status	Audit Event
Critical	Failure	No

AzureNativeRefreshSubscriptionJobStarted

${userEmail} started refresh of the ${subscriptionDisplayName} Azure subscription.

Severity	Status	Audit Event
Info	Success	Yes

AzureNativeRefreshSubscriptionJobStartFailed

${userEmail} failed to start refresh of the ${subscriptionDisplayName} Azure subscription. Failure reason: ${reason}.

Severity	Status	Audit Event
Critical	Failure	Yes

AzureNativeRefreshSubscriptionQueued

Queued ${maintenanceType} refresh of the ${subscriptionDisplayName} subscription.

Severity	Status	Audit Event
Info	Queued	No

AzureNativeRefreshSubscriptionStarted

Started ${maintenanceType} refresh of the ${subscriptionDisplayName} subscription.

Severity	Status	Audit Event
Info	TaskSuccess	No

AzureNativeRefreshSubscriptionSucceeded

Successfully finished ${maintenanceType} refresh of the ${subscriptionDisplayName} subscription.

Severity	Status	Audit Event
Info	Success	No

blobstore

---

CyberEventLockdownUpdateFailed

${userName} failed to ${action} Cyber Event Lockdown for ${clusterName} (${clusterUuid}). ${supportMessage}

Severity	Status	Audit Event
Critical	Failure	Yes

CyberEventLockdownUpdateSucceeded

${userName} has ${action}d Cyber Event Lockdown for ${clusterName} (${clusterUuid}). ${supportMessage}

Severity	Status	Audit Event
Critical	Success	Yes

cassandra_source

---

AddCassandraSourceFailure

${username} failed to add the Cassandra source '${sourceName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

AddCassandraSourceStarted

${username} started adding the Cassandra source '${sourceName}'.

Severity	Status	Audit Event
Info	Success	Yes

DeleteCassandraSourceFailure

${username} failed to delete the Cassandra source '${sourceName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

DeleteCassandraSourceStarted

${username} started deleting the Cassandra source '${sourceName}'.

Severity	Status	Audit Event
Info	Success	Yes

EditCassandraSourceFailure

${username} failed to modify the Cassandra source '${sourceName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

EditCassandraSourceStarted

${username} modified the Cassandra source '${sourceName}'.

Severity	Status	Audit Event
Info	Success	Yes

ccprovision

---

ClusterCreateFailed

${userEmail} was unable to create Rubrik Cloud Cluster ${clusterName}, ${clusterUuid}, ${errorMessage}.

Severity	Status	Audit Event
Info	Failure	Yes

ClusterCreateRunning

${userEmail} started the creation of Rubrik Cloud Cluster ${clusterName}, ${clusterUuid}.

Severity	Status	Audit Event
Info	Success	Yes

ClusterCreateSuccess

${userEmail} successfully created Rubrik Cloud Cluster ${clusterName}, ${clusterUuid}.

Severity	Status	Audit Event
Info	Success	Yes

ClusterCreateWarning

${userEmail} is creating Rubrik Cloud Cluster ${clusterName}, ${clusterUuid}, with a warning message, ${warning}.

Severity	Status	Audit Event
Warning	Success	Yes

ClusterRecoveryFailed

${userEmail} was unable to recover Rubrik Cloud Cluster ${clusterName}, ${clusterUuid}, ${errorMessage}.

Severity	Status	Audit Event
Info	Failure	Yes

ClusterRecoveryRunning

${userEmail} started the recovery of Rubrik Cloud Cluster ${clusterName}, ${clusterUuid}.

Severity	Status	Audit Event
Info	Success	Yes

ClusterRecoverySuccess

${userEmail} successfully recovered Rubrik Cloud Cluster ${clusterName}, ${clusterUuid}.

Severity	Status	Audit Event
Info	Success	Yes

cdm_rbac_migration

---

FetchCDMRBACConfigJobFailed

Failed to fetch the Rubrik CDM RBAC configuration from ${clusterName}. Reason: ${reason}.

Severity	Status	Audit Event
Critical	Failure	No

FetchCDMRBACConfigJobStarted

Started the job to fetch the Rubrik CDM RBAC configuration from ${clusterName}.

Severity	Status	Audit Event
Info	TaskSuccess	No

FetchCDMRBACConfigJobSucceeded

Successfully fetched the Rubrik CDM RBAC configuration from ${clusterName}.

Severity	Status	Audit Event
Info	Success	No

GenerateCDMRBACMigrationSummaryJobFailed

Failed to generate the Rubrik CDM RBAC migration summary from ${clusterName}. Reason: ${reason}.

Severity	Status	Audit Event
Critical	Failure	No

GenerateCDMRBACMigrationSummaryJobStarted

Started the job to generate the Rubrik CDM RBAC migration summary from ${clusterName}.

Severity	Status	Audit Event
Info	TaskSuccess	No

GenerateCDMRBACMigrationSummaryJobSucceeded

Successfully generated the Rubrik CDM RBAC migration summary from ${clusterName}.

Severity	Status	Audit Event
Info	Success	No

MigrateCDMRBACConfigJobFailed

Failed to migrate the Rubrik CDM RBAC configuration from ${clusterName}. Reason: ${reason}.

Severity	Status	Audit Event
Critical	Failure	No

MigrateCDMRBACConfigJobStarted

Started the job to migrate the Rubrik CDM RBAC configuration from ${clusterName}.

Severity	Status	Audit Event
Info	TaskSuccess	No

MigrateCDMRBACConfigJobSucceeded

Successfully migrated the Rubrik CDM RBAC configuration from ${clusterName}.

Severity	Status	Audit Event
Info	Success	No

cdm_remove_cluster

---

ClusterDeleteCompleted

Cluster data delete completed for cluster with uuid ${clusterUUID}

Severity	Status	Audit Event
Info	Success	No

ClusterDeleteQueued

Cluster disconnect succeeded. Cluster delete queued for cluster with uuid ${clusterUUID}

Severity	Status	Audit Event
Info	Success	No

ClusterDeleteStarted

Cluster data delete started for cluster with uuid ${clusterUUID}

Severity	Status	Audit Event
Info	Running	No

ClusterDisconnectFailed

Cluster disconnect failed for cluster with uuid ${clusterUUID}

Severity	Status	Audit Event
Critical	Failure	No

ClusterDisconnectStarted

Cluster disconnect started for cluster with uuid ${clusterUUID}

Severity	Status	Audit Event
Info	Running	No

certificate_expiry

---

CertificateExpiringSoonInUse

Certificate '${certificateName}' is expiring within the next ${dayCount} day(s).  This certificate is currently being used for the following service providers: ${serviceProviders}. Import a new certificate and reconfigure each service to use your new certificate.

Severity	Status	Audit Event
Warning	TaskSuccess	No

CertificateExpiringSoonNotInUse

Certificate '${certificateName}' is expiring within the next ${dayCount} day(s).

Severity	Status	Audit Event
Warning	TaskSuccess	No

CertificateExpiringTodayInUse

Certificate '${certificateName}' is expiring today.  This certificate is currently being used for the following service providers: ${serviceProviders}. Import a new certificate and reconfigure each service to use your new certificate.

Severity	Status	Audit Event
Critical	TaskSuccess	No

CertificateExpiringTodayNotInUse

Certificate '${certificateName}' is expiring today. Connections to service providers using this certificate will fail.

Severity	Status	Audit Event
Warning	TaskSuccess	No

certificate_management

---

DeleteCdmCertificateFailure

${ActorSubjectName} was unable to delete the certificate '${certName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Success	Yes

DeleteCdmCertificateSuccess

${ActorSubjectName} deleted the certificate '${certName}'.

Severity	Status	Audit Event
Info	Success	Yes

DeleteCertificate

${ActorSubjectName} deleted the certificate '${certName}'.

Severity	Status	Audit Event
Info	Success	Yes

ImportCdmCertificateFailure

${ActorSubjectName} was unable to import the certificate '${certName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Success	Yes

ImportCdmCertificateSuccess

${ActorSubjectName} imported the certificate '${certName}'.

Severity	Status	Audit Event
Info	Success	Yes

ImportCdmCertificateWithTrustSuccess

${ActorSubjectName} imported the certificate '${certName}' to the cluster trust store.

Severity	Status	Audit Event
Info	Success	Yes

ImportCertificate

${ActorSubjectName} imported the certificate '${certName}'.

Severity	Status	Audit Event
Info	Success	Yes

ImportCSR

${ActorSubjectName} created the CSR '${csrName}'.

Severity	Status	Audit Event
Info	Success	Yes

UpdateCdmCertificateFailure

${ActorSubjectName} was unable to update the certificate '${certName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Success	Yes

UpdateCdmCertificateSuccess

${ActorSubjectName} updated the certificate '${certName}'.

Severity	Status	Audit Event
Info	Success	Yes

UpdateCertificate

${ActorSubjectName} updated the certificate '${certName}'.

Severity	Status	Audit Event
Info	Success	Yes

cloudaccounts

---

AwsAccountAdditionFailed

${userEmail} failed to initiate addition of ${feature} for AWS Account ${accountName} with ID ${nativeId}.

Severity	Status	Audit Event
Critical	Failure	Yes

AwsAccountAdditionSucceeded

${userEmail} initiated addition of ${feature} for AWS Account ${accountName} with ID ${nativeId}.

Severity	Status	Audit Event
Info	Success	Yes

AwsAccountDeletionFailed

${userEmail} failed to initiate deletion of ${feature} for AWS Account ${accountName} with ID ${nativeId}.

Severity	Status	Audit Event
Critical	Failure	Yes

AwsAccountDeletionSucceeded

${userEmail} initiated deletion of ${feature} for AWS Account ${accountName} with ID ${nativeId}.

Severity	Status	Audit Event
Info	Success	Yes

AwsAccountUpdateFailed

${userEmail} failed to update AWS account ${accountName} with ID ${nativeId} for feature ${feature}.

Severity	Status	Audit Event
Critical	Failure	Yes

AwsAccountUpdateSucceeded

${userEmail} updated AWS account ${accountName} with ID ${nativeId} for feature ${feature}.

Severity	Status	Audit Event
Info	Success	Yes

AwsAccountUpgradeFailed

${userEmail} failed to intitate upgrade of AWS account ${accountName} with ID ${nativeId} for feature ${feature}.

Severity	Status	Audit Event
Critical	Failure	Yes

AwsAccountUpgradeSucceeded

${userEmail} initiated upgrade of AWS Account ${accountName} with ID ${nativeId} for feature ${feature}.

Severity	Status	Audit Event
Info	Success	Yes

AwsCloudAccountAdditionFailed

Failed to add AWS cloud account ${accountName} (${nativeId}) for feature ${feature}. Reason: ${reason}

Severity	Status	Audit Event
Critical	Failure	No

AwsCloudAccountAdditionSucceeded

Successfully added AWS cloud account ${accountName} (${nativeId}) for feature ${feature}.

Severity	Status	Audit Event
Info	Success	No

AwsCloudAccountDeletionFailed

Failed to delete AWS cloud account ${accountName} (${nativeId}) for feature ${feature}. Reason: ${reason}

Severity	Status	Audit Event
Critical	Failure	No

AwsCloudAccountDeletionSucceeded

Successfully deleted AWS cloud account ${accountName} (${nativeId}) for feature ${feature}.

Severity	Status	Audit Event
Info	Success	No

AwsCloudAccountDisableFeatureJobFailed

Failed to disable ${feature} of AWS account ${awsAccountDisplayName}. Reason: ${reason}.

Severity	Status	Audit Event
Critical	Failure	No

AwsCloudAccountDisableFeatureJobForProtectionStarted

Started to disable ${feature} of AWS account ${awsAccountDisplayName}. Snapshots from AWS will ${deleteSnapshotsMsg}be deleted.

Severity	Status	Audit Event
Info	TaskSuccess	No

AwsCloudAccountDisableFeatureJobSucceeded

Successfully disabled ${feature} of AWS account ${awsAccountDisplayName}.

Severity	Status	Audit Event
Info	Success	No

AwsCloudAccountDisconnect

Disconnected AWS cloud account ${accountName} (${nativeId}) for feature ${feature}. Reason: The CloudFormation stack for the cross-account role has been deleted.

Severity	Status	Audit Event
Critical	Success	No

AwsCloudAccountMissingPermissions

The Account ${name} (${nativeId}) requires additional permissions for a recent enhancement with ${feature}. Navigate to AWS accounts under Remote Settings and upgrade permissions to reconnect account.

Severity	Status	Audit Event
Warning	Success	No

AwsCloudAccountUpdateFailed

Failed to ${action} AWS cloud account ${accountName} (${nativeId}) for feature ${feature}. Reason: ${reason}

Severity	Status	Audit Event
Critical	Failure	No

AwsCloudAccountUpdateSucceeded

Successfully ${action} AWS cloud account ${accountName} (${nativeId}) for feature ${feature}.

Severity	Status	Audit Event
Info	Success	No

AwsOutpostAccountAdditionFailed

${userEmail} failed to initiate the addition of Laminar AWS Outpost Account with ID ${nativeId}.

Severity	Status	Audit Event
Critical	Failure	Yes

AwsOutpostAccountAdditionFailed

Failed to add the AWS Outpost account (${nativeId}) for Laminar. Reason: ${reason}

Severity	Status	Audit Event
Critical	Failure	No

AwsOutpostAccountAdditionSucceeded

${userEmail} initiated the addition of Laminar AWS Outpost Account with ID ${nativeId}.

Severity	Status	Audit Event
Info	Success	Yes

AwsOutpostAccountAdditionSucceeded

Successfully added the Laminar AWS Outpost account (${nativeId}).

Severity	Status	Audit Event
Info	Success	No

AwsOutpostAccountUpdateFailed

${userEmail} failed to update the AWS Outpost account with ID ${nativeId} for Laminar.

Severity	Status	Audit Event
Critical	Failure	Yes

AwsOutpostAccountUpdateFailed

Failed to update the AWS Outpost account (${nativeId}) for Laminar. Reason: ${reason}

Severity	Status	Audit Event
Critical	Failure	No

AwsOutpostAccountUpdateSucceeded

${userEmail} updated AWS Outpost account with ID ${nativeId} for Laminar.

Severity	Status	Audit Event
Info	Success	Yes

AwsOutpostAccountUpdateSucceeded

Successfully updated the AWS Outpost account (${nativeId}) for Laminar.

