This page is part of the FHIR Specification (v4.4.0: R5 Preview #2). The current version which supercedes this version is 5.0.0. For a full list of available versions, see the Directory of published versions . Page versions: R5 R4B R4 R3 R2
Valueset-audit-event-sub-type.xml

Vocabulary Work Group
Maturity Level: N/A
Standards Status: Informative
Raw XML (canonical form + also see XML Format Specification)
Definition for Value SetAudit Event Sub-Type
<?xml version="1.0" encoding="UTF-8"?>

<ValueSet xmlns="http://hl7.org/fhir">
  <id value="audit-event-sub-type"/> 
  <meta> 
    <lastUpdated value="2020-05-03T08:43:35.811+10:00"/> 
    <profile value="http://hl7.org/fhir/StructureDefinition/shareablevalueset"/> 
  </meta> 
  <text> 
    <status value="generated"/> 
    <div xmlns="http://www.w3.org/1999/xhtml">
      <h2> Audit Event Sub-Type</h2> 
      <div> 
        <p> More detailed code concerning the type of the audit event - defined by DICOM with some
           FHIR specific additions.</p> 

      </div> 
      <p> 
        <b> Copyright Statement:</b>  These codes are excerpted from Digital Imaging and Communications in Medicine (DICOM)
         Standard, Part 16: Content Mapping Resource, Copyright © 2011 by the National Electrical
         Manufacturers Association.
      </p> 
      <ul> 
        <li> Include these codes as defined in 
          <a href="http://dicom.nema.org/resources/ontology/DCM">
            <code> http://dicom.nema.org/resources/ontology/DCM</code> 
          </a> 
          <table class="none">
            <tr> 
              <td style="white-space:nowrap">
                <b> Code</b> 
              </td> 
              <td> 
                <b> Display</b> 
              </td> 
            </tr> 
            <tr> 
              <td> 
                <a href="codesystem-dicom-dcim.html#dicom-dcim-110120">110120</a> 
              </td> 
              <td> Application Start</td> 
              <td> Audit event: Application Entity has started</td> 
            </tr> 
            <tr> 
              <td> 
                <a href="codesystem-dicom-dcim.html#dicom-dcim-110121">110121</a> 
              </td> 
              <td> Application Stop</td> 
              <td> Audit event: Application Entity has stopped</td> 
            </tr> 
            <tr> 
              <td> 
                <a href="codesystem-dicom-dcim.html#dicom-dcim-110122">110122</a> 
              </td> 
              <td> Login</td> 
              <td> Audit event: User login has been attempted</td> 
            </tr> 
            <tr> 
              <td> 
                <a href="codesystem-dicom-dcim.html#dicom-dcim-110123">110123</a> 
              </td> 
              <td> Logout</td> 
              <td> Audit event: User logout has been attempted</td> 
            </tr> 
            <tr> 
              <td> 
                <a href="codesystem-dicom-dcim.html#dicom-dcim-110124">110124</a> 
              </td> 
              <td> Attach</td> 
              <td> Audit event: Node has been attached</td> 
            </tr> 
            <tr> 
              <td> 
                <a href="codesystem-dicom-dcim.html#dicom-dcim-110125">110125</a> 
              </td> 
              <td> Detach</td> 
              <td> Audit event: Node has been detached</td> 
            </tr> 
            <tr> 
              <td> 
                <a href="codesystem-dicom-dcim.html#dicom-dcim-110126">110126</a> 
              </td> 
              <td> Node Authentication</td> 
              <td> Audit event: Node Authentication has been attempted</td> 
            </tr> 
            <tr> 
              <td> 
                <a href="codesystem-dicom-dcim.html#dicom-dcim-110127">110127</a> 
              </td> 
              <td> Emergency Override Started</td> 
              <td> Audit event: Emergency Override has started</td> 
            </tr> 
            <tr> 
              <td> 
                <a href="codesystem-dicom-dcim.html#dicom-dcim-110128">110128</a> 
