Release 5 Preview #2

This page is part of the FHIR Specification (v4.4.0: R5 Preview #2). The current version which supercedes this version is 5.0.0. For a full list of available versions, see the Directory of published versions . Page versions: R5 R4B R4 R3 R2

4.4.1.561 Value Set http://hl7.org/fhir/ValueSet/audit-event-sub-type

Security Work Group Maturity Level: 3Trial Use Use Context: Any

This is a value set defined by the FHIR project.

Summary

Defining URL:http://hl7.org/fhir/ValueSet/audit-event-sub-type
Version:4.4.0
Name:AuditEventSub-Type
Title:Audit Event Sub-Type
Definition:

More detailed code concerning the type of the audit event - defined by DICOM with some FHIR specific additions.

Committee:Security Work Group
OID:2.16.840.1.113883.4.642.3.464 (for OID based terminology systems)
Copyright:

These codes are excerpted from Digital Imaging and Communications in Medicine (DICOM) Standard, Part 16: Content Mapping Resource, Copyright © 2011 by the National Electrical Manufacturers Association.

Source ResourceXML / JSON

This value set is used in the following places:

4.4.1.561.1 Content Logical Definition

  • Include these codes as defined in http://dicom.nema.org/resources/ontology/DCM
    CodeDisplay
    110120Application StartAudit event: Application Entity has started
    110121Application StopAudit event: Application Entity has stopped
    110122LoginAudit event: User login has been attempted
    110123LogoutAudit event: User logout has been attempted
    110124AttachAudit event: Node has been attached
    110125DetachAudit event: Node has been detached
    110126Node AuthenticationAudit event: Node Authentication has been attempted
    110127Emergency Override StartedAudit event: Emergency Override has started
    110128Network ConfigurationAudit event: Network configuration has been changed
    110129Security ConfigurationAudit event: Security configuration has been changed
    110130Hardware ConfigurationAudit event: Hardware configuration has been changed
    110131Software ConfigurationAudit event: Software configuration has been changed
    110132Use of Restricted FunctionAudit event: A use of a restricted function has been attempted
    110133Audit Recording StoppedAudit event: Audit recording has been stopped
    110134Audit Recording StartedAudit event: Audit recording has been started
    110135Object Security Attributes ChangedAudit event: Security attributes of an object have been changed
    110136Security Roles ChangedAudit event: Security roles have been changed
    110137User security Attributes ChangedAudit event: Security attributes of a user have been changed
    110138Emergency Override StoppedAudit event: Emergency Override has Stopped
    110139Remote Service Operation StartedAudit event: Remote Service Operation has Begun
    110140Remote Service Operation StoppedAudit event: Remote Service Operation has Stopped
    110141Local Service Operation StartedAudit event: Local Service Operation has Begun
    110142Local Service Operation StoppedAudit event: Local Service Operation Stopped
  • Include all codes defined in http://hl7.org/fhir/restful-interaction

This value set includes codes based on the following rules:

 

