AuditEventsare generated as a result of an action taken on the Serverby a Clientof the Server. For example, in response to a Clientissuing a write to a Variable, the Serverwould generate an AuditEventdescribing the Variableas the source and the user and Client Sessionas the initiators of the Event. Not all Serverssupport auditing, but if a Serversupports auditing then it shall support audit Eventsas described in 5.6. Profiles(see OPC 10000-7) can be used to determine if a Serversupports auditing. Serversshall generate Eventsof the AuditHistoryUpdateEventTypeor a sub-type of this type for all invocations of the HistoryUpdate Serviceon any HistoricalNode. See OPC 10000-3and OPC 10000-5for details on the AuditHistoryUpdateEventType model. In the case where the HistoryUpdate Serviceis invoked to insert Historical Events, the AuditHistoryEventUpdateEventType Eventshall include the EventId of the inserted Eventand a description that indicates that the Eventwas inserted. In the case where the HistoryUpdate Serviceis invoked to delete records, the AuditHistoryDeleteEventTypeor one of its sub-types shall be generated. See 6.7for details on updating historical data or Events.

In particular using the Delete raw or Delete modified functionality shall generate an AuditHistoryRawModifyDeleteEventType Eventor a sub-type of it. Using the Delete at time functionality shall generate an AuditHistoryAtTimeDeleteEventType Eventor a sub-type of it. Using the Delete Eventfunctionality shall generate an AuditHistoryEventDeleteEventType Eventor a sub-type of it. All other updates shall follow the guidelines provided in the AuditHistoryUpdateEventTypemodel.

This is a subtype of AuditHistoryUpdateEventType and is used for categorization of History Eventupdate related Events. This type follows all the behaviour of its parent type. Its representation in the AddressSpaceis formally defined in Table 10.

Table 10– AuditHistoryEventUpdateEventType definition

Attribute

Value

BrowseName

AuditHistoryEventUpdateEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the AuditHistoryUpdateEventTypedefined in OPC 10000-3, i.e. it has HasProperty Referencesto the same Nodes.

HasProperty

Variable

UpdatedNode

NodeId

PropertyType

Mandatory

HasProperty

Variable

PerformInsertReplace

PerformUpdateType

PropertyType

Mandatory

HasProperty

Variable

Filter

EventFilter

PropertyType

Mandatory

HasProperty

Variable

NewValues

HistoryEventFieldList [ ]

PropertyType

Mandatory

HasProperty

Variable

OldValues

HistoryEventFieldList [ ]

PropertyType

Mandatory

This EventTypeinherits all Propertiesof the AuditHistoryUpdateEventType. Their semantic is defined in OPC 10000-3.

The UpdateNodeidentifies the Attributethat was written on the SourceNode.

The PerformInsertReplace enumeration reflects the parameter on the Servicecall.

The Filterreflects the Eventfilter passed on the call to select the Eventsthat are to be updated.

The NewValuesidentify the value that was written to the Event.

The OldValuesidentify the value that the Eventscontained before the update. It is acceptable for a Serverthat does not have this information to report a null value. In the case of an insert it is expected to be a null value.

Both the NewValuesand the OldValueswill contain Eventswith the appropriate fields, each with appropriately encoded values.

This is a subtype of AuditHistoryUpdateEventTypeand is used for categorization of history value update related Events. This type follows all the behaviour of its parent type. Its representation in the AddressSpaceis formally defined in Table 11.

Table 11– AuditHistoryValueUpdateEventType definition

Attribute

Value

BrowseName

AuditHistoryValueUpdateEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the AuditHistoryUpdateEventTypedefined in OPC 10000-3, i.e. it has HasProperty Referencesto the same Nodes.

HasProperty

Variable

UpdatedNode

NodeId

PropertyType

Mandatory

HasProperty

Variable

PerformInsertReplace

PerformUpdateType

PropertyType

Mandatory

HasProperty

Variable

NewValues

DataValue[]

PropertyType

Mandatory

HasProperty

Variable

OldValues

DataValue[]

PropertyType

Mandatory

This EventTypeinherits all Propertiesof the AuditHistoryUpdateEventType. Their semantic is defined in OPC 10000-3.

The UpdatedNodeidentifies the Attributethat was written on the SourceNode.

The PerformInsertReplace enumeration reflects the parameter on the Servicecall.

The NewValuesidentify the value that was written to the Event.

The OldValuesidentify the value that the Eventcontained before the write. It is acceptable for a Serverthat does not have this information to report a null value. In the case of an insert it is expected to be a null value.

Both the NewValuesand the OldValueswill contain a value in the DataTypeand encoding used for writing the value.

This is a subtype of AuditHistoryUpdateEventTypeand is used for categorization of structured data update related Events. This type follows all the behaviour of its parent type. Its representation in the AddressSpaceis formally defined in Table 12.

Table 12– AuditHistoryAnnotationUpdateEventType definition

Attribute

Value

BrowseName

AuditHistoryAnnotationUpdateEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the AuditHistoryUpdateEventTypedefined in OPC 10000-3, i.e. it has HasProperty Referencesto the same Nodes.

