Device Trust Audit Events

Report an Issue

Is this page helpful?

How can we improve this page?

View as Markdown

This page lists audit events related to Teleport Device Trust.

device.authenticate

Device Authenticated

Example:

{
  "cluster_name": "im-a-cluster-name",
  "code": "TV006I",
  "ei": 0,
  "event": "device.authenticate",
  "success": true,
  "time": "2023-01-12T19:34:48.1Z",
  "uid": "fa279611-91d8-47b5-9fad-b8ea3e5286e0",
  "user": "lisa"
}

device.authenticate.confirm

Device Web Authentication Confirmed

Example:

{
  "cluster_name": "im-a-cluster-name",
  "code": "TV009I",
  "device": {
    "device_id": "f84f6b35-6226-4e73-8205-3bcbd7d12970",
    "web_authentication": true,
    "web_session_id": "my-session-id-12345"
  },
  "ei": 0,
  "event": "device.authenticate.confirm",
  "success": false,
  "time": "2024-04-08T19:35:48.1Z",
  "uid": "b1361d51-70fa-4f1b-803c-a252c2877707",
  "user": "llama",
  "user_kind": 1
}

device.create

Device Registered

Example:

{
  "cluster_name": "im-a-cluster-name",
  "code": "TV001I",
  "device": {
    "asset_tag": "M2CQVQV64R",
    "device_id": "99d39707-efdd-436c-94f3-6a1aeef1fbf2",
    "os_type": 2
  },
  "ei": 0,
  "event": "device.create",
  "success": true,
  "time": "2023-01-12T19:28:36.842Z",
  "uid": "94d33b77-82cd-4558-8893-0320699bf755",
  "user": "3827e8ad-7cbe-4423-a80f-dfc89e83eb86.im-a-cluster-name"
}

device.delete

Device Deleted

Example:

{
  "cluster_name": "im-a-cluster-name",
  "code": "TV002I",
  "device": {
    "device_id": "99d39707-efdd-436c-94f3-6a1aeef1fbf2"
  },
  "ei": 0,
  "event": "device.delete",
  "success": true,
  "time": "2023-01-12T20:33:20.527Z",
  "uid": "a12e693e-1c45-43e4-a9d1-5fd8399e303c",
  "user": "3827e8ad-7cbe-4423-a80f-dfc89e83eb86.im-a-cluster-name"
}

device.enroll

Device Enrolled

Example:

{
  "cluster_name": "im-a-cluster-name",
  "code": "TV005I",
  "device": {
    "asset_tag": "M2CQVQV64R",
    "device_id": "0e288b23-f99f-4635-b182-06e9308095a8",
    "os_type": 2
  },
  "ei": 0,
  "event": "device.enroll",
  "success": true,
  "time": "2023-01-12T21:31:29.191Z",
  "uid": "bbbc496f-820b-4f49-ae0d-1c1b29faee85",
  "user": "lisa"
}

device.enroll_pairing.approve

There are multiple events with the device.enroll_pairing.approve type.

TV011I

Device Enroll Pairing Approved

Example:

{
  "cluster_name": "im-a-cluster-name",
  "code": "TV011I",
  "device": {
    "asset_tag": "M2CQVQV64R",
    "device_id": "",
    "os_type": 4
  },
  "ei": 0,
  "event": "device.enroll_pairing.approve",
  "success": true,
  "time": "2024-04-08T19:39:48.1Z",
  "uid": "b8c4f0a2-5e6d-7f8a-0123-abc456789012",
  "user": "llama"
}

TV011W

Device Enroll Pairing Approval Failed

Example:

{
  "cluster_name": "im-a-cluster-name",
  "code": "TV011W",
  "device": {
    "asset_tag": "M2CQVQV64R",
    "device_id": "",
    "os_type": 4
  },
  "ei": 0,
  "error": "enroll pairing is not awaiting approval",
  "event": "device.enroll_pairing.approve",
  "success": false,
  "time": "2024-04-08T19:40:48.1Z",
  "uid": "b8c4f0a2-5e6d-7f8a-0123-abc456789013",
  "user": "llama"
}

device.enroll_pairing.deny

Device Enroll Pairing Denied

Example:

