163 lines
4.4 KiB
YAML
163 lines
4.4 KiB
YAML
---
|
|
- event_type: compute.instance.*
|
|
traits: &instance_traits
|
|
tenant_id:
|
|
fields: payload.tenant_id
|
|
user_id:
|
|
fields: payload.user_id
|
|
instance_id:
|
|
fields: payload.instance_id
|
|
host:
|
|
fields: publisher_id
|
|
plugin:
|
|
name: split
|
|
parameters:
|
|
segment: 1
|
|
max_split: 1
|
|
service:
|
|
fields: publisher_id
|
|
plugin: split
|
|
memory_mb:
|
|
type: int
|
|
fields: payload.memory_mb
|
|
disk_gb:
|
|
type: int
|
|
fields: payload.disk_gb
|
|
root_gb:
|
|
type: int
|
|
fields: payload.root_gb
|
|
ephemeral_gb:
|
|
type: int
|
|
fields: payload.ephemeral_gb
|
|
vcpus:
|
|
type: int
|
|
fields: payload.vcpus
|
|
instance_type_id:
|
|
type: int
|
|
fields: payload.instance_type_id
|
|
instance_type:
|
|
fields: payload.instance_type
|
|
state:
|
|
fields: payload.state
|
|
os_architecture:
|
|
fields: payload.image_meta.'org.openstack__1__architecture'
|
|
os_version:
|
|
fields: payload.image_meta.'org.openstack__1__os_version'
|
|
os_distro:
|
|
fields: payload.image_meta.'org.openstack__1__os_distro'
|
|
launched_at:
|
|
type: datetime
|
|
fields: payload.launched_at
|
|
deleted_at:
|
|
type: datetime
|
|
fields: payload.deleted_at
|
|
- event_type: compute.instance.exists
|
|
traits:
|
|
<<: *instance_traits
|
|
audit_period_beginning:
|
|
type: datetime
|
|
fields: payload.audit_period_beginning
|
|
audit_period_ending:
|
|
type: datetime
|
|
fields: payload.audit_period_ending
|
|
- event_type: ['volume.exists', 'volume.create.*', 'volume.delete.*', 'volume.resize.*', 'volume.attach.*', 'volume.detach.*', 'volume.update.*', 'snapshot.exists', 'snapshot.create.*', 'snapshot.delete.*', 'snapshot.update.*']
|
|
traits: &cinder_traits
|
|
user_id:
|
|
fields: payload.user_id
|
|
project_id:
|
|
fields: payload.tenant_id
|
|
availability_zone:
|
|
fields: payload.availability_zone
|
|
display_name:
|
|
fields: payload.display_name
|
|
replication_status:
|
|
fields: payload.replication_status
|
|
status:
|
|
fields: payload.status
|
|
created_at:
|
|
fields: payload.created_at
|
|
- event_type: ['volume.exists', 'volume.create.*', 'volume.delete.*', 'volume.resize.*', 'volume.attach.*', 'volume.detach.*', 'volume.update.*']
|
|
traits:
|
|
<<: *cinder_traits
|
|
resource_id:
|
|
fields: payload.volume_id
|
|
host:
|
|
fields: payload.host
|
|
size:
|
|
fields: payload.size
|
|
type:
|
|
fields: payload.volume_type
|
|
replication_status:
|
|
fields: payload.replication_status
|
|
- event_type: ['snapshot.exists', 'snapshot.create.*', 'snapshot.delete.*', 'snapshot.update.*']
|
|
traits:
|
|
<<: *cinder_traits
|
|
resource_id:
|
|
fields: payload.snapshot_id
|
|
volume_id:
|
|
fields: payload.volume_id
|
|
- event_type: orchestration.stack.*
|
|
traits: &orchestration_crud
|
|
project_id:
|
|
fields: payload.tenant_id
|
|
user_id:
|
|
fields: ['_context_trustor_user_id', '_context_user_id']
|
|
resource_id:
|
|
fields: payload.stack_identity
|
|
- event_type: sahara.cluster.*
|
|
traits: &sahara_crud
|
|
project_id:
|
|
fields: payload.project_id
|
|
user_id:
|
|
fields: _context_user_id
|
|
resource_id:
|
|
fields: payload.cluster_id
|
|
- event_type: ['identity.user.*', 'identity.project.*', 'identity.group.*', 'identity.role.*', 'identity.OS-TRUST:trust']
|
|
traits: &identity_crud
|
|
resource_id:
|
|
fields: payload.resource_info
|
|
- event_type: identity.role_assignment.*
|
|
traits: &identity_role_assignment
|
|
role:
|
|
fields: payload.role
|
|
group:
|
|
fields: payload.group
|
|
domain:
|
|
fields: payload.domain
|
|
user:
|
|
fields: payload.user
|
|
project:
|
|
fields: payload.project
|
|
- event_type: identity.authenticate.*
|
|
traits: &identity_authenticate
|
|
typeURI:
|
|
fields: payload.typeURI
|
|
id:
|
|
fields: payload.id
|
|
action:
|
|
fields: payload.action
|
|
eventType:
|
|
fields: payload.eventType
|
|
eventTime:
|
|
fields: payload.eventTime
|
|
outcome:
|
|
fields: payload.outcome
|
|
initiator_typeURI:
|
|
fields: payload.initiator.typeURI
|
|
initiator_id:
|
|
fields: payload.initiator.id
|
|
initiator_name:
|
|
fields: payload.initiator.name
|
|
initiator_host_agent:
|
|
fields: payload.initiator.host.agent
|
|
initiator_host_addr:
|
|
fields: payload.initiator.host.address
|
|
target_typeURI:
|
|
fields: payload.target.typeURI
|
|
target_id:
|
|
fields: payload.target.id
|
|
observer_typeURI:
|
|
fields: payload.observer.typeURI
|
|
observer_id:
|
|
fields: payload.observer.id
|