Auditing events for DB2 Warehouse

As a security officer, auditor, or manager, you can use the IBM Cloud Activity Tracker service to track how users and applications interact with the IBM® Db2® Warehouse on Cloud service in IBM Cloud.

You can provision an instance of IBM® Db2® Warehouse on Cloud through the IBM Cloud catalog. Learn more.

The IBM Cloud Activity Tracker service records user-initiated activities that change the state of a service in IBM Cloud. To get started monitoring your user's actions, see IBM Cloud Activity Tracker. An initiator can be a user, a service, or an application.

Platform events

The following table lists the actions that generate an event:

Table 1. Actions that generate platform events
Action	Description
`dashdb.instance.create`	An event is generated when you provision a service instance.
`dashdb.instance.update`	An event is generated when you rename a service instance or when you change the service plan.
`dashdb.instance.delete`	An event is generated when a service instance is deleted.
`dashdb.instance.schedule_reclaim`	An event is generated when a service instance is pending_reclamation.
`dashdb.instance.restore`	An event is generated when a service instance is restored.

The following table lists the actions that generate an event for managing service credentials that are associated to a service instance:

Table 2. Actions that generate service credentials events
Action	Description
`service_name.key.create`	An event is generated when an API key is created for a service instance through the Service credentials section of the service instance UI.
`service_name.key.delete`	An event is generated when an API key that is associated with a service instance is deleted from the Service credentials section of the service instance UI.

Viewing events

Events are available in the Frankfurt (eu-de) region.

To view these events, you must provision an instance of the IBM Cloud Activity Tracker service in the Frankfurt (eu-de) region. Then, you must open the IBM Cloud Activity Tracker UI.