Kafka Cluster Management and Operations Auditable Event Methods on Confluent Cloud

Expand all examples | Collapse all examples

Included here are the actions, or operations, for all Kafka client requests that generate auditable event messages for the io.confluent.kafka.server/request event type. This includes cluster management operations as well as data operations such as produce and consume requests. When an auditable event occurs, the auditable event method is triggered and a message is sent to the audit log and is stored as an audit log record.

Most Kafka cluster auditable event methods have the same method names as the Kafka cluster authorization event methods, with the exception of kafka.Fetch and kafka.Produce, which do not generate corresponding authorization events.

Kafka Management and Operations Event Methods

Method name	Action triggering an auditable event message
kafka.AlterConfigs	A Kafka configuration is being altered or updated.
kafka.AlterMirrors	The properties of a mirror topic that exists on a Cluster Link to this cluster are being altered.
kafka.CreateAcls	A Kafka broker ACL is being created.
kafka.CreateClusterLinks	A cluster link is being created between this cluster and another cluster.
kafka.CreatePartitions	Partitions are being added to a topic.
kafka.CreateTopics	A topic is being created.
kafka.DeleteAcls	A Kafka broker ACL is being deleted.
kafka.DeleteClusterLinks	A cluster link is being deleted.
kafka.DeleteGroups	A Kafka consumer group is being deleted.
kafka.DeleteTopics	A Kafka topic is being deleted.
kafka.Fetch	A Kafka consumer begins reading a batch of records from a Kafka topic. Only the first fetch per connection (identified by connection ID) generates an auditable event.
kafka.IncrementalAlterConfigs	A dynamic configuration of a Kafka broker is being altered
kafka.Produce	A Kafka producer begins writing a batch of records to a Kafka topic. Only the first produce per connection (identified by connection ID) generates an auditable event.

Examples

kafka.AlterConfigs

The kafka.AlterConfigs event method is triggered by a request to alter or update a Kafka configuration.

SUCCESS

{
  "datacontenttype": "application/json",
  "data": {
    "serviceName": "crn://confluent.cloud/",
    "methodName": "kafka.AlterConfigs",
    "cloudResources": [
      {
        "scope": {
          "resources": [
            {
              "type": "ORGANIZATION",
              "resourceId": "91a07ac9-9a13-491e-a2cf-46a9a5cf339c"
            },
            {
              "type": "ENVIRONMENT",
              "resourceId": "env-abc123"
            },
            {
              "type": "CLOUD_CLUSTER",
              "resourceId": "lkc-rjjy79"
            }
          ]
        },
        "resource": {
          "type": "KAFKA_CLUSTER",
          "resourceId": "lkc-rjjy79"
        }
      }
    ],
    "authenticationInfo": {
      "principal": {
        "confluentUser": {
          "resourceId": "u-ok7gjy"
        }
      },
      "result": "SUCCESS"
    },
    "authorizationInfo": {
      "result": "ALLOW"
    },
    "requestMetadata": {
      "connectionId": "166296063590200038",
      "requestId": [
        "166296066022800008"
      ],
      "clientId": "adminclient-23834",
      "clientAddress": [
        {
          "ip": "1.2.3.4"
        }
      ]
    },
    "request": {
      "accessType": "MODIFICATION",
      "data": {
        "resources": [
          {
            "resourceType": "TOPIC",
            "resourceName": "topicAuditLog",
            "configs": [
              {
                "name": "cleanup.policy",
                "value": "delete"
              }
            ]
          }
        ],
        "validateOnly": false
      }
    },
    "result": {
      "status": "SUCCESS",
      "data": {
        "responses": [
          {
            "errorCode": 0,
            "errorMessage": null,
            "resourceType": "TOPIC",
            "resourceName": "topicAuditLog"
          }
        ]
      }
    },
    "resourceName": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/environment=env-abc123/cloud-cluster=lkc-rjjy79/kafka=lkc-rjjy79"
  },
  "subject": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/environment=env-abc123/cloud-cluster=lkc-rjjy79/kafka=lkc-rjjy79",
  "specversion": "1.0",
  "id": "ae9cf1f0-e8dc-40be-ae1f-02fd68a67626",
  "source": "crn://confluent.cloud/",
  "time": "2022-09-12T05:31:00.250Z",
  "type": "io.confluent.kafka.server/request"
}

FAILURE - "INVALID_CONFIG"

