Legacy to UAM Migration
Universal audit model (UAM) is Immuta's consistent structure for all Immuta system and user query audit logs. This reference guide maps the legacy audit events to the new UAM events and provides example schemas of all the UAM events available in Immuta.
To learn more about Immuta's audit, see the UAM reference page.
Events and descriptions
accessGroup
An audit event for managing a group.
accessUser
An audit event for managing a user.
acknowledgePurposes
An audit event for acknowledging a purpose for a project in Immuta.
apiKey
An audit event for when an API key is created or deleted on the Immuta app settings page or from an Immuta user's profile page.
catalogUpdate
An audit event for syncing an external catalog to tag Immuta data sources.
configurationUpdate
An audit event for updates to the configuration on the Immuta app settings page.
collectionDataSourceAdded
An audit event for updating a domain's data sources.
collectionDataSourceRemoved
An audit event for updating a domain's data sources.
collectionDataSourceUpdated
An audit event for updating a domain's data sources.
collectionPermissionGranted
An audit event for granting or revoking a user's domain-related permissions.
collectionPermissionRevoked
An audit event for granting or revoking a user's domain-related permissions.
dataSourceSave
An audit event for updating a data source with the new data source details.
dataSourceSubscription
The events for data source and project subscriptions.
dataSourceUpdate
An audit event for updating a data source with the new data source details.
globalPolicyApplied
An audit event for applying a global policy to a data source.
globalPolicyApprovalRescinded
An audit event for a global policy approval rescinded in the approve to promote workflow.
globalPolicyApproved
An audit event for a global policy approved in the approve to promote workflow.
globalPolicyCertify
An audit event for a global policy being certified by a data owner for their data source.
globalPolicyChangeRequested
An audit event for requested edits on a global policy in the approve to promote workflow.
globalPolicyConflictResolved
An audit event for a global policy conflict being resolved on a data source.
globalPolicyDisabled
An audit event for a data owner disabling a global policy from their data source.
globalPolicyPromoted
An audit event for when a global policy is fully approved and promoted to production in the approve to promote workflow.
globalPolicyRemoved
An audit event for a data owner removing a global policy from their data source.
globalPolicyReviewRequested
An audit event for when a global policy is ready and requests a review in the approve to promote workflow.
globalPolicyUpdate
An audit event for updating a global policy with the new global policy details.
nativeQuery
SnowflakeQuery
DatabricksQuery
An audit event for a user's query in Snowflake or Databricks Unity Catalog. See the Snowflake UAM page or the Databricks Unity Catalog UAM page for additional details about the audit event schema.
policyAdjustmentCreate
An audit event for creating a policy adjustment in an Immuta project.
policyAdjustmentDelete
An audit event for deleting a policy adjustment in an Immuta project.
policyCertificationExpired
An audit event for a global policy certification expiring on a data source.
policyHandlerCreate
An audit event for creating a local policy for an Immuta data source.
policyHandlerUpdate
An audit event for updating a local policy on an Immuta data source.
prestoQuery
TrinoQuery
An audit event for a user's query in Starburst (Trino). See the Starburst (Trino) UAM page for additional details about the audit event schema.
projectPurposeApprove
An audit event for approving a purpose for a project in Immuta.
projectSubscription
The events for data source and project subscriptions.
removeFromProject
An audit event for removing a data source from a project.
sddClassifierCreated
An audit event for creating a sensitive data discovery (SDD) column name regex, regex, or dictionary identifier.
sddClassifierDeleted
An audit event for deleting a sensitive data discovery (SDD) identifier.
sddClassifierUpdated
An audit event for updating a sensitive data discovery (SDD) column name regex, regex, or dictionary identifier.
sddDatasourceTagUpdate
An audit event for the results from a sensitive data discovery (SDD) run that updates the tags on Immuta data sources.
sddTemplateApplied
An audit event for applying an identification framework to data sources.
sddTemplateCreated
An audit event for creating an identification framework.
spark
DatabricksQuery
An audit event for a user's query in Databricks. See the Databricks Spark UAM page for additional details about the audit event schema.
ApiKeyCreated event
Event:
ApiKeyCreated
Legacy event:
apiKey
Description: An audit event for when an API key is created on the Immuta app settings page or from an Immuta user's profile page.
ApiKeyDeleted event
Event:
ApiKeyDeleted
Legacy event:
apiKey
Description: An audit event for when an API key is deleted on the Immuta app settings page or from an Immuta user's profile page.
AttributeApplied event
Event:
AttributeApplied
Legacy events:
accessUser
andaccessGroup
Description: An audit event for an attribute applied to a group or user.
Additional parameter details:
targetType
will specify whether the attribute was added to aUSER
orGROUP
.
AttributeRemoved event
Event:
AttributeRemoved
Legacy events:
accessUser
andaccessGroup
Description: An audit event for an attribute removed from a group or user.
Additional parameter details:
targetType
will specify whether the attribute was removed from aUSER
orGROUP
.
ConfigurationUpdated event
Event:
ConfigurationUpdated
Legacy event:
configurationUpdate
Description: An audit event for updates to the configuration on the Immuta app settings page.
DatasourceAppliedToProject event
Event:
DatasourceAppliedToProject
Legacy event:
addToProject
Description: An audit event for adding a data source to an Immuta project.
DatasourceCatalogSynced event
Event:
DatasourceCatalogSynced
Legacy event:
catalogUpdate
Description: An audit event for syncing an external catalog to tag Immuta data sources.