Auditing events for Planning Analytics as a Service

As a security officer, auditor, or manager, you can use the IBM Cloud® Activity Tracker service to track how users and applications interact with the Planning Analytics as a Service service in IBM Cloud.

IBM Cloud Activity Tracker records user-initiated activities that change the state of a service in IBM Cloud. You can use this service to investigate abnormal activity and critical actions and to comply with regulatory audit requirements. In addition, you can be alerted about actions as they happen. The events that are collected comply with the Cloud Auditing Data Federation (CADF) standard. For more information, see the getting started tutorial for IBM Cloud Activity Tracker.

List of platform events

The following table lists the actions that generate an event:

Table 1. Actions that generate platform events
Action	Description
`planning-analytics.instance.create`	An event is generated when you provision a service instance.
`planning-analytics.instance.update`	An event is generated when you rename a service instance or when you change the service plan.
`planning-analytics.instance.delete`	An event is generated when a service instance is deleted.
`planning-analytics.instance.schedule_reclaim`	An event is generated when a service instance is pending_reclamation.
`planning-analytics.instance.restore`	An event is generated when a service instance is restored.

The following table lists the actions that generate an event for managing service credentials that are associated to a service instance:

Table 2. Actions that generate service credentials events
Action	Description
`planning-analytics.key.create`	An event is generated when an API key is created for a service instance through the Service credentials section of the service instance UI.
`planning-analytics.key.delete`	An event is generated when an API key that is associated with a service instance is deleted from the Service credentials section of the service instance UI.

List of service events

The following table lists the Planning Analytics as a Service actions that generate an event:

Table 3. Actions that generate service events
Action	Description
`planning-analytics.user.login`	An event is generated when a user logs into the Planning Analytics Workspace instance.
`planning-analytics.user.logout`	An event is generated when a user logs out of the Planning Analytics Workspace instance.
`planning-analytics.user-environment.switch`	An event is generated when a user switches to a different Planning Analytics Workspace environment.

Viewing events

Events that are generated by an instance of the Planning Analytics as a Service service are automatically forwarded to the IBM Cloud Activity Tracker service instance that is available in the same location.

IBM Cloud Activity Tracker can have only one instance per location. To view events, you must access the web UI of the IBM Cloud Activity Tracker service in the same location where your service instance is available. For more information, see Launching the UI.