<?xml version="1.0" encoding="UTF-8"?>

<CodeSystem xmlns="http://hl7.org/fhir">
  <id value="audit-event-severity"/>
  <meta>
    <lastUpdated value="2026-03-17T09:59:53.445+11:00"/>
  </meta>
  <text>
    <status value="generated"/>
    <div xmlns="http://www.w3.org/1999/xhtml">
      <p class="res-header-id">
        <b>Generated Narrative: CodeSystem audit-event-severity</b>
      </p>
      <a name="audit-event-severity"> </a>
      <a name="hcaudit-event-severity"> </a>
      <div style="display: inline-block; background-color: #d9e0e7; padding: 6px; margin: 4px; border: 1px solid #8da1b4; border-radius: 5px; line-height: 60%">
        <p style="margin-bottom: 0px">Last updated: 2022-06-06T10:01:24.148+11:00</p>
      </div>
      <p>This case-sensitive code system 
        <code>http://hl7.org/fhir/audit-event-severity</code> defines the following codes:
      </p>
      <table class="codes">
        <tr>
          <td style="white-space:nowrap">
            <b>Code</b>
          </td>
          <td>
            <b>Display</b>
          </td>
          <td>
            <b>Definition</b>
          </td>
        </tr>
        <tr>
          <td style="white-space:nowrap">emergency
            <a name="audit-event-severity-emergency"> </a>
          </td>
          <td>Emergency</td>
          <td>System is unusable. e.g., This level SHOULD only be reported by infrastructure and SHOULD NOT be used by applications.</td>
        </tr>
        <tr>
          <td style="white-space:nowrap">alert
            <a name="audit-event-severity-alert"> </a>
          </td>
          <td>Alert</td>
          <td>Notification SHOULD be sent to trigger action be taken. e.g., Loss of the primary network connection needing attention.</td>
        </tr>
        <tr>
          <td style="white-space:nowrap">critical
            <a name="audit-event-severity-critical"> </a>
          </td>
          <td>Critical</td>
          <td>Critical conditions. e.g., A failure in the system's primary application that will reset automatically.</td>
        </tr>
        <tr>
          <td style="white-space:nowrap">error
            <a name="audit-event-severity-error"> </a>
          </td>
          <td>Error</td>
          <td>Error conditions. e.g., An application has exceeded its file storage limit and attempts to write are failing. </td>
        </tr>
        <tr>
          <td style="white-space:nowrap">warning
            <a name="audit-event-severity-warning"> </a>
          </td>
          <td>Warning</td>
          <td>Warning conditions. May indicate that an error will occur if action is not taken. e.g., A non-root file system has only 2GB remaining.</td>
        </tr>
        <tr>
          <td style="white-space:nowrap">notice
            <a name="audit-event-severity-notice"> </a>
          </td>
          <td>Notice</td>
          <td>Notice messages. Normal but significant condition. Events that are unusual, but not error conditions.</td>
        </tr>
        <tr>
          <td style="white-space:nowrap">informational
            <a name="audit-event-severity-informational"> </a>
          </td>
          <td>Informational</td>
          <td>Normal operational messages that require no action. e.g., An application has started, paused, or ended successfully.</td>
        </tr>
        <tr>
          <td style="white-space:nowrap">debug
            <a name="audit-event-severity-debug"> </a>
          </td>
          <td>Debug</td>
          <td>Debug-level messages. Information useful to developers for debugging the application.</td>
        </tr>
      </table>
    </div>
  </text>
  <extension url="http://hl7.org/fhir/StructureDefinition/structuredefinition-wg">
    <valueCode value="sec"/>
  </extension>
  <extension url="http://hl7.org/fhir/StructureDefinition/structuredefinition-standards-status">
    <valueCode value="normative"/>
  </extension>
  <extension url="http://hl7.org/fhir/StructureDefinition/structuredefinition-fmm">
    <valueInteger value="6"/>
  </extension>
  <url value="http://hl7.org/fhir/audit-event-severity"/>
  <identifier>
    <system value="urn:ietf:rfc:3986"/>
    <value value="urn:oid:2.16.840.1.113883.4.642.4.1894"/>
  </identifier>
  <version value="6.0.0-ballot4"/>
  <name value="AuditEventSeverity"/>
  <title value="Audit Event Severity"/>
  <status value="active"/>
  <experimental value="false"/>
  <date value="2025-11-01"/>
  <publisher value="HL7 International / Security"/>
  <contact>
    <telecom>
      <system value="url"/>
      <value value="http://www.hl7.org/Special/committees/secure"/>
    </telecom>
    <telecom>
      <system value="email"/>
      <value value="fhir@lists.hl7.org"/>
    </telecom>
  </contact>
  <description value="The severity of the audit entry. These codes are derived from the SysLog header, PRI. http://tools.ietf.org/html/rfc5424#appendix-A.3"/>
  <jurisdiction>
    <coding>
      <system value="http://unstats.un.org/unsd/methods/m49/m49.htm"/>
      <code value="001"/>
      <display value="World"/>
    </coding>
  </jurisdiction>
  <caseSensitive value="true"/>
  <valueSet value="http://hl7.org/fhir/ValueSet/audit-event-severity"/>
  <content value="complete"/>
  <concept>
    <code value="emergency"/>
    <display value="Emergency"/>
    <definition value="System is unusable. e.g., This level SHOULD only be reported by infrastructure and SHOULD NOT be used by applications."/>
  </concept>
  <concept>
    <code value="alert"/>
    <display value="Alert"/>
    <definition value="Notification SHOULD be sent to trigger action be taken. e.g., Loss of the primary network connection needing attention."/>
  </concept>
  <concept>
    <code value="critical"/>
    <display value="Critical"/>
    <definition value="Critical conditions. e.g., A failure in the system's primary application that will reset automatically."/>
  </concept>
  <concept>
    <code value="error"/>
    <display value="Error"/>
    <definition value="Error conditions. e.g., An application has exceeded its file storage limit and attempts to write are failing. "/>
  </concept>
  <concept>
    <code value="warning"/>
    <display value="Warning"/>
    <definition value="Warning conditions. May indicate that an error will occur if action is not taken. e.g., A non-root file system has only 2GB remaining."/>
  </concept>
  <concept>
    <code value="notice"/>
    <display value="Notice"/>
    <definition value="Notice messages. Normal but significant condition. Events that are unusual, but not error conditions."/>
  </concept>
  <concept>
    <code value="informational"/>
    <display value="Informational"/>
    <definition value="Normal operational messages that require no action. e.g., An application has started, paused, or ended successfully."/>
  </concept>
  <concept>
    <code value="debug"/>
    <display value="Debug"/>
    <definition value="Debug-level messages. Information useful to developers for debugging the application."/>
  </concept>
</CodeSystem>