Secret Server Services

The Secret Server service monitors events related to Secret Server for any activity related to the Delinea Platform. The following levels are audited:

  • Folder was added by {{Actor.Name}}.

  • Folder was deleted by {{Actor.Name}}.

  • Folder permissions were updated by {{Actor.Name}}.

  • Secret {{Target.Name}} policy for folder was updated by {{Actor.Name}}.

  • Secret {{Target.Name}} was deleted by {{Actor.Name}}.

  • Secret {{Target.Name}} was viewed by {{Actor.Name}}.

  • Secret {{Target.Name}} cache was viewed by {{Actor.Name}}.

  • Secret {{Target.Name}} file was saved by {{Actor.Name}}.

  • Secret {{Target.Name}} was updated by {{Actor.Name}}.

  • Secret {{Target.Name}} was expired today for {{Actor.Name}}.

  • Secret {{Target.Name}} will be expired in 1 day.

  • Secret {{Target.Name}} will be expired in 7 days.

  • Secret {{Target.Name}} will be expired in 15 days.

  • Secret {{Target.Name}} will be expired in 3 days.

  • Secret {{Target.Name}} policy was updated by {{Actor.Name}}.

  • Secret {{Target.Name}} password was changed by {{Actor.Name}}.

  • Secret {{Target.Name}} password change was failed.

  • Secret {{Target.Name}} was exported by {{Actor.Name}}.

  • Secret {{Target.Name}} will be expired in 30 days.

  • Secret {{Target.Name}} will be expired in 45 days.

  • Secret {{Target.Name}} will be expired in 60 days.

  • Secret {{Target.Name}} will be expired in 90 days.

  • Session recording was viewed by {{Actor.Name}}.

  • Secret was copied by {{Actor.Name}}.

  • Secret was checked in by {{Actor.Name}}.

  • Secret was checked out by {{Actor.Name}}.

  • Secret access was approved by {{Actor.Name}}.

  • Secret access was denied by {{Actor.Name}}.

  • Unlimited admin was enabled by {{Actor.Name}}.

  • Unlimited admin was disabled by {{Actor.Name}}.

  • Secret export was run by {{Actor.Name}}.

  • Secret import was run by {{Actor.Name}}.

  • Expire all secrets command was run by {{Actor.Name}}.

  • Secret template was created by {{Actor.Name}}.

  • Secret template was edited by {{Actor.Name}}.

  • Secret template was copied by {{Actor.Name}}.

  • Field in a secret template was encrypted by {{Actor.Name}}.

  • Field in a secret template was exposed by {{Actor.Name}}.

  • Owners of a secret template were updated by {{Actor.Name}}.

  • Access permissions for creating a secret template were updated by {{Actor.Name}}.

  • Licenses will be expired in 30 days.

  • Group owners were updated by {{Actor.Name}}.

  • Secret policy was created by {{Actor.Name}}.

  • Secret policy was updated by {{Actor.Name}}.

  • Site was created by {{Actor.Name}}.

  • Site was updated by {{Actor.Name}}.

  • Site was enabled by {{Actor.Name}}.

  • Site was disabled by {{Actor.Name}}.

  • Site engine was added by {{Actor.Name}}.

  • Site engine was removed by {{Actor.Name}}.

  • Site engine was online for {{Actor.Name}}.

  • Site engine was offline for {{Actor.Name}}.

  • Site engine was downloaded by {{Actor.Name}}.

  • Engine was created by {{Actor.Name}}.

  • Engine was activated by {{Actor.Name}}.

  • Engine was deactivated by {{Actor.Name}}.

  • Site connector was created by {{Actor.Name}}.

  • Site connector was edited by {{Actor.Name}}.

  • Site connector was enabled by {{Actor.Name}}.

  • Site connector was disabled by {{Actor.Name}}.

  • Credentials of a site connector were viewed by {{Actor.Name}}.

  • Auto export settings were edited by {{Actor.Name}}.

  • Auto export data was exported by {{Actor.Name}}.

  • Auto export was run by {{Actor.Name}}.

  • Auto export data was downloaded by {{Actor.Name}}.

  • User was created by {{Actor.Name}}.

  • User was disabled by {{Actor.Name}}.

  • User was enabled by {{Actor.Name}}.

  • User was locked out by {{Actor.Name}}.

  • User was added to a group by {{Actor.Name}}.

  • User was removed from a group by {{Actor.Name}}.

  • User was removed from a group by {{Actor.Name}}.

