Hi at all,
I am searching where are stored and what kind of object are the events that I can see on the identity page.
Those arent an Audit event, because if I delete it form identity page on audit events nothing changes. Also, I dont have any audit event with that description.
In every case, my requirement is to create a Leaver event when I launch an Emergency termination from Identity Operations. Leaver and termination lauch the same process, but the first one create the Leaver event, the second not.
Can someone help me?
Hi @enistriminsait , this could be what took me a long time to find. How are you searching for these audit events? target = identity name ?
If so, you are where I was some time ago.
OOTB audit records for triggered IdentityEvents are written with a target field value as “Identity: “+ identity name.
Try this.
And yes, this is totally different then any other IIQ ootb audit.
it not that.
like I say, I cant find any correlation with audit event.
In my case, I terminated an idn that have only an AD account.
The accaunt is disable → ok
The ticket on service now are created → ok
I have the audit event for the AD account and nothing else.
I cant find where the Identite event are stored.
Which page is that screenshot from?
They are the pending provisioning requests, they can be searched in debug ProvisioningRequests
