udif_event_record Struct Reference

Canonical UDIF audit-event record. More...

#include <event.h>

Data Fields
uint8_t	eventclass
uint16_t	eventcode
uint8_t	actorser [UDIF_SERIAL_NUMBER_SIZE]
uint8_t	subjectser [UDIF_SERIAL_NUMBER_SIZE]
uint8_t	contextid [UDIF_EVENT_CONTEXT_SIZE]
uint64_t	timestamp
uint8_t	payloaddigest [UDIF_CRYPTO_HASH_SIZE]
uint64_t	payloadlen

Detailed Description

Canonical UDIF audit-event record.

This structure represents a fixed-size audit record committed into the UDIF logging subsystem. The record identifies the class and code of the event, binds the event to actor and subject certificate serial numbers, includes a context identifier for correlation, records the event timestamp, and commits to the event payload through a cryptographic digest and payload length.

The payload itself is not stored in this structure. The digest is computed over the canonical payload supplied to the event creation or logging path.

Field Documentation

actorser

uint8_t actorser[UDIF_SERIAL_NUMBER_SIZE]

Serial number of the entity that originated or authorized the event.

contextid

uint8_t contextid[UDIF_EVENT_CONTEXT_SIZE]

Fixed-size event correlation identifier, such as a query id, transaction id, treaty id, or zero-padded context digest.

eventclass

uint8_t eventclass

The audit-event class; one of udif_event_classes.

eventcode

uint16_t eventcode

The operation-specific audit-event code; one of udif_event_codes.

payloaddigest

uint8_t payloaddigest[UDIF_CRYPTO_HASH_SIZE]

Cryptographic digest of the canonical event payload.

payloadlen

uint64_t payloadlen

Length, in bytes, of the canonical payload committed by payloaddigest.

subjectser

uint8_t subjectser[UDIF_SERIAL_NUMBER_SIZE]

Serial number of the entity, object owner, or protocol subject affected by the event.

timestamp

uint64_t timestamp

UTC event timestamp in seconds.

---

The documentation for this struct was generated from the following file:

• C:/Users/stepp/Documents/Visual Studio 2022/Projects/C/UDIF/UDIF/event.h