Severity	Status	Audit Event
Info	Success	No

AzureCloudAccountAdditionFailed

Failed to add Azure Subscription ${subscriptionName} with ID ${nativeId} for feature ${feature}. Reason: ${reason}

Severity	Status	Audit Event
Critical	Failure	No

AzureCloudAccountAdditionSucceeded

Successfully added Azure Subscription ${subscriptionName} with ID ${nativeId} for feature ${feature}.

Severity	Status	Audit Event
Info	Success	No

AzureCloudAccountDeletionFailed

Failed to delete permissions of the Azure Subscription ${subscriptionName} with ID ${nativeId} for feature ${feature}. Reason: ${reason}

Severity	Status	Audit Event
Critical	Failure	No

AzureCloudAccountDeletionSucceeded

Successfully deleted permissions of the Azure Subscription ${subscriptionName} with ID ${nativeId} for feature ${feature}.

Severity	Status	Audit Event
Info	Success	No

AzureCloudAccountDisconnected

The Subscription ${subscriptionName} (${nativeId}) was disconnected because the Azure Active Directory application created for Rubrik was deleted. Under Remote Settings, open Azure Subscriptions and upgrade permissions to reconnect Subscription.

Severity	Status	Audit Event
Critical	Failure	No

AzureCloudAccountMissingPermissions

The Subscription ${subscriptionName} (${nativeId}) requires additional permissions for a recent enhancement with ${feature}. Navigate to Azure Subscriptions under Remote Settings and upgrade permissions to reconnect Subscription.

Severity	Status	Audit Event
Warning	Success	No

AzureCloudAccountUpdateNameFailed

Failed to update name of the Azure Subscription with ID ${nativeId} to ${name}. Reason: ${reason}

Severity	Status	Audit Event
Critical	Failure	No

AzureCloudAccountUpdateNameSucceeded

Successfully updated name of the Azure Subscription with ID ${nativeId} to ${name}.

Severity	Status	Audit Event
Info	Success	No

AzureCloudAccountUpdateRegionsFailed

Failed to update regions in the Azure Subscription ${subscriptionName} with ID ${nativeId} for feature ${feature}. Reason: ${reason}

Severity	Status	Audit Event
Critical	Failure	No

AzureCloudAccountUpdateRegionsSucceeded

Successfully updated regions in the Azure Subscription ${subscriptionName} with ID ${nativeId} for feature ${feature}.

Severity	Status	Audit Event
Info	Success	No

AzureCloudAccountUpgradeFailed

Failed to update permissions of the Azure Subscription ${subscriptionName} with ID ${nativeId} for feature ${feature}. Reason: ${reason}

Severity	Status	Audit Event
Critical	Failure	No

AzureCloudAccountUpgradeSucceeded

Successfully updated permissions of the Azure Subscription ${subscriptionName} with ID ${nativeId} for feature ${feature}.

Severity	Status	Audit Event
Info	Success	No

AzureSubscriptionAdditionFailed

${userEmail} failed to add Azure Subscription ${subscriptionName} with ID ${nativeId} for feature ${feature}.

Severity	Status	Audit Event
Critical	Failure	Yes

AzureSubscriptionAdditionSucceeded

${userEmail} added Azure Subscription ${subscriptionName} with ID ${nativeId} for feature ${feature}.

Severity	Status	Audit Event
Info	Success	Yes

AzureSubscriptionDeletionFailed

${userEmail} failed to delete Azure Subscription ${subscriptionName} with ID ${nativeId} for feature ${feature}.

Severity	Status	Audit Event
Critical	Failure	Yes

AzureSubscriptionDeletionSucceeded

${userEmail} deleted Azure Subscription ${subscriptionName} with ID ${nativeId} for feature ${feature}.

Severity	Status	Audit Event
Info	Success	Yes

AzureSubscriptionUpdateFailed

${userEmail} failed to update Azure Subscription ${subscriptionName} with ID ${nativeId} for feature ${feature}.

Severity	Status	Audit Event
Critical	Failure	Yes

AzureSubscriptionUpdateSucceeded

${userEmail} updated Azure Subscription ${subscriptionName} with ID ${nativeId} for feature ${feature}.

Severity	Status	Audit Event
Info	Success	Yes

AzureSubscriptionUpgradeFailed

${userEmail} failed to upgrade Azure Subscription ${subscriptionName} with ID ${nativeId} for feature ${feature}.

Severity	Status	Audit Event
Critical	Failure	Yes

AzureSubscriptionUpgradeSucceeded

${userEmail} upgraded Azure Subscription ${subscriptionName} with ID ${nativeId} for feature ${feature}.

Severity	Status	Audit Event
Info	Success	Yes

CloudAccountDisableFeatureJobFailed

Failed to disable ${feature} of ${cloudProvider} ${accountTerminology} ${cloudAccountDisplayName}. Reason: ${reason}.

Severity	Status	Audit Event
Critical	Failure	No

CloudAccountDisableFeatureJobForProtectionStarted

Started to disable ${feature} of ${cloudProvider} ${accountTerminology} ${cloudAccountDisplayName}. ${deleteSnapshotsMsg}

Severity	Status	Audit Event
Info	TaskSuccess	No

CloudAccountDisableFeatureJobSucceeded

Successfully disabled ${feature} of ${cloudProvider} ${accountTerminology} ${cloudAccountDisplayName}.

Severity	Status	Audit Event
Info	Success	No

CloudAccountElevatedPrivilegesAdded

${userEmail} initiated a privilege elevation session for tenant - ${tenantDomain}, using OAuth.

Severity	Status	Audit Event
Info	Success	No

CloudAccountElevatedPrivilegesRemoved

Elevated privileges for user ${userEmail} to ${tenantDomain} revoked.

Severity	Status	Audit Event
Info	Success	No

CloudaccountsAwsExocomputeConfigAddFailed

${userEmail} failed to add Exocompute settings for the ${region} region of the ${accountName} AWS account.

Severity	Status	Audit Event
Critical	Failure	Yes

CloudaccountsAwsExocomputeConfigAddSucceeded

${userEmail} successfully added Exocompute settings for the ${region} region of the ${accountName} AWS account.

Severity	Status	Audit Event
Info	Success	Yes

CloudaccountsAwsExocomputeConfigDeleteFailed

${userEmail} failed to delete Exocompute settings for the ${region} region for the ${accountName} AWS account.

Severity	Status	Audit Event
Critical	Failure	Yes

CloudaccountsAwsExocomputeConfigDeleteSucceeded

${userEmail} successfully deleted Exocompute settings for the ${region} region of the ${accountName} AWS account.

Severity	Status	Audit Event
Info	Success	Yes

CloudaccountsAzureExocomputeConfigAddFailed

${userEmail} failed to add Exocompute settings for the ${region} region of the Azure Subscription ${subscriptionName} with ID ${nativeID}.

Severity	Status	Audit Event
Critical	Failure	Yes

CloudaccountsAzureExocomputeConfigAddSucceeded

${userEmail} successfully added Exocompute settings for the ${region} region of the Azure Subscription ${subscriptionName} with ID ${nativeID}.

Severity	Status	Audit Event
Info	Success	Yes

CloudaccountsAzureExocomputeConfigDeleteFailed

${userEmail} failed to delete Exocompute settings for the ${region} region for the Azure Subscription ${subscriptionName} with ID ${nativeID}.

Severity	Status	Audit Event
Critical	Failure	Yes

CloudaccountsAzureExocomputeConfigDeleteSucceeded

${userEmail} successfully deleted Exocompute settings for the ${region} region of the Azure Subscription ${subscriptionName} with ID ${nativeID}.

Severity	Status	Audit Event
Info	Success	Yes

CloudaccountsDisableFeatureJobFailed

${userEmail} failed to start disable of ${feature} of ${cloudProvider} ${accountTerminology} ${cloudAccountDisplayName}. Failure reason: ${reason}.

Severity	Status	Audit Event
Critical	Failure	Yes

CloudaccountsDisableFeatureJobForAwsProtectionStarted

${userEmail} started to disable ${feature} of AWS account ${awsAccountDisplayName}. ${featureSnapshots} from AWS will ${deleteSnapshotsMsg} be deleted.

Severity	Status	Audit Event
Info	Success	Yes

CloudaccountsDisableFeatureJobForAwsStartFailed

${userEmail} failed to start disable of ${feature} of AWS account ${awsAccountDisplayName}. Failure reason: ${reason}.

Severity	Status	Audit Event
Critical	Failure	Yes

CloudaccountsDisableFeatureJobStarted

${userEmail} started to disable ${feature} of ${cloudProvider} ${accountTerminology} ${cloudAccountDisplayName}. ${deleteSnapshotsMsg}

Severity	Status	Audit Event
Info	Success	Yes

GcpCloudAccountAdditionFailed

Failed to add GCP Project ${name} with ID ${nativeId} for feature ${feature}. Reason: ${reason}

Severity	Status	Audit Event
Critical	Failure	No

GcpCloudAccountAdditionSucceeded

Successfully added GCP Project ${name} with ID ${nativeId} for feature ${feature}.

Severity	Status	Audit Event
Info	Success	No

GcpCloudAccountDeletionFailed

Failed to delete permissions of the GCP Project ${name} with ID ${nativeId} for feature ${feature}. Reason: ${reason}

Severity	Status	Audit Event
Critical	Failure	No

GcpCloudAccountDeletionSucceeded

Successfully deleted permissions of the GCP Project ${name} with ID ${nativeId} for feature ${feature}.

Severity	Status	Audit Event
Info	Success	No

GcpCloudAccountMissingPermissions

The Project ${name} (${nativeId}) requires additional permissions for a recent enhancement with ${feature}. Navigate to GCP Projects under Remote Settings and upgrade permissions to reconnect Project.

Severity	Status	Audit Event
Warning	Success	No

GcpCloudAccountUpgradeFailed

Failed to update permissions of the GCP Project ${name} with ID ${nativeId} for feature ${feature}. Reason: ${reason}

Severity	Status	Audit Event
Critical	Failure	No

GcpCloudAccountUpgradeSucceeded

Successfully updated permissions of the GCP Project ${name} with ID ${nativeId} for feature ${feature}.

Severity	Status	Audit Event
Info	Success	No

GcpProjectOperationFailed

${userEmail} failed to ${operation} GCP Project ${name} with ID ${nativeId} for feature ${feature}.

Severity	Status	Audit Event
Critical	Failure	Yes

GcpProjectOperationSucceeded

${userEmail} ${operation} GCP Project ${name} with ID ${nativeId} for feature ${feature}.

Severity	Status	Audit Event
Info	Success	Yes

cloudnative

---

CentralExocomputeShareSnapshotsFailed

Failed to share snapshots with the mapped Exocompute account  ${exocomputeAccountName}. Reason: ${reason}.

Severity	Status	Audit Event
Critical	TaskFailure	No

CentralExocomputeShareSnapshotsStarted

Sharing snapshots with the mapped Exocompute account  ${exocomputeAccountName}.

Severity	Status	Audit Event
Info	Running	No

CentralExocomputeShareSnapshotsSucceeded

Successfully shared snapshots with the mapped Exocompute account  ${exocomputeAccountName}.

Severity	Status	Audit Event
Info	TaskSuccess	No

CentralExocomputeUnShareSnapshotsFailed

Failed to unshare snapshots from the mapped Exocompute account  ${exocomputeAccountName}. Reason: ${reason}.

Severity	Status	Audit Event
Critical	TaskFailure	No

CentralExocomputeUnShareSnapshotsStarted

Unsharing snapshots from the mapped Exocompute account  ${exocomputeAccountName}.

Severity	Status	Audit Event
Info	Running	No

CentralExocomputeUnShareSnapshotsSucceeded

Successfully unshared snapshots from the mapped Exocompute account  ${exocomputeAccountName}.

Severity	Status	Audit Event
Info	TaskSuccess	No

CloudNativeDBPrereqSetupJobCanceled

Canceled database backup set up on ${qualifiedSnappableDisplayText}.

Severity	Status	Audit Event
Info	Canceled	No

CloudNativeDBPrereqSetupJobCanceling

Canceling database backup set up on ${qualifiedSnappableDisplayText}.

Severity	Status	Audit Event
Info	Canceling	No

CloudNativeDBPrereqSetupJobFailed

Could not set up database backup on ${qualifiedSnappableDisplayText}. Reason: ${reason}.

Severity	Status	Audit Event
Critical	Failure	No

CloudNativeDBPrereqSetupJobQueued

Queued database backup set up on ${qualifiedSnappableDisplayText}.

Severity	Status	Audit Event
Info	Queued	No

CloudNativeDBPrereqSetupJobSetupTaskFailed

Failed to prepare ${qualifiedSnappableDisplayText} for persistent database backup. Reason: ${reason}

Severity	Status	Audit Event
Warning	TaskFailure	No

CloudNativeDBPrereqSetupJobSetupTaskStarted

Started preparation for persistent database backup on ${qualifiedSnappableDisplayText}.

Severity	Status	Audit Event
Info	Running	No

CloudNativeDBPrereqSetupJobSetupTaskSucceeded

Successfully prepared ${qualifiedSnappableDisplayText} for persistent database backup.

Severity	Status	Audit Event
Info	TaskSuccess	No

CloudNativeDBPrereqSetupJobStarted

${userEmail} started database backup set up on ${qualifiedSnappableDisplayText}.

Severity	Status	Audit Event
Info	Success	Yes

CloudNativeDBPrereqSetupJobStarted

Started database backup set up on ${qualifiedSnappableDisplayText}.

Severity	Status	Audit Event
Info	TaskSuccess	No

CloudNativeDBPrereqSetupJobStartFailed

${userEmail} failed to start database backup set up on ${qualifiedSnappableDisplayText}. Failure reason: ${reason}.

Severity	Status	Audit Event
Critical	Failure	Yes

CloudNativeDBPrereqSetupJobSucceeded

Successfully set up database backup on ${qualifiedSnappableDisplayText}.

Severity	Status	Audit Event
Info	Success	No

CloudNativeRBAConnectivityJobCanceled

Canceled the connectivity check to the Rubrik Backup Service on ${qualifiedSnappableDisplayText}.

Severity	Status	Audit Event
Info	Canceled	No

CloudNativeRBAConnectivityJobCanceling

Canceling the connectivity check to the Rubrik Backup Service on ${qualifiedSnappableDisplayText}.

Severity	Status	Audit Event
Info	Canceling	No

CloudNativeRBAConnectivityJobFailed

Could not check the connection to the Rubrik Backup Service on ${qualifiedSnappableDisplayText}. Reason: ${reason}.

Severity	Status	Audit Event
Critical	Failure	No

CloudNativeRBAConnectivityJobQueued

Queued the check for the connection to the Rubrik Backup Service on ${qualifiedSnappableDisplayText}.

