audit logs

x-pack/plugins/security_solution/server/lib/entity_analytics/entity_store/auditing/actions.ts

@@ -5,9 +5,13 @@
  * 2.0.
  */
 
-export const EntityEngineAuditActions = {
-  ENTITY_ENGINE_INIT: 'entity_engine_init',
-  ENTITY_ENGINE_START: 'entity_engine_start',
-  ENTITY_ENGINE_STOP: 'entity_engine_stop',
-  ENTITY_ENGINE_STATUS: 'entity_engine_status',
-};
+export const EntityEngineActions = {
+  INIT: 'init',
+  START: 'start',
+  STOP: 'stop',
+  CREATE: 'create',
+  DELETE: 'delete',
+  EXECUTE: 'execute',
+} as const;
+
+export type EntityEngineActions = (typeof EntityEngineActions)[keyof typeof EntityEngineActions];

x-pack/plugins/security_solution/server/lib/entity_analytics/entity_store/auditing/resources.ts

@@ -0,0 +1,18 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the Elastic License
+ * 2.0; you may not use this file except in compliance with the Elastic License
+ * 2.0.
+ */
+
+export const EntityStoreResource = {
+  ENTITY_ENGINE: 'entity_engine',
+  ENTITY_DEFINITION: 'entity_definition',
+  ENTITY_INDEX: 'entity_index',
+  INDEX_COMPONENT_TEMPLATE: 'index_component_template',
+  PLATFORM_PIPELINE: 'platform_pipeline',
+  FIELD_RETENTION_ENRICH_POLICY: 'field_retention_enrich_policy',
+  FIELD_RETENTION_ENRICH_POLICY_TASK: 'field_retention_enrich_policy_task',
+} as const;
+
+export type EntityStoreResource = (typeof EntityStoreResource)[keyof typeof EntityStoreResource];