Auditing events for watsonx.data

The Mezmo backed IBM Cloud Activity Tracker service is now deprecated in IBM Cloud but will continue to be supported until the end of March, 2025, at which point all instances will be removed. It is suggested that you migrate to IBM Cloud logs/IBM Cloud Activity Tracker event routing as soon as possible to avoid disruptions.

As a security officer, auditor, or manager, you can use the IBM Cloud activity tracking facilities to track how users and applications interact with the IBM® watsonx.data service in IBM Cloud.

Managing and viewing activities with IBM Cloud® Activity Tracker Event Routing and IBM Cloud Logs

The IBM Cloud Activity Tracker event routing service routes activity events from all participating services (including IBM® watsonx.data) that are provisioned in an account to its configured targets, such as an instance of IBM Cloud logs. These activity events include any user or IBM initiated activities that change the state of a service in IBM Cloud. You can use the target services to investigate abnormal activities and critical actions and to comply with regulatory audit requirements. Additionally, you can receive alerts about any activities in real time. The events that are collected comply with the Cloud Auditing Data Federation (CADF) standards.

For more information, see

Managing and viewing activities with the deprecated IBM Cloud® Activity Tracker service

IBM Cloud® Activity Tracker records user-initiated activities that change the state of a service in IBM Cloud. You can use this service to investigate abnormal activities and critical actions and to comply with regulatory audit requirements. Additionally, you can receive alerts about any activities in real time. The events that are collected comply with the Cloud Auditing Data Federation (CADF) standards.

For more information, see the Getting started with IBM Cloud Activity Tracker.

Platform events

The following table lists the events generated at watsonx.data (platform) level:

Actions that generate platform events
Action	Description
`lakehouse.lakehouse.create`	Generated when a watsonx.data instance is provisioned.
`lakehouse.presto.create`	Generated when a Presto (Java) group is provisioned.
`lakehouse.hms.create`	Generated when a metastore is provisioned.
`lakehouse.lakehouse.delete`	Generated when a watsonx.data instance is deleted.
`lakehouse.presto.delete`	Generated when a Presto (Java) group is deleted.
`lakehouse.hms.delete`	Generated when a metastore is deleted.

Engines events

Lists of engine events
Action	Description
`lakehouse.engines.list`	Generated when engines are listed.

Presto (Java) events

Lists of Presto (Java) engine events
Action	Description
`lakehouse.presto_engine.list`	Generated when all Presto (Java) engines are listed.
`lakehouse.presto_engine.create`	Generated when Presto (Java) engine is created.
`lakehouse.presto_engine.get`	Generated when Presto (Java) engine details are retrieved.
`lakehouse.presto_engine.delete`	Generated when Presto (Java) engine is deleted.
`lakehouse.presto_engine.update`	Generated when Presto (Java) engine is updated.
`lakehouse.presto_engine.pause`	Generated when Presto (Java) engine is paused.
`lakehouse.presto_engine.resume`	Generated when Presto (Java) engine is resumed.
`lakehouse.presto_engine.scale`	Generated when Presto (Java) engine is scaled.
`lakehouse.presto_engine.refresh`	Generated when Presto (Java) is restarted.
`lakehouse.presto_engine_catalog.add`	Generated when catalog is added to Presto (Java) engine.
`lakehouse.instance.list`	Generated when list of deployments is fetched.

Presto (C++) events

Lists of Presto (C++) engine events
Action	Description
`lakehouse.prestissimo_engine.create`	Generated when Presto (C++) engine is created.
`lakehouse.prestissimo_engine.list`	Generated when all Presto (C++) engines are listed.
`lakehouse.prestissimo_engine.get`	Generated when Presto (C++) engine details are fetched.
`lakehouse.prestissimo_engine.delete`	Generated when Presto (C++) engine is deleted.
`lakehouse.prestissimo_engine.update`	Generated when Presto (C++) engine is updated.
`lakehouse.prestissimo_engine.pause`	Generated when Presto (C++) engine is paused.
`lakehouse.prestissimo_engine.resume`	Generated when Presto (C++) engine is resumed.
`lakehouse.prestissimo_engine.scale`	Generated when Presto (C++) engine is scaled.
`lakehouse.prestissimo_engine.refresh`	Generated when Presto (C++) is restarted.
`lakehouse.prestissimo_engine_catalog.add`	Generated when catalog is added to Presto (C++) engine.