{
  "datacontenttype": "application/json",
  "data": {
    "serviceName": "crn://confluent.cloud/",
    "methodName": "kafka.AlterConfigs",
    "cloudResources": [
      {
        "scope": {
          "resources": [
            {
              "type": "ORGANIZATION",
              "resourceId": "91a07ac9-9a13-491e-a2cf-46a9a5cf339c"
            },
            {
              "type": "ENVIRONMENT",
              "resourceId": "env-abc123"
            },
            {
              "type": "CLOUD_CLUSTER",
              "resourceId": "lkc-rjjy79"
            }
          ]
        },
        "resource": {
          "type": "KAFKA_CLUSTER",
          "resourceId": "lkc-rjjy79"
        }
      }
    ],
    "authenticationInfo": {
      "principal": {
        "confluentUser": {
          "resourceId": "u-ok7gjy"
        }
      },
      "result": "SUCCESS"
    },
    "authorizationInfo": {
      "result": "ALLOW"
    },
    "requestMetadata": {
      "connectionId": "166392111226600034",
      "requestId": [
        "166392116845900010"
      ],
      "clientId": "adminclient-25526",
      "clientAddress": [
        {
          "ip": "1.2.3.4"
        }
      ]
    },
    "request": {
      "accessType": "MODIFICATION",
      "data": {
        "resources": [
          {
            "resourceType": "TOPIC",
            "resourceName": "topicAuditLog",
            "configs": [
              {
                "name": "max.message.bytes",
                "value": "-1"
              }
            ]
          }
        ],
        "validateOnly": false
      }
    },
    "result": {
      "status": "FAILURE",
      "data": {
        "responses": [
          {
            "errorCode": 40,
            "errorMessage": "Invalid config value for resource ConfigResource(type=TOPIC, name='topicAuditLog'): Invalid value -1 for configuration max.message.bytes: Value must be at least 0",
            "resourceType": "TOPIC",
            "resourceName": "topicAuditLog"
          }
        ]
      }
    },
    "resourceName": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/environment=env-abc123/cloud-cluster=lkc-rjjy79/kafka=lkc-rjjy79"
  },
  "subject": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/environment=env-abc123/cloud-cluster=lkc-rjjy79/kafka=lkc-rjjy79",
  "specversion": "1.0",
  "id": "60f8d46b-f4aa-429f-a72b-8189e9305057",
  "source": "crn://confluent.cloud/",
  "time": "2022-09-23T08:19:28.482Z",
  "type": "io.confluent.kafka.server/request"
}

kafka.AlterMirrors

The kafka.AlterMirrors event method is triggered by a request to alter or update the properties of a mirror topic that exists on a cluster link to this cluster.

SUCCESS

{
  "specversion": "1.0",
  "id": "bd1550e6-97a5-4cab-979c-11b0ecc509a2",
  "source": "crn://confluent.cloud/organization=orgId/environment=envId/cloud-cluster=lkc-test1/kafka=lkc-test1",
  "type": "io.confluent.kafka.server/request",
  "datacontenttype": "application/json",
  "subject": "crn://confluent.cloud/organization=orgId/environment=envId/cloud-cluster=lkc-test1/kafka=lkc-test1",
  "time": "2022-04-11T08:51:00Z",
  "data": {
    "serviceName": "crn://confluent.cloud/organization=orgId/environment=envId/cloud-cluster=lkc-test1/kafka=lkc-test1",
    "internalServiceName": "",
    "methodName": "kafka.AlterMirrors",
    "cloudResources": [
      {
        "scope": {
          "resources": [
            {
              "type": "ORGANIZATION",
              "resourceId": "orgId",
            },
            {
              "type": "ENVIRONMENT",
              "resourceId": "envId",
            },
            {
              "type": "CLOUD_CLUSTER",
              "resourceId": "lkc-test1",
            }
          ]
        },
        "resource": {
          "type": "KAFKA_CLUSTER",
          "resourceId": "lkc-test1",
        }
      }
    ],
    "authenticationInfo": {
      "exposure": "CUSTOMER",
      "principal": {
        "email": "",
        "confluentUser": {
          "resourceId": "sa-Alice",
        }
      },
      "result": "SUCCESS",
      "errorMessage": "",
    },
    "authorizationInfo": {
      "result": "ALLOW",
      "dryRun": false,
      "operation": ""
    },
    "requestMetadata": {
      "connectionId": "",
      "requestId": [],
      "clientAddress": [
        {
          "ip": "1.2.3.4"
        }
      ],
      "clientId": "test_client_id",
      "clientTraceId": "",
      "serviceTraceId": "",
      "serviceSpanId": "",
      "requestType": "HTTP",
      "requestPath": ""
    },
    "request": {
      "accessType": "MODIFICATION",
      "schema": "",
      "data": {
        "mirrorOperations": [
          {
            "topic": "test-topic",
            "operationCode": "CLEAR"
          }
        ],
        "validateOnly": false,
        "timeoutMs": 0
      }
    },
    "result": {
      "status": "SUCCESS",
      "schema": "",
      "data": {
        "results": [
          {
            "errorCode": 0,
            "errorMessage": "",
            "topic": "tenant_topic"
          }
        ]
      }
    },
    "platformResources": [],
    "resourceName": "crn://confluent.cloud/organization=orgId/environment=envId/cloud-cluster=lkc-test1/kafka=lkc-test1"
  }
}

