Event Reporting

Keeper rotation event reporting in the Advanced Reporting & Alerts module

Overview

A new set of Keeper Rotation events are included in the Advanced Reporting & Alerts module within the Keeper Admin Console.

In addition, Rotation leverages existing Keeper Secrets Manager event types. For example, when a Gateway is registered, the app_client_added event is generated.

Rotation Events in Keeper Reporting Module

Rotation Events

For the following events, two status codes are included in the status message: one for Rotation, and one for Post-Rotation (if applicable).

If no post-rotation script is present, the event status reflects rotation only.

If multiple-post rotation scripts are present, a success event is generated only if all scripts complete execution without errors.

Event	Description
event_record_rotation_scheduled_ok	A scheduled rotation has completed successfully
event_record_rotation_scheduled_fail	A scheduled rotation has encountered an error in either rotation or post-rotation
event_record_rotation_on_demand_ok	An on-demand rotation has completed successfully
event_record_rotation_on_demand_fail	An on-demand rotation has encountered an error in either rotation or post-rotation

Rotation Configuration Events

Event	Description
event_pam_configuration_created	PAM Configuration has been created
event_pam_configuration_updated	PAM Configuration has been modified
event_pam_configuration_deleted	PAM Configuration has been deleted
event_record_rotation_created	Rotation settings have been added to a record
event_record_rotation_updated	Rotation settings have been modified on a record
event_record_rotation_disabled	Rotation settings have been removed from a record

Alerts

To receive immediate feedback on any rotation related events, Keeper's "Alerts" capability can push these events to email, SMS, webhooks, Slack, Teams, etc.

Keeper Alerts

To learn more about the Keeper Advanced Reporting & Alerts module at this link.

Reporting, Alerts & SIEMEnterprise Guide