Previous Topic: Policy Listing Action

Next Topic: Policy Notification Action

Policy Modify Action

The Policy Modify action occurs when changing an existing policy on a given system or application.

Information

Level

Source - User Information

Primary*

Source - Host Information

Secondary

Source - Object Information

Tertiary

Source - Process Information

Primary*

Source - Group Information

Tertiary

Dest - User Information

Secondary

Dest - Host Information

Primary

Dest - Object Information

Primary

Dest - Group Information

Tertiary

Agent - Information

Primary

Agent - Host Information

Primary

Event Source - Host Information

Primary

Event Source - Information

Tertiary

Event - Information

Primary

Result - Information

Primary

The important information for this action is which user or which process modified which policy on which host. The event information was expressed on which host and recorded by which agent on which host.

* - either the Source - User Information or the Source - Process Information is required for this action.

Result

event_result

event_severity

Success

S

4

Failure

F

3