Policy Modify Action

Common Event Grammar › Configuration Management Category › Policy Management Class › Policy Modify Action

Policy Modify Action

The Policy Modify action occurs when changing an existing policy on a given system or application.

Information	Level
Source - User Information	Primary*
Source - Host Information	Secondary
Source - Object Information	Tertiary
Source - Process Information	Primary*
Source - Group Information	Tertiary
Dest - User Information	Secondary
Dest - Host Information	Primary
Dest - Object Information	Primary
Dest - Group Information	Tertiary
Agent - Information	Primary
Agent - Host Information	Primary
Event Source - Host Information	Primary
Event Source - Information	Tertiary
Event - Information	Primary
Result - Information	Primary

The important information for this action is which user or which process modified which policy on which host. The event information was expressed on which host and recorded by which agent on which host.

* - either the Source - User Information or the Source - Process Information is required for this action.

Result	event_result	event_severity
Success	S	4
Failure	F	3