              </td> 
              <td> Network Configuration</td> 
              <td> Audit event: Network configuration has been changed</td> 
            </tr> 
            <tr> 
              <td> 
                <a href="codesystem-dicom-dcim.html#dicom-dcim-110129">110129</a> 
              </td> 
              <td> Security Configuration</td> 
              <td> Audit event: Security configuration has been changed</td> 
            </tr> 
            <tr> 
              <td> 
                <a href="codesystem-dicom-dcim.html#dicom-dcim-110130">110130</a> 
              </td> 
              <td> Hardware Configuration</td> 
              <td> Audit event: Hardware configuration has been changed</td> 
            </tr> 
            <tr> 
              <td> 
                <a href="codesystem-dicom-dcim.html#dicom-dcim-110131">110131</a> 
              </td> 
              <td> Software Configuration</td> 
              <td> Audit event: Software configuration has been changed</td> 
            </tr> 
            <tr> 
              <td> 
                <a href="codesystem-dicom-dcim.html#dicom-dcim-110132">110132</a> 
              </td> 
              <td> Use of Restricted Function</td> 
              <td> Audit event: A use of a restricted function has been attempted</td> 
            </tr> 
            <tr> 
              <td> 
                <a href="codesystem-dicom-dcim.html#dicom-dcim-110133">110133</a> 
              </td> 
              <td> Audit Recording Stopped</td> 
              <td> Audit event: Audit recording has been stopped</td> 
            </tr> 
            <tr> 
              <td> 
                <a href="codesystem-dicom-dcim.html#dicom-dcim-110134">110134</a> 
              </td> 
              <td> Audit Recording Started</td> 
              <td> Audit event: Audit recording has been started</td> 
            </tr> 
            <tr> 
              <td> 
                <a href="codesystem-dicom-dcim.html#dicom-dcim-110135">110135</a> 
              </td> 
              <td> Object Security Attributes Changed</td> 
              <td> Audit event: Security attributes of an object have been changed</td> 
            </tr> 
            <tr> 
              <td> 
                <a href="codesystem-dicom-dcim.html#dicom-dcim-110136">110136</a> 
              </td> 
              <td> Security Roles Changed</td> 
              <td> Audit event: Security roles have been changed</td> 
            </tr> 
            <tr> 
              <td> 
                <a href="codesystem-dicom-dcim.html#dicom-dcim-110137">110137</a> 
              </td> 
              <td> User security Attributes Changed</td> 
              <td> Audit event: Security attributes of a user have been changed</td> 
            </tr> 
            <tr> 
              <td> 
                <a href="codesystem-dicom-dcim.html#dicom-dcim-110138">110138</a> 
              </td> 
              <td> Emergency Override Stopped</td> 
              <td> Audit event: Emergency Override has Stopped</td> 
            </tr> 
            <tr> 
              <td> 
                <a href="codesystem-dicom-dcim.html#dicom-dcim-110139">110139</a> 
              </td> 
              <td> Remote Service Operation Started</td> 
              <td> Audit event: Remote Service Operation has Begun</td> 
            </tr> 
            <tr> 
              <td> 
                <a href="codesystem-dicom-dcim.html#dicom-dcim-110140">110140</a> 
              </td> 
              <td> Remote Service Operation Stopped</td> 
              <td> Audit event: Remote Service Operation has Stopped</td> 
            </tr> 
            <tr> 
              <td> 
                <a href="codesystem-dicom-dcim.html#dicom-dcim-110141">110141</a> 
              </td> 
              <td> Local Service Operation Started</td> 
              <td> Audit event: Local Service Operation has Begun</td> 
            </tr> 
            <tr> 
