This page is part of the FHIR Specification (v5.0.0-snapshot3: R5 Snapshot #3, to support Connectathon 32). The current version which supercedes this version is 5.0.0.  For a full list of available versions, see the Directory of published versions  . Page versions: R5 R4B R4 R3 R2
. Page versions: R5 R4B R4 R3 R2
| Security  Work Group | Maturity Level: 1 | Draft | Use Context: Country: World, Not Intended for Production use, Not Intended for Production use | 
| Official URL: http://hl7.org/fhir/ValueSet/audit-event-sub-type | Version: 5.0.0-snapshot3 | |||
| active as of 2020-08-04 | Computable Name: AuditEventSubType | |||
| Flags: Experimental | OID: 2.16.840.1.113883.4.642.3.464 | |||
This value set is used in the following places:
More detailed code concerning the type of the audit event - defined by DICOM with some additional FHIR, HL7, and other additions.
This value set includes codes based on the following rules:
http://dicom.nema.org/resources/ontology/DCM  , where the codes are contained in http://dicom.nema.org/medical/dicom/current/output/chtml/part16/sect_CID_401.html
, where the codes are contained in http://dicom.nema.org/medical/dicom/current/output/chtml/part16/sect_CID_401.html 
http://dicom.nema.org/resources/ontology/DCM  , where the codes are contained in http://dicom.nema.org/medical/dicom/current/output/chtml/part16/sect_CID_403.html
, where the codes are contained in http://dicom.nema.org/medical/dicom/current/output/chtml/part16/sect_CID_403.html 
http://hl7.org/fhir/restful-interaction
This expansion generated 14 Dec 2022
This value set contains 46 concepts
Expansion based on:
| Code | System | Display | Definition | 
| 110120  | http://dicom.nema.org/resources/ontology/DCM | Application Start | Audit event: Application Entity has started. | 
| 110121  | http://dicom.nema.org/resources/ontology/DCM | Application Stop | Audit event: Application Entity has stopped. | 
| 110122  | http://dicom.nema.org/resources/ontology/DCM | Login | Audit event: User login has been attempted. | 
| 110123  | http://dicom.nema.org/resources/ontology/DCM | Logout | Audit event: User logout has been attempted. | 
| 110124  | http://dicom.nema.org/resources/ontology/DCM | Attach | Audit event: Node has been attached. | 
| 110125  | http://dicom.nema.org/resources/ontology/DCM | Detach | Audit event: Node has been detached. | 
| 110126  | http://dicom.nema.org/resources/ontology/DCM | Node Authentication | Audit event: Node Authentication has been attempted. | 
| 110127  | http://dicom.nema.org/resources/ontology/DCM | Emergency Override Started | Audit event: Emergency Override has started. | 
| 110128  | http://dicom.nema.org/resources/ontology/DCM | Network Configuration | Audit event: Network configuration has been changed. | 
| 110129  | http://dicom.nema.org/resources/ontology/DCM | Security Configuration | Audit event: Security configuration has been changed. | 
| 110130  | http://dicom.nema.org/resources/ontology/DCM | Hardware Configuration | Audit event: Hardware configuration has been changed. | 
| 110131  | http://dicom.nema.org/resources/ontology/DCM | Software Configuration | Audit event: Software configuration has been changed. | 
| 110132  | http://dicom.nema.org/resources/ontology/DCM | Use of Restricted Function | Audit event: A use of a restricted function has been attempted. | 
| 110133  | http://dicom.nema.org/resources/ontology/DCM | Audit Recording Stopped | Audit event: Audit recording has been stopped. | 
| 110134  | http://dicom.nema.org/resources/ontology/DCM | Audit Recording Started | Audit event: Audit recording has been started. | 
| 110135  | http://dicom.nema.org/resources/ontology/DCM | Object Security Attributes Changed | Audit event: Security attributes of an object have been changed. | 
| 110136  | http://dicom.nema.org/resources/ontology/DCM | Security Roles Changed | Audit event: Security roles have been changed. | 
| 110137  | http://dicom.nema.org/resources/ontology/DCM | User security Attributes Changed | Audit event: Security attributes of a user have been changed. | 
| 110138  | http://dicom.nema.org/resources/ontology/DCM | Emergency Override Stopped | Audit event: Emergency Override has Stopped. | 
| 110139  | http://dicom.nema.org/resources/ontology/DCM | Remote Service Operation Started | Audit event: Remote Service Operation has Begun. | 
