System Event Types

A system event type is a special event that captures activity from the Devo SOAR system, allowing you to ingest the results for use in your playbooks.

For example, the addition of user accounts is a system activity. If you want to build playbook logic that tracks the successful creation of user accounts, you can add a system event type to your playbook. The playbook in the following screenshot includes a system event type plus a computation node that selects for successful user creation events during the specified interval.

System event types are listed on the My Library > Event Types page. You can view the settings for a system event by selecting it on the Event Types page, but you cannot edit the settings or delete the event type. If you attempt to, an error message is displayed.

For a detailed description of the system activity that is logged for system events, see Audit Events.