---
name: AnalyticsEngine-at-tracker-serverless
title: Auditing events for IBM Analytics Engine serverless instances
description: ''
last-updated: 2021-09-09
---

> ## Documentation Index
> The table of contents for this documentation set is at https://cloud.ibm.com/docs/AnalyticsEngine?format=markdown
> The index for all IBM Cloud docs is at: https://cloud.ibm.com/docs/llms.txt
> Use these files to discover more information as needed.

{:new_window: target="_blank"}
{:shortdesc: .shortdesc}
{:codeblock: .codeblock}
{:screen: .screen}
{:pre: .pre}

# Auditing events for IBM Analytics Engine serverless instances
{: #at_events-serverless}

As a security officer, auditor, or manager, you can use the Activity Tracker service to track how users and applications interact with IBM Analytics Engine in IBM Cloud®.

IBM Cloud Activity Tracker records user-initiated activities that change the state of a service in IBM Cloud. You can use this service to investigate abnormal activity and critical actions and to comply with regulatory audit requirements. In addition, you can be alerted about actions as they happen. The events that are collected comply with the Cloud Auditing Data Federation (CADF) standard.


The following table lists the actions that generate an event:

## List of management events
{: #at_actions}

| Action                                                    | Description      |
|-----------------------------------------------------------|------------------|
| `ibmanalyticsengine.instance.read`| Retrieve the details of an instance |
| `ibmanalyticsengine.instance.update`| Update the configuration of the instance after instance creation |
| `ibmanalyticsengine.instance-logging.create`| Create the logging configuration for an instance |
| `ibmanalyticsengine.instance-logging.update`| Update the logging configuration of an instance |
| `ibmanalyticsengine.instance-logging.read`| Retrieve the logging configuration details of an instance |
| `ibmanalyticsengine.instance-logging.delete` | Delete the logging configuration of an instance |
| `ibmanalyticsengine.application.create`| Deploy a Spark application |
| `ibmanalyticsengine.application.read` | Retrieve the details of the submitted Spark application including the state and configuration settings |
| `ibmanalyticsengine.application.delete` | Delete a Spark application request or a running Spark application |
| `ibmanalyticsengine.livybatch.create`| Create a Spark application through the Livy batch interface |
| `ibmanalyticsengine.livybatch.read`| Retrieve the details of a Livy batch application, including the state |
| `ibmanalyticsengine.livybatch.delete`| Delete a Livy application request or a running Livy batch application |
| `ibmanalyticsengine.historyserver.start` | Start the Spark history server of an instance |
| `ibmanalyticsengine.historyserver.stop` | Stop the Spark history server of an instance |
| `ibmanalyticsengine.historyserver.read` | Retrieve the details of the Spark history server of an instance |
{: caption="Actions that generate management events" caption-side="top"}


## Viewing events
{: #at-viewing-events}

Events that are generated by an instance of the IBM Analytics Engine service are automatically forwarded to the IBM Cloud Activity Tracker service instance that is available in the same location.



IBM Cloud Activity Tracker can have only one instance per location. To view events, you must access the web UI of the IBM Cloud Activity Tracker service in the same location where your service instance is available. For more information, see [Launching the web UI through the IBM Cloud UI](https://cloud.ibm.com/docs/activity-tracker?topic=activity-tracker-launch&format=markdown){: new_window}.