Auditing events for IBM Analytics Engine serverless instances

As a security officer, auditor, or manager, you can use the Activity Tracker service to track how users and applications interact with IBM Analytics Engine in IBM Cloud®.

IBM Cloud Activity Tracker records user-initiated activities that change the state of a service in IBM Cloud. You can use this service to investigate abnormal activity and critical actions and to comply with regulatory audit requirements. In addition, you can be alerted about actions as they happen. The events that are collected comply with the Cloud Auditing Data Federation (CADF) standard. For more information, see the documentation about the IBM Cloud Activity Tracker.

The following table lists the actions that generate an event:

List of management events

Table 1. Actions that generate management events
Action	Description
`ibmanalyticsengine.instance.read`	Retrieve the details of an instance
`ibmanalyticsengine.instance.update`	Update the configuration of the instance after instance creation
`ibmanalyticsengine.instance-logging.create`	Create the logging configuration for an instance
`ibmanalyticsengine.instance-logging.update`	Update the logging configuration of an instance
`ibmanalyticsengine.instance-logging.read`	Retrieve the logging configuration details of an instance
`ibmanalyticsengine.instance-logging.delete`	Delete the logging configuration of an instance
`ibmanalyticsengine.application.create`	Deploy a Spark application
`ibmanalyticsengine.application.read`	Retrieve the details of the submitted Spark application including the state and configuration settings
`ibmanalyticsengine.application.delete`	Delete a Spark application request or a running Spark application
`ibmanalyticsengine.livybatch.create`	Create a Spark application through the Livy batch interface
`ibmanalyticsengine.livybatch.read`	Retrieve the details of a Livy batch application, including the state
`ibmanalyticsengine.livybatch.delete`	Delete a Livy application request or a running Livy batch application

Viewing events

Events that are generated by an instance of the IBM Analytics Engine service are automatically forwarded to the IBM Cloud Activity Tracker service instance that is available in the same location.

IBM Cloud Activity Tracker can have only one instance per location. To view events, you must access the web UI of the IBM Cloud Activity Tracker service in the same location where your service instance is available. For more information, see Launching the web UI through the IBM Cloud UI.