Severity	Status	Audit Event
Info	Queued	No

CloudNativeRBAConnectivityJobStarted

Checking the connection to the Rubrik Backup Service on ${qualifiedSnappableDisplayText}.

Severity	Status	Audit Event
Info	TaskSuccess	No

CloudNativeRBAConnectivityJobStarted

For ${userEmail}, checking the connection to the Rubrik Backup Service on ${qualifiedSnappableDisplayText}.

Severity	Status	Audit Event
Info	Success	Yes

CloudNativeRBAConnectivityJobStartFailed

For user ${userEmail}, unable to initiate the check for the connection to the Rubrik Backup Service on ${qualifiedSnappableDisplayText}. Failure reason: ${reason}.

Severity	Status	Audit Event
Critical	Failure	Yes

CloudNativeRBAConnectivityJobSucceeded

Successfully connected to the Rubrik Backup Service on ${qualifiedSnappableDisplayText}.

Severity	Status	Audit Event
Info	Success	No

CloudNativeRequestClusterTaskFailed

Failed to get an Exocompute cluster.

Severity	Status	Audit Event
Warning	TaskFailure	No

CloudNativeRequestClusterTaskStarted

Waiting for an Exocompute cluster to be ready.

Severity	Status	Audit Event
Info	Running	No

CloudNativeRequestClusterTaskSucceeded

Using the Exocompute cluster ${clusterName}.

Severity	Status	Audit Event
Info	TaskSuccess	No

CloudNativeRequestHostedClusterTaskFailed

Failed to get a Rubrik-hosted compute cluster.

Severity	Status	Audit Event
Warning	TaskFailure	No

CloudNativeRequestHostedClusterTaskStarted

Waiting for a Rubrik-hosted compute cluster to be ready.

Severity	Status	Audit Event
Info	Running	No

CloudNativeRequestHostedClusterTaskSucceeded

Using the Rubrik-hosted compute cluster.

Severity	Status	Audit Event
Info	TaskSuccess	No

FoundLeakedResources

Rubrik Security Cloud encountered an issue while attempting to clean  up your resources. Reason: ${reason}.

Severity	Status	Audit Event
Critical	Failure	No

PCRExoBundleCompatibilityCheckFailed

RSC failed to validate your exo bundle version. Reason: ${reason}.

Severity	Status	Audit Event
Critical	TaskFailure	No

TagRuleCreationFailed

${userEmail} failed to create tag-rule ${ruleName} for ${objectType}, Failure reason: ${reason}

Severity	Status	Audit Event
Warning	Failure	Yes

TagRuleCreationSucceeded

${userEmail} successfully created tag-rule ${ruleName} for ${objectType}

Severity	Status	Audit Event
Info	Success	Yes

TagRuleDeletionFailed

${userEmail} failed to delete tag-rule ${ruleName} for ${objectType}, Failure reason: ${reason}

Severity	Status	Audit Event
Warning	Failure	Yes

TagRuleDeletionSucceeded

${userEmail} successfully deleted tag-rule ${ruleName} for ${objectType}

Severity	Status	Audit Event
Info	Success	Yes

TagRuleModificationFailed

${userEmail} failed to modify tag-rule ${ruleName} for ${objectType}, Failure reason: ${reason}

Severity	Status	Audit Event
Warning	Failure	Yes

TagRuleModificationSucceeded

${userEmail} successfully modified tag-rule ${ruleName} for ${objectType}

Severity	Status	Audit Event
Info	Success	Yes

cluster

---

AddClusterNodes

${userName} started an add-node job for ${clusterName}.

Severity	Status	Audit Event
Info	Success	Yes

AddClusterNodesFailed

${userName} failed to start an add-node job for ${clusterName}.

Severity	Status	Audit Event
Info	Failure	Yes

AddClusterRoute

${userName} added route ${routeConfig} for Rubrik cluster ${clusterName}.

Severity	Status	Audit Event
Info	Success	Yes

AddClusterRouteFailed

${userName} was unable to add route ${routeConfig} for Rubrik cluster ${clusterName}. Failure reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

ConfigureVlan

${userName} added VLAN with ID ${vlanId} to ${clusterName}.

Severity	Status	Audit Event
Info	Success	Yes

ConfigureVlanFailed

${userName} failed to add VLAN with ID ${vlanId} to ${clusterName}. Failure reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

DeleteClusterRoute

${userName} deleted route, [${routeConfig}], for Rubrik cluster, ${clusterName}.

Severity	Status	Audit Event
Info	Success	Yes

DeleteClusterRouteFailed

${userName} was unable to delete a route, [${routeConfig}], for Rubrik cluster, ${clusterName}. Failure reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

DeleteProxyConfig

${userName} deleted the proxy settings for ${clusterName}.

Severity	Status	Audit Event
Info	Success	Yes

DeleteProxyConfigFailed

${userName} failed to delete the proxy settings for ${clusterName}.

Severity	Status	Audit Event
Info	Failure	Yes

DeleteVlans

${userName} deleted VLAN(s) with ID ${vlanIds} for ${clusterName}.

Severity	Status	Audit Event
Info	Success	Yes

DeleteVlansFailed

${userName} failed to delete VLAN(s) with ID ${vlanIds} for ${clusterName}. Failure reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

FindBadDisk

${userName} successfully ran find bad disk on ${nodeId} for ${clusterName}.

Severity	Status	Audit Event
Info	Success	Yes

FindBadDiskFailed

${userName} failed to find bad disk on ${nodeId} for ${clusterName}. Failure reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

GenerateClusterRegistrationToken

${userName} generated registration token for cluster ${clusterUUID} with nodes ${nodeIDs} and managed by polaris set to ${managedByPolaris}.

Severity	Status	Audit Event
Info	Success	Yes

GenerateClusterRegistrationTokenFailure

${userName} failed to generate registration token for cluster ${clusterUUID} with nodes ${nodeIDs} and managed by polaris set to ${managedByPolaris}, reason ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

ModifyIpmi

${userName} successfully modified IPMI settings for ${clusterName}.

Severity	Status	Audit Event
Info	Success	Yes

ModifyIpmiFailed

${userName} failed to modify IPMI settings for ${clusterName}. Failure reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

PauseClusterAlerts

${userName} paused alerts for Rubrik cluster ${clusterName}, UUID: ${clusterUUID}.

Severity	Status	Audit Event
Info	Success	Yes

RemoveCDMClusterStarted

${userName} started removal of Rubrik Cluster ${clusterUUID}.

Severity	Status	Audit Event
Info	Success	Yes

RemoveClusterNodes

${userName} triggered removal of nodes: ${nodeIDs} on ${clusterName}.

Severity	Status	Audit Event
Info	Success	Yes

RemoveDisk

${userName} successfully removed disk ${diskId} for ${clusterName}.

Severity	Status	Audit Event
Info	Success	Yes

RemoveDiskFailed

${userName} failed to remove disk ${diskId} for ${clusterName}. Failure reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

RemoveNodeForReplacement

${userName} triggered removal of node: ${nodeID} for replacement, on ${clusterName}.

Severity	Status	Audit Event
Info	Success	Yes

ReplaceClusterNode

${userName} triggered replacement of node: ${nodeID} on ${clusterName}.

Severity	Status	Audit Event
Info	Success	Yes

ResizeDisk

${userName} successfully resized disk ${diskId} for ${clusterName}.

Severity	Status	Audit Event
Info	Success	Yes

ResizeDiskFailed

${userName} failed to resize disk ${diskId} for ${clusterName}. Failure reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

SetClusterDnsAndSearchDomains

${userName} updated the DNS servers and search domains for ${clusterName}.

Severity	Status	Audit Event
Info	Success	Yes

SetClusterDnsAndSearchDomainsFailed

${userName} failed to update the DNS server or search domains for ${clusterName}. Failure reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

SetupDisk

${userName} successfully set up disk ${diskId} for ${clusterName}.

Severity	Status	Audit Event
Info	Success	Yes

SetupDiskFailed

${userName} failed to set up disk ${diskId} for ${clusterName}. Failure reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

UnpauseClusterAlerts

${userName} resumed alerts for Rubrik cluster ${clusterName}, UUID: ${clusterUUID}.

Severity	Status	Audit Event
Info	Success	Yes

UpdateAirGapStatusFailed

${userName} failed to modify the air-gap status for ${clusterName}. Failure reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

UpdateAirGapStatusSucceeded

${userName} modified the air-gap status for ${clusterName}.

Severity	Status	Audit Event
Info	Success	Yes

UpdateClusterIps

${userName} updated the floating IPs for ${clusterName}.

Severity	Status	Audit Event
Info	Success	Yes

UpdateClusterIpsFailed

${userName} failed to update the floating IPs for ${clusterName}. Failure reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

UpdateClusterNtpServers

${userName} updated the NTP servers for ${clusterName}.

Severity	Status	Audit Event
Info	Success	Yes

UpdateClusterNtpServersFailed

${userName} failed to update the NTP servers for ${clusterName}. Failure reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

UpdateClusterSettings

${userName} successfully updated cluster settings for ${clusterName}.

Severity	Status	Audit Event
Info	Success	Yes

UpdateClusterSettingsFailed

${userName} failed to update cluster settings for ${clusterName}. Failure reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

UpdateProxyConfig

${userName} updated the proxy settings for ${clusterName}.

Severity	Status	Audit Event
Info	Success	Yes

UpdateProxyConfigFailed

${userName} failed to update the proxy settings for ${clusterName}. Failure reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

UpdateRegisteredMode

${userName} successfully updated the RSC managed mode for ${clusterName}.

Severity	Status	Audit Event
Info	Success	Yes

UpdateRegisteredModeFailed

${userName} was unable to update the RSC managed mode for ${clusterName}. Failure reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

UpdateVlan

${userName} updated VLAN with ID ${vlanId} for Rubrik cluster ${clusterName}.

Severity	Status	Audit Event
Info	Success	Yes

UpdateVlanFailed

${userName} was unable to update VLAN with ID ${vlanId} for Rubrik cluster ${clusterName}. Failure reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

cluster_pause_resume

---

ClusterPauseResumeFailed

${userEmail} unable to ${action} protection on clusters:  ${clusterList}.

Severity	Status	Audit Event
Critical	Failure	Yes

ClusterPauseResumeFailed

Unable to ${action} protection on clusters: ${clusterList}.

Severity	Status	Audit Event
Critical	Failure	No

ClusterPauseResumeSucceeded

${userEmail} has successfully ${action} protection on clusters:  ${clusterList}.

Severity	Status	Audit Event
Info	Success	Yes

ClusterPauseResumeSucceeded

Successfully ${action} protection on clusters: ${clusterList}.

Severity	Status	Audit Event
Info	Success	No

common

---

PatchVmFailed

${username} failed to patch '${objType}' VM named '${vmName}' with ID '${vmID}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

PatchVmStarted

${username} started patching '${objType}' VM named '${vmName}' with ID '${vmID}'.

Severity	Status	Audit Event
Info	Success	Yes

VmRegisterAgentFailed

${username} failed to register agent on '${objType}' VM named '${vmName}' with ID '${vmID}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

VmRegisterAgentStarted

${username} started registering agent on '${objType}' VM named '${vmName}' with ID '${vmID}'.

Severity	Status	Audit Event
Info	Success	Yes

cross_account

---

CrossAccountMetadataSyncFailed

Failed to sync metadata from cross-account ${accountName}. Reason: ${reason}

Severity	Status	Audit Event
Critical	Failure	No

crossaccount

---

CrossAccountPairCreation

${username} initiated connection of cross-account ${crossAccountFqdn}.

Severity	Status	Audit Event
Info	Success	Yes

CrossAccountPairDeletion

${username} initiated deletion of cross-account connection  for ${crossAccountFqdn}.

Severity	Status	Audit Event
Info	Success	Yes

CrossAccountPairRefresh

${username} initiated refresh of cross-account connection  for ${crossAccountFqdn}.

Severity	Status	Audit Event
Info	Success	Yes

database

---

ConfigureLogReportingProperties

${username} updated database log reporting properties on  cluster '${clusterName}' with ID '${clusterId}'.

Severity	Status	Audit Event
Info	Success	Yes

ConfigureLogReportingPropertiesFailure

${username} failed to update database log reporting properties on  cluster '${clusterName}' with ID '${clusterId}'.

Severity	Status	Audit Event
Info	Failure	Yes

db2

---

AddDb2InstanceFailure

${username} failed to add Db2 instance '${instanceName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

AddDb2InstanceStarted

${username} started adding Db2 instance '${instanceName}'.

Severity	Status	Audit Event
Info	Success	Yes

ConfigureDb2RestoreFailure

${username} failed to configure host IDs ${hostIds} for cross-host restore of Db2 database '${databaseName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

ConfigureDb2RestoreStarted

${username} started configuring host IDs ${hostIds} for cross-host restore of Db2 database '${databaseName}'.

Severity	Status	Audit Event
Info	Success	Yes

DeleteDb2DatabaseFailure

${username} failed to delete Db2 database '${databaseName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

DeleteDb2DatabaseStarted

${username} started deleting Db2 database '${databaseName}'.

Severity	Status	Audit Event
Info	Success	Yes

DeleteDb2InstanceFailure

${username} failed to delete Db2 instance '${instanceName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

DeleteDb2InstanceStarted

${username} started deleting Db2 instance '${instanceName}'.

Severity	Status	Audit Event
Info	Success	Yes

DiscoverDb2InstanceFailure

${username} failed to refresh metadata for Db2 instance '${instanceName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

DiscoverDb2InstanceStarted

${username} started refreshing metadata for Db2 instance '${instanceName}'.

Severity	Status	Audit Event
Info	Success	Yes

EditDb2InstanceFailure

${username} failed to modify Db2 instance '${instanceName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

EditDb2InstanceStarted

${username} modified Db2 instance '${instanceName}'.

Severity	Status	Audit Event
Info	Success	Yes

PatchDb2DatabaseFailure

${username} failed to patch metadata for Db2 database '${databaseName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

PatchDb2DatabaseStarted

${username} started patching metadata for Db2 database '${databaseName}'.

Severity	Status	Audit Event
Info	Success	Yes

RefreshDb2DatabaseFailure

${username} failed to refresh metadata for Db2 database '${databaseName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

RefreshDb2DatabaseStarted

${username} started refreshing metadata for Db2 database '${databaseName}'.

Severity	Status	Audit Event
Info	Success	Yes

encryption_keys

---

ArchivalKeyRotationFailure

Key rotation on archival location ${locationName} has failed.