Spark engine events

Lists of data policy events
Action	Description
`lakehouse.spark_engine.list`	Generated when Spark engines are listed.
`lakehouse.spark_engine.create`	Generated when Spark engine is created.
`lakehouse.spark_engine.update`	Generated when the details of a Spark engine is updated.
`lakehouse.spark_engine.delete`	Generated when a Spark engine is deleted.
`lakehouse.spark_engine_application.list`	Generated when the Spark applications under a Spark engine is listed.
`lakehouse.spark_engine_application.get`	Generated when the details of a Spark application is listed.
`lakehouse.spark_engine_application.create`	Generated when a Spark application is run.
`lakehouse.spark_engine_application.delete`	Generated when a running Spark application is stopped.
`lakehouse_spark_engine_application.ui`	Generated when the Spark UI of an application is accessed.
`lakehouse.spark_engine_history_server.get`	Generated when the Spark history server details are listed.
`lakehouse.spark_engine_history_server.start`	Generated when the Spark history server is started.
`lakehouse.spark_engine_history_server.stop`	Generated when the Spark history server is stopped.
`lakehouse.spark_engine_history_server.ui`	Generated when Spark history UI is accessed.
`lakehouse.spark_engine_catalog.list`	Generated when Spark engine associated catalogs are listed.
`lakehouse.spark_engine_catalog.add`	Generated when catalogs are associated with a Spark engine.
`lakehouse.spark_engine_catalog.remove`	Generated when catalogs are dissociated from a Spark engine.
`lakehouse.spark_engine_catalog.get`	Generated when the details of a Spark engine catalog are listed.
`lakehouse.spark_engine_cluster.list`	Generated when Spark lab clusters is listed.
`lakehouse.spark_engine_cluster.create`	Generated when a Spark lab cluster is created.
`lakehouse.spark_engine_cluster.get`	Generated when the details of a Spark lab cluster is retrieved.
`lakehouse.spark_engine_cluster.delete`	Generated when a Spark lab cluster is deleted.
`lakehouse.spark_engine_cluster.connect`	Generated when a Spark lab cluster is connected.
`lakehouse.spark_engine.pause`	Generated when a Spark engine is paused.
`lakehouse.spark_engine.resume`	Generated when a Spark engine is resumed.
`lakehouse.spark_engine.scale`	Generated when a Spark engine is scaled.

Db2 engine events

Lists of Db2 engine events
Action	Description
`lakehouse.db2_engine.list`	Generated when all Db2 engines are listed.
`lakehouse.db2_engine.create`	Generated when a new Db2 engine is created.
`lakehouse.db2_engine.delete`	Generated when a Db2 engine is deleted.
`lakehouse.db2_engine.update`	Generated when a Db2 engine is updated.

Netezza engines events

Lists of Netezza engine events
Action	Description
`lakehouse.netezza_engine.list`	Generated when all netezza engines are listed.
`lakehouse.netezza_engine.create`	Generated when netezza engine is created.
`lakehouse.netezza_engine.delete`	Generated when netezza engine is deleted.
`lakehouse.netezza_engine.update`	Generated when netezza engine is updated.

Other engine events

Lists of other engine events
Action	Description
`lakehouse.other_engine.list`	Generated when other engines are listed.
`lakehouse.other_engine.create`	Generated when other engine is created.
`lakehouse.other_engine.delete`	Generated when other engine is deleted.

Storage events

Lists of storage events
Action	Description
`lakehouse.bucket_registration.list`	Generated when list of registered storages are listed.
`lakehouse.bucket_registration.create`	Generated when storage is registered.
`lakehouse.bucket_registration.get`	Generated when a registered storage is listed.
`lakehouse.bucket_registration.update`	Generated when storage is updated.
`lakehouse.bucket_registration.delete`	Generated when storage is deregistered.
`lakehouse.bucket.object.properties`	Generated when storage object properties are listed.
`lakehouse.bucket_registration_object.list`	Generated when storage object is listed.
`lakehouse.test_bucket_connection.evaluate`	Generated when storage credential is validated.
`lakehouse.bucket_registration_activate.add`	Generated when storage is activated.
`lakehouse.bucket_registration_activate.remove`	Generated when storage is deactivated.
`lakehouse.storage_hdfs_registration.create`	Generated when HDFS storage is added/created.

