7.1.5.1.1.2. Application Activity

7.1.5.1.1.2.1. Trigger Events

This audit message is emitted when the archive is started or stopped using the archive user interface. It is also emitted during archive startup or shutdown.

7.1.5.1.1.2.2. Message Structure

Table 7.5 Entities in Application Activity Audit Message
Event Identification  
Active Participant : Archive  
Active Participant : User Present only if triggered using Archive UI
Audit Source  
Table 7.6 Event Identification
Field Name Opt Description
EventID M
EV (110100, DCM, ‘Application Activity’)
EventActionCode M
Execute ⇒ ‘E’
EventDateTime M
The time at which the event occurred
EventOutcomeIndicator M
Success ⇒ ‘0’
EventTypeCode M
DT (110120, DCM, ‘Application Start’)
DT (110121, DCM, ‘Application Stop’)
Table 7.7 Active Participant : Archive
Field Name Opt Description
UserID M
Application entity titles of Archive Device as ; separated values
UserIDTypeCode U
Application startup/shutdown or archive deploy/undeploy ⇒ EV (113877, DCM, ‘Device Name’)
Triggered from UI ⇒ EV (12, RFC-3881, ‘URI’)
UserTypeCode U
Application ⇒ ‘2’
AlternativeUserID MC
Process ID of Audit logger
UserIsRequestor M
false
RoleIDCode M
EV (110150, DCM, ‘Application’)
NetworkAccessPointID U
Hostname/IP Address of the connection referenced by Audit logger
NetworkAccessPointTypeCode U
NetworkAccessPointID is host name ⇒ ‘1’
NetworkAccessPointID is an IP address ⇒ ‘2’
Table 7.8 Active Participant : User
Field Name Opt Description
UserID M
Secured version of archive ⇒ ‘Logged in User name’
Unsecured version of archive ⇒ ‘Remote IP address’
UserIDTypeCode U
Secured Archive ⇒ EV (113871, DCM, ‘Person ID’)
Unsecured Archive ⇒ EV (110182, DCM, ‘Node ID’)
UserTypeCode U
Person ⇒ ‘1’
UserIsRequestor M
true
RoleIDCode M
EV (110151, DCM, ‘ApplicationLauncher’)
NetworkAccessPointID U
Hostname/IP Address of calling host
NetworkAccessPointTypeCode U
NetworkAccessPointID is host name ⇒ ‘1’
NetworkAccessPointID is an IP address ⇒ ‘2’

7.1.5.1.1.2.3. Sample Message

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<AuditMessage xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="http://www.dcm4che.org/DICOM/audit-message.rnc">

    <EventIdentification EventActionCode="E" EventDateTime="2017-07-10T10:30:17.651+02:00" EventOutcomeIndicator="0">
        <EventID csd-code="110100" codeSystemName="DCM" originalText="Application Activity"/>
        <EventTypeCode csd-code="110120" codeSystemName="DCM" originalText="Application Start"/>
    </EventIdentification>

    <ActiveParticipant UserID="dcm4chee-arc" UserTypeCode="2" AlternativeUserID="5289" UserIsRequestor="false" NetworkAccessPointID="localhost" NetworkAccessPointTypeCode="1">
        <RoleIDCode csd-code="110150" codeSystemName="DCM" originalText="Application"/>
        <UserIDTypeCode csd-code="113877" codeSystemName="DCM" originalText="Device Name"/>
    </ActiveParticipant>

    <AuditSourceIdentification AuditSourceID="dcm4chee-arc">
        <AuditSourceTypeCode csd-code="4"/>
    </AuditSourceIdentification>

</AuditMessage>