The humio-activity Repository
The humio-activity repository contains information about operations and activities, including debug, error, and informational messages which are relevant to users and organizations.
Basic Structure
Events within humio-activity contain a record of the specific activities across the LogScale cluster. Events within the repository contain:
Timestamp of the activity.
Category, which defines the category of the event, such as Request, Query, Alert, ScheduledSearch, and so on.
Severity, which indicates the seriousness of the event and whether action may be required.
Event-specific information, for example, for a scheduled search, the scheduled search name and ID.
Metadata about the event, such as the subcategory of the event, username, used ID, and so on.
The table below shows the category and corresponding subcategory of events shown in the humio-activity repository.
Table:
Category | Sub-Category | Availability | Description | Functionality |
---|---|---|---|---|
Action | Event for an action | Actions | ||
Alert | Action | Event for an action from an alert | Actions | |
Alert | Alert | Event for an alert | Alerts | |
Alert | Query | Event for a query from an alert | Alert Errors and Resolutions | |
Fdr | Entity | Event for an entity in FDR | Ingesting FDR Data into a Repository | |
Fdr | Ingest | Event for FDR ingest | Error Handling for FDR Ingestion | |
FilterAlert | Alert | Alert event for a filter alert | Filter alert errors and solutions | |
FilterAlert | Query | Event for a query as part of a filter alert | Filter Alerts | |
GraphQL | Deprecation | A deprecated GraphQL field was used | Deprecated Features | |
IngestFeed | awsS3Sqs | Event for AWS S3 ingest feed | Ingest Data from AWS S3 | |
Query | Event for a query | Searching Data | ||
Request | Event for an ingest request | Ingest Requests | ||
ScheduledSearch | Action | Event for actions from a scheduled search | Actions | |
ScheduledSearch | Query | Event for a query that is part of a scheduled search | Scheduled Searches | |
ScheduledSearch | Schedule | Event for schedule of a scheduled search | Search Schedule | |
ScheduledSearch | ScheduledSearch | Event for a scheduled search | Scheduled Searches | |
SystemPrivilege | ChangeSystemPermission | Event for user permissions change | Manage users & permissions | |
SystemPrivilege | ManageOrganizations | Event for organization permissions | Manage users & permissions |