FAILURE - "INVALID_REQUEST"

{
  "datacontenttype": "application/json",
  "data": {
    "serviceName": "crn://confluent.cloud/organization=00000000-0000-0000-0000-000000000000/environment=t0/cloud-cluster=lkc-7kyjyo/kafka=lkc-7kyjyo",
    "methodName": "kafka.AlterMirrors",
    "cloudResources": [
      {
        "scope": {
          "resources": [
            {
              "type": "ORGANIZATION",
              "resourceId": "00000000-0000-0000-0000-000000000000"
            },
            {
              "type": "ENVIRONMENT",
              "resourceId": "t0"
            },
            {
              "type": "CLOUD_CLUSTER",
              "resourceId": "lkc-7kyjyo"
            }
          ]
        },
        "resource": {
          "type": "KAFKA_CLUSTER",
          "resourceId": "lkc-7kyjyo"
        }
      }
    ],
    "authenticationInfo": {
      "principal": {
        "confluentUser": {
          "resourceId": "u-000000"
        }
      },
      "result": "SUCCESS"
    },
    "authorizationInfo": {
      "result": "ALLOW"
    },
    "requestMetadata": {
      "connectionId": "166368132996200038",
      "requestId": [
        "166368132997400011"
      ],
      "clientAddress": [
        {
          "ip": "1.2.3.4"
        }
      ],
      "clientId": "caas-link-healthcheck-agent-link-admin-client-310"
    },
    "request": {
      "accessType": "MODIFICATION",
      "data": {
        "mirrorOperations": [
          {
            "topic": "_confluent-healthcheck_0",
            "operationCode": "FAILOVER"
          }
        ],
        "validateOnly": false,
        "timeoutMs": 23987
      }
    },
    "result": {
      "status": "FAILURE",
      "data": {
        "results": [
          {
            "errorCode": 42,
            "errorMessage": "Topic '_confluent-healthcheck_0' has already stopped its mirror from 'healthcheck'",
            "topic": "_confluent-healthcheck_0"
          }
        ]
      }
    },
    "resourceName": "crn://confluent.cloud/organization=00000000-0000-0000-0000-000000000000/environment=t0/cloud-cluster=lkc-7kyjyo/kafka=lkc-7kyjyo"
  },
  "subject": "crn://confluent.cloud/organization=00000000-0000-0000-0000-000000000000/environment=t0/cloud-cluster=lkc-7kyjyo/kafka=lkc-7kyjyo",
  "specversion": "1.0",
  "id": "565c40ea-c47b-4b83-ab05-16befa8d918d",
  "source": "crn://confluent.cloud/organization=00000000-0000-0000-0000-000000000000/environment=t0/cloud-cluster=lkc-7kyjyo/kafka=lkc-7kyjyo",
  "time": "2022-09-20T13:42:09.976Z",
  "type": "io.confluent.kafka.server/request"
}

kafka.CreateAcls

The kafka.CreateAcls event method is triggered by a request to create a Kafka broker ACL.

SUCCESS

{
  "datacontenttype": "application/json",
  "data": {
    "serviceName": "crn://confluent.cloud/",
    "methodName": "kafka.CreateAcls",
    "cloudResources": [
      {
        "scope": {
          "resources": [
            {
              "type": "ORGANIZATION",
              "resourceId": "91a07ac9-9a13-491e-a2cf-46a9a5cf339c"
            },
            {
              "type": "ENVIRONMENT",
              "resourceId": "env-abc123"
            },
            {
              "type": "CLOUD_CLUSTER",
              "resourceId": "lkc-rjjy79"
            }
          ]
        },
        "resource": {
          "type": "KAFKA_CLUSTER",
          "resourceId": "lkc-rjjy79"
        }
      }
    ],
    "authenticationInfo": {
      "principal": {
        "confluentUser": {
          "resourceId": "u-ok7gjy"
        }
      },
      "result": "SUCCESS"
    },
    "authorizationInfo": {
      "result": "ALLOW"
    },
    "requestMetadata": {
      "connectionId": "166299782889700063",
      "requestId": [
        "166299783054900008"
      ],
      "clientId": "adminclient-1",
      "clientAddress": [
        {
          "ip": "1.2.3.4"
        }
      ]
    },
    "request": {
      "accessType": "MODIFICATION",
      "data": {
        "creations": [
          {
            "resourceType": "TOPIC",
            "resourceName": "topicAuditLog",
            "resourcePatternType": "LITERAL",
            "principal": "User:Alice",
            "host": "*",
            "operation": "WRITE",
            "permissionType": "ALLOW"
          }
        ]
      }
    },
    "result": {
      "status": "SUCCESS",
      "data": {
        "results": [
          {
            "errorCode": 0,
            "errorMessage": ""
          }
        ]
      }
    },
    "resourceName": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/environment=env-abc123/cloud-cluster=lkc-rjjy79/kafka=lkc-rjjy79"
  },
  "subject": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/environment=env-abc123/cloud-cluster=lkc-rjjy79/kafka=lkc-rjjy79",
  "specversion": "1.0",
  "id": "f2c24ca6-9ec8-4412-b32c-34f2de85d986",
  "source": "crn://confluent.cloud/",
  "time": "2022-09-12T15:50:30.566Z",
  "type": "io.confluent.kafka.server/request"
}