  • Logout was performed by {{Actor.Name}}.

  • Login was failed for {{Actor.Name}}.

  • Password was changed by {{Actor.Name}}.

  • User owners were updated by {{Actor.Name}}.

  • 2 Factor settings were updated by {{Actor.Name}}.

  • A challenge was given to {{Actor.Name}}.

  • Challenge for {{Actor.Name}} was cleared.

  • Role was created by {{Actor.Name}}.

  • A user or group was assigned to a role by {{Actor.Name}}.

  • A user or group was unassigned from a role by {{Actor.Name}}.

  • Role was enabled by {{Actor.Name}}.

  • Role was disabled by {{Actor.Name}}.

  • Role was updated by {{Actor.Name}}.

  • Permissions were added to a role by {{Actor.Name}}.

  • Permissions were removed from the role by {{Actor.Name}}.

  • HSM encryption was enabled by {{Actor.Name}}.

  • HSM encryption was rotated by {{Actor.Name}}.

  • HSM encryption was disabled by {{Actor.Name}}.

  • Secret keys rotation for encryption was run by {{Actor.Name}}.

  • Secret keys rotation for encryption was canceled by {{Actor.Name}}.

  • Secret keys rotation for encryption was completed successfully by {{Actor.Name}}.

  • Secret keys rotation for encryption failed for {{Actor.Name}}.

  • Configuration was updated by {{Actor.Name}}.

  • An IP address range was created by {{Actor.Name}}.

  • An IP address range was updated by {{Actor.Name}}.

  • An IP address range was deleted by {{Actor.Name}}.

  • A user was added to the IP address range by {{Actor.Name}}.

  • A user was removed from the IP address range by {{Actor.Name}}.

  • A group was added to the IP address range by {{Actor.Name}}.

  • A group was removed from the IP address range by {{Actor.Name}}.

  • Secret heartbeat failed for {{Actor.Name}}.

  • Secret heartbeat succeeded for {{Actor.Name}}.

  • Secret hook run failed for {{Actor.Name}}.

  • Secret hook run was completed by {{Actor.Name}}.

  • A secret hook was created by {{Actor.Name}}.

  • A secret hook was updated by {{Actor.Name}}.

  • A secret hook was deleted by {{Actor.Name}}.

  • A custom secret was audited by {{Actor.Name}}.

  • Password of a secret was viewed by {{Actor.Name}}.

  • Secret password was copied to the clipboard by {{Actor.Name}}.

  • A secret dependency was removed by {{Actor.Name}}.

  • A secret dependency was added by {{Actor.Name}}.

  • A Powershell script was created by {{Actor.Name}}.

  • A Powershell script was deactivated by {{Actor.Name}}.

  • A Powershell script was updated by {{Actor.Name}}.

  • A Powershell script was activated by {{Actor.Name}}.

  • A Powershell script was viewed by {{Actor.Name}}.

  • An SSH script was created by {{Actor.Name}}.

  • An SSH script was deactivated by {{Actor.Name}}.

  • An SSH script was updated by {{Actor.Name}}.

  • An SSH script was activated by {{Actor.Name}}.

  • An SSH script was viewed by {{Actor.Name}}.

  • An SQL script was created by {{Actor.Name}}.

  • An SQL script was deactivated by {{Actor.Name}}.

  • An SQL script was updated by {{Actor.Name}}.

  • An SQL script was activated by {{Actor.Name}}.

  • An SQL script was viewed by {{Actor.Name}}.

  • A domain was added to the site by {{Actor.Name}}.

  • A domain was removed from the site by {{Actor.Name}}.

  • Engine was disconnected.

  • Engine was connected.

  • A dual control was created by {{Actor.Name}}.

  • A dual control was updated by {{Actor.Name}}.

  • A dual control was deleted by {{Actor.Name}}.

  • A secret was activated by {{Actor.Name}}.

  • A secret was created by {{Actor.Name}}.

  • A secret was deactivated by {{Actor.Name}}.

  • An erase of a secret was requested by {{Actor.Name}}.

  • A secret was launched by {{Actor.Name}}.

  • A web session for a secret was launched by {{Actor.Name}}.

  • A failed secret dependency was encountered by {{Actor.Name}}.

  • Secret view was edited by {{Actor.Name}}.

  • A secret password requirement was added by {{Actor.Name}}.

  • Secret password requirement was removed by {{Actor.Name}}.

  • Secret password change was unsuccessful.

