Module de sécurité matérielle (HSM)

Emplacement de la charge de travail

Matériel
Source du journal d'audit

Format Syslog
Opérations auditées

Créer une clé de locataire HPE iLO

Champs de l'entrée de journal contenant des informations d'audit
Métadonnées d'audit Nom du champ d'audit Valeur
Identité de l'utilisateur ou du service Non applicable Non applicable

Cible

(Champs et valeurs qui appellent l'API)

 Non applicable Non applicable

Action

(Champs contenant l'opération effectuée)

 message.action

Par exemple,

"message":{
  "action":"Create Key"
  }

Code temporel de l'événement time

Par exemple,

"time":"2022-11-14T14:55:53.051642Z"
Source de l'action message.sourceIPs

Par exemple,

"message":{
  "sourceIPs":["10.142.0.27"]
  }

Résultat message.response

success ou failure. Par exemple,

"message":{
  "response":"success"
  }

Autres champs Le champ message.description contient le message de journal complet récupéré directement à partir du HSM.

Pour en savoir plus, consultez l'exemple de journal.

Exemple de journal

{
  "pri":"14",
  "time":"2022-11-14T14:55:53.051642Z",
  "host":"hsmcluster",
  "ident":"hsmcluster",
  "pid":"-",
  "msgid":"-",
  "extradata":"-",
  "message":{
    "time":"2022-11-14T14:55:53.051642Z",
    "auditID":"bda22019-e565-4781-9c81-7a148cd1dfec",
    "user":{},
    "resource":"gpc-system/8b06-ddef1a-d643-469c-8a96-2339b1c",
    "action":"Create Key",
    "description":{
      "account":"kylo:kylo-ddb1c-f5a5:admin:accounts:kylo-ddadef1a-d643-23c",
      "application":"ncryptify:gemalto:admin:apps:kylo",
      "client_ip":"10.142.0.27",
      "createdAt":"2022-11-14T14:55:53.051642Z",
      "details":{
        "algorithm":"AES",
        "aliases":[{
          "alias":"ontap-admin-org-1-e09a731927eca3c",
          "index":0,
          "type":"string"
          }],
        "domain":"ddadef1a-d643-469c-8a96-23333e169b1c",
        "id":"8b0aec4f428354248f766",
        "name":"ontap-admin-org-1-e09a731927eca3c",
        "objectType":"Symmetric Key",
        "ownerId":"local|2620af75-cfd5-4279-88f1-c7977a317224",
        "size":256,
        "uri":"kylo:kylo-ddadef1a-d643-469c-8a96-233e16b1c:vault:keys:ontap-admin-org-1-e09a731927eca3c-v0",
        "usageMask":12
        },
      "devAccount":"ncryptify:gemalto:admin:accounts:gemalto",
      "id":"e352167a-60ce-4054-be1a-5cd09f2c64f4",
      "message":"Create Key",
      "principal":{
        "acc":"kylo/ddadef1a-d643-469c-8a96-23333e169b1c",
        "acct":"kylo:kylo-ddadefe169b1c:admin:accounts:kylo-ddadef1a-d643-469c-8a96-23333e169b1c",
        "iss":"kylo",
        "sub":"local|2620af75-cfd5-4279-88f1-c7977a317224"
        },
      "service":"minerva",
      "severity":"info",
      "source":"ciphertrust",
      "success":true,
      "requestId":"b0e2bc 72-63e3-446e-80d3-2d2dc8987915",
      "uri":"kylo:kylo-ddadef1a-d643-469c-8a96-233339b1c:audit:records:e3567a-60ce-4054-be1a-5cdf4",
      "username":"admin"
      },
    "sourceIPs":["10.142.0.27"],
    "response":"success",
    "_gdch_org":"org-1-admin",
    "_gdch_service":"hsm"
    },
  "_gdch_cluster":"org-1-admin",
  "_gdch_fluentbit_pod":"anthos-audit-logs-forwarder-ttg7r",
  "_gdch_service_name":"admin-audit-logs"
}

Créer une clé de locataire NetApp ONTAP

Champs de l'entrée de journal contenant des informations d'audit
Métadonnées d'audit Nom du champ d'audit Valeur
Identité de l'utilisateur ou du service Non applicable Non applicable

Cible

(Champs et valeurs qui appellent l'API)

 Non applicable Non applicable

Action

(Champs contenant l'opération effectuée)

 message.action

Par exemple,

"message":{
  "action":"Create Key"
  }

Code temporel de l'événement time

Par exemple,

"time":"2022-11-14T14:55:53.051642Z"
Source de l'action message.sourceIPs

Par exemple,

"message":{
  "sourceIPs":["10.142.0.27"]
  }

Résultat message.response

success ou failure. Par exemple,

"message":{
  "response":"success"
  }

Autres champs Le champ message.description contient le message de journal complet récupéré directement à partir du HSM.

Pour en savoir plus, consultez l'exemple de journal.

Exemple de journal

{
  "pri":"14",
  "time":"2022-11-14T14:55:53.051642Z",
  "host":"hsmcluster",
  "ident":"hsmcluster",
  "pid":"-",
  "msgid":"-",
  "extradata":"-",
  "message":{
    "time":"2022-11-14T14:55:53.051642Z",
    "auditID":"bda22019-e565-4781-9c81-7a148cd1dfec",
    "user":{},
    "resource":"gpc-system/8b06-ddef1a-d643-469c-8a96-2339b1c",
    "action":"Create Key",
    "description":{
      "account":"kylo:kylo:admin:accounts:kylo",
      "application":"ncryptify:gemalto:admin:apps:kylo",
      "client_ip":"10.142.0.27",
      "createdAt":"2022-11-14T14:55:53.051642Z",
      "details":{
        "algorithm":"AES",
        "aliases":[{
          "alias":"ten-user-org-1",
          "index":0,
          "type":"string"
          }],
        "domain":"root",
        "id":"8b0aec4f428354248f766",
        "name":"ten-user-org-1",
        "objectType":"Symmetric Key",
        "ownerId":"",
        "size":256,
        "uri":"kylo:kylo:vault:keys:ten-user-org-1-v0",
        "usageMask":4194303
        },
      "devAccount":"ncryptify:gemalto:admin:accounts:gemalto",
      "id":"e352167a-60ce-4054-be1a-5cd09f2c64f4",
      "message":"Create Key",
      "principal":{
        "acc":"kylo",
        "acct":"kylo:kylo:admin:accounts:kylo",
        "iss":"kylo",
        "sub":"local|2620af75-cfd5-4279-88f1-c7977a317224"
        },
      "service":"minerva",
      "severity":"info",
      "source":"ciphertrust",
      "success":true,
      "requestId":"b0e2bc 72-63e3-446e-80d3-2d2dc8987915",
      "uri":"kylo:kylo:audit:records:e3567a-60ce-4054-be1a-5cdf4",
      "username":"admin"
      },
    "sourceIPs":["10.142.0.27"],
    "response":"success",
    "_gdch_org":"org-1-admin",
    "_gdch_service":"hsm"
    },
  "_gdch_cluster":"org-1-admin",
  "_gdch_fluentbit_pod":"anthos-audit-logs-forwarder-ttg7r",
  "_gdch_service_name":"admin-audit-logs"
}