FAILURE - "CLUSTER_AUTHORIZATION_FAILED"

{
  "datacontenttype": "application/json",
  "data": {
    "serviceName": "crn://confluent.cloud/",
    "methodName": "kafka.CreateAcls",
    "cloudResources": [
      {
        "scope": {
          "resources": [
            {
              "type": "ORGANIZATION",
              "resourceId": "91a07ac9-9a13-491e-a2cf-46a9a5cf339c"
            },
            {
              "type": "ENVIRONMENT",
              "resourceId": "env-abc123"
            },
            {
              "type": "CLOUD_CLUSTER",
              "resourceId": "lkc-rjjy79"
            }
          ]
        },
        "resource": {
          "type": "KAFKA_CLUSTER",
          "resourceId": "lkc-rjjy79"
        }
      }
    ],
    "authenticationInfo": {
      "principal": {
        "confluentUser": {
          "resourceId": "u-v8kwpp"
        }
      },
      "result": "SUCCESS"
    },
    "authorizationInfo": {
      "result": "DENY"
    },
    "requestMetadata": {
      "connectionId": "166392514641100031",
      "requestId": [
        "166392514655100009"
      ],
      "clientId": "adminclient-25564",
      "clientAddress": [
        {
          "ip": "1.2.3.4"
        }
      ]
    },
    "request": {
      "accessType": "MODIFICATION",
      "data": {
        "creations": [
          {
            "resourceType": "TOPIC",
            "resourceName": "testAuditLog",
            "resourcePatternType": "LITERAL",
            "principal": "User:Alilce",
            "host": "*",
            "operation": "READ",
            "permissionType": "ALLOW"
          },
          {
            "resourceType": "TOPIC",
            "resourceName": "testAuditLog",
            "resourcePatternType": "LITERAL",
            "principal": "User:Alice",
            "host": "*",
            "operation": "DESCRIBE",
            "permissionType": "ALLOW"
          }
        ]
     }
    },
    "result": {
      "status": "FAILURE",
      "data": {
        "results": [
          {
            "errorCode": 31,
            "errorMessage": "Error Occurred"
          },
          {
            "errorCode": 31,
            "errorMessage": "Error Occurred"
          }
        ]
      }
    },
    "resourceName": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/environment=env-abc123/cloud-cluster=lkc-rjjy79/kafka=lkc-rjjy79"
  },
  "subject": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/environment=env-abc123/cloud-cluster=lkc-rjjy79/kafka=lkc-rjjy79",
  "specversion": "1.0",
  "id": "83d52480-b379-4b5f-a56d-fad18b24fc94",
  "source": "crn://confluent.cloud/",
  "time": "2022-09-23T09:25:46.566Z",
  "type": "io.confluent.kafka.server/request"
}

kafka.CreateClusterLinks

The kafka.CreateClusterLinks event method is triggered by a request to create a cluster link between this and another cluster.

SUCCESS

{
  "datacontenttype": "application/json",
  "data": {
    "serviceName": "crn://confluent.cloud/",
    "methodName": "kafka.CreateClusterLinks",
    "cloudResources": [
      {
        "scope": {
          "resources": [
            {
              "type": "ORGANIZATION",
              "resourceId": "91a07ac9-9a13-491e-a2cf-46a9a5cf339c"
            },
            {
              "type": "ENVIRONMENT",
              "resourceId": "env-abc123"
            },
            {
              "type": "CLOUD_CLUSTER",
              "resourceId": "lkc-2jrm1o"
            },
            {
              "type": "KAFKA_CLUSTER",
              "resourceId": "lkc-2jrm1o"
            }
          ]
        },
        "resource": {
          "type": "CLUSTER_LINK",
          "resourceId": "Link_0"
        }
      }
    ],
    "authenticationInfo": {
      "principal": {
        "confluentUser": {
          "