  • Engine was deleted by {{Actor.Name}}.

  • Security analytics configuration was updated by {{Actor.Name}}.

  • Secret settings were exported by {{Actor.Name}}.

  • Secret settings were imported by {{Actor.Name}}.

  • User was updated by {{Actor.Name}}.

  • 2 Factor settings were reset by {{Actor.Name}}.

  • Failed to reset the 2 Factor settings by {{Actor.Name}}.

  • Personally identifiable information was removed by {{Actor.Name}}.

  • A license was added by {{Actor.Name}}.

  • A license was deleted by {{Actor.Name}}.

  • Password changer was created by {{Actor.Name}}.

  • Password changer was updated by {{Actor.Name}}.

  • Password changer was enabled by {{Actor.Name}}.

  • Password changer was disabled by {{Actor.Name}}.

  • A command on the password changer was updated by {{Actor.Name}}.

  • A command on the password changer was created by {{Actor.Name}}.

  • A command from the password changer was deleted by {{Actor.Name}}.

  • Authentication on the password changer was updated by {{Actor.Name}}.

  • The scanned field on the password changer was updated by {{Actor.Name}}.

  • Password requirement was created by {{Actor.Name}}.

  • Password requirement was edited by {{Actor.Name}}.

  • Domain was created by {{Actor.Name}}.

  • Domain was updated by {{Actor.Name}}.

  • Group was created by {{Actor.Name}}.

  • Group was edited by {{Actor.Name}}.

  • Key management encryption was enabled by {{Actor.Name}}.

  • Key management encryption was updated by {{Actor.Name}}.

  • Key management encryption was disabled by {{Actor.Name}}.

  • Data replication for disaster recovery was successful by {{Actor.Name}}.

  • Data replication for disaster recovery was initiated by {{Actor.Name}}.

  • Data replication for disaster recovery failed for {{Actor.Name}}.

  • Data replica for disaster recovery was created by {{Actor.Name}}.

  • Data replica for disaster recovery was approved by {{Actor.Name}}.

  • Data replica for disaster recovery was disabled by {{Actor.Name}}.

  • Data replica for disaster recovery was deleted by {{Actor.Name}}.

  • Data replica for disaster recovery was unapproved by {{Actor.Name}}.

  • Data replica folder for disaster recovery was updated by {{Actor.Name}}.

  • Configuration was upgraded by {{Actor.Name}}.

  • Configuration was backed up by {{Actor.Name}}.

  • Configuration database was updated by {{Actor.Name}}.

  • TLS failed for {{Actor.Name}}.

  • Domain was synchronized by {{Actor.Name}}.

  • Secret pre-checkout was run by {{Actor.Name}}.

  • Secret pre-checkin was run by {{Actor.Name}}.

  • SSH proxy for the site was enabled by {{Actor.Name}}.

  • SSH proxy for the site was disabled by {{Actor.Name}}.

  • RDP proxy for the site was enabled by {{Actor.Name}}.

  • RDP proxy for the site was disabled by {{Actor.Name}}.

  • Site proxy endpoint was updated by {{Actor.Name}}.

  • Engine proxy endpoint was updated by {{Actor.Name}}.

  • Security application hardening for secret settings was enabled by {{Actor.Name}}.

  • Security application hardening for secret settings was disabled by {{Actor.Name}}.

  • Security application hardening for secret settings was bypassed by {{Actor.Name}}.

  • Security application hardening for secret settings was updated by {{Actor.Name}}.

  • MEK rotation for encryption was initiated by {{Actor.Name}}.

  • MEK rotation for encryption was retried by {{Actor.Name}}.

  • The MEK for encryption was successfully rotated by {{Actor.Name}}.

  • MEK rotation for encryption failed for {{Actor.Name}}.

  • SSH proxy was enabled by {{Actor.Name}}.

  • SSH proxy was disabled by {{Actor.Name}}.

  • RDP proxy was enabled by {{Actor.Name}}.

  • RDP proxy was disabled by {{Actor.Name}}.

  • Node proxy endpoint was updated by {{Actor.Name}}.

  • Disaster recovery configuration was updated by {{Actor.Name}}.

  • Character set was created by {{Actor.Name}}.

  • Character set was updated by {{Actor.Name}}.

  • Character set was enabled by {{Actor.Name}}.

  • Character set was disabled by {{Actor.Name}}.

  • Backup configuration was updated by {{Actor.Name}}.

  • Backup failed for {{Actor.Name}}.

  • Platform synchronized.