<?xml version="1.0" encoding="UTF-8"?><CodeSystem xmlns="http://hl7.org/fhir"><id value="audit-event-severity"/><meta><lastUpdated value="2026-03-17T09:59:53.445+11:00"/></meta><text><status value="generated"/><div xmlns="http://www.w3.org/1999/xhtml"><p class="res-header-id"><b>Generated Narrative: CodeSystem audit-event-severity</b></p><a name="audit-event-severity"> </a><a name="hcaudit-event-severity"> </a><div style="display: inline-block; background-color: #d9e0e7; padding: 6px; margin: 4px; border: 1px solid #8da1b4; border-radius: 5px; line-height: 60%"><p style="margin-bottom: 0px">Last updated: 2022-06-06T10:01:24.148+11:00</p></div><p>This case-sensitive code system <code>http://hl7.org/fhir/audit-event-severity</code> defines the following codes:</p><table class="codes"><tr><td style="white-space:nowrap"><b>Code</b></td><td><b>Display</b></td><td><b>Definition</b></td></tr><tr><td style="white-space:nowrap">emergency<a name="audit-event-severity-emergency"> </a></td><td>Emergency</td><td>System is unusable. e.g., This level SHOULD only be reported by infrastructure and SHOULD NOT be used by applications.</td></tr><tr><td style="white-space:nowrap">alert<a name="audit-event-severity-alert"> </a></td><td>Alert</td><td>Notification SHOULD be sent to trigger action be taken. e.g., Loss of the primary network connection needing attention.</td></tr><tr><td style="white-space:nowrap">critical<a name="audit-event-severity-critical"> </a></td><td>Critical</td><td>Critical conditions. e.g., A failure in the system's primary application that will reset automatically.</td></tr><tr><td style="white-space:nowrap">error<a name="audit-event-severity-error"> </a></td><td>Error</td><td>Error conditions. e.g., An application has exceeded its file storage limit and attempts to write are failing. </td></tr><tr><td style="white-space:nowrap">warning<a name="audit-event-severity-warning"> </a></td><td>Warning</td><td>Warning conditions. May indicate that an error will occur if action is not taken. e.g., A non-root file system has only 2GB remaining.</td></tr><tr><td style="white-space:nowrap">notice<a name="audit-event-severity-notice"> </a></td><td>Notice</td><td>Notice messages. Normal but significant condition. Events that are unusual, but not error conditions.</td></tr><tr><td style="white-space:nowrap">informational<a name="audit-event-severity-informational"> </a></td><td>Informational</td><td>Normal operational messages that require no action. e.g., An application has started, paused, or ended successfully.</td></tr><tr><td style="white-space:nowrap">debug<a name="audit-event-severity-debug"> </a></td><td>Debug</td><td>Debug-level messages. Information useful to developers for debugging the application.</td></tr></table></div></text><extension url="http://hl7.org/fhir/StructureDefinition/structuredefinition-wg"><valueCode value="sec"/></extension><extension url="http://hl7.org/fhir/StructureDefinition/structuredefinition-standards-status"><valueCode value="normative"/></extension><extension url="http://hl7.org/fhir/StructureDefinition/structuredefinition-fmm"><valueInteger value="6"/></extension><url value="http://hl7.org/fhir/audit-event-severity"/><identifier><system value="urn:ietf:rfc:3986"/><value value="urn:oid:2.16.840.1.113883.4.642.4.1894"/></identifier><version value="6.0.0-ballot4"/><name value="AuditEventSeverity"/><title value="Audit Event Severity"/><status value="active"/><experimental value="false"/><date value="2025-11-01"/><publisher value="HL7 International / Security"/><contact><telecom><system value="url"/><value value="http://www.hl7.org/Special/committees/secure"/></telecom><telecom><system value="email"/><value value="fhir@lists.hl7.org"/></telecom></contact><description value="The severity of the audit entry. These codes are derived from the SysLog header, PRI. http://tools.ietf.org/html/rfc5424#appendix-A.3"/><jurisdiction><coding><system value="http://unstats.un.org/unsd/methods/m49/m49.htm"/><code value="001"/><display value="World"/></coding></jurisdiction><caseSensitive value="true"/><valueSet value="http://hl7.org/fhir/ValueSet/audit-event-severity"/><content value="complete"/><concept><code value="emergency"/><display value="Emergency"/><definition value="System is unusable. e.g., This level SHOULD only be reported by infrastructure and SHOULD NOT be used by applications."/></concept><concept><code value="alert"/><display value="Alert"/><definition value="Notification SHOULD be sent to trigger action be taken. e.g., Loss of the primary network connection needing attention."/></concept><concept><code value="critical"/><display value="Critical"/><definition value="Critical conditions. e.g., A failure in the system's primary application that will reset automatically."/></concept><concept><code value="error"/><display value="Error"/><definition value="Error conditions. e.g., An application has exceeded its file storage limit and attempts to write are failing. "/></concept><concept><code value="warning"/><display value="Warning"/><definition value="Warning conditions. May indicate that an error will occur if action is not taken. e.g., A non-root file system has only 2GB remaining."/></concept><concept><code value="notice"/><display value="Notice"/><definition value="Notice messages. Normal but significant condition. Events that are unusual, but not error conditions."/></concept><concept><code value="informational"/><display value="Informational"/><definition value="Normal operational messages that require no action. e.g., An application has started, paused, or ended successfully."/></concept><concept><code value="debug"/><display value="Debug"/><definition value="Debug-level messages. Information useful to developers for debugging the application."/></concept></CodeSystem>