| 110140  | http://dicom.nema.org/resources/ontology/DCM | Remote Service Operation Stopped | Audit event: Remote Service Operation has Stopped. | 
| 110141  | http://dicom.nema.org/resources/ontology/DCM | Local Service Operation Started | Audit event: Local Service Operation has Begun. | 
| 110142  | http://dicom.nema.org/resources/ontology/DCM | Local Service Operation Stopped | Audit event: Local Service Operation Stopped. | 
| 110143  | http://dicom.nema.org/resources/ontology/DCM | Authentication Decision | Audit event: An authentication decision has been made. | 
| 110144  | http://dicom.nema.org/resources/ontology/DCM | Authorization Decision | Audit event: An authorization decision has been made. | 
| 110145  | http://dicom.nema.org/resources/ontology/DCM | Session start | Audit event: A persistent session has started. | 
| 110146  | http://dicom.nema.org/resources/ontology/DCM | Session stop | Audit event: A persistent session has stopped. | 
| 110147  | http://dicom.nema.org/resources/ontology/DCM | Access Control Decision | Audit event: An access control decision has been made. | 
| read | http://hl7.org/fhir/restful-interaction | read | Read the current state of the resource. | 
| vread | http://hl7.org/fhir/restful-interaction | vread | Read the state of a specific version of the resource. | 
| update | http://hl7.org/fhir/restful-interaction | update | Update an existing resource by its id (or create it if it is new). | 
| patch | http://hl7.org/fhir/restful-interaction | patch | Update an existing resource by posting a set of changes to it. | 
| delete | http://hl7.org/fhir/restful-interaction | delete | Delete a resource. | 
| history | http://hl7.org/fhir/restful-interaction | history | Retrieve the change history for a particular resource, type of resource, or the entire system. | 
| history-instance | http://hl7.org/fhir/restful-interaction | history-instance | Retrieve the change history for a particular resource. | 
| history-type | http://hl7.org/fhir/restful-interaction | history-type | Retrieve the change history for all resources of a particular type. | 
| history-system | http://hl7.org/fhir/restful-interaction | history-system | Retrieve the change history for all resources on a system. | 
| create | http://hl7.org/fhir/restful-interaction | create | Create a new resource with a server assigned id. | 
| search | http://hl7.org/fhir/restful-interaction | search | Search a resource type or all resources based on some filter criteria. | 
| search-type | http://hl7.org/fhir/restful-interaction | search-type | Search all resources of the specified type based on some filter criteria. | 
| search-system | http://hl7.org/fhir/restful-interaction | search-system | Search all resources based on some filter criteria. | 
| search-compartment | http://hl7.org/fhir/restful-interaction | search-compartment | Search resources in a compartment based on some filter criteria. | 
| capabilities | http://hl7.org/fhir/restful-interaction | capabilities | Get a Capability Statement for the system. | 
| transaction | http://hl7.org/fhir/restful-interaction | transaction | Update, create or delete a set of resources as a single transaction. | 
| batch | http://hl7.org/fhir/restful-interaction | batch | perform a set of a separate interactions in a single http operation | 
| operation | http://hl7.org/fhir/restful-interaction | operation | Perform an operation as defined by an OperationDefinition. | 
See the full registry of value sets defined as part of FHIR.
Explanation of the columns that may appear on this page:
| Lvl | A few code lists that FHIR defines are hierarchical - each code is assigned a level. For value sets, levels are mostly used to organize codes for user convenience, but may follow code system hierarchy - see Code System for further information | 
| Source | The source of the definition of the code (when the value set draws in codes defined elsewhere) | 
| Code | The code (used as the code in the resource instance). If the code is in italics, this indicates that the code is not selectable ('Abstract') | 
| Display | The display (used in the display element of a Coding). If there is no display, implementers should not simply display the code, but map the concept into their application | 
| Definition | An explanation of the meaning of the concept | 
| Comments | Additional notes about how to use the code |