The humio-activity Repository

The humio-activity repository contains information about operations and activities, including debug, error, and informational messages which are relevant to users and organizations.

Basic Structure

Events within humio-activity contain a record of the specific activities across the LogScale cluster. Events within the repository contain:

  • Timestamp of the activity.

  • Category, which defines the category of the event, such as Request, Query, Alert, ScheduledSearch, and so on.

  • Severity, which indicates the seriousness of the event and whether action may be required.

  • Event-specific information, for example, for a scheduled search, the scheduled search name and ID.

  • Metadata about the event, such as the subcategory of the event, username, used ID, and so on.

The table below shows the category and corresponding subcategory of events shown in the humio-activity repository.

Table:

CategorySub-CategoryAvailabilityDescriptionFunctionality
Action  Event for an action Actions
AlertAction  Event for an action from an alert Actions
AlertAlert  Event for an alert Alerts
AlertQuery  Event for a query from an alert Alert Errors and Resolutions
FdrEntity  Event for an entity in FDR Ingesting FDR Data into a Repository
FdrIngest  Event for FDR ingest Error Handling for FDR Ingestion
FilterAlertAlert  Alert event for a filter alert Filter alert errors and solutions
FilterAlertQuery  Event for a query as part of a filter alert Filter Alerts
GraphQLDeprecation  A deprecated GraphQL field was used Deprecated Features
IngestFeedawsS3Sqs  Event for AWS S3 ingest feed Ingest Data from AWS S3
Query  Event for a query Searching Data
Request  Event for an ingest request Ingest Requests
ScheduledSearchAction  Event for actions from a scheduled search Actions
ScheduledSearchQuery  Event for a query that is part of a scheduled search Scheduled Searches
ScheduledSearchSchedule  Event for schedule of a scheduled search Search Schedule
ScheduledSearchScheduledSearch  Event for a scheduled search Scheduled Searches
SystemPrivilegeChangeSystemPermission  Event for user permissions change Manage users & permissions
SystemPrivilegeManageOrganizations  Event for organization permissions Manage users & permissions