Release 5 Draft Ballot Value Set

Security Work Group Maturity Level: 3Trial Use Use Context: Any

This is a value set defined by the FHIR project.


Defining URL:
Title:Audit Event ID

Event Types for Audit Events - defined by DICOM with some FHIR specific additions.

Committee:Security Work Group
OID:2.16.840.1.113883.4.642.3.462 (for OID based terminology systems)

These codes are excerpted from Digital Imaging and Communications in Medicine (DICOM) Standard, Part 16: Content Mapping Resource, Copyright © 2011 by the National Electrical Manufacturers Association. Additional codes added by HL7 FHIR use-case analysis

Source ResourceXML / JSON

This value set is used in the following places:

This value set includes codes based on the following rules:


This expansion generated 10 May 2021

This value set contains 20 concepts

110100 ActivityAudit event: Application Activity has taken place
110101 Log UsedAudit event: Audit Log has been used
110102 Transferring DICOM InstancesAudit event: Storage of DICOM Instances has begun
110103 Instances AccessedAudit event: DICOM Instances have been created, read, updated, or deleted
110104 Instances TransferredAudit event: Storage of DICOM Instances has been completed
110105 Study DeletedAudit event: Entire Study has been deleted
110106 event: Data has been exported out of the system
110107 event: Data has been imported into the system
110108 EntryAudit event: System has joined or left network
110109 RecordAudit event: Order has been created, read, updated or deleted
110110 RecordAudit event: Patient Record has been created, read, updated, or deleted
110111 RecordAudit event: Procedure Record has been created, read, updated, or deleted
110112 event: Query has been made
110113 AlertAudit event: Security Alert has been raised
110114 AuthenticationAudit event: User Authentication has been attempted
rest OperationAudit Event: Execution of a RESTful operation as defined by FHIR.
hl7-v2 v2 OperationAudit Event: Execution of an HL7 v2 operation.
hl7-v3 v3 OperationAudit Event: Execution of an HL7 v3 operation as defined by FHIR.
document Document OperationAudit Event: Execution of an operation on a Document (e.g. XDS, CDA, etc).
object Operation on other ObjectsAudit Event: Execution of an operation on an Object. For use when a more specific event type is not available.


See the full registry of value sets defined as part of FHIR.

Explanation of the columns that may appear on this page:

LvlA few code lists that FHIR defines are hierarchical - each code is assigned a level. For value sets, levels are mostly used to organize codes for user convenience, but may follow code system hierarchy - see Code System for further information
SourceThe source of the definition of the code (when the value set draws in codes defined elsewhere)
CodeThe code (used as the code in the resource instance). If the code is in italics, this indicates that the code is not selectable ('Abstract')
DisplayThe display (used in the display element of a Coding). If there is no display, implementers should not simply display the code, but map the concept into their application
DefinitionAn explanation of the meaning of the concept
CommentsAdditional notes about how to use the code