Catalog events

Lists of catalog events
Action	Description
`lakehouse.catalogs.create`	Generated when a catalog is created.
`lakehouse.catalogs.get`	Generated when catalogs are listed.
`lakehouse.catalogs.update`	Generated when a catalog is updated.
`lakehouse.catalogs.delete`	Generated when a catalog is deleted.
`lakehouse.catalog_sync.update`	Generated when the external Iceberg table registration for a catalog is synchronized.
`lakehouse.schema.list`	Generated when all schemas in catalog is listed.
`lakehouse.schema.create`	Generated when schema is created.
`lakehouse.schema.delete`	Generated when schema is deleted.
`lakehouse.table.list`	Generated when all tables in a schema in a catalog for a given engine is listed.
`lakehouse.table.get`	Generated when details of a given table in a catalog and schema is listed.
`lakehouse.table.update`	Generated when table is renamed.
`lakehouse.table.delete`	Generated when table is deleted.
`lakehouse.table_snapshot.list`	Generated when all table snapshots are listed.
`lakehouse.table_rollback.set`	Generated when a rollback is performed to a table snapshot.
`lakehouse.column.list`	Generated when all columns of a table is listed.
`lakehouse.column.create`	Generated when one or multiple columns to a table in a schema for a given catalog is added.
`lakehouse.column.update`	Generated when the given column - rename column is updated.

Database events

Lists of database events
Action	Description
`lakehouse.databases.create`	Generated when a database is created.
`lakehouse.databases.get`	Generated when databases are listed.
`lakehouse.databases.update`	Generated when database is updated.
`lakehouse.databases.delete`	Generated when a database is deleted.
`lakehouse.database_registration.list`	Generated when list of databases are retrieved.
`lakehouse.database_registration.create`	Generated when a new database is added or created.
`lakehouse.database_registration.get`	Generated when a registered database is listed.
`lakehouse.database_registration.delete`	Generated when database is deleted.
`lakehouse.database_registration.update`	Generated when database is updated.
`lakehouse.test_database_connection.evaluate`	Generated when database connection is validated.

Authentication events

Lists of events for authentication
Action	Description
`lakehouse.authtoken.create`	Generated when a user logs in.
`lakehouse.authtoken.delete`	Generated when a user logs out.

Engine user events

Lists of engine user events
Action	Description
`lakehouse.engineusers.create`	Generated when an engine user is created.
`lakehouse.engineusers.update`	Generated when an engine user is updated.
`lakehouse.engineusers.delete`	Generated when an engine user is deleted.

Storage user events

Lists of bucket user events
Action	Description
`lakehouse.bucketusers.create`	Generated when a bucket user is created.
`lakehouse.bucketusers.update`	Generated when a bucket user is updated.
`lakehouse.bucketusers.delete`	Generated when a bucket user is deleted.

Catalog user events

Lists of catalog user events
Action	Description
`lakehouse.catalogusers.create`	Generated when a catalog user is created.
`lakehouse.catalogusers.update`	Generated when a catalog user is updated.
`lakehouse.catalogusers.delete`	Generated when a catalog user is deleted.

Database connection users events

Lists of database connection user events
Action	Description
`lakehouse.dbconnusers.create`	Generated when a database connection user is created.
`lakehouse.dbconnusers.update`	Generated when a database connection user is updated.
`lakehouse.dbconnusers.delete`	Generated when a database connection user is deleted.

Metastore user events

Lists of metastore user events
Action	Description
`lakehouse.metastoreusers.create`	Generated when a metastore user is created.
`lakehouse.metastoreusers.update`	Generated when a metastore user is updated.
`lakehouse.metastoreusers.delete`	Generated when a metastore user is deleted.

Data policy events

Lists of data policy events
Action	Description
`lakehouse.datapolicy.create`	Generated when a data policy is created.
`lakehouse.datapolicy.update`	Generated when a data policy is updated.
`lakehouse.datapolicy.delete`	Generated when a data policy is deleted.

Events for Drivers

Lists of Driver events
Action	Description
`lakehouse.driver_registration.create`	Generated when driver is registered.
`lakehouse.driver_registration.list`	Generated all driver details are listed.
`delete_driver_registration`	Generated when a driver is deleted.
`lakehouse.driver_registration_engine.add`	Generated when a driver is associated with engines.