HasProperty

Variable

PerformInsertReplace

PerformUpdateType

PropertyType

Mandatory

HasProperty

Variable

NewValues

DataValue[]

PropertyType

Mandatory

HasProperty

Variable

OldValues

DataValue[]

PropertyType

Mandatory

This EventTypeinherits all Propertiesof the AuditHistoryUpdateEventType. Their semantic is defined in OPC 10000-3.

The PerformInsertReplace enumeration reflects the coresponding parameter on the Servicecall.

The NewValuesidentify the Annotaionthat was written. In the case of a remove it is expected to be a null value.

The OldValuesidentify the value that the Annotationcontained before the write. It is acceptable for a Serverthat does not have this information to report a null value. In the case of an insert or remove it is expected to be a null value.

Both the NewValuesand the OldValueswill contain a value in the DataTypeand encoding used for writing the value.

This is a subtype of AuditHistoryUpdateEventTypeand is used for categorization of history delete related Events. This type follows all the behaviour of its parent type. Its representation in the AddressSpaceis formally defined in Table 13.

Table 13– AuditHistoryDeleteEventType definition

Attribute

Value

BrowseName

AuditHistoryDeleteEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the AuditHistoryUpdateEventTypedefined in OPC 10000-3, i.e. it has HasProperty Referencesto the same Nodes.

HasProperty

Variable

UpdatedNode

NodeId

PropertyType

Mandatory

HasSubtype

ObjectType

AuditHistoryRawModifyDeleteEventType

HasSubtype

ObjectType

AuditHistoryAtTimeDeleteEventType

HasSubtype

ObjectType

AuditHistoryEventDeleteEventType

This EventTypeinherits all Propertiesof the AuditUpdateEventType. Their semantic is defined in OPC 10000-3.

The UpdatedNode propertyidentifies the NodeId that was used for the delete operation.

This is a subtype of AuditHistoryDeleteEventTypeand is used for categorization of history delete related Events. This type follows all the behaviour of its parent type. Its representation in the AddressSpaceis formally defined in Table 14.

Table 14– AuditHistoryRawModifyDeleteEventType definition

Attribute

Value

BrowseName

AuditHistoryRawModifyDeleteEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the AuditHistoryDeleteEventTypedefined in Table 13, i.e. it has HasProperty Referencesto the same Nodes.

HasProperty

Variable

IsDeleteModified

Boolean

PropertyType

Mandatory

HasProperty

Variable

StartTime

UtcTime

PropertyType

Mandatory

HasProperty

Variable

EndTime

UtcTime

PropertyType

Mandatory

HasProperty

Variable

OldValues

DataValue[]

PropertyType

Mandatory

This EventTypeinherits all Propertiesof the AuditHistoryDeleteEventType. Their semantic is defined in 5.6.5.

The isDeleteModifiedreflects the isDeleteModified parameter of the call.

The StartTimereflects the starting time parameter of the call.

The EndTimereflects the ending time parameter of the call.

The OldValuesidentify the value that history contained before the delete. A Servershould report all deleted values. It is acceptable for a Serverthat does not have this information to report a null value. The OldValueswill contain a value in the DataTypeand encoding used for writing the value.

This is a subtype of AuditHistoryDeleteEventTypeand is used for categorization of history delete related Events. This type follows all the behaviour of its parent type. Its representation in the AddressSpaceis formally defined in Table 15.

Table 15– AuditHistoryAtTimeDeleteEventType definition

Attribute

Value

BrowseName

AuditHistoryAtTimeDeleteEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the AuditHistoryDeleteEventTypedefined in Table 13, i.e. it has HasProperty Referencesto the same Nodes.

HasProperty

Variable

ReqTimes

UtcTime[]

PropertyType

Mandatory

HasProperty

Variable

OldValues

DataValue[]

PropertyType

Mandatory

This EventTypeinherits all Propertiesof the AuditHistoryDeleteEventType. Their semantic is defined in 5.6.8.

The ReqTimesreflect the request time parameter of the call.

The OldValuesidentifies the value that history contained before the delete. A Servershould report all deleted values. It is acceptable for a Serverthat does not have this information to report a null value. The OldValueswill contain a value in the DataTypeand encoding used for writing the value.

This is a subtype of AuditHistoryDeleteEventTypeand is used for categorization of history delete related Events. This type follows all the behaviour of its parent type. Its representation in the AddressSpaceis formally defined in Table 16.

Table 16– AuditHistoryEventDeleteEventType definition

Attribute

Value

BrowseName

AuditHistoryEventDeleteEventType

IsAbstract

True

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

Subtype of the AuditHistoryDeleteEventTypedefined in Table 13, i.e. it has HasProperty Referencesto the same Nodes.

HasProperty

Variable

EventIds

ByteString[]

PropertyType

Mandatory

HasProperty

Variable

OldValues

HistoryEventFieldList

PropertyType

Mandatory

This EventTypeinherits all Propertiesof the AuditHistoryDeleteEventType. Their semantic is defined in 5.6.5.

The EventIdsreflect the EventIds parameter of the call.

The OldValuesidentify the value that history contained before the delete. A Servershould report all deleted values. It is acceptable for a Serverthat does not have this information to report a null value. The OldValueswill contain an Eventwith the appropriate fields, each with appropriately encoded values.