5.10 Audit Events

5.10.1 Overview

If Auditing is supported by a Server, Events of AuditConditionEventType shall be generated. Following are the sub-types of AuditUpdateMethodEventType that will be generated in response to the Methods defined in this document. They are illustrated in Figure 24.

Figure 24 – AuditEvent hierarchy

AuditConditionEventTypes are normally used in response to a Method call. However, these Events shall also be notified if the functionality of such a Method is performed by some other Server-specific means. In this case, the SourceName Property shall contain a proper description of this internal means and the other Properties should be filled in as described for the given EventType.

5.10.2 AuditConditionEventType

This EventType is used to subsume all AuditConditionEventTypes. It is formally defined in Table 122.

Table 122 – AuditConditionEventType definition
Attribute Value
BrowseNameAuditConditionEventType
IsAbstractFalse
References NodeClass BrowseName DataType TypeDefinition ModellingRule
Subtype of the AuditUpdateMethodEventType defined in 10000-5
ConformanceUnits
A & C Auditing

AuditConditionEventTypes inherit all Properties of the AuditUpdateMethodEventType defined in 10000-5. Unless a subtype overrides the definition, the inherited Properties of the Condition will be used as defined.

This EventType can be further customized to reflect particular Condition related actions.

5.10.3 AuditConditionEnableEventType

This EventType is used to indicate a change in the enabled state of a Condition instance. It is formally defined in Table 123.

Table 123 – AuditConditionEnableEventType definition
Attribute Value
BrowseNameAuditConditionEnableEventType
IsAbstractFalse
References NodeClass BrowseName DataType TypeDefinition ModellingRule
Subtype of the AuditConditionEventType defined in 5.10.2 that is, inheriting the InstanceDeclarations of that Node.
ConformanceUnits
A & C Auditing

The SourceName shall indicate Method/Enable or Method/Disable. If the audit Event is not the result of a Method call, but due to an internal action of the Server, the SourceName shall reflect Enable or Disable, it may be preceded by an appropriate description such as “Internal/Enable” or “Remote/Enable”.

5.10.4 AuditConditionCommentEventType

This EventType is used to report an AddComment action. It is formally defined in Table 124.

Table 124 – AuditConditionCommentEventType definition
Attribute Value
BrowseNameAuditConditionCommentEventType
IsAbstractFalse
References NodeClass BrowseName DataType TypeDefinition ModellingRule
HasPropertyVariableConditionEventIdByteStringPropertyTypeMandatory
HasPropertyVariableCommentLocalizedTextPropertyTypeMandatory
Subtype of the AuditConditionEventType defined in 5.10.2 that is, inheriting the InstanceDeclarations of that Node.
ConformanceUnits
A & C Auditing

The ConditionEventId field shall contain the id of the event for which the comment was added.

The Comment contains the actual comment that was added.

5.10.5 AuditConditionRespondEventType

This EventType is used to report a Respond action (see 5.6). It is formally defined in Table 125.

Table 125 – AuditConditionRespondEventType definition
Attribute Value
BrowseNameAuditConditionRespondEventType
IsAbstractFalse
References NodeClass BrowseName DataType TypeDefinition ModellingRule
HasPropertyVariableSelectedResponseUInt32PropertyTypeMandatory
Subtype of the AuditConditionEventType defined in 5.10.2 that is, inheriting the InstanceDeclarations of that Node.
ConformanceUnits
A & C Dialog Auditing

The SelectedResponse field shall contain the response that was selected.

5.10.6 AuditConditionAcknowledgeEventType

This EventType is used to indicate acknowledgement or confirmation of one or more Conditions. It is formally defined in Table 126.

Table 126 – AuditConditionAcknowledgeEventType definition
Attribute Value
BrowseNameAuditConditionAcknowledgeEventType
IsAbstractFalse
References NodeClass BrowseName DataType TypeDefinition ModellingRule
HasPropertyVariableConditionEventIdByteStringPropertyTypeMandatory
HasPropertyVariableCommentLocalizedTextPropertyTypeMandatory
Subtype of the AuditConditionEventType defined in 5.10.2 that is, inheriting the InstanceDeclarations of that Node.
ConformanceUnits
A & C Acknowledge Auditing

The ConditionEventId field shall contain the id of the Event that was acknowledged.

