Audit Event Sub-Type

More detailed code concerning the type of the audit event - defined by DICOM with some FHIR specific additions.

Copyright Statement: These codes are excerpted from Digital Imaging and Communications in Medicine (DICOM) Standard, Part 16: Content Mapping Resource, Copyright © 2011 by the National Electrical Manufacturers Association.

This value set includes codes from the following code systems:

  • Include these codes as defined in http://nema.org/dicom/dicm
    CodeDisplay
    110120Application StartAudit event: Application Entity has started
    110121Application StopAudit event: Application Entity has stopped
    110122LoginAudit event: User login has been attempted
    110123LogoutAudit event: User logout has been attempted
    110124AttachAudit event: Node has been attached
    110125DetachAudit event: Node has been detached
    110126Node AuthenticationAudit event: Node Authentication has been attempted
    110127Emergency Override StartedAudit event: Emergency Override has started
    110128Network ConfigurationAudit event: Network configuration has been changed
    110129Security ConfigurationAudit event: Security configuration has been changed
    110130Hardware ConfigurationAudit event: Hardware configuration has been changed
    110131Software ConfigurationAudit event: Software configuration has been changed
    110132Use of Restricted FunctionAudit event: A use of a restricted function has been attempted
    110133Audit Recording StoppedAudit event: Audit recording has been stopped
    110134Audit Recording StartedAudit event: Audit recording has been started
    110135Object Security Attributes ChangedAudit event: Security attributes of an object have been changed
    110136Security Roles ChangedAudit event: Security roles have been changed
    110137User security Attributes ChangedAudit event: Security attributes of a user have been changed
    110138Emergency Override StoppedAudit event: Emergency Override has Stopped
    110139Remote Service Operation StartedAudit event: Remote Service Operation has Begun
    110140Remote Service Operation StoppedAudit event: Remote Service Operation has Stopped
    110141Local Service Operation StartedAudit event: Local Service Operation has Begun
    110142Local Service Operation StoppedAudit event: Local Service Operation Stopped
  • Include all codes defined in http://hl7.org/fhir/restful-interaction