IBM Cloud Docs
Auditing events for DB2 Warehouse

Auditing events for DB2 Warehouse

As a security officer, auditor, or manager, you can use the IBM Cloud Activity Tracker service to track how users and applications interact with the IBM® Db2® Warehouse on Cloud service in IBM Cloud.

As of 28 March 2024 the IBM Log Analysis and IBM Cloud Activity Tracker services are deprecated and will no longer be supported as of 30 March 2025. Customers will need to migrate to IBM Cloud Logs, which replaces these two services, prior to 30 March 2025. For information about IBM Cloud Logs, see the IBM Cloud Logs documentation.

You can provision an instance of IBM® Db2® Warehouse on Cloud through the IBM Cloud catalog. Learn more.

The IBM Cloud Activity Tracker service records user-initiated activities that change the state of a service in IBM Cloud. To get started monitoring your user's actions, see IBM Cloud Activity Tracker. An initiator can be a user, a service, or an application.

Platform events

The following table lists the actions that generate an event:

Actions that generate platform events
Action Description
dashdb.instance.create An event is generated when you provision a service instance.
dashdb.instance.update An event is generated when you rename a service instance or when you change the service plan.
dashdb.instance.delete An event is generated when a service instance is deleted.
dashdb.instance.schedule_reclaim An event is generated when a service instance is pending_reclamation.
dashdb.instance.restore An event is generated when a service instance is restored.

The following table lists the actions that generate an event for managing service credentials that are associated to a service instance:

Actions that generate service credentials events
Action Description
service_name.key.create An event is generated when an API key is created for a service instance through the Service credentials section of the service instance UI.
service_name.key.delete An event is generated when an API key that is associated with a service instance is deleted from the Service credentials section of the service instance UI.

Viewing events

Events are available in the Frankfurt (eu-de) region.

To view these events, you must provision an instance of the IBM Cloud Activity Tracker service in the Frankfurt (eu-de) region. Then, you must open the IBM Cloud Activity Tracker UI.