description: A record of an event made for purposes of maintaining a security log. Typical uses include detection of intrusion attempts and monitoring for inappropriate usage.
package_name: hl7.fhir.r4b.examples
derivation: specialization
name: AuditEvent
type: AuditEvent
elements:
  outcomeDesc: {isModifier: false, short: Description of the event outcome, type: string, mustSupport: false, isSummary: true, index: 6}
  type:
    isModifier: false
    short: Type/identifier of event
    type: Coding
    mustSupport: false
    binding: {strength: extensible, valueSet: 'http://hl7.org/fhir/ValueSet/audit-event-type'}
    isSummary: true
    index: 0
  outcome:
    isModifier: false
    short: Whether the event succeeded or failed
    type: code
    mustSupport: false
    binding: {strength: required, valueSet: 'http://hl7.org/fhir/ValueSet/audit-event-outcome|4.3.0'}
    isSummary: true
    index: 5
  source:
    isModifier: false
    short: Audit Event Reporter
    index: 22
    type: BackboneElement
    mustSupport: false
    elements:
      site: {isModifier: false, short: Logical source location within the enterprise, type: string, mustSupport: false, isSummary: false, index: 23}
      observer:
        isModifier: false
        short: The identity of source detecting the event
        refers: ['http://hl7.org/fhir/StructureDefinition/Device', 'http://hl7.org/fhir/StructureDefinition/Organization', 'http://hl7.org/fhir/StructureDefinition/Patient', 'http://hl7.org/fhir/StructureDefinition/Practitioner', 'http://hl7.org/fhir/StructureDefinition/PractitionerRole', 'http://hl7.org/fhir/StructureDefinition/RelatedPerson']
        type: Reference
        mustSupport: false
        isSummary: true
        index: 24
      type:
        isModifier: false
        short: The type of source where event originated
        type: Coding
        mustSupport: false
        array: true
        binding: {strength: extensible, valueSet: 'http://hl7.org/fhir/ValueSet/audit-source-type'}
        isSummary: false
        index: 25
    required: [observer]
    isSummary: false
  recorded: {isModifier: false, short: Time when the event was recorded, type: instant, mustSupport: false, isSummary: true, index: 4}
  agent:
    min: 1
    isModifier: false
    short: Actor involved in the event
    index: 8
    type: BackboneElement
    mustSupport: false
    array: true
    elements:
      role:
        isModifier: false
        short: Agent role in the event
        type: CodeableConcept
        mustSupport: false
        array: true
        binding: {strength: example, valueSet: 'http://hl7.org/fhir/ValueSet/security-role-type'}
        isSummary: false
        index: 10
      requestor: {isModifier: false, short: Whether user is initiator, type: boolean, mustSupport: false, isSummary: true, index: 14}
      who:
        isModifier: false
        short: Identifier of who
        refers: ['http://hl7.org/fhir/StructureDefinition/Device', 'http://hl7.org/fhir/StructureDefinition/Organization', 'http://hl7.org/fhir/StructureDefinition/Patient', 'http://hl7.org/fhir/StructureDefinition/Practitioner', 'http://hl7.org/fhir/StructureDefinition/PractitionerRole', 'http://hl7.org/fhir/StructureDefinition/RelatedPerson']
        type: Reference
        mustSupport: false
        isSummary: true
        index: 11
      altId: {isModifier: false, short: Alternative User identity, type: string, mustSupport: false, isSummary: false, index: 12}
      name: {isModifier: false, short: Human friendly name for the agent, type: string, mustSupport: false, isSummary: false, index: 13}
      type:
        isModifier: false
        short: How agent participated
        type: CodeableConcept
        mustSupport: false
        binding: {strength: extensible, valueSet: 'http://hl7.org/fhir/ValueSet/participation-role-type'}
        isSummary: false
        index: 9
      policy: {isModifier: false, short: Policy that authorized event, type: uri, mustSupport: false, array: true, isSummary: false, index: 16}
      purposeOfUse:
        isModifier: false
        short: Reason given for this user
        type: CodeableConcept
        mustSupport: false
        array: true
        binding: {strength: extensible, valueSet: 'http://terminology.hl7.org/ValueSet/v3-PurposeOfUse'}
        isSummary: false
        index: 21
      network:
        isModifier: false
        short: Logical network location for application activity
        type: BackboneElement
        mustSupport: false
        isSummary: false
        index: 18
        elements:
          address: {isModifier: false, short: Identifier for the network access point of the user device, type: string, mustSupport: false, isSummary: false, index: 19}
          type:
            isModifier: false
            short: The type of network access point
            type: code
            mustSupport: false
