Basic Audit Log Patterns (BALP)
1.1.3 - Trial-Implementation International flag

This page is part of the IHE Basic Audit Log Patterns (BALP) (v1.1.3: Publication) based on FHIR (HL7® FHIR® Standard) R4. This is the current published version. For a full list of available versions, see the Directory of published versions

Example AuditEvent: Audit Example of a basic SAML access token of minimal from QDI sample

Generated Narrative: AuditEvent

Resource AuditEvent "ex-auditPoke-SAML-QDI-Min"

Profile: Basic AuditEvent pattern for when an activity was authorized by an SAML access token Minimal

Security Labels: http://terminology.hl7.org/CodeSystem/v3-ActReason

type: Application Activity (Details: DICOM code 110100 = 'Application Activity', stated as 'Application Activity')

subtype: Boredom poke (Details: urn:ietf:rfc:1438 code poke = 'poke', stated as 'Boredom poke')

action: R

recorded: Dec 3, 2021, 3:49:00 AM

outcome: 0

Agents

-TypeWhoRequestorPolicyPurposeOfUse
*information recipient (ParticipationType#IRCP; The code used to identifiy a User Agent#UserSamlAgent)ldap:///CN%3DSAML%20User%2COU%3DHarris%2CO%3DHITS%2CL%3DMelbourne%2CST%3DFL%2CC%3DUS/UID=kskagerbtrue_d87f8adf-711a-4545-bf77-ff8517b498e4Uses and disclosures for public health activities. (unknown#PUBLICHEALTH)

Sources

-SiteObserverType
*server.example.comDevice/ex-deviceApplication Server (Details: http://terminology.hl7.org/CodeSystem/security-source-type code 4 = 'Application Server', stated as 'Application Server')