Severity	Status	Audit Event
Critical	Failure	No

ArchivalKeyRotationInitiated

Key rotation on archival location ${locationName} is initiated.

Severity	Status	Audit Event
Info	Success	No

ArchivalKeyRotationSuccess

Key rotation on archival location ${locationName} has succeeded.

Severity	Status	Audit Event
Info	Success	No

ArchivalRekeyFailure

Rekey of ${rekeyJobType} on archival location ${locationName} has failed. Reason: ${reason}.

Severity	Status	Audit Event
Critical	Failure	No

ArchivalRekeyInitiated

Rekey of ${rekeyJobType} on archival location ${locationName} is initiated.

Severity	Status	Audit Event
Info	Success	No

ArchivalRekeySucceeded

The rekey of ${rekeyJobType} on archival location ${locationName} has been successfully completed.

Severity	Status	Audit Event
Info	Success	No

ArchivalRekeySuccessOnCdm

Rekey of ${rekeyJobType} on archival location ${locationName} has succeeded on the CDM cluster.

Severity	Status	Audit Event
Info	Success	No

ArchivalRekeyTaskFailure

Rekey of ${rekeyJobType} on archival location ${locationName} has failed. Reason: ${reason}.

Severity	Status	Audit Event
Critical	TaskFailure	No

exchange

---

UpdateExchangeDag

${username} updated Exchange Dag '${dagName}' with ID '${dagId}'.

Severity	Status	Audit Event
Info	Success	Yes

UpdateExchangeDagFailed

${username} failed to update Exchange Dag '${dagName}' with ID '${dagId}'.

Severity	Status	Audit Event
Info	Failure	Yes

exocompute

---

PCRBundleApprovalSucceeded

${userName} successfully ${approvedOrRejected} bundle version ${bundleVersion}.

Severity	Status	Audit Event
Info	Success	Yes

PCROnboardingSucceeded

${userName} successfully onboarded Private Container Registry ${registryURL}.

Severity	Status	Audit Event
Info	Success	Yes

failover_cluster

---

AddFailoverClusterFailure

${username} failed to add Host Failover Cluster '${failoverClusterName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

AddFailoverClusterStarted

${username} started adding Host Failover Cluster '${failoverClusterName}'.

Severity	Status	Audit Event
Info	Success	Yes

DeleteFailoverClusterFailure

${username} failed to delete Host Failover Cluster '${failoverClusterName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

DeleteFailoverClusterStarted

${username} started deleting Host Failover Cluster '${failoverClusterName}'.

Severity	Status	Audit Event
Info	Success	Yes

UpdateFailoverClusterFailure

${username} failed to update Host Failover Cluster '${failoverClusterName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

UpdateFailoverClusterStarted

${username} updateed Host Failover Cluster '${failoverClusterName}'.

Severity	Status	Audit Event
Info	Success	Yes

failover_cluster_app

---

AddFailoverClusterAppFailure

${username} failed to add Host Failover Cluster App '${failoverClusterAppName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

AddFailoverClusterAppStarted

${username} started adding Host Failover Cluster App '${failoverClusterAppName}'.

Severity	Status	Audit Event
Info	Success	Yes

DeleteFailoverClusterAppFailure

${username} failed to delete Host Failover Cluster App '${failoverClusterAppName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

DeleteFailoverClusterAppStarted

${username} started deleting Host Failover Cluster App '${failoverClusterAppName}'.

Severity	Status	Audit Event
Info	Success	Yes

UpdateFailoverClusterAppFailure

${username} failed to update Host Failover Cluster App '${failoverClusterAppName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

UpdateFailoverClusterAppStarted

${username} updateed Host Failover Cluster App '${failoverClusterAppName}'.

Severity	Status	Audit Event
Info	Success	Yes

fileset

---

CreateFileset

${username} created fileset '${filesetName} on ${parentObjectType} '${parentName}'.

Severity	Status	Audit Event
Info	Success	Yes

CreateFilesetFailure

${username} failed to create fileset '${filesetName}' on ${parentObjectType} '${parentName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

CreateFilesetTemplate

${username} created fileset '${filesetName}'.

Severity	Status	Audit Event
Info	Success	Yes

CreateFilesetTemplateFailed

${username} failed to create fileset '${filesetName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

DeleteFileset

${username} deleted fileset '${filesetName}' on ${parentObjectType} '${parentName}'.

Severity	Status	Audit Event
Info	Success	Yes

DeleteFilesetFailure

${username} failed to delete fileset '${filesetName}' on ${parentObjectType} '${parentName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

DeleteFilesetTemplate

${username} deleted fileset '${filesetName}'.

Severity	Status	Audit Event
Info	Success	Yes

DeleteFilesetTemplateFailed

${username} failed to delete fileset '${filesetName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

UpdateFilesetTemplate

${username} modified fileset '${filesetName}'.

Severity	Status	Audit Event
Info	Success	Yes

UpdateFilesetTemplateFailed

${username} failed to modify fileset '${filesetName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

gcpnative

---

DisableGCPNativeProjectArchiveSnapshotTaskFailed

Failed to delete snapshots in the ${projectDisplayName} project.

Severity	Status	Audit Event
Warning	TaskFailure	No

DisableGCPNativeProjectArchiveSnapshotTaskStarted

Deleting snapshots in the ${projectDisplayName} project.

Severity	Status	Audit Event
Info	Running	No

DisableGCPNativeProjectArchiveSnapshotTaskSucceeded

Deleted snapshots in the ${projectDisplayName} project.

Severity	Status	Audit Event
Info	TaskSuccess	No

DisableGCPNativeProjectJobCanceled

Canceled disable protection of the ${projectDisplayName} project.

Severity	Status	Audit Event
Info	Canceled	No

DisableGCPNativeProjectJobCanceling

Canceling disable protection of the ${projectDisplayName} project.

Severity	Status	Audit Event
Info	Canceling	No

DisableGCPNativeProjectJobFailed

Failed to disable protection of the ${projectDisplayName} project. Reason: ${reason}.

Severity	Status	Audit Event
Critical	Failure	No

DisableGCPNativeProjectJobStarted

Started to disable protection of the ${projectDisplayName} project.

Severity	Status	Audit Event
Info	TaskSuccess	No

DisableGCPNativeProjectJobSucceeded

Successfully disabled protection of the ${projectDisplayName} project.

Severity	Status	Audit Event
Info	Success	No

GCPNativeDisableProjectJobStarted

${userEmail} started disabling protection of the ${projectDisplayName} GCP project.

Severity	Status	Audit Event
Info	Success	Yes

GCPNativeDisableProjectJobStartFailed

${userEmail} failed to start disabling protection of the ${projectDisplayName} GCP project. Failure reason: ${reason}.

Severity	Status	Audit Event
Critical	Failure	Yes

GCPNativeRefreshProjectJobStarted

${userEmail} started refresh of GCP project ${gcpProjectDisplayName}.

Severity	Status	Audit Event
Info	Success	Yes

GCPNativeRefreshProjectJobStartFailed

${userEmail} failed to start refresh of GCP project ${gcpProjectDisplayName}. Failure reason: ${reason}.

Severity	Status	Audit Event
Critical	Failure	Yes

RefreshGCPNativeProjectJobCanceled

Canceled ${maintenanceType} refresh of the project ${gcpProjectDisplayName}.

Severity	Status	Audit Event
Info	Canceled	No

RefreshGCPNativeProjectJobCanceling

Canceling ${maintenanceType} refresh of the project ${gcpProjectDisplayName}.

Severity	Status	Audit Event
Info	Canceling	No

RefreshGCPNativeProjectJobFailed

Failed to refresh GCP project ${gcpProjectDisplayName}. Reason: ${reason}.

Severity	Status	Audit Event
Critical	Failure	No

RefreshGCPNativeProjectJobQueued

Queued ${maintenanceType} refresh of GCP project ${gcpProjectDisplayName}.

Severity	Status	Audit Event
Info	Queued	No

RefreshGCPNativeProjectJobStarted

Started  ${maintenanceType} refresh of GCP project ${gcpProjectDisplayName}.

Severity	Status	Audit Event
Info	TaskSuccess	No

RefreshGCPNativeProjectJobSucceeded

Successfully refreshed GCP project ${gcpProjectDisplayName}.

Severity	Status	Audit Event
Info	Success	No

health_monitor

---

RunPolicies

${userName} successfully ran health monitor policies [${policyIds}] on nodes [${nodeIds}] for ${clusterName}.

Severity	Status	Audit Event
Info	Success	Yes

RunPoliciesFailed

${userName} failed to run health monitor policies [${policyIds}] on nodes [${nodeIds}] for ${clusterName}. Failure reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

host

---

ChangeVFDOnHostFailure

${username} failed to ${operation} VFD on host '${hostName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

ChangeVFDOnHostStarted

${username} started ${operation} VFD on host '${hostName}'.

Severity	Status	Audit Event
Info	Success	Yes

DeleteHostFailure

${username} failed to delete host '${hostName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

DeleteHostStarted

${username} started deleting host '${hostName}'.

Severity	Status	Audit Event
Info	Success	Yes

MakePrimaryHostFailed

${username} failed to configure cluster '${clusterName}' as primary for host '${hostName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

MakePrimaryHostStarted

${username} started configuring cluster '${clusterName}' as primary for host '${hostName}'.

Severity	Status	Audit Event
Info	Success	Yes

RefreshHostMetadataFailed

${username} failed to refresh metadata for host '${host}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

RefreshHostMetadataStarted

${username} started refreshing metadata for host '${host}'.

Severity	Status	Audit Event
Info	Success	Yes

RegisteredHostSuccessfully

${username} registered host '${hostName}'.

Severity	Status	Audit Event
Info	Success	Yes

RegisterHostFailure

${username} failed to register host '${hostName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

UpdateHost

${username} modified host '${hostName}'.

Severity	Status	Audit Event
Info	Success	Yes

UpdateHostCertificate

${username} modified certificate for host '${hostName}'.

Severity	Status	Audit Event
Info	Success	Yes

UpdateHostCertificateFailed

${username} failed to modify certificate for host '${hostName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

UpdateHostFailed

${username} failed to modify host '${hostName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

UpdateRbaCredentialsFailure

${username} failed to update RBS credentials for host '${hostName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

UpdateRbaCredentialsSuccess

${username} updated RBS credentials for host '${hostName}'.

Severity	Status	Audit Event
Info	Success	Yes

hyperv

---

AddHypervScvmmFailed

${username} failed to create Hyperv Scvmm '${hostName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

AddHypervScvmmStarted

${username} started creating Hyperv Scvmm '${hostName}'.

Severity	Status	Audit Event
Info	Success	Yes

DeleteHypervScvmmFailed

${username} failed to delete Hyperv Scvmm '${hypervScvmm}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

DeleteHypervScvmmStarted

${username} started deleting Hyperv Scvmm '${hypervScvmm}'.

Severity	Status	Audit Event
Info	Success	Yes

EditHypervScvmmFailed

${username} failed to patch Hyperv Scvmm '${hypervScvmm}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

EditHypervScvmmStarted

${username} started patching Hyperv Scvmm '${hypervScvmm}'.

Severity	Status	Audit Event
Info	Success	Yes

RefreshHypervScvmmFailed

${username} failed to refresh Hyperv Scvmm '${hypervScvmm}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

RefreshHypervScvmmStarted

${username} started refreshing Hyperv Scvmm '${hypervScvmm}'.

Severity	Status	Audit Event
Info	Success	Yes

k8s

---

K8sAddKubernetesClusterFailure

${userName} was unable to add the Kubernetes cluster, ${kubernetesCluster}.

Severity	Status	Audit Event
Critical	Failure	Yes

K8sAddKubernetesClusterSuccess

${userName} added the Kubernetes cluster, ${kubernetesCluster}.

Severity	Status	Audit Event
Info	Success	Yes

K8sCreateProtectionSetFailure

${userName} was unable to create the Kubernetes protection set, ${kubernetesProtectionSet}, on Kubernetes cluster, ${kubernetesCluster}.

Severity	Status	Audit Event
Critical	Failure	Yes

K8sCreateProtectionSetSuccess

${userName} created the Kubernetes protection set, ${kubernetesProtectionSet}, on Kubernetes cluster, ${kubernetesCluster}.

Severity	Status	Audit Event
Info	Success	Yes

K8sDeleteKubernetesClusterFailure

${userName} was unable to initiate the deletion of Kubernetes cluster, ${kubernetesCluster}.

Severity	Status	Audit Event
Critical	Failure	Yes

K8sDeleteKubernetesClusterSuccess

${userName} initiated the deletion of Kubernetes cluster, ${kubernetesCluster}.

Severity	Status	Audit Event
Info	Success	Yes

K8sDeleteProtectionSetFailure

${userName} was unable to delete the Kubernetes protection set, ${kubernetesProtectionSet}, on Kubernetes cluster, ${kubernetesCluster}.

Severity	Status	Audit Event
Critical	Failure	Yes

K8sDeleteProtectionSetSuccess

${userName} initiated the deletion of Kubernetes protection set, ${kubernetesProtectionSet}, on Kubernetes cluster, ${kubernetesCluster}.

Severity	Status	Audit Event
Info	Success	Yes

K8sUpdateKubernetesClusterFailure

${userName} was unable to modify the ${updatedFields} of the Kubernetes cluster, ${kubernetesCluster}.

Severity	Status	Audit Event
Critical	Failure	Yes

K8sUpdateKubernetesClusterSuccess

${userName} modified the ${updatedFields} of the Kubernetes cluster, ${kubernetesCluster}.

Severity	Status	Audit Event
Info	Success	Yes

K8sUpdateProtectionSetFailure

${userName} was unable to modify the Kubernetes protection set, ${kubernetesProtectionSet}, on Kubernetes cluster, ${kubernetesCluster}.

Severity	Status	Audit Event
Critical	Failure	Yes

K8sUpdateProtectionSetSuccess

${userName} modified the Kubernetes protection set, ${kubernetesProtectionSet}, on Kubernetes cluster, ${kubernetesCluster}.

Severity	Status	Audit Event
Info	Success	Yes

kms_key_vault

---

AddKMSKeyVault

${username} added KMS Key Vault ${keyVaultName} of type ${keyVaultType}.

Severity	Status	Audit Event
Info	Success	Yes

DeleteKMSKeyVault

${username} deleted KMS Key Vault ${keyVaultName}.

Severity	Status	Audit Event
Info	Success	Yes

EditAzureKmsKeyVaultFailure

Failed to update the credentials for the KMS key vault ${kmsName}  on the Rubrik cluster ${clusterName}.