The Comment contains the actual comment that was added, it may be a blank comment or a NULL.

5.10.7 AuditConditionConfirmEventType

This EventType is used to report a Confirm action. It is formally defined in Table 127.

Table 127 – AuditConditionConfirmEventType definition
Attribute Value
BrowseNameAuditConditionConfirmEventType
IsAbstractFalse
References NodeClass BrowseName DataType TypeDefinition ModellingRule
HasPropertyVariableConditionEventIdByteStringPropertyTypeMandatory
HasPropertyVariableCommentLocalizedTextPropertyTypeMandatory
Subtype of the AuditConditionEventType defined in 5.10.2 that is, inheriting the InstanceDeclarations of that Node.
ConformanceUnits
A & C Confirm Auditing

The ConditionEventId field shall contain the id of the Event that was confirmed.

The Comment contains the actual comment that was added, it may be a blank comment or a NULL.

5.10.8 AuditConditionShelvingEventType

This EventType is used to indicate a change to the Shelving state of a Condition instance. It is formally defined in Table 128.

Table 128 – AuditConditionShelvingEventType definition
Attribute Value
BrowseNameAuditConditionShelvingEventType
IsAbstractFalse
References NodeClass BrowseName DataType TypeDefinition ModellingRule
HasPropertyVariableShelvingTimeDurationPropertyTypeOptional
Subtype of the AuditConditionEventType defined in 5.10.2 that is, inheriting the InstanceDeclarations of that Node.
ConformanceUnits
A & C Shelving Auditing

If the Method indicates a TimedShelve operation, the ShelvingTime field shall contain duration for which to shelve the Alarm. For other Shelving Methods, this parameter may be omitted or NULL.

5.10.9 AuditConditionSuppressionEventType

This EventType is used to indicate a change to the Suppression state of a Condition instance. It is formally defined in Table 129.

Table 129 – AuditConditionSuppressionEventType definition
Attribute Value
BrowseNameAuditConditionSuppressionEventType
IsAbstractFalse
References NodeClass BrowseName DataType TypeDefinition ModellingRule
Subtype of the AuditConditionEventType defined in 5.10.2 that is, inheriting the InstanceDeclarations of that Node.
ConformanceUnits
A & C Suppression Auditing

This Event indicates an Alarm suppression operation. An audit Event of this type shall be generated, if audit events are supported for any suppression action, including automatic system based suppression.

5.10.10 AuditConditionSilenceEventType

This EventType is used to indicate a change to the Silence state of a Condition instance. It is formally defined in Table 130.

Table 130 – AuditConditionSilenceEventType definition
Attribute Value
BrowseNameAuditConditionSilenceEventType
IsAbstractFalse
References NodeClass BrowseName DataType TypeDefinition ModellingRule
Subtype of the AuditConditionEventType defined in 5.10.2 that is, inheriting the InstanceDeclarations of that Node.
ConformanceUnits
A & C Silencing Auditing

This event indicates that an Alarm was silenced, but not acknowledged. An audit event of this type shall be generated, if Audit events are supported for any silence action, including automatic system based silence.

5.10.11 AuditConditionResetEventType

This EventType is used to indicate a change to the Latched state of a Condition instance. It is formally defined in Table 130.

Table 131 – AuditConditionResetEventType definition
Attribute Value
BrowseNameAuditConditionResetEventType
IsAbstractFalse
References NodeClass BrowseName DataType TypeDefinition ModellingRule
Subtype of the AuditConditionEventType defined in 5.10.2 that is, inheriting the InstanceDeclarations of that Node.
ConformanceUnits
A & C Latching Auditing

This event indicates that an Alarm was reset. An audit event of this type shall be generated, if Audit events are supported for any Alarm action.

5.10.12 AuditConditionOutOfServiceEventType

This EventType is used to indicate a change to the OutOfService State of a Condition instance. It is formally defined in Table 132.

Table 132 – AuditConditionOutOfServiceEventType definition
Attribute Value
BrowseNameAuditConditionOutOfServiceEventType
IsAbstractFalse
References NodeClass BrowseName DataType TypeDefinition ModellingRule
Subtype of the AuditConditionEventType defined in 5.10.2 that is, inheriting the InstanceDeclarations of that Node.
ConformanceUnits
A & C OutOfService Auditing

An audit Event of this type shall be generated if audit Events are supported.