              <td> 
                <a href="codesystem-dicom-dcim.html#dicom-dcim-110142">110142</a> 
              </td> 
              <td> Local Service Operation Stopped</td> 
              <td> Audit event: Local Service Operation Stopped</td> 
            </tr> 
          </table> 
        </li> 
        <li> Include all codes defined in 
          <a href="codesystem-restful-interaction.html">
            <code> http://hl7.org/fhir/restful-interaction</code> 
          </a> 
        </li> 
      </ul> 
      <p> This value set includes codes based on the following rules:</p> 
    </div> 
  </text> 
  <extension url="http://hl7.org/fhir/StructureDefinition/structuredefinition-wg">
    <valueCode value="sec"/> 
  </extension> 
  <extension url="http://hl7.org/fhir/StructureDefinition/structuredefinition-standards-status">
    <valueCode value="trial-use"/> 
  </extension> 
  <extension url="http://hl7.org/fhir/StructureDefinition/structuredefinition-fmm">
    <valueInteger value="3"/> 
  </extension> 
  <url value="http://hl7.org/fhir/ValueSet/audit-event-sub-type"/> 
  <identifier> 
    <system value="urn:ietf:rfc:3986"/> 
    <value value="urn:oid:2.16.840.1.113883.4.642.3.464"/> 
  </identifier> 
  <version value="4.4.0"/> 
  <name value="AuditEventSub-Type"/> 
  <title value="Audit Event Sub-Type"/> 
  <status value="active"/> 
  <experimental value="false"/> 
  <date value="2010-08-26"/> 
  <publisher value="NEMA/DICOM"/> 
  <contact> 
    <telecom> 
      <system value="url"/> 
      <value value="http://hl7.org/fhir"/> 
    </telecom> 
    <telecom> 
      <system value="email"/> 
      <value value="fhir@lists.hl7.org"/> 
    </telecom> 
  </contact> 
  <description value="More detailed code concerning the type of the audit event - defined by DICOM with some
   FHIR specific additions."/> 
  <copyright value="These codes are excerpted from Digital Imaging and Communications in Medicine (DICOM)
   Standard, Part 16: Content Mapping Resource, Copyright © 2011 by the National Electrical
   Manufacturers Association."/> 
  <compose> 
    <include> 
      <system value="http://dicom.nema.org/resources/ontology/DCM"/> 
      <concept> 
        <code value="110120"/> 
      </concept> 
      <concept> 
        <code value="110121"/> 
      </concept> 
      <concept> 
        <code value="110122"/> 
      </concept> 
      <concept> 
        <code value="110123"/> 
      </concept> 
      <concept> 
        <code value="110124"/> 
      </concept> 
      <concept> 
        <code value="110125"/> 
      </concept> 
      <concept> 
        <code value="110126"/> 
      </concept> 
      <concept> 
        <code value="110127"/> 
      </concept> 
      <concept> 
        <code value="110128"/> 
      </concept> 
      <concept> 
        <code value="110129"/> 
      </concept> 
      <concept> 
        <code value="110130"/> 
      </concept> 
      <concept> 
        <code value="110131"/> 
      </concept> 
      <concept> 
        <code value="110132"/> 
      </concept> 
      <concept> 
        <code value="110133"/> 
      </concept> 
      <concept> 
        <code value="110134"/> 
      </concept> 
      <concept> 
        <code value="110135"/> 
      </concept> 
      <concept> 
        <code value="110136"/> 
      </concept> 
      <concept> 
        <code value="110137"/> 
      </concept> 
      <concept> 
        <code value="110138"/> 
      </concept> 
      <concept> 
        <code value="110139"/> 
      </concept> 
      <concept> 
        <code value="110140"/> 
      </concept> 
      <concept> 
        <code value="110141"/> 
      </concept> 
      <concept> 
        <code value="110142"/> 
      </concept> 
    </include> 
    <include> 
      <system value="http://hl7.org/fhir/restful-interaction"/> 
    </include> 
  </compose> 
</ValueSet>
Usage note: every effort has been made to ensure that the examples are correct and useful, but they are not a normative part of the specification.