Basic Audit Log Patterns (BALP)
1.1.1 - Trial-Implementation International flag

This page is part of the IHE Basic Audit Log Patterns (BALP) (v1.1.1: Trial Implementation) based on FHIR R4. This is the current published version. For a full list of available versions, see the Directory of published versions

Example AuditEvent: Client - Audit Example of a basic patient identifiable Query (GET)

Client - Audit Example of a basic patient identifiable Query (GET)

Audit Example for a RESTful Query using GET with a patient subject, recorded by the Client

  • recorded by the client peer server
  • server is FHIR application server defined by ex-device
  • client is a computer at myMachine.example.org
  • user is John Smith
  • query is for an Observation for given patient
  • patient is specified
  • X-Request-Id is specified

The http GET requested

GET test.fhir.org/r4/Observation?patient=ex-patient&_lastUpdated=gt2020-11-06T21:52:30.300Z&_sort=_lastUpdated&_count=10
Accept: application/fhir+json; fhirVersion=4.0
X-Request-Id: cc6d168e-5871-11ec-bf63-0242ac130002

Generated Narrative: AuditEvent

Resource AuditEvent "ex-auditBasicQueryGetClient"

Profile: Basic AuditEvent for a successful Query with Patient

Security Labels: http://terminology.hl7.org/CodeSystem/v3-ActReason

type: Restful Operation (Details: http://terminology.hl7.org/CodeSystem/audit-event-type code rest = 'RESTful Operation', stated as 'Restful Operation')

subtype: search (Details: http://hl7.org/fhir/restful-interaction code search = 'search', stated as 'search')

action: E

recorded: Apr 29, 2020, 4:49:00 AM

outcome: 0

agent

type: Source Role ID (DICOM#110153)

who: : myMachine.example.org

requestor: false

Networks

-AddressType
*2001:0db8:85a3:0000:0000:8a2e:0370:73342

agent

type: Destination Role ID (DICOM#110152)

who: Device/ex-device

requestor: false

Networks

-AddressType
*http://server.example.com/fhir5

agent

type: information recipient (ParticipationType#IRCP)

who: : John Smith

requestor: true

Sources

-ObserverType
*: myMachine.example.orgUser Device (Details: http://terminology.hl7.org/CodeSystem/security-source-type code 1 = 'User Device', stated as 'User Device')

entity

type: System Object (Details: http://terminology.hl7.org/CodeSystem/audit-entity-type code 2 = 'System Object', stated as 'System Object')

role: Query (Details: http://terminology.hl7.org/CodeSystem/object-role code 24 = 'Query', stated as 'Query')

description: GET test.fhir.org/r4/Observation?patient=ex-patient&_lastUpdated=gt2020-11-06T21:52:30.300Z&_sort=_lastUpdated&_count=10 Accept: application/fhir+json; fhirVersion=4.0 X-Request-Id: cc6d168e-5871-11ec-bf63-0242ac130002

query: R0VUIHRlc3QuZmhpci5vcmcvcjQvT2JzZXJ2YXRpb24/cGF0aWVudD1leC1wYXRpZW50Jl9sYXN0VXBkYXRlZD1ndDIwMjAtMTEtMDZUMjE6NTI6MzAuMzAwWiZfc29ydD1fbGFzdFVwZGF0ZWQmX2NvdW50PTEwCkFjY2VwdDogYXBwbGljYXRpb24vZmhpcitqc29uOyBmaGlyVmVyc2lvbj00LjAKWC1SZXF1ZXN0LUlkOiBjYzZkMTY4ZS01ODcxLTExZWMtYmY2My0wMjQyYWMxMzAwMDI=

entity

what: Patient/ex-patient " SCHMIDT"

type: Person (Details: http://terminology.hl7.org/CodeSystem/audit-entity-type code 1 = 'Person', stated as 'Person')

role: Patient (Details: http://terminology.hl7.org/CodeSystem/object-role code 1 = 'Patient', stated as 'Patient')

entity

what:

type: transport specific unique identifier where http X-Request-Id is used (Details: https://profiles.ihe.net/ITI/BALP/CodeSystem/BasicAuditEntityType code XrequestId = 'transport specific unique identifier where http X-Request-Id is used', stated as 'null')