Basic Audit Log Patterns (BALP)
1.1.4-current - ci-build International flag

Basic Audit Log Patterns (BALP), published by IHE IT Infrastructure Technical Committee. This guide is not an authorized publication; it is the continuous build for version 1.1.4-current built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/qligier/ITI.BasicAudit/ and changes regularly. See the Directory of published versions

Example AuditEvent: Server - Audit Example of a basic patient identifiable Query (POST)

Server - Audit Example of a basic patient identifiable Query (POST)

Audit Example for a RESTful Query using POST with a patient subject, recorded by the server

  • recorded by the server
  • server is FHIR application server defined by ex-device
  • client is a computer at myMachine.example.org
  • user is John Smith
  • query is for an Observation for given patient
  • patient is specified

The search received, and thus recorded:

POST /r4/Observation/_search HTTP/1.1
Host: test.fhir.org
Content-Type: application/x-www-form-urlencoded
Accept: application/fhir+json; fhirVersion=4.0
Content-Length: 87

patient=ex-patient&_lastUpdated=gt2020-11-06T21:52:30.300Z&_sort=_lastUpdated&_count=10

Generated Narrative: AuditEvent ex-auditBasicQueryPost

type: Audit Event ID rest: Restful Operation

subtype: FHIR Restful Interactions search-type: search-type

action: Execute

recorded: 2020-04-29 09:49:00+0000

outcome: Success

agent

type: Source Role ID

who: myMachine.example.org

requestor: false

Networks

-AddressType
*2001:0db8:85a3:0000:0000:8a2e:0370:7334IP Address

agent

type: Destination Role ID

who: Device

requestor: false

Networks

-AddressType
*http://server.example.com/fhirURI

agent

type: information recipient

who: John Smith

requestor: true

Sources

-SiteObserverType
*server.example.comDeviceAudit Event Source Type 4: Application Server

entity

type: Audit event entity type 2: System Object

role: AuditEventEntityRole 24: Query

description: POST /r4/Observation/_search HTTP/1.1 Host: test.fhir.org Content-Type: application/x-www-form-urlencoded Accept: application/fhir+json; fhirVersion=4.0 Content-Length: 87 patient=ex-patient&_lastUpdated=gt2020-11-06T21:52:30.300Z&_sort=_lastUpdated&_count=10

query: UE9TVCAvcjQvT2JzZXJ2YXRpb24vX3NlYXJjaCBIVFRQLzEuMQpIb3N0OiB0ZXN0LmZoaXIub3JnCkNvbnRlbnQtVHlwZTogYXBwbGljYXRpb24veC13d3ctZm9ybS11cmxlbmNvZGVkCkFjY2VwdDogYXBwbGljYXRpb24vZmhpcitqc29uOyBmaGlyVmVyc2lvbj00LjAKQ29udGVudC1MZW5ndGg6IDg3CgpwYXRpZW50PWV4LXBhdGllbnQmX2xhc3RVcGRhdGVkPWd0MjAyMC0xMS0wNlQyMTo1MjozMC4zMDBaJl9zb3J0PV9sYXN0VXBkYXRlZCZfY291bnQ9MTAKCgoK

entity

what: John Schmidt Other, DoB: 1923-07-25

type: Audit event entity type 1: Person

role: AuditEventEntityRole 1: Patient