This page is part of the FHIR Specification (v5.0.0: R5 - STU). This is the current published version.  For a full list of available versions, see the Directory of published versions 
. Page versions: R5 R4B R4 R3 R2
Security   Work Group | Maturity Level: 1 | Draft | Use Context: Country: World, Not Intended for Production use | 
      Official URL: http://hl7.org/fhir/ValueSet/audit-event-sub-type
     | 
    Version: 5.0.0 | |||
| active as of 2020-08-04 | Computable Name: AuditEventSubType | |||
| Flags: Experimental | OID: 2.16.840.1.113883.4.642.3.464 | |||
This value set is used in the following places:
More detailed code concerning the type of the audit event - defined by DICOM with some additional FHIR, HL7, and other additions.
This value set includes codes based on the following rules:
http://dicom.nema.org/resources/ontology/DCM 
, where the codes are contained in AuditEventTypeCode 
http://dicom.nema.org/resources/ontology/DCM 
, where the codes are contained in SecurityAlertTypeCode 
http://hl7.org/fhir/restful-interaction
This expansion generated 26 Mar 2023
This value set contains 46 concepts
Expansion based on:
| Code | System | Display | Definition | 
   110120 ![]()  | http://dicom.nema.org/resources/ontology/DCM | Application Start | Audit event: Application Entity has started.  | 
   110121 ![]()  | http://dicom.nema.org/resources/ontology/DCM | Application Stop | Audit event: Application Entity has stopped.  | 
   110122 ![]()  | http://dicom.nema.org/resources/ontology/DCM | Login | Audit event: User login has been attempted.  | 
   110123 ![]()  | http://dicom.nema.org/resources/ontology/DCM | Logout | Audit event: User logout has been attempted.  | 
   110124 ![]()  | http://dicom.nema.org/resources/ontology/DCM | Attach | Audit event: Node has been attached.  | 
   110125 ![]()  | http://dicom.nema.org/resources/ontology/DCM | Detach | Audit event: Node has been detached.  | 
   110126 ![]()  | http://dicom.nema.org/resources/ontology/DCM | Node Authentication | Audit event: Node Authentication has been attempted.  | 
   110127 ![]()  | http://dicom.nema.org/resources/ontology/DCM | Emergency Override Started | Audit event: Emergency Override has started.  | 
   110128 ![]()  | http://dicom.nema.org/resources/ontology/DCM | Network Configuration | Audit event: Network configuration has been changed.  | 
   110129 ![]()  | http://dicom.nema.org/resources/ontology/DCM | Security Configuration | Audit event: Security configuration has been changed.  | 
   110130 ![]()  | http://dicom.nema.org/resources/ontology/DCM | Hardware Configuration | Audit event: Hardware configuration has been changed.  | 
   110131 ![]()  | http://dicom.nema.org/resources/ontology/DCM | Software Configuration | Audit event: Software configuration has been changed.  | 
   110132 ![]()  | http://dicom.nema.org/resources/ontology/DCM | Use of Restricted Function | Audit event: A use of a restricted function has been attempted.  | 
   110133 ![]()  | http://dicom.nema.org/resources/ontology/DCM | Audit Recording Stopped | Audit event: Audit recording has been stopped.  | 
   110134 ![]()  | http://dicom.nema.org/resources/ontology/DCM | Audit Recording Started | Audit event: Audit recording has been started.  | 
   110135 ![]()  | http://dicom.nema.org/resources/ontology/DCM | Object Security Attributes Changed | Audit event: Security attributes of an object have been changed.  | 
   110136 ![]()  | http://dicom.nema.org/resources/ontology/DCM | Security Roles Changed | Audit event: Security roles have been changed.  | 
   110137 ![]()  | http://dicom.nema.org/resources/ontology/DCM | User security Attributes Changed | Audit event: Security attributes of a user have been changed.  | 
   110138 ![]()  | http://dicom.nema.org/resources/ontology/DCM | Emergency Override Stopped | Audit event: Emergency Override has Stopped.  | 
   110139 ![]()  | http://dicom.nema.org/resources/ontology/DCM | Remote Service Operation Started | Audit event: Remote Service Operation has Begun.  | 
   110140 ![]()  | http://dicom.nema.org/resources/ontology/DCM | Remote Service Operation Stopped | Audit event: Remote Service Operation has Stopped.  | 
