{
  "resourceType": "CodeSystem",
  "id": "audit-event-severity",
  "meta": {
    "lastUpdated": "2026-05-26T09:13:44.118+11:00"
  },
  "text": {
    "status": "generated",
    "div": "\u003cdiv xmlns\u003d\"http://www.w3.org/1999/xhtml\"\u003e\u003cp class\u003d\"res-header-id\"\u003e\u003cb\u003eGenerated Narrative: CodeSystem audit-event-severity\u003c/b\u003e\u003c/p\u003e\u003ca name\u003d\"audit-event-severity\"\u003e \u003c/a\u003e\u003ca name\u003d\"hcaudit-event-severity\"\u003e \u003c/a\u003e\u003cdiv style\u003d\"display: inline-block; background-color: #d9e0e7; padding: 6px; margin: 4px; border: 1px solid #8da1b4; border-radius: 5px; line-height: 60%\"\u003e\u003cp style\u003d\"margin-bottom: 0px\"\u003eLast updated: 2022-06-06T10:01:24.148+11:00\u003c/p\u003e\u003c/div\u003e\u003cp\u003eThis case-sensitive code system \u003ccode\u003ehttp://hl7.org/fhir/audit-event-severity\u003c/code\u003e defines the following codes:\u003c/p\u003e\u003ctable class\u003d\"codes\"\u003e\u003ctr\u003e\u003ctd style\u003d\"white-space:nowrap\"\u003e\u003cb\u003eCode\u003c/b\u003e\u003c/td\u003e\u003ctd\u003e\u003cb\u003eDisplay\u003c/b\u003e\u003c/td\u003e\u003ctd\u003e\u003cb\u003eDefinition\u003c/b\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd style\u003d\"white-space:nowrap\"\u003eemergency\u003ca name\u003d\"audit-event-severity-emergency\"\u003e \u003c/a\u003e\u003c/td\u003e\u003ctd\u003eEmergency\u003c/td\u003e\u003ctd\u003eSystem is unusable. e.g., This level SHOULD only be reported by infrastructure and SHOULD NOT be used by applications.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd style\u003d\"white-space:nowrap\"\u003ealert\u003ca name\u003d\"audit-event-severity-alert\"\u003e \u003c/a\u003e\u003c/td\u003e\u003ctd\u003eAlert\u003c/td\u003e\u003ctd\u003eNotification SHOULD be sent to trigger action be taken. e.g., Loss of the primary network connection needing attention.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd style\u003d\"white-space:nowrap\"\u003ecritical\u003ca name\u003d\"audit-event-severity-critical\"\u003e \u003c/a\u003e\u003c/td\u003e\u003ctd\u003eCritical\u003c/td\u003e\u003ctd\u003eCritical conditions. e.g., A failure in the system\u0027s primary application that will reset automatically.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd style\u003d\"white-space:nowrap\"\u003eerror\u003ca name\u003d\"audit-event-severity-error\"\u003e \u003c/a\u003e\u003c/td\u003e\u003ctd\u003eError\u003c/td\u003e\u003ctd\u003eError conditions. e.g., An application has exceeded its file storage limit and attempts to write are failing. \u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd style\u003d\"white-space:nowrap\"\u003ewarning\u003ca name\u003d\"audit-event-severity-warning\"\u003e \u003c/a\u003e\u003c/td\u003e\u003ctd\u003eWarning\u003c/td\u003e\u003ctd\u003eWarning conditions. May indicate that an error will occur if action is not taken. e.g., A non-root file system has only 2GB remaining.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd style\u003d\"white-space:nowrap\"\u003enotice\u003ca name\u003d\"audit-event-severity-notice\"\u003e \u003c/a\u003e\u003c/td\u003e\u003ctd\u003eNotice\u003c/td\u003e\u003ctd\u003eNotice messages. Normal but significant condition. Events that are unusual, but not error conditions.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd style\u003d\"white-space:nowrap\"\u003einformational\u003ca name\u003d\"audit-event-severity-informational\"\u003e \u003c/a\u003e\u003c/td\u003e\u003ctd\u003eInformational\u003c/td\u003e\u003ctd\u003eNormal operational messages that require no action. e.g., An application has started, paused, or ended successfully.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd style\u003d\"white-space:nowrap\"\u003edebug\u003ca name\u003d\"audit-event-severity-debug\"\u003e \u003c/a\u003e\u003c/td\u003e\u003ctd\u003eDebug\u003c/td\u003e\u003ctd\u003eDebug-level messages. Information useful to developers for debugging the application.\u003c/td\u003e\u003c/tr\u003e\u003c/table\u003e\u003c/div\u003e"
  },
  "extension": [
    {
      "url": "http://hl7.org/fhir/StructureDefinition/structuredefinition-wg",
      "valueCode": "sec"
    },
    {
      "url": "http://hl7.org/fhir/StructureDefinition/structuredefinition-standards-status",
      "valueCode": "normative"
    },
    {
      "url": "http://hl7.org/fhir/StructureDefinition/structuredefinition-fmm",
      "valueInteger": 6
    }
  ],
  "url": "http://hl7.org/fhir/audit-event-severity",
  "identifier": [
    {
      "system": "urn:ietf:rfc:3986",
      "value": "urn:oid:2.16.840.1.113883.4.642.4.1894"
    }
  ],
  "version": "6.0.0-ballot4",
  "name": "AuditEventSeverity",
  "title": "Audit Event Severity",
  "status": "active",
  "experimental": false,
  "date": "2025-11-01",
  "publisher": "HL7 International / Security",
  "contact": [
    {
      "telecom": [
        {
          "system": "url",
          "value": "http://www.hl7.org/Special/committees/secure"
        },
        {
          "system": "email",
          "value": "fhir@lists.hl7.org"
        }
      ]
    }
  ],
  "description": "The severity of the audit entry. These codes are derived from the SysLog header, PRI. http://tools.ietf.org/html/rfc5424#appendix-A.3",
  "jurisdiction": [
    {
      "coding": [
        {
          "system": "http://unstats.un.org/unsd/methods/m49/m49.htm",
          "code": "001",
          "display": "World"
        }
      ]
    }
  ],
  "caseSensitive": true,
  "valueSet": "http://hl7.org/fhir/ValueSet/audit-event-severity",
  "content": "complete",
  "concept": [
    {
      "code": "emergency",
      "display": "Emergency",
      "definition": "System is unusable. e.g., This level SHOULD only be reported by infrastructure and SHOULD NOT be used by applications."
    },
    {
      "code": "alert",
      "display": "Alert",
      "definition": "Notification SHOULD be sent to trigger action be taken. e.g., Loss of the primary network connection needing attention."
    },
    {
      "code": "critical",
      "display": "Critical",
      "definition": "Critical conditions. e.g., A failure in the system\u0027s primary application that will reset automatically."
    },
    {
      "code": "error",
      "display": "Error",
      "definition": "Error conditions. e.g., An application has exceeded its file storage limit and attempts to write are failing. "
    },
    {
      "code": "warning",
      "display": "Warning",
      "definition": "Warning conditions. May indicate that an error will occur if action is not taken. e.g., A non-root file system has only 2GB remaining."
    },
    {
      "code": "notice",
      "display": "Notice",
      "definition": "Notice messages. Normal but significant condition. Events that are unusual, but not error conditions."
    },
    {
      "code": "informational",
      "display": "Informational",
      "definition": "Normal operational messages that require no action. e.g., An application has started, paused, or ended successfully."
    },
    {
      "code": "debug",
      "display": "Debug",
      "definition": "Debug-level messages. Information useful to developers for debugging the application."
    }
  ]
}