            binding: {strength: required, valueSet: 'http://hl7.org/fhir/ValueSet/network-type|4.3.0'}
            isSummary: false
            index: 20
      location:
        isModifier: false
        short: Where
        refers: ['http://hl7.org/fhir/StructureDefinition/Location']
        type: Reference
        mustSupport: false
        isSummary: false
        index: 15
      media:
        isModifier: false
        short: Type of media
        type: Coding
        mustSupport: false
        binding: {strength: extensible, valueSet: 'http://hl7.org/fhir/ValueSet/dicm-405-mediatype'}
        isSummary: false
        index: 17
    required: [requestor]
    isSummary: false
  purposeOfEvent:
    isModifier: false
    short: The purposeOfUse of the event
    type: CodeableConcept
    mustSupport: false
    array: true
    binding: {strength: extensible, valueSet: 'http://terminology.hl7.org/ValueSet/v3-PurposeOfUse'}
    isSummary: true
    index: 7
  action:
    isModifier: false
    short: Type of action performed during the event
    type: code
    mustSupport: false
    binding: {strength: required, valueSet: 'http://hl7.org/fhir/ValueSet/audit-event-action|4.3.0'}
    isSummary: true
    index: 2
  period: {isModifier: false, short: When the activity occurred, type: Period, mustSupport: false, isSummary: false, index: 3}
  entity:
    constraint:
      sev-1: {human: Either a name or a query (NOT both), source: 'http://hl7.org/fhir/StructureDefinition/AuditEvent', severity: error, expression: name.empty() or query.empty()}
    isModifier: false
    short: Data or objects used
    index: 26
    type: BackboneElement
    mustSupport: false
    array: true
    elements:
      role:
        isModifier: false
        short: What role the entity played
        type: Coding
        mustSupport: false
        binding: {strength: extensible, valueSet: 'http://hl7.org/fhir/ValueSet/object-role'}
        isSummary: false
        index: 29
      description: {isModifier: false, short: Descriptive text, type: string, mustSupport: false, isSummary: false, index: 33}
      name: {isModifier: false, short: Descriptor for entity, type: string, mustSupport: false, isSummary: true, index: 32}
      type:
        isModifier: false
        short: Type of entity involved
        type: Coding
        mustSupport: false
        binding: {strength: extensible, valueSet: 'http://hl7.org/fhir/ValueSet/audit-entity-type'}
        isSummary: false
        index: 28
      lifecycle:
        isModifier: false
        short: Life-cycle stage for the entity
        type: Coding
        mustSupport: false
        binding: {strength: extensible, valueSet: 'http://hl7.org/fhir/ValueSet/object-lifecycle-events'}
        isSummary: false
        index: 30
      query: {isModifier: false, short: Query parameters, type: base64Binary, mustSupport: false, isSummary: true, index: 34}
      securityLabel:
        isModifier: false
        short: Security labels on the entity
        type: Coding
        mustSupport: false
        array: true
        binding: {strength: extensible, valueSet: 'http://hl7.org/fhir/ValueSet/security-labels'}
        isSummary: false
        index: 31
      what:
        isModifier: false
        short: Specific instance of resource
        refers: ['http://hl7.org/fhir/StructureDefinition/Resource']
        type: Reference
        mustSupport: false
        isSummary: true
        index: 27
      detail:
        isModifier: false
        short: Additional Information about the entity
        index: 35
        type: BackboneElement
        mustSupport: false
        array: true
        elements:
          type: {isModifier: false, short: Name of the property, type: string, mustSupport: false, isSummary: false, index: 36}
          value:
            isModifier: false
            short: Property value
            mustSupport: false
            choices: [valueString, valueBase64Binary]
            isSummary: false
            index: 38
          valueString: {isModifier: false, short: Property value, type: string, mustSupport: false, choiceOf: value, isSummary: false, index: 39}
          valueBase64Binary: {isModifier: false, short: Property value, type: base64Binary, mustSupport: false, choiceOf: value, isSummary: false, index: 40}
        required: [valueBase64Binary, valueString, value, type]
        isSummary: false
    isSummary: false
  subtype:
    isModifier: false
    short: More specific type/id for the event
    type: Coding
    mustSupport: false
    array: true
    binding: {strength: extensible, valueSet: 'http://hl7.org/fhir/ValueSet/audit-event-sub-type'}
    isSummary: true
    index: 1
package_version: 4.3.0
class: resource
kind: resource
url: http://hl7.org/fhir/StructureDefinition/AuditEvent
base: http://hl7.org/fhir/StructureDefinition/DomainResource
version: 4.3.0
required: [agent, recorded, source, type]