{
  "cluster_name": "im-a-cluster-name",
  "code": "TV012W",
  "device": {
    "asset_tag": "M2CQVQV64R",
    "device_id": "",
    "os_type": 4
  },
  "ei": 0,
  "event": "device.enroll_pairing.deny",
  "success": false,
  "time": "2024-04-08T19:41:48.1Z",
  "uid": "c9d5a1b3-6f7e-8a9b-2345-bcd567890123",
  "user": "llama"
}

device.enroll_pairing.request

There are multiple events with the device.enroll_pairing.request type.

TV010I

Device Enroll Pairing Requested

Example:

{
  "cluster_name": "im-a-cluster-name",
  "code": "TV010I",
  "device": {
    "asset_tag": "M2CQVQV64R",
    "device_id": "",
    "os_type": 4
  },
  "ei": 0,
  "event": "device.enroll_pairing.request",
  "success": true,
  "time": "2024-04-08T19:37:48.1Z",
  "uid": "a7b3e9f1-4d5c-6a8b-9012-def345678901",
  "user": "llama"
}

TV010W

Device Enroll Pairing Request Failed

Example:

{
  "cluster_name": "im-a-cluster-name",
  "code": "TV010W",
  "device": {
    "asset_tag": "M2CQVQV64R",
    "device_id": "",
    "os_type": 4
  },
  "ei": 0,
  "error": "invalid pairing token",
  "event": "device.enroll_pairing.request",
  "success": false,
  "time": "2024-04-08T19:38:48.1Z",
  "uid": "a7b3e9f1-4d5c-6a8b-9012-def345678902"
}

device.token.create

Device Enroll Token Created

Example:

{
  "cluster_name": "im-a-cluster-name",
  "code": "TV003I",
  "device": {
    "device_id": "99d39707-efdd-436c-94f3-6a1aeef1fbf2"
  },
  "ei": 0,
  "event": "device.token.create",
  "success": true,
  "time": "2023-01-12T19:51:54.168Z",
  "uid": "24cce2a0-57b7-494e-a196-c7fd2482b10c",
  "user": "3827e8ad-7cbe-4423-a80f-dfc89e83eb86.im-a-cluster-name"
}

device.token.spent

Device Enroll Token Spent

Example:

{
  "cluster_name": "im-a-cluster-name",
  "code": "TV004I",
  "device": {
    "asset_tag": "M2CQVQV64R",
    "device_id": "0e288b23-f99f-4635-b182-06e9308095a8",
    "os_type": 2
  },
  "ei": 0,
  "event": "device.token.spent",
  "success": true,
  "time": "2023-01-12T21:31:29.191Z",
  "uid": "bbbc496f-820b-4f49-ae0d-1c1b29faee85",
  "user": "lisa"
}

device.update

Device Updated

Example:

{
  "cluster_name": "im-a-cluster-name",
  "code": "TV007I",
  "device": {
    "asset_tag": "M2CQVQV64R",
    "device_id": "0e288b23-f99f-4635-b182-06e9308095a8",
    "os_type": 2
  },
  "ei": 0,
  "event": "device.update",
  "success": true,
  "time": "2023-01-12T21:31:29.191Z",
  "uid": "bbbc496f-820b-4f49-ae0d-1c1b29faee85",
  "user": "lisa"
}

device.webtoken.create

Device Web Token Created

Example:

{
  "cluster_name": "im-a-cluster-name",
  "code": "TV008I",
  "device": {
    "asset_tag": "M2CQVQV64R",
    "credential_id": "c7572891-8426-4e62-874f-c793029d53a6",
    "device_id": "f84f6b35-6226-4e73-8205-3bcbd7d12970",
    "os_type": 2
  },
  "ei": 0,
  "event": "device.webtoken.create",
  "success": true,
  "time": "2024-03-05T17:18:43.296Z",
  "uid": "b1361d51-70fa-4f1b-803c-a252c2877707",
  "user": "llama",
  "user_kind": 1
}