Use the Nova user access events operations to get the most recent events from the product feed, and to get information about a specific event by event ID.
Get feed for Servers (Open Stack) access events
GET /nova_access/events/{tid}
This operation obtains the most recent events for this product's feed.
The following table shows the possible response codes for this
operation.
| Response Code | Name | Description |
|---|---|---|
| 200 | OK | The request succeeded. |
| 400 | Bad Request | The request is missing one or more elements, or the values of some elements are invalid. |
| 401 | Unauthorized | Authentication failed, or the user does not have permissions for a requested operation. |
| 404 | Not Found | The requested resource was not found. |
| 429 | Rate Limited | Too many requests. Wait and retry. |
| 500 | Internal Server Error | The server encountered an unexpected condition which prevented it from fulfilling the request. |
| 503 | Service Unavailable | Service is not available. Try again later. |
Request
The following table shows the header parameters for the request:
| Name | Type | Description |
|---|---|---|
| ACCEPT | Acceptheadertype (Required) | Specifies the type of Accept header to be used in the request. |
The following table shows the URI parameters for the request:
| Name | Type | Description |
|---|---|---|
| {tid} | String | Specifies the tenant Id. |
The following table shows the query parameters for the request:
| Name | Type | Description |
|---|---|---|
| marker | Anyuri (Optional) | Specifies the entry from which the feed is read. If no value is specified, forward is used by default. |
| limit | Int (Optional) | Specifies the number of entries to return. By default the limit is set to 25. The minimum limit is 1 and the maximum limit is 1,000. |
| direction | String (Optional) | Valid values for this parameter are either backward or forward. |
This operation does not accept a request body.
Response
This operation does not return a response body.
Get Servers (Open Stack) user access event by ID
GET /nova_access/events/{tid}/entries/{id}
This http request fetches one particular event whose ID is listed in the
URI.
Request
The following table shows the header parameters for the request:
| Name | Type | Description |
|---|---|---|
| ACCEPT | Acceptheadertype (Required) |
The following table shows the URI parameters for the request:
| Name | Type | Description |
|---|---|---|
| {tid} | String | Specifies the tenant Id. |
| {id} | Anyuri | <urn:uuid:676f3860-447c-> 40a3-8f61-9791819cc82f |
This operation does not accept a request body.
Message samples
The following examples show the XML and JSON messages for each event
message type.
User access event message
Specifies the message for a user access event.
The following table describes the attributes for the user access event
message.
| Element Name | Description | Type | Optionality |
|---|---|---|---|
region | Identifies the region, for example, DFW. If the value of the element is empty GLOBAL will be assumed. | string | Required |
datacenter | Identifies the datacenter of the event, for example, DFW3. If the value of the element is empty GLOBAL will be assumed. | string | Required |
methodLabel | An optional field to indicate the method used for the request. | string | Optional |
requestURL | Request url with any query string truncated. | string | Required |
queryString | An optional field. Query string is the part of a uri containing data which is added to a base uri. | string | Optional |
tenantId | Identifies the tenant ID. | string | Required |
responseMessage | An optional field containing the response message. | string | Optional |
userName | The username that the initiator is acting on behalf of (which might be themselves) | string | Required |
roles | Comma separated list of roles | string | Required |
XML Sample
<?xml version="1.0" encoding="UTF-8"?>
<atom:entry xmlns:atom="http://www.w3.org/2005/Atom" xmlns="http://www.w3.org/2001/XMLSchema" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
<atom:id> urn:uuid:6fa234aea93f38c26fa234aea93f38c4 </atom:id>
<atom:category term="tid:5821027"/>
<atom:category term="rgn:DFW"/>
<atom:category term="dc:DFW1"/>
<atom:category term="username:jackhandy"/>
<atom:title type="text"> UserAccessEvent </atom:title>
<atom:content type="application/xml">