Severity	Status	Audit Event
Critical	Failure	No

EditAzureKmsKeyVaultInitiated

Initiating the process to update the credentials for the KMS key vault ${kmsName}.

Severity	Status	Audit Event
Info	Success	No

EditAzureKmsKeyVaultSuccess

Successfully updated credentials for the KMS key vault ${kmsName}  on the Rubrik cluster ${clusterName}.

Severity	Status	Audit Event
Info	Success	No

UpdateKMSKeyVault

${username} updated KMS Key Vault ${keyVaultName}.

Severity	Status	Audit Event
Info	Success	Yes

UpdateKMSKeyVaultFailure

Failed to update KMS key vault ${kmsName} of type ${kmsType}.

Severity	Status	Audit Event
Info	Failure	No

UpdateKMSKeyVaultSuccess

Successfully updated KMS key vault ${kmsName} of type ${kmsType}.

Severity	Status	Audit Event
Info	Success	No

kupr

---

KuprClusterRefreshCanceled

Canceled refreshing Kubernetes Cluster ${clusterName} with clusterID ${clusterUUID}.

Severity	Status	Audit Event
Info	Canceled	No

KuprClusterRefreshCanceling

Canceling refreshing Kubernetes Cluster ${clusterName} with clusterID ${clusterUUID}.

Severity	Status	Audit Event
Info	Canceling	No

KuprClusterRefreshCompleted

Successfully refreshed Kubernetes Cluster ${clusterName} with clusterID ${clusterUUID}.

Severity	Status	Audit Event
Info	Success	No

KuprClusterRefreshFailed

Refreshing Kubernetes Cluster ${clusterName} with clusterID ${clusterUUID} failed. Reason: ${reason}.

Severity	Status	Audit Event
Critical	Failure	No

KuprClusterRefreshStarted

Started refreshing Kubernetes Cluster ${clusterName} with clusterID ${clusterUUID}.

Severity	Status	Audit Event
Info	Success	No

KuprDeletingClusterStarted

${userName} deleted Kubernetes Cluster ${clusterName}.

Severity	Status	Audit Event
Info	Success	No

KuprDeletingClusterStarted

${userName} deleted Kubernetes Cluster ${clusterName}.

Severity	Status	Audit Event
Info	Success	Yes

KuprOnBoardingStarted

${userName} onboarded Kubernetes Cluster ${clusterName}.

Severity	Status	Audit Event
Info	Success	Yes

KuprOnboardingStarted

${userName} onboarded Kubernetes Cluster ${clusterName}.

Severity	Status	Audit Event
Info	Success	No

legalhold

---

ApplyLegalHoldFailure

${userEmail} on the Rubrik cluster named ${clusterName} unsuccessfully attempted to place a Legal Hold on the ${snapshotTimeDisplay} UTC snapshot of ${snappableName}.

Severity	Status	Audit Event
Info	Failure	Yes

ApplyLegalHoldSuccess

${userEmail} has successfully placed a Legal Hold on the ${snapshotTimeDisplay} UTC snapshot of ${snappableName} on the Rubrik cluster ${clusterName}.

Severity	Status	Audit Event
Info	Success	Yes

DissolveLegalHoldFailure

${userEmail} on the Rubrik cluster named ${clusterName} unsuccessfully attempted to remove a Legal Hold from the ${snapshotTimeDisplay} UTC snapshot of ${snappableName}.

Severity	Status	Audit Event
Info	Failure	Yes

DissolveLegalHoldSuccess

${userEmail} has successfully removed the Legal Hold from the ${snapshotTimeDisplay} UTC snapshot of ${snappableName} on the Rubrik cluster ${clusterName}.

Severity	Status	Audit Event
Info	Success	Yes

managed_volume

---

ConfigureManagedVolumeLogExportFailure

${username} failed to create a log export for Managed Volume: '${mvName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

ConfigureManagedVolumeLogExportSuccess

${username} started the operation to create a log export for Managed Volume: '${mvName}'.

Severity	Status	Audit Event
Info	Success	Yes

InternalResizeManagedVolume

${username} started the operation to resize managed volume for '${mv}'.

Severity	Status	Audit Event
Info	Success	Yes

InternalResizeManagedVolumeFailure

${username} failed to resize managed volume for '${mv}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

InternalUpdateManagedVolume

${username} updated the Managed Volume '${mv}'.

Severity	Status	Audit Event
Info	Success	Yes

InternalUpdateManagedVolumeFailure

${username} failed to update the Managed Volume '${mv}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

TakeManagedVolumeOnDemandSnapshot

${username} started the operation to create on demand snapshot for Managed Volume: '${mvName}'.

Severity	Status	Audit Event
Info	Success	Yes

TakeManagedVolumeOnDemandSnapshotFailed

${username} failed to create on demand snapshot for Managed Volume: '${mvName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

V1CreateManagedVolume

${username} started the operation to create the Managed Volume '${mv}'.

Severity	Status	Audit Event
Info	Success	Yes

V1CreateManagedVolumeFailure

${username} failed to create the Managed Volume '${mv}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

V1DeleteManagedVolume

${username} started the operation to delete the Managed Volume '${mv}'.

Severity	Status	Audit Event
Info	Success	Yes

V1DeleteManagedVolumeFailure

${username} failed to delete the Managed Volume '${mv}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

mongo

---

AddCdmMongoSourceFailure

${username} unable to add MongoDB source '${sourceName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

AddCdmMongoSourceStarted

${username} started adding MongoDB source '${sourceName}'.

Severity	Status	Audit Event
Info	Success	Yes

DeleteCdmMongoSourceFailure

${username} unable to delete MongoDB source '${sourceName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

DeleteCdmMongoSourceStarted

${username} started deleting MongoDB source '${sourceName}'.

Severity	Status	Audit Event
Info	Success	Yes

DiscoverCdmMongoSourceFailure

${username} unable to refresh metadata for MongoDB source '${sourceName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

DiscoverCdmMongoSourceStarted

${username} started refreshing metadata for MongoDB source '${sourceName}'.

Severity	Status	Audit Event
Info	Success	Yes

EditCdmMongoSourceFailure

${username} unable to edit MongoDB source '${sourceName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

EditCdmMongoSourceStarted

${username} modified MongoDB source '${sourceName}'.

Severity	Status	Audit Event
Info	Success	Yes

RecoverCdmMongoDatabasesAndCollectionsFailure

${username} unable to recover databases and collections to MongoDB source '${sourceName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

RecoverCdmMongoDatabasesAndCollectionsStarted

${username} started recovering databases and collections to MongoDB source '${sourceName}'.

Severity	Status	Audit Event
Info	Success	Yes

mongo_source

---

AddMongoSourceFailure

${username} failed to add the MongoDB source '${sourceName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

AddMongoSourceStarted

${username} started adding the MongoDB source '${sourceName}'.

Severity	Status	Audit Event
Info	Success	Yes

DeleteMongoSourceFailure

${username} failed to delete the MongoDB source '${sourceName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

DeleteMongoSourceStarted

${username} started deleting the MongoDB source '${sourceName}'.

Severity	Status	Audit Event
Info	Success	Yes

EditMongoSourceFailure

${username} failed to modify the MongoDB source '${sourceName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

EditMongoSourceStarted

${username} modified the MongoDB source '${sourceName}'.

Severity	Status	Audit Event
Info	Success	Yes

mosaic_store

---

AddMosaicStoreFailure

${username} failed to add the NoSQL store '${storeName}. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

AddMosaicStoreStarted

${username} started the operation to add the NoSQL store '${storeName}'.

Severity	Status	Audit Event
Info	Success	Yes

DeleteMosaicStoreFailure

${username} failed to delete the NoSQL store '${storeName}. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

DeleteMosaicStoreStarted

${username} started the operation to delete the NoSQL store '${storeName}'.

Severity	Status	Audit Event
Info	Success	Yes

EditMosaicStoreeStarted

${username} modified the NoSQL store '${storeName}.

Severity	Status	Audit Event
Info	Success	Yes

EditMosaicStoreFailure

${username} failed to modify the NoSQL store '${storeName}. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

mssql

---

UpdateDefaultDbPropertiesFailed

${username} failed to update default database properties for cluster '${clusterUuid}'.

Severity	Status	Audit Event
Info	Failure	Yes

UpdateDefaultDbPropertiesSuccess

${username} successfully updated default database properties for cluster '${clusterUuid}'.

Severity	Status	Audit Event
Info	Success	Yes

UpdateMssqlAvailabilityGroup

${username} updated Microsoft SQL Server availability group '${availabilityGroupName}' with ID '${availabilityGroupId}'.

Severity	Status	Audit Event
Info	Success	Yes

UpdateMssqlAvailabilityGroupFailed

${username} failed to update Microsoft SQL Server availability group '${availabilityGroupName}' with ID '${availabilityGroupId}'.

Severity	Status	Audit Event
Info	Failure	Yes

UpdateMssqlDatabase

${username} updated Mssql database '${dbName}' with ID '${dbId}'.

Severity	Status	Audit Event
Info	Success	Yes

UpdateMssqlDatabaseFailed

${username} failed to update Mssql database '${dbName}' with ID '${dbId}'.

Severity	Status	Audit Event
Info	Failure	Yes

UpdateMssqlHost

${username} updated Microsoft SQL Server host '${hostName}' with ID '${hostId}'.

Severity	Status	Audit Event
Info	Success	Yes

UpdateMssqlHostFailed

${username} failed to update Microsoft SQL Server host '${hostName}' with ID '${hostId}'.

Severity	Status	Audit Event
Info	Failure	Yes

UpdateMssqlInstance

${username} updated Microsoft SQL Server instance'${instanceName}' with ID '${instanceId}'.

Severity	Status	Audit Event
Info	Success	Yes

UpdateMssqlInstanceFailed

${username} failed to update Microsoft SQL Server instance '${instanceName}' with ID '${instanceId}'.

Severity	Status	Audit Event
Info	Failure	Yes

UpdateMssqlLogShippingConfiguration

${username} updated log shipping configuration '${configId}' of Mssql database '${dbName}'.

Severity	Status	Audit Event
Info	Success	Yes

UpdateMssqlLogShippingConfigurationFailed

${username} failed to update log shipping configuration '${configId}' of Mssql database '${dbName}'.

Severity	Status	Audit Event
Info	Failure	Yes

UpdateMssqlLogShippingConfigurationFailedV1

${username} failed to modify the log shipping configuration '${configId}'  for the Mssql database '${dbName}'.

Severity	Status	Audit Event
Info	Failure	Yes

UpdateMssqlLogShippingConfigurationV1

${username} modified the log shipping configuration '${configId}'  for the Mssql database '${dbName}'.

Severity	Status	Audit Event
Info	Success	Yes

UpdateMssqlWindowsCluster

${username} updated Windows Cluster '${windowsClusterName}' with ID '${windowsClusterId}'.

Severity	Status	Audit Event
Info	Success	Yes

UpdateMssqlWindowsClusterFailed

${username} failed to update Windows Cluster '${windowsClusterName}' with ID '${windowsClusterId}'.

Severity	Status	Audit Event
Info	Failure	Yes

nas

---

BulkCopyAutomigratableNasHosts

${username} Created RSC NAS System(s) from CDM NAS host(s). Migration modified the following objects Filesets    ${FilesetNames} Host Shares ${SharePaths} NAS Hosts   ${HostNames}

Severity	Status	Audit Event
Info	Success	Yes

BulkCopyAutomigratableNasHostsFailed

${username} Failed to create RSC NAS System(s) from CDM NAS host(s). Reason: ${reason}. Migration may have modified the following objects Filesets:    ${FilesetNames} Host Shares: ${SharePaths} NAS Hosts:   ${HostNames}

Severity	Status	Audit Event
Info	Failure	Yes

BulkMigrateRelicShareFilesets

${username} Migrated relic CDM Share Fileset(s) to RSC NAS. Migration modified the following objects Filesets    ${FilesetNames} Host Shares ${SharePaths} NAS Hosts   ${HostNames}

Severity	Status	Audit Event
Info	Success	Yes

BulkMigrateRelicShareFilesetsFailed

${username} Failed to migrate relic CDM Share Fileset(s) to RSC NAS. Reason: ${reason}. Migration may have modified the following objects Filesets:    ${FilesetNames} Host Shares: ${SharePaths} NAS Hosts:   ${HostNames}

Severity	Status	Audit Event
Info	Failure	Yes

MigrateLegacyNasHostFilesets

${username} Migrated CDM Share Fileset(s) to RSC NAS. Migration modified the following objects Filesets    ${FilesetNames} Host Shares ${SharePaths} NAS Hosts   ${HostNames}

Severity	Status	Audit Event
Info	Success	Yes

MigrateLegacyNasHostFilesetsFailed

${username} Failed to migrate CDM Share Fileset(s) to RSC NAS. Reason: ${reason}. Migration may have modified the following objects Filesets:    ${FilesetNames} Host Shares: ${SharePaths} NAS Hosts:   ${HostNames}

Severity	Status	Audit Event
Info	Failure	Yes

networkthrottle

---

DisableNetworkThrottleFailed

${username} failed to disable ${resourceType} network throttle on cluster: ${clusterName}.

Severity	Status	Audit Event
Info	Failure	Yes

DisableNetworkThrottleSucceeded

${username} disabled ${resourceType} network throttle on cluster: ${clusterName}.

Severity	Status	Audit Event
Info	Success	Yes

EnableNetworkThrottleFailed

${username} enabled ${resourceType} network throttle on cluster: ${clusterName} for interface '${interfaceName}'.

Severity	Status	Audit Event
Info	Failure	Yes

EnableNetworkThrottleSucceeded

${username} enabled ${resourceType} network throttle on cluster: ${clusterName} for interface '${interfaceName}' with default throttle limit set to ${defaultThrottleLimit} Mbps.

Severity	Status	Audit Event
Info	Success	Yes

networkthrottlebypass

---

DisableNetworkThrottleBypassFailed

${username} failed to disable replication network throttle bypass on cluster: ${clusterName}  for target cluster: ${targetClusterName}.

Severity	Status	Audit Event
Info	Failure	Yes

DisableNetworkThrottleBypassSucceeded

${username} disabled replication network throttle bypass on cluster: ${clusterName}  for target cluster: ${targetClusterName}.

Severity	Status	Audit Event
Info	Success	Yes

EnableNetworkThrottleBypassFailed

${username} failed to enable replication network throttle bypass on cluster: ${clusterName} for target cluster: ${targetClusterName}.