   110141 ![]()  | http://dicom.nema.org/resources/ontology/DCM | Local Service Operation Started | Audit event: Local Service Operation has Begun.  | 
   110142 ![]()  | http://dicom.nema.org/resources/ontology/DCM | Local Service Operation Stopped | Audit event: Local Service Operation Stopped.  | 
   110143 ![]()  | http://dicom.nema.org/resources/ontology/DCM | Authentication Decision | Audit event: An authentication decision has been made.  | 
   110144 ![]()  | http://dicom.nema.org/resources/ontology/DCM | Authorization Decision | Audit event: An authorization decision has been made.  | 
   110145 ![]()  | http://dicom.nema.org/resources/ontology/DCM | Session start | Audit event: A persistent session has started.  | 
   110146 ![]()  | http://dicom.nema.org/resources/ontology/DCM | Session stop | Audit event: A persistent session has stopped.  | 
   110147 ![]()  | http://dicom.nema.org/resources/ontology/DCM | Access Control Decision | Audit event: An access control decision has been made.  | 
| read | http://hl7.org/fhir/restful-interaction | read | Read the current state of the resource.  | 
| vread | http://hl7.org/fhir/restful-interaction | vread | Read the state of a specific version of the resource.  | 
| update | http://hl7.org/fhir/restful-interaction | update | Update an existing resource by its id (or create it if it is new).  | 
| patch | http://hl7.org/fhir/restful-interaction | patch | Update an existing resource by posting a set of changes to it.  | 
| delete | http://hl7.org/fhir/restful-interaction | delete | Delete a resource.  | 
| history | http://hl7.org/fhir/restful-interaction | history | Retrieve the change history for a particular resource, type of resource, or the entire system.  | 
| history-instance | http://hl7.org/fhir/restful-interaction | history-instance | Retrieve the change history for a particular resource.  | 
| history-type | http://hl7.org/fhir/restful-interaction | history-type | Retrieve the change history for all resources of a particular type.  | 
| history-system | http://hl7.org/fhir/restful-interaction | history-system | Retrieve the change history for all resources on a system.  | 
| create | http://hl7.org/fhir/restful-interaction | create | Create a new resource with a server assigned id.  | 
| search | http://hl7.org/fhir/restful-interaction | search | Search a resource type or all resources based on some filter criteria.  | 
| search-type | http://hl7.org/fhir/restful-interaction | search-type | Search all resources of the specified type based on some filter criteria.  | 
| search-system | http://hl7.org/fhir/restful-interaction | search-system | Search all resources based on some filter criteria.  | 
| search-compartment | http://hl7.org/fhir/restful-interaction | search-compartment | Search resources in a compartment based on some filter criteria.  | 
| capabilities | http://hl7.org/fhir/restful-interaction | capabilities | Get a Capability Statement for the system.  | 
| transaction | http://hl7.org/fhir/restful-interaction | transaction | Update, create or delete a set of resources as a single transaction.  | 
| batch | http://hl7.org/fhir/restful-interaction | batch | perform a set of a separate interactions in a single http operation  | 
| operation | http://hl7.org/fhir/restful-interaction | operation | Perform an operation as defined by an OperationDefinition.  | 
See the full registry of value sets defined as part of FHIR.
Explanation of the columns that may appear on this page:
| Lvl | A few code lists that FHIR defines are hierarchical - each code is assigned a level. For value sets, levels are mostly used to organize codes for user convenience, but may follow code system hierarchy - see Code System for further information | 
| Source | The source of the definition of the code (when the value set draws in codes defined elsewhere) | 
| Code | The code (used as the code in the resource instance). If the code is in italics, this indicates that the code is not selectable ('Abstract') | 
| Display | The display (used in the display element of a Coding). If there is no display, implementers should not simply display the code, but map the concept into their application | 
| Definition | An explanation of the meaning of the concept | 
| Comments | Additional notes about how to use the code |