<cadf:event xmlns:cadf="http://schemas.dmtf.org/cloud/audit/1.0/event" xmlns:ua="http://feeds.api.rackspacecloud.com/cadf/user-access-event" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" action="read/get" eventTime="2015-03-12T13:20:00-05:00" eventType="activity" id="6fa234aea93f38c26fa234aea93f38c4" outcome="success" typeURI="http://schemas.dmtf.org/cloud/audit/1.0/event">
<cadf:initiator id="10.1.2.3" name="jackhandy" typeURI="network/node">
<cadf:host address="10.1.2.3" agent="curl/7.8 (i386-redhat-linux-gnu) libcurl 7.8"/>
</cadf:initiator>
<cadf:target id="ord.feeds.api.rackspacecloud.com" name="feeds" typeURI="service">
<cadf:host address="ord.feeds.api.rackspacecloud.com"/>
</cadf:target>
<cadf:attachments>
<cadf:attachment contentType="ua:auditData" name="auditData">
<cadf:content>
<ua:auditData version="1">
<ua:region> DFW </ua:region>
<ua:dataCenter> DFW1 </ua:dataCenter>
<ua:methodLabel> usage </ua:methodLabel>
<ua:requestURL> https://ord.feeds.api.rackspacecloud.com/sites/events </ua:requestURL>
<ua:queryString> limit=10 </ua:queryString>
<ua:tenantId> 5821027 </ua:tenantId>
<ua:responseMessage> OK </ua:responseMessage>
<ua:userName> jackhandy </ua:userName>
<ua:roles> cloudfeeds-observer </ua:roles>
</ua:auditData>
</cadf:content>
</cadf:attachment>
</cadf:attachments>
<cadf:observer id="feeds-1-1" name="repose-7.1.1.1" typeURI="service/security">
<cadf:host address="repose"/>
</cadf:observer>
<cadf:reason reasonCode="200" reasonType="http://www.iana.org/assignments/http-status-codes/http-status-codes.xml"/>
</cadf:event>
</atom:content>
<atom:link href="https://atom-chan5120-n03.dev.ord1.us.ci.rackspace.net/feeds_access/events/5821027/entries/urn:uuid:6fa234aea93f38c26fa234aea93f38c4" rel="self"/>
<atom:updated> 2015-04-22T17:22:53.094Z </atom:updated>
<atom:published> 2015-04-22T17:22:53.094Z </atom:published>
</atom:entry>
JSON Sample
{
"entry": {
"@type": "http:\/\/www.w3.org\/2005\/Atom",
"category": [
{
"term": "tid:5821027"
},
{
"term": "rgn:DFW"
},
{
"term": "dc:DFW1"
},
{
"term": "username:jackhandy"
}
],
"content": {
"event": {
"action": "read\/get",
"attachments": [
{
"content": {
"auditData": {
"dataCenter": "DFW1",
"methodLabel": "usage",
"queryString": "limit=10",
"region": "DFW",
"requestURL": "https:\/\/ord.feeds.api.rackspacecloud.com\/sites\/events",
"responseMessage": "OK",
"roles": "cloudfeeds-observer",
"tenantId": "5821027",
"userName": "jackhandy",
"version": "1"
}
},
"contentType": "ua:auditData",
"name": "auditData"
}
],
"eventTime": "2015-03-12T13:20:00-05:00",
"eventType": "activity",
"id": "6fa234aea93f38c26fa234aea93f38c4",
"initiator": {
"host": {
"address": "10.1.2.3",
"agent": "curl\/7.8 (i386-redhat-linux-gnu) libcurl 7.8"
},
"id": "10.1.2.3",
"name": "jackhandy",
"typeURI": "network\/node"
},
"observer": {
"host": {
"address": "repose"
},
"id": "feeds-1-1",
"name": "repose-7.1.1.1",
"typeURI": "service\/security"
},
"outcome": "success",
"reason": {
"reasonCode": 200,
"reasonType": "http:\/\/www.iana.org\/assignments\/http-status-codes\/http-status-codes.xml"
},
"target": {
"host": {
"address": "ord.feeds.api.rackspacecloud.com"
},
"id": "ord.feeds.api.rackspacecloud.com",
"name": "feeds",
"typeURI": "service"
},
"typeURI": "http:\/\/schemas.dmtf.org\/cloud\/audit\/1.0\/event"
}
},
"id": "urn:uuid:6fa234aea93f38c26fa234aea93f38c4",
"link": [
{
"href": "https:\/\/dfw.feeds.api.rackspacecloud.com\/feeds_access\/events\/entries\/urn:uuid:6fa234aea93f38c26fa234aea93f38c4",
"rel": "self"
}
],
"published": "2015-04-22T17:22:53.094Z",
"title": {
"@text": "UserAccessEvent",
"type": "text"
},
"updated": "2015-04-22T17:22:53.094Z"
}
}
Response
The following table shows the possible response codes for this
operation.
| Response Code | Name | Description |
|---|---|---|
| 200 | OK | The request completed successfully |
| 400 | Bad Request | The request is missing one or more elements, or the values of some elements are invalid. |
| 401 | Unauthorized | Authentication failed, or the user does not have permissions for a requested operation. |
| 429 | Rate Limited | Too many requests. Wait and retry. |
| 500 | Internal Server Error | The server encountered an unexpected condition which prevented it from fulfilling the request. |
| 503 | Service Unavailable | Service is not available. Try again later. |