Events overview

The FireTail event system is a way of recording the creation, deletion and modification of resources from cloud providers such as AWS API Gateways, as well as resources in the FireTail SaaS platform such as specifications, new specification versions, and a periodic analysis performed on API traffic. 

Events are created when:

• Resources in the FireTail platform are modified (for example, specifications)
• When resources belonging to cloud providers are scanned the following is detected:
  • New resources are added.
  • Resources are deleted. 
  • Resources are changed.

• Events are also created periodically for API traffic analysis This is done daily. The average execution times, request/response body sizes and so on are examined.

Events enable the discovery of Findings. The events are processed and any findings contained within the event are generated.

View events

The events page enables you to view all events that have occurred and any associated findings within that event.

Navigate to Posture Management in the FireTail platform and select the Events tab to view the triggered events. Click Download to download CSV file of events data. Learn more about how to download.

Event information

• ‍Title - The title of the event. For example; Specification version changed.
• ‍Description - Describing the event that has been created. For example; This event is created when the latest version of a specification item in the Firetail SaaS is changed.
• ‍Related Findings - Any findings that have been discovered in the event. The findings are grouped by severity.
• ‍Created - When the event was created.

Event details

Click on a specific event to view further details about the event. The event details displays the following additional details:

• UUID - The event UUID.
• Created by - Who or what created the event.
• Status - The status or example, Active.

Click the findings to view all findings that occurred in the event. Click the specification name button to view the specification.

Related topics

• Findings overview
• Findings codes
• Incidents
• Event codes
• Specifications overview
• Create a specification