4.4.1.561.2 Expansion

This expansion generated 03 May 2020

This value set contains 40 concepts

CodeSystemDisplayLogical Definition (CLD)
110120http://dicom.nema.org/resources/ontology/DCMApplication StartAudit event: Application Entity has started
110121http://dicom.nema.org/resources/ontology/DCMApplication StopAudit event: Application Entity has stopped
110122http://dicom.nema.org/resources/ontology/DCMLoginAudit event: User login has been attempted
110123http://dicom.nema.org/resources/ontology/DCMLogoutAudit event: User logout has been attempted
110124http://dicom.nema.org/resources/ontology/DCMAttachAudit event: Node has been attached
110125http://dicom.nema.org/resources/ontology/DCMDetachAudit event: Node has been detached
110126http://dicom.nema.org/resources/ontology/DCMNode AuthenticationAudit event: Node Authentication has been attempted
110127http://dicom.nema.org/resources/ontology/DCMEmergency Override StartedAudit event: Emergency Override has started
110128http://dicom.nema.org/resources/ontology/DCMNetwork ConfigurationAudit event: Network configuration has been changed
110129http://dicom.nema.org/resources/ontology/DCMSecurity ConfigurationAudit event: Security configuration has been changed
110130http://dicom.nema.org/resources/ontology/DCMHardware ConfigurationAudit event: Hardware configuration has been changed
110131http://dicom.nema.org/resources/ontology/DCMSoftware ConfigurationAudit event: Software configuration has been changed
110132http://dicom.nema.org/resources/ontology/DCMUse of Restricted FunctionAudit event: A use of a restricted function has been attempted
110133http://dicom.nema.org/resources/ontology/DCMAudit Recording StoppedAudit event: Audit recording has been stopped
110134http://dicom.nema.org/resources/ontology/DCMAudit Recording StartedAudit event: Audit recording has been started
110135http://dicom.nema.org/resources/ontology/DCMObject Security Attributes ChangedAudit event: Security attributes of an object have been changed
110136http://dicom.nema.org/resources/ontology/DCMSecurity Roles ChangedAudit event: Security roles have been changed
110137http://dicom.nema.org/resources/ontology/DCMUser security Attributes ChangedAudit event: Security attributes of a user have been changed
110138http://dicom.nema.org/resources/ontology/DCMEmergency Override StoppedAudit event: Emergency Override has Stopped
110139http://dicom.nema.org/resources/ontology/DCMRemote Service Operation StartedAudit event: Remote Service Operation has Begun
110140http://dicom.nema.org/resources/ontology/DCMRemote Service Operation StoppedAudit event: Remote Service Operation has Stopped
110141http://dicom.nema.org/resources/ontology/DCMLocal Service Operation StartedAudit event: Local Service Operation has Begun
110142http://dicom.nema.org/resources/ontology/DCMLocal Service Operation StoppedAudit event: Local Service Operation Stopped
readhttp://hl7.org/fhir/restful-interactionreadRead the current state of the resource.
vreadhttp://hl7.org/fhir/restful-interactionvreadRead the state of a specific version of the resource.
updatehttp://hl7.org/fhir/restful-interactionupdateUpdate an existing resource by its id (or create it if it is new).
patchhttp://hl7.org/fhir/restful-interactionpatchUpdate an existing resource by posting a set of changes to it.
deletehttp://hl7.org/fhir/restful-interactiondeleteDelete a resource.
historyhttp://hl7.org/fhir/restful-interactionhistoryRetrieve the change history for a particular resource, type of resource, or the entire system.
history-instancehttp://hl7.org/fhir/restful-interactionhistory-instanceRetrieve the change history for a particular resource.
history-typehttp://hl7.org/fhir/restful-interactionhistory-typeRetrieve the change history for all resources of a particular type.
history-systemhttp://hl7.org/fhir/restful-interactionhistory-systemRetrieve the change history for all resources on a system.
createhttp://hl7.org/fhir/restful-interactioncreateCreate a new resource with a server assigned id.
searchhttp://hl7.org/fhir/restful-interactionsearchSearch a resource type or all resources based on some filter criteria.
search-typehttp://hl7.org/fhir/restful-interactionsearch-typeSearch all resources of the specified type based on some filter criteria.
search-systemhttp://hl7.org/fhir/restful-interactionsearch-systemSearch all resources based on some filter criteria.
capabilitieshttp://hl7.org/fhir/restful-interactioncapabilitiesGet a Capability Statement for the system.
transactionhttp://hl7.org/fhir/restful-interactiontransactionUpdate, create or delete a set of resources as a single transaction.
batchhttp://hl7.org/fhir/restful-interactionbatchperform a set of a separate interactions in a single http operation
operationhttp://hl7.org/fhir/restful-interactionoperationPerform an operation as defined by an OperationDefinition.

 

See the full registry of value sets defined as part of FHIR.

Explanation of the columns that may appear on this page:

LvlA few code lists that FHIR defines are hierarchical - each code is assigned a level. For value sets, levels are mostly used to organize codes for user convenience, but may follow code system hierarchy - see Code System for further information
SourceThe source of the definition of the code (when the value set draws in codes defined elsewhere)
CodeThe code (used as the code in the resource instance). If the code is in italics, this indicates that the code is not selectable ('Abstract')
DisplayThe display (used in the display element of a Coding). If there is no display, implementers should not simply display the code, but map the concept into their application
DefinitionAn explanation of the meaning of the concept
CommentsAdditional notes about how to use the code