Severity	Status	Audit Event
Info	Failure	Yes

EnableNetworkThrottleBypassSucceeded

${username} enabled replication network throttle bypass on cluster: ${clusterName} for target cluster: ${targetClusterName}.

Severity	Status	Audit Event
Info	Success	Yes

nutanix

---

CreateNutanixClusterFailed

${username} failed to create Nutanix cluster '${hostName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

CreateNutanixClusterStarted

${username} started creating Nutanix cluster '${hostName}'.

Severity	Status	Audit Event
Info	Success	Yes

CreateNutanixExportFailed

${username} failed to export snapshot '${snapshotID}' of snappable '${snappableName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

CreateNutanixExportStarted

${username} started exporting snapshot '${snapshotID}' of snappable '${snappableName}'.

Severity	Status	Audit Event
Info	Success	Yes

CreateNutanixPrismCentralFailed

${username} failed to create Nutanix Prism Central '${hostName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

CreateNutanixPrismCentralStarted

${username} started creating Nutanix Prism Central '${hostName}'.

Severity	Status	Audit Event
Info	Success	Yes

DeleteNutanixClusterFailed

${username} failed to delete Nutanix cluster '${nutanixCluster}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

DeleteNutanixClusterStarted

${username} started deleting Nutanix cluster '${nutanixCluster}'.

Severity	Status	Audit Event
Info	Success	Yes

DeleteNutanixPrismCentralFailed

${username} failed to delete Nutanix Prism Central '${nutanixPrismCentral}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

DeleteNutanixPrismCentralStarted

${username} started deleting Nutanix Prism Central '${nutanixPrismCentral}'.

Severity	Status	Audit Event
Info	Success	Yes

PatchNutanixClusterFailed

${username} failed to patch Nutanix cluster '${nutanixCluster}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

PatchNutanixClusterStarted

${username} started patching Nutanix cluster '${nutanixCluster}'.

Severity	Status	Audit Event
Info	Success	Yes

PatchNutanixPrismCentralFailed

${username} failed to patch Nutanix Prism Central '${nutanixPrismCentral}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

PatchNutanixPrismCentralStarted

${username} started patching Nutanix Prism Central '${nutanixPrismCentral}'.

Severity	Status	Audit Event
Info	Success	Yes

RefreshNutanixClusterFailed

${username} failed to refresh Nutanix cluster '${nutanixCluster}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

RefreshNutanixClusterStarted

${username} started refreshing Nutanix cluster '${nutanixCluster}'.

Severity	Status	Audit Event
Info	Success	Yes

RefreshNutanixPrismCentralFailed

${username} failed to refresh Nutanix Prism Central '${nutanixPrismCentral}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

RefreshNutanixPrismCentralStarted

${username} started refreshing Nutanix Prism Central '${nutanixPrismCentral}'.

Severity	Status	Audit Event
Info	Success	Yes

o365

---

ExocomputeDeleteCanceled

Canceled deleting Azure resources in ${exocomputeName}

Severity	Status	Audit Event
Info	Canceled	No

ExocomputeDeleteCanceling

Canceling deleting Azure resources in ${exocomputeName}

Severity	Status	Audit Event
Info	Canceling	No

ExocomputeDeleteFailed

Failed to delete Azure resources in ${exocomputeName}. For more information on this error please visit https://support.rubrik.com/articles/How_To/000002821

Severity	Status	Audit Event
Critical	Failure	No

ExocomputeDeleteStarted

Started deleting Azure resources in ${exocomputeName}

Severity	Status	Audit Event
Info	TaskSuccess	No

ExocomputeDeleteSucceeded

Successfully deleted Azure resources in ${exocomputeName}

Severity	Status	Audit Event
Info	Success	No

ExocomputeScaleSucceeded

Successfully scaled Azure AKS from ${oldCount} to ${newCount} nodes

Severity	Status	Audit Event
Info	Success	No

ExocomputeUpdateCanceled

Canceled updating Azure resources in ${exocomputeName}

Severity	Status	Audit Event
Info	Canceled	No

ExocomputeUpdateCanceling

Canceling updating Azure resources in ${exocomputeName}

Severity	Status	Audit Event
Info	Canceling	No

ExocomputeUpdateFailed

Failed to update Azure resources in ${exocomputeName}. For more information on this error please visit https://support.rubrik.com/articles/How_To/000002821

Severity	Status	Audit Event
Critical	Failure	No

ExocomputeUpdateStarted

Updating Azure resources in ${exocomputeName}

Severity	Status	Audit Event
Info	TaskSuccess	No

ExocomputeUpdateSucceeded

Successfully updated Azure resources in ${exocomputeName}

Severity	Status	Audit Event
Info	Success	No

M365ConfiguredGroupCreated

${userID} created a SharePoint/Teams Group '${name}' with wildcard  pattern '${wildcard}' and PDLs ${pdls}.

Severity	Status	Audit Event
Info	Success	Yes

M365ConfiguredGroupDeleted

${userID} removed SharePoint/Teams Group '${name}'.

Severity	Status	Audit Event
Info	Success	Yes

M365ConfiguredGroupModified

${userID} modified SharePoint/Teams Group '${name}' with wildcard  pattern '${wildcard}' and PDLs ${pdls} into SharePoint/Teams Group '${newName}' with wildcard pattern '${newWildcard}' and PDLs ${newPdls}.

Severity	Status	Audit Event
Info	Success	Yes

M365GroupDeleted

${userID} removed ${groupType} '${name}'.

Severity	Status	Audit Event
Info	Success	Yes

M365GroupModified

${userID} modified ${groupType} '${name}' with spec ${spec} into ${groupType} '${newName}' with spec ${newSpec}.

Severity	Status	Audit Event
Info	Success	Yes

M36GroupCreated

${userID} created a ${groupType} '${name}' with spec  '${spec}'.

Severity	Status	Audit Event
Info	Success	Yes

O365DeleteOrgFailed

${userID} requested deletion of Microsoft 365 Subscription ${orgName}, but failed. Failure reason: ${reason}

Severity	Status	Audit Event
Critical	Failure	Yes

O365DeleteOrgStarted

${userID} started deletion of Microsoft 365 Subscription ${orgName}. (Taskchain ID is ${taskchainID})

Severity	Status	Audit Event
Info	Success	Yes

oracle

---

DeleteAllOracleDatabaseSnapshots

${username} deleted all snapshots for Oracle database '${dbName}' with ID '${dbId}'.

Severity	Status	Audit Event
Info	Success	Yes

DeleteAllOracleDatabaseSnapshotsFailed

${username} failed to delete all snapshots for Oracle database  '${dbName}' with ID '${dbId}'.

Severity	Status	Audit Event
Info	Failure	Yes

DownloadArchivedOracleSnapshot

${username} downloaded archived snapshot '${snapshotId}' of Oracle database '${dbName}'.

Severity	Status	Audit Event
Info	Success	Yes

DownloadArchivedOracleSnapshotFailed

${username} failed to download archived snapshot '${snapshotId}' of Oracle database '${dbName}'.

Severity	Status	Audit Event
Info	Failure	Yes

ExportOracleDatabase

${username} exported Oracle database '${dbName}' with ID '${dbId}'.

Severity	Status	Audit Event
Info	Success	Yes

ExportOracleDatabaseFailed

Failed to export Oracle database '${dbName}' with ID '${dbId}', initiated by ${username}.

Severity	Status	Audit Event
Info	Failure	Yes

ExportOracleTablespace

${username} exported tablespace ${tablespaceName} of Oracle database '${dbName}' with ID '${dbId}'.

Severity	Status	Audit Event
Info	Success	Yes

ExportOracleTablespaceFailed

${username} failed to export tablespace ${tablespaceName} of Oracle database '${dbName}' with ID '${dbId}'.

Severity	Status	Audit Event
Info	Failure	Yes

InstantRecoverOracleSnapshot

${username} instant recovered Oracle database '${dbName}' with ID '${dbId}'.

Severity	Status	Audit Event
Info	Success	Yes

InstantRecoverOracleSnapshotFailed

${username} failed to instant recover Oracle database '${dbName}' with ID '${dbId}'.

Severity	Status	Audit Event
Info	Failure	Yes

MountOracleDatabase

${username} live mounted Oracle database '${dbName}' with ID '${dbId}'.

Severity	Status	Audit Event
Info	Success	Yes

MountOracleDatabaseFailed

${username} failed to live mount Oracle database '${dbName}' with ID '${dbId}'.

Severity	Status	Audit Event
Info	Failure	Yes

OraclePdbRestore

${username} restored the PDBs '${pdbNames}' to Oracle database '${dbName}' with ID '${dbId}'.

Severity	Status	Audit Event
Info	Success	Yes

OraclePdbRestoreFailed

${username} failed to restore the PDBs '${pdbNames}' to Oracle database '${dbName}' with ID '${dbId}'.

Severity	Status	Audit Event
Info	Failure	Yes

OracleUnmount

${username} removed Oracle mount with ID '${mountId}'.

Severity	Status	Audit Event
Info	Success	Yes

OracleUnmountFailed

${username} failed to remove Oracle mount with ID '${mountId}'.

Severity	Status	Audit Event
Info	Failure	Yes

RefreshOracleDatabase

${username} refreshed Oracle database '${dbName}' with ID '${dbId}'.

Severity	Status	Audit Event
Info	Success	Yes

RefreshOracleDatabaseFailed

${username} failed to refresh Oracle database '${dbName}' with ID '${dbId}'.

Severity	Status	Audit Event
Info	Failure	Yes

RestoreOracleLogs

${username} restored logs of Oracle database '${dbName}' with ID '${dbId}'.

Severity	Status	Audit Event
Info	Success	Yes

RestoreOracleLogsFailed

${username} failed to restore logs of Oracle database '${dbName}' with ID '${dbId}'.

Severity	Status	Audit Event
Info	Failure	Yes

TakeOnDemandOracleDatabaseSnapshot

${username} took an on-demand snapshot of Oracle  database '${dbName}' with ID '${dbId}'.

Severity	Status	Audit Event
Info	Success	Yes

TakeOnDemandOracleDatabaseSnapshotFailed

${username} failed to take an on-demand snapshot of Oracle  database '${dbName}' with ID '${dbId}'.

Severity	Status	Audit Event
Info	Failure	Yes

TakeOnDemandOracleLogSnapshot

${username} took an on-demand log snapshot of Oracle database  '${dbName}' with ID '${dbId}'.

Severity	Status	Audit Event
Info	Success	Yes

TakeOnDemandOracleLogSnapshotFailed

${username} failed to take an on-demand log snapshot of Oracle database '${dbName}' with ID '${dbId}'.

Severity	Status	Audit Event
Info	Failure	Yes

UpdateOracleDatabase

${username} updated Oracle database '${dbName}' with ID '${dbId}'.

Severity	Status	Audit Event
Info	Success	Yes

UpdateOracleDatabaseFailed

${username} failed to update Oracle database '${dbName}' with ID '${dbId}'.

Severity	Status	Audit Event
Info	Failure	Yes

UpdateOracleDataGuardGroup

${username} updated Oracle Data Guard group '${dbName}' with ID  '${dbId}'.

Severity	Status	Audit Event
Info	Success	Yes

UpdateOracleDataGuardGroupFailed

${username} failed to refresh Oracle Data Guard group '${dbName}'  with ID '${dbId}'.

Severity	Status	Audit Event
Info	Failure	Yes

UpdateOracleHost

${username} updated Oracle host '${hostName}' with ID '${hostId}'.

Severity	Status	Audit Event
Info	Success	Yes

UpdateOracleHostFailed

${username} failed to update Oracle host '${hostName}' with ID '${hostId}'.

Severity	Status	Audit Event
Info	Failure	Yes

UpdateOracleRac

${username} updated Oracle RAC '${racName}' with ID '${racId}'.

Severity	Status	Audit Event
Info	Success	Yes

UpdateOracleRacFailed

${username} failed to update Oracle RAC '${racName}' with ID '${racId}'.

Severity	Status	Audit Event
Info	Failure	Yes

ValidateOracleDatabaseBackups

${username} validated backups of Oracle database '${dbName}' with ID '${dbId}'.

Severity	Status	Audit Event
Info	Success	Yes

ValidateOracleDatabaseBackupsFailed

${username} failed to validate backups of Oracle database '${dbName}' with ID '${dbId}'.

Severity	Status	Audit Event
Info	Failure	Yes

org_config

---

EnforceStricterPolicy

${admin} has enforced a stricter policy for tenant organizations.

Severity	Status	Audit Event
Info	Success	Yes

OrgQuotaCreated

${userEmail} has created a ${quotaType} quota for organization ${orgName} on cluster ${clusterName}. The defined quota limits are  (soft limit: ${currentSoftLimit}, hard limit: ${currentHardLimit}).

Severity	Status	Audit Event
Info	Success	Yes

OrgQuotaDeleted

${userEmail} has deleted the ${quotaType} quota for organization ${orgName}  on cluster ${clusterName}. Previously, the quota limits were  (soft limit: ${previousSoftLimit}, hard limit: ${previousHardLimit}).

Severity	Status	Audit Event
Info	Success	Yes

OrgQuotaUpdated

${userEmail} has updated the ${quotaType} quota for organization ${orgName} on cluster ${clusterName} from  (soft limit: ${previousSoftLimit}, hard limit: ${previousHardLimit}) to (soft limit: ${currentSoftLimit}, hard limit: ${currentHardLimit}).

Severity	Status	Audit Event
Info	Success	Yes

UnenforceStricterPolicy

${admin} has relaxed the policy for tenant organizations.

Severity	Status	Audit Event
Info	Success	Yes

org_network

---

CreateOrgNetwork

${userName} created org network ${orgNetworkName} in org ${orgName} for cluster ${clusterName}.

Severity	Status	Audit Event
Info	Success	Yes

CreateOrgNetworkFailed

${userName} failed to create org network ${orgNetworkName} in org ${orgName} for cluster ${clusterName}. Failure reason: ${reason}.

Severity	Status	Audit Event
Warning	Failure	Yes

DeleteEnvoyNgs

${userName} removed Envoy Ngs: [${envoyIds}] from org network: ${orgNetworkName} in organization ${orgName}.

Severity	Status	Audit Event
Info	Success	Yes

DeleteOrgNetwork

${userName} deleted org network ${orgNetworkName} in org ${orgName} for cluster ${clusterName}.

Severity	Status	Audit Event
Info	Success	Yes

DeleteOrgNetworkFailed

${userName} failed to delete org network ${orgNetworkName} in org ${orgName} for cluster ${clusterName}. Failure reason: ${reason}.

Severity	Status	Audit Event
Warning	Failure	Yes

MigrateHostsToOrgNetwork

${userName} migrated ${total} hosts in the organization ${orgName}, RSC org network ${orgNetworkName}  for Rubrik cluster ${clusterName}.

Severity	Status	Audit Event
Info	Success	Yes

MigrateHostsToOrgNetworkFailed

${userName} was unable to migrate hosts [${failedObjects}] in the organization ${orgName},    RSC org network ${orgNetworkName} for Rubrik cluster ${clusterName}. Failure reason: ${reason}.

Severity	Status	Audit Event
Warning	Failure	Yes

MigrateVcentersToOrgNetwork

${userName} migrated ${total} vCenters in organization ${orgName}, org network ${orgNetworkName}   for Rubrik cluster ${clusterName}

Severity	Status	Audit Event
Info	Success	Yes

MigrateVcentersToOrgNetworkFailed

${userName} was unable to migrate vCenters [${failedObjects}] in organization ${orgName},  org network ${orgNetworkName} for Rubrik cluster ${clusterName} Failure reason: ${reason}.

Severity	Status	Audit Event
Warning	Failure	Yes

SetLiveMountIps

${userName} assigned Live Mount IPs: [${liveMountIps}] to org network: ${orgNetworkName} in organization ${orgName}.

Severity	Status	Audit Event
Info	Success	Yes

UpdateOrgNetwork

${userName} updated organization network ${orgNetworkName} in organization ${orgName} for cluster ${clusterName}.

Severity	Status	Audit Event
Info	Success	Yes

UpdateOrgNetworkFailed

${userName} failed to update organization network ${orgNetworkName} in organization ${orgName} for cluster ${clusterName}. Failure reason: ${reason}.

Severity	Status	Audit Event
Warning	Failure	Yes

postgres_db_cluster

---

AddPostgresDbClusterFailure

${username} failed to add PostgreSQL database cluster '${dbClusterName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

AddPostgresDbClusterStarted

${username} started adding PostgreSQL database cluster '${dbClusterName}'.

Severity	Status	Audit Event
Info	Success	Yes

DeletePostgresDbClusterFailure

${username} failed to delete PostgreSQL database cluster '${dbClusterName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

DeletePostgresDbClusterStarted

${username} started deleting PostgreSQL database cluster '${dbClusterName}'.

Severity	Status	Audit Event
Info	Success	Yes

EditPostgresDbClusterFailure

${username} failed to modify PostgreSQL database cluster '${dbClusterName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

EditPostgresDbClusterStarted

${username} modified PostgreSQL database cluster '${dbClusterName}'.

Severity	Status	Audit Event
Info	Success	Yes

RefreshPostgresDbClusterMetadataFailed

${username} failed to refresh metadata for PostgreSQL database cluster '${dbClusterName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

RefreshPostgresDbClusterMetadataStarted

${username} started refreshing metadata for PostgreSQL database cluster '${dbClusterName}'.

Severity	Status	Audit Event
Info	Success	Yes

RestorePostgresDbClusterFailure

${username} unable to complete a restore of PostgreSQL database cluster '${dbClusterName} using snapshot with ID ${snapshotId}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

RestorePostgresDbClusterStarted

${username} initiated a restore using the snapshot with ID ${snapshotId} for the PostgreSQL database cluster '${dbClusterName}'.

Severity	Status	Audit Event
Info	Success	Yes

radar

---

RadarEventsDisabled

Radar events have been disabled by ${user}

Severity	Status	Audit Event
Warning	Success	Yes

RadarEventsDisabledForCluster

Radar events have been disabled for cluster ${clusterName} by ${user}

Severity	Status	Audit Event
Warning	Success	Yes

RadarEventsDisabledForSnappable

Radar events have been disabled for protected object ${snappableName} on cluster ${clusterName} by ${user}

Severity	Status	Audit Event
Warning	Success	Yes

RadarEventsEnabled

Radar events have been enabled by ${user}

Severity	Status	Audit Event
Info	Success	Yes

RadarEventsEnabledForCluster

Radar events have been enabled for cluster ${clusterName} by ${user}

Severity	Status	Audit Event
Info	Success	Yes

RadarEventsEnabledForSnappable

Radar events have been enabled for protected object ${snappableName} on cluster ${clusterName} by ${user}

Severity	Status	Audit Event
Info	Success	Yes

rcv

---

RCVPEConnectionApprovalRequestApproved

${userEmail} successfully approved connection approval request for private  endpoint ${pe_id} to RCV archival location '${name}'.

Severity	Status	Audit Event
Info	Success	Yes

RCVPEConnectionApprovalRequestApproved

Pursuant to Rubrik policy, a connection approval request for private  endpoint '${pe_id}' to RCV archival location '${name}' has been  successfully approved.

Severity	Status	Audit Event
Info	Success	No

RCVPEConnectionApprovalRequestCreated

${userEmail} successfully created connection approval request for private  endpoint ${pe_id} to RCV archival location '${name}'.

Severity	Status	Audit Event
Info	Success	Yes

RCVPEConnectionApprovalRequestCreated

Pursuant to Rubrik policy, a connection approval request for private  endpoint '${pe_id}' to RCV archival location '${name}' has been  successfully created.

Severity	Status	Audit Event
Info	Success	No

RCVPEConnectionApprovalRequestExpired

Pursuant to Rubrik policy, a connection approval request for private  endpoint '${pe_id}' to RCV archival location '${name}' has been expired.

Severity	Status	Audit Event
Info	Success	No

RCVPEConnectionApprovalRequestRejected

${userEmail} successfully rejected connection approval request for private  endpoint ${pe_id} to RCV archival location '${name}'.

Severity	Status	Audit Event
Critical	Failure	Yes

RCVPEConnectionApprovalRequestRejected

Pursuant to Rubrik policy, a connection approval request for private  endpoint '${pe_id}' to RCV archival location '${name}' has been rejected.

Severity	Status	Audit Event
Critical	Failure	No

RCVPEConnectionApprovalRequestRemoved

${userEmail} successfully removed connection approval request for private  endpoint ${pe_id} to RCV archival location '${name}'.

Severity	Status	Audit Event
Info	Success	Yes

RCVPEConnectionApprovalRequestRemoved

Pursuant to Rubrik policy, a connection approval request for private  endpoint '${pe_id}' to RCV archival location '${name}' has been removed.

Severity	Status	Audit Event
Info	Success	No

RCVPrivateEndpointApprovalFailed

Approval for Private Endpoint '${peId}' failed because of '${errMsg}'.

Severity	Status	Audit Event
Critical	Failure	No

RCVPublicAccessDisabled

${userEmail} successfully disabled public access for RCV archival location '${name}'.

Severity	Status	Audit Event
Info	Success	Yes

RCVPublicAccessDisabled

Pursuant to Rubrik policy, public access to RCV archival location  '${name}' has been successfully disabled.

Severity	Status	Audit Event
Info	Success	No

rekey

---

RekeyMasterKey

${username} has initiated the rekeying of the master key for the archival location ${locationName}.

Severity	Status	Audit Event
Info	Success	Yes

RekeyRootKey

${username} has initiated the rekeying of the root Key Encryption Key (KEK) for the archival location ${locationName}.

Severity	Status	Audit Event
Info	Success	Yes

replication

---

ReplicationLocationCancelImmediatelyPauseEnableSucceeded

${userEmail} successfully paused replication from cluster: ${sourceClusterName} to cluster: ${targetClusterName}. Replication from the specified cluster will be canceled immediately.

Severity	Status	Audit Event
Info	Success	Yes

ReplicationLocationPauseDisableFailed

${userEmail} failed to resume replication from cluster: ${sourceClusterName} to cluster: ${targetClusterName}.

Severity	Status	Audit Event
Info	Failure	Yes

ReplicationLocationPauseDisableSucceeded

${userEmail} successfully resumed replication from cluster: ${sourceClusterName} to cluster: ${targetClusterName}.

Severity	Status	Audit Event
Info	Success	Yes

ReplicationLocationPauseEnableFailed

${userEmail} failed to pause replication from cluster: ${sourceClusterName} to cluster: ${targetClusterName}.

Severity	Status	Audit Event
Info	Failure	Yes

ReplicationLocationPauseEnableSucceeded

${userEmail} successfully paused replication from cluster: ${sourceClusterName} to cluster: ${targetClusterName}. Replication from the specified cluster will be canceled after any currently running jobs finish.

Severity	Status	Audit Event
Info	Success	Yes

ReplicationLocationSkipSnapshotsPauseDisableSucceeded

${userEmail} successfully resumed replication from cluster: ${sourceClusterName} to cluster: ${targetClusterName}. Replication will not include snapshots taken before and during the pause.

Severity	Status	Audit Event
Info	Success	Yes

ReplicationPairCreationSucceeded

${userEmail} added Rubrik cluster: ${targetClusterName} as replication target to Rubrik cluster: ${sourceClusterName} using ${setupType} configuration.

Severity	Status	Audit Event
Info	Success	Yes

ReplicationPairDeletionSucceeded

${userEmail} removed Rubrik cluster: ${targetClusterName} as replication target to Rubrik cluster: ${sourceClusterName}.

Severity	Status	Audit Event
Info	Success	Yes

ReplicationTargetEditFailed

${userEmail} failed to modify replication target: ${targetClusterName} spec on source cluster: ${sourceClusterName} using ${setupType} configuration.

Severity	Status	Audit Event
Info	Failure	Yes

ReplicationTargetEditSucceeded

${userEmail} modified replication target: ${targetClusterName} spec on source cluster: ${sourceClusterName} using ${setupType} configuration.

Severity	Status	Audit Event
Info	Success	Yes

reports

---

ClusterReportMigrationOnDemandJobCanceled

Canceled migration of custom reports from ${clusterName} into RSC.

Severity	Status	Audit Event
Info	Canceled	No

ClusterReportMigrationOnDemandJobCanceling

Canceling migration of custom reports from ${clusterName} into RSC.

Severity	Status	Audit Event
Info	Canceling	No

ClusterReportMigrationOnDemandJobFailed

Failed to migrate all the custom reports from ${clusterName} into RSC.  Refer to the migration dashboard for report-level breakdown. Reason: ${reason}.

Severity	Status	Audit Event
Critical	Failure	No

ClusterReportMigrationOnDemandJobQueued

Queued migration of custom reports from ${clusterName} into RSC.

Severity	Status	Audit Event
Info	Queued	No

ClusterReportMigrationOnDemandJobStarted

Started migration of custom reports from ${clusterName} into RSC.

Severity	Status	Audit Event
Info	TaskSuccess	No

ClusterReportMigrationOnDemandJobSucceeded

Successfully migrated custom reports from ${clusterName} into RSC. Refer  to the migration dashboard for details of the migration.

Severity	Status	Audit Event
Info	Success	No

MigrateClusterReportsJobStarted

${userEmail} successfully started migration of custom reports of ${clusterName} into RSC.

Severity	Status	Audit Event
Info	Success	Yes

MigrateClusterReportsJobStartFailed

${userEmail} failed to start migration of custom reports of ${clusterName} into RSC. Failure reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

saasapps

---

SaasAppsOrgAuthenticated

${userID} authenticated ${orgURL} with user ${orgUser}.

Severity	Status	Audit Event
Info	Success	Yes

SaasAppsPendingAuthentication

Service is offline. Pending authentication for ${orgName} (${orgURL}) to resume protection.

Severity	Status	Audit Event
Critical	Failure	No

sap_hana_system

---

AddSapHanaSystemFailure

${username} failed to add SAP HANA system '${systemName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

AddSapHanaSystemStarted

${username} started adding SAP HANA system '${systemName}'.

Severity	Status	Audit Event
Info	Success	Yes

DeleteSapHanaSystemFailure

${username} failed to delete SAP HANA system '${systemName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

DeleteSapHanaSystemStarted

${username} started deleting SAP HANA system '${systemName}'.

Severity	Status	Audit Event
Info	Success	Yes

EditSapHanaSystemFailure

${username} failed to modify SAP HANA system '${systemName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

EditSapHanaSystemStarted

${username} modified SAP HANA system '${systemName}'.

Severity	Status	Audit Event
Info	Success	Yes

RefreshSapHanaSystemMetadataFailed

${username} failed to refresh metadata for SAP HANA system '${systemName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

RefreshSapHanaSystemMetadataStarted

${username} started refreshing metadata for SAP HANA system '${systemName}'.

Severity	Status	Audit Event
Info	Success	Yes

sessionmanagement

---

ConcurrentSessionLimitExceeded

The session associated with ${userEmail} has been invalidated, as a new  login from ${source} for the same user, exceeded the maximum number of concurrent sessions allowed.

Severity	Status	Audit Event
Warning	Success	Yes

SessionManagementSetConfiguration

${userEmail} updated ${config} from ${fromValue} to ${toValue}.

Severity	Status	Audit Event
Info	Success	Yes

sla

---

DoNotProtectSLADomainAssignmentRollbackFailed

Failed to re-assign the existing SLA Domain ${slaName} to ${objectType}  ${objectName} on Rubrik cluster ${clusterUUID} while rolling back the Manage Protection operation. Retry the operation and SLA Domain assignment or re-assign the old SLA Domain.

Severity	Status	Audit Event
Critical	Failure	No

SLAAssignmentonRSCNativeObjectsFailed

Failed to assign SLA Domain: ${slaName} to objects: ${objects} on RSC. Reason: ${reason}

Severity	Status	Audit Event
Critical	Failure	No

SLAAssignmentOnRSCNativeObjectsSucceed

Successfully assigned SLA Domain: ${slaName} to objects: ${objects} on RSC.

Severity	Status	Audit Event
Info	Success	No

SLADirectAssignmentForRetentionLockProcessed

Unable to apply the new SLA Domain because you  can only apply SLA Domains with settings that  are stricter than the current SLA Domain settings  to a Retention-locked object. Instead, the object  ${object} is now directly assigned the same SLA  Domain ${currentEffectiveSla}.

Severity	Status	Audit Event
Info	Success	No

SLAMigrationArchivalLocation

SLA Domain has been configured with the archival location ${archivalLocationName}.

Severity	Status	Audit Event
Info	TaskSuccess	No

SLAMigrationFailed

Failed to switch SLA Domain for ${slaName}. Error: ${errMsg}

Severity	Status	Audit Event
Critical	Failure	No

SLAMigrationNoObjectTypes

SLA Domain has been configured without any object types. Edit the SLA Domain manually to add object-specific configuration before using the SLA Domain to protect objects.

Severity	Status	Audit Event
Info	TaskSuccess	No

SLAMigrationObjectTypes

SLA Domain has been configured with the following object types ${objectTypesStr}.

Severity	Status	Audit Event
Info	TaskSuccess	No

SLAMigrationRename

SLA Domain has been renamed to ${slaNewName}.

Severity	Status	Audit Event
Info	TaskSuccess	No

SLAMigrationStarted

Started switching the SLA Domain ${slaName}.

Severity	Status	Audit Event
Info	TaskSuccess	No

SLAMigrationStuck

Switching of SLA Domain ${slaName} is stuck. Error: ${errMsg}

Severity	Status	Audit Event
Critical	Failure	No

SLAMigrationSucceeded

Successfully switched the SLA Domain.

Severity	Status	Audit Event
Info	Success	No

smb_domain

---

AddSmbDomainFailure

${username} failed to add SMB domain '${smbDomainName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

AddSmbDomainSuccess

${username} successfully added SMB domain '${smbDomainName}'.

Severity	Status	Audit Event
Info	Success	Yes

AuthenticateSmbDomainFailure

${username} failed to authenticate SMB domain '${smbDomainName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

AuthenticateSmbDomainSuccess

${username} successfully authenticate SMB domain '${smbDomainName}'.

Severity	Status	Audit Event
Info	Success	Yes

ChangeSmbSecurityConfigurationFailure

${username} failed to change SMB domain configuration of cluster '${clusterName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

ChangeSmbSecurityConfigurationSuccess

${username} successfully changed SMB domain configuration of cluster '${clusterName}'.

Severity	Status	Audit Event
Info	Success	Yes

DeleteSmbDomainFailure

${username} failed to delete SMB domain '${smbDomainName}'. Reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

DeleteSmbDomainSuccess

${username} successfully deleted SMB domain '${smbDomainName}'.

Severity	Status	Audit Event
Info	Success	Yes

snappables

---

UnprotectObjectsTaskFailed

Failed to unprotect objects ${objectNames} as part of ${operation} operation. Any linking, unlinking or SLA Domain reassignment did not  occur due to this failure.

Severity	Status	Audit Event
Info	Failure	No

UnprotectObjectsTaskStarted

Started unprotection of objects ${objectNames} as part of ${operation} operation.

Severity	Status	Audit Event
Info	Running	No

UnprotectObjectsTaskSucceeded

Successfully unprotected objects ${objectNames}. If the objects are still linked, you can either unlink them or assign a new SLA Domain through the \"Manage Protection\" workflow.

Severity	Status	Audit Event
Info	TaskSuccess	No

sso

---

SSOAddConfiguration

${userEmail} configured SSO with Identity Provider ${entityID}.

Severity	Status	Audit Event
Info	Success	Yes

SSOLoginFailure

SSO login failed. Reason: ${err_msg}

Severity	Status	Audit Event
Warning	Failure	Yes

SSORemoveConfiguration

${userEmail} disabled SSO through Identity Provider ${entityID}.

Severity	Status	Audit Event
Info	Success	Yes

SSOUpdateSPCertificate

${userEmail} updated the SSO Service Provider ${certType} certificate with certificate named ${certName}.

Severity	Status	Audit Event
Info	Success	Yes

support_tunnel

---

SupportTunnelClosed

${username} closed a support tunnel for cluster '${cluster}'.

Severity	Status	Audit Event
Info	Success	Yes

SupportTunnelCloseFailed

${username} failed to close the support tunnel for cluster '${cluster}'. Failure reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

SupportTunnelOpened

${username} opened a support tunnel for cluster '${cluster}' and set the timeout window to ${timeoutWindow} hours.

Severity	Status	Audit Event
Info	Success	Yes

SupportTunnelOpenFailed

${username} failed to open a support tunnel for cluster '${cluster}' for ${timeoutWindow} hours. Failure reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

ticketingservice

---

TicketingPlatformConfigured

${userEmail} configured ${platformType} instance ${instanceURL}.

Severity	Status	Audit Event
Info	Success	Yes

TicketingPlatformDisconnected

${userEmail} disconnected ${platformType} instance ${instanceURL}.

Severity	Status	Audit Event
Info	Success	Yes

tpr

---

TprConfigEnable

${username} enabled Quorum Authorization.

Severity	Status	Audit Event
Info	Success	Yes

TprConfigUpdate

${username} updated the Quorum Authorization configuration to Execution Timeout Hours: ${executionTimeoutHours}, Request Timeout Hours: ${requestTimeoutHours}.

Severity	Status	Audit Event
Info	Success	Yes

TprPolicyCreated

${username} created the Quorum Authorization policy ${policyName}.

Severity	Status	Audit Event
Info	Success	Yes

TprPolicyDeleted

${username} deleted the Quorum Authorization policy ${policyName}.

Severity	Status	Audit Event
Info	Success	Yes

TprPolicyUpdated

${username} updated the Quorum Authorization policy ${policyName}.

Severity	Status	Audit Event
Info	Success	Yes

vcd

---

AddVcdStarted

${username} started a job to add VCD '${vcdAddress}'

Severity	Status	Audit Event
Info	Success	Yes

AddVcdStartFailed

${username} failed to start a job to add vCenter '${vcdAddress}'. Failure reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

DeleteVcdStarted

${username} started a job to delete VCD '${vcdAddress}'.

Severity	Status	Audit Event
Info	Success	Yes

DeleteVcdStartFailed

${username} failed to start a job to delete VCD '${vcdAddress}'. Failure reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

RefreshVcdStarted

${username} started a job to refresh VCD '${vcdAddress}'.

Severity	Status	Audit Event
Info	Success	Yes

RefreshVcdStartFailed

${username} failed to start a job to refresh VCD '${vcdAddress}'. Failure reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

UpdateVcdStarted

${username} started a job to update VCD '${vcdAddress}'.

Severity	Status	Audit Event
Info	Success	Yes

UpdateVcdStartFailed

${username} failed to start a job to update VCD '${vcdAddress}' Failure reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

VappSnapshotInstantRecoveryStarted

${username} started a job to instant recover snapshot '${snapshotId}' from ${snappableType} '${vcdVapp}'.

Severity	Status	Audit Event
Info	Success	Yes

VappSnapshotInstantRecoveryStartFailed

${username} failed to instant recover snapshot '${snapshotId}'  from ${snappableType} '${vcdVapp}'. Failure reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

VcdVappOndemandSnapshotStarted

${username} started a job to take on demand snapshot for ${snappableType} '${vcdVapp}'.

Severity	Status	Audit Event
Info	Success	Yes

VcdVappOndemandSnapshotStartFailed

${username} failed to take on demand snapshot for ${snappableType}  '${vcdVapp}'. Failure reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

VcdVappSnapshotDeleteStarted

${username} started a job to delete snapshot '${snapshotId}' from ${snappableType} '${vcdVapp}'.

Severity	Status	Audit Event
Info	Success	Yes

VcdVappSnapshotDeleteStartFailed

${username} failed to delete snapshot '${snapshotId}' from ${snappableType} '${vcdVapp}'. Failure reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

VcdVappSnapshotExportStarted

${username} started a job to export snapshot '${snapshotId}' from ${snappableType} '${vcdVapp}'.

Severity	Status	Audit Event
Info	Success	Yes

VcdVappSnapshotExportStartFailed

${username} failed to export snapshot '${snapshotId}' from ${snappableType} '${vcdVapp}'. Failure reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

VcdVappUpdateStarted

${username} started a job to update ${snappableType} '${vcdVapp}'.

Severity	Status	Audit Event
Info	Success	Yes

VcdVappUpdateStartFailed

${username} failed to update ${snappableType} '${vcdVapp}'. Failure reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

volume_group

---

UpdateVolumeGroup

${username} updated volume group for host ${hostName}. Volumes included are :${volumes}.

Severity	Status	Audit Event
Info	Success	Yes

UpdateVolumeGroupFailed

${username} failed to update volume group for host ${hostName}. Reason : ${reason}

Severity	Status	Audit Event
Info	Failure	Yes

vsphere

---

AddVcenterStarted

${username} started a job to add vCenter '${vcenterAddress}'

Severity	Status	Audit Event
Info	Success	Yes

AddVcenterStartFailed

${username} failed to start a job to add vCenter '${vcenterAddress}'. Failure reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

CreateGuestCredential

${username} created a guest credential with name '${guestCredentialName}'.

Severity	Status	Audit Event
Info	Success	Yes

CreateGuestCredentialFailed

${username} failed to create a guest credential with name '${guestCredentialName}'.

Severity	Status	Audit Event
Info	Failure	Yes

CreateVSphereAdvancedTag

${username} created an advanced tag with name '${advancedTagName}'.

Severity	Status	Audit Event
Info	Success	Yes

CreateVSphereAdvancedTagFailed

${username} failed to create an advanced tag with name '${advancedTagName}'.

Severity	Status	Audit Event
Info	Failure	Yes

DeleteGuestCredential

${username} deleted a guest credential.

Severity	Status	Audit Event
Info	Success	Yes

DeleteGuestCredentialFailed

${username} failed to delete a guest credential.

Severity	Status	Audit Event
Info	Failure	Yes

DeleteVcenterStarted

${username} started a job to delete vCenter '${vcenterAddress}'

Severity	Status	Audit Event
Info	Success	Yes

DeleteVcenterStartFailed

${username} failed to start a job to delete vCenter '${vcenterAddress}'. Failure reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

DeleteVSphereAdvancedTag

${username} deleted an advanced tag'.

Severity	Status	Audit Event
Info	Success	Yes

DeleteVSphereAdvancedTagFailed

${username} failed to delete an advanced tag'.

Severity	Status	Audit Event
Info	Failure	Yes

DisabledStorageArrayIntegration

${username} disabled storage array integration in VM ${vmName}'.

Severity	Status	Audit Event
Info	Success	Yes

EnabledStorageArrayIntegration

${username} enabled storage array integration in VM ${vmName}'.

Severity	Status	Audit Event
Info	Success	Yes

RefreshVcenterStarted

${username} started a job to refresh vCenter '${vcenterAddress}'

Severity	Status	Audit Event
Info	Success	Yes

RefreshVcenterStartFailed

${username} failed to start a job to refresh vCenter '${vcenterAddress}'. Failure reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

UpdateGuestCredential

${username} updated a guest credential with name '${guestCredentialName}'.

Severity	Status	Audit Event
Info	Success	Yes

UpdateGuestCredentialFailed

${username} failed to update a guest credential with name '${guestCredentialName}'.

Severity	Status	Audit Event
Info	Failure	Yes

UpdateVmwareAgentDeploymentSettingFailed

${username} failed to update vmware agent deployment setting on cluster '${clusterUuid}'.

Severity	Status	Audit Event
Info	Failure	Yes

UpdateVmwareAgentDeploymentSettingSucceeded

${username} updated vmware agent deployment setting on cluster '${clusterUuid}'.

Severity	Status	Audit Event
Info	Success	Yes

UpdateVmwareDiskFailed

${username} failed to update a Vmware Virtual Disk '${diskName}' of vSphere VM '${vmName}'.

Severity	Status	Audit Event
Info	Failure	Yes

UpdateVmwareDiskSucceeded

${username} updated protection of disk with name '${diskName}' on  VM '${vmName}' to exclusion status '${status}'

Severity	Status	Audit Event
Info	Success	Yes

UpdateVmwareVcenterSettingFailed

${username} was unable to modify the VMware vCenter '${vcenterAddress}' on Rubrik cluster '${clusterUuid}'. Failure reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

UpdateVmwareVcenterSettingSucceeded

${username} modified the VMware vCenter '${vcenterAddress}' on Rubrik cluster '${clusterUuid}'.

Severity	Status	Audit Event
Info	Success	Yes

UpdateVSphereAdvancedTag

${username} updated an advanced tag with name '${advancedTagName}'.

Severity	Status	Audit Event
Info	Success	Yes

UpdateVSphereAdvancedTagFailed

${username} failed to update an advanced tag with name '${advancedTagName}'.

Severity	Status	Audit Event
Info	Failure	Yes

VSphereLiveMountPoweredOffFailed

${username} failed to power off '${vmName}'. Failure reason: ${reason}.

Severity	Status	Audit Event
Info	Success	Yes

VSphereLiveMountPoweredOffStarted

${username} started powering off '${vmName}'

Severity	Status	Audit Event
Info	Success	Yes

VSphereLiveMountPoweredOnFailed

${username} failed to power on '${vmName}'. Failure reason: ${reason}.

Severity	Status	Audit Event
Info	Success	Yes

VSphereLiveMountPoweredOnStarted

${username} started powering on '${vmName}'

Severity	Status	Audit Event
Info	Success	Yes

VSphereRegisterAgent

${username} registered agent on virtual machine '${snappableName}'.

Severity	Status	Audit Event
Info	Success	Yes

VSphereRegisterAgentFailed

${username} failed to register agent on virtual machine '${snappableName}'.

Severity	Status	Audit Event
Info	Failure	Yes

VSphereUpdateVM

${username} updated virtual machine '${snappableName}'.

Severity	Status	Audit Event
Info	Success	Yes

VSphereUpdateVMFailed

${username} unable to update virtual machine '${snappableName}'.

Severity	Status	Audit Event
Info	Failure	Yes

VSphereUpdateVmUnmountTimeFailed

${username} failed to update unmount time for vm mount '${mountId}'. Failure reason: ${reason}.

Severity	Status	Audit Event
Info	Failure	Yes

VSphereUpdateVmUnmountTimeSucceeded

${username} successfully updated unmount time for vm mount '${mountId}'.

Severity	Status	Audit Event
Info	Success	Yes

webhook

---

PolarisWebhookAutoDisabled

Webhook endpoint failed to receive messages after multiple retries.

Severity	Status	Audit Event
Critical	Failure	No

webhooks

---

WebhookCreated

${actorSubjectName} successfully created the webhook ${targetSubjectName}.

Severity	Status	Audit Event
Info	Success	Yes

WebhookDeleted

${actorSubjectName} successfully deleted the webhook ${targetSubjectName}.

Severity	Status	Audit Event
Info	Success	Yes

WebhookDisabled

${actorSubjectName} successfully disabled the webhook ${targetSubjectName}.

Severity	Status	Audit Event
Info	Success	Yes

WebhookEnabled

${actorSubjectName} successfully enabled webhook ${targetSubjectName}.

Severity	Status	Audit Event
Info	Success	Yes

WebhookUpdated

${actorSubjectName} successfully updated the webhook ${targetSubjectName}.

Severity	Status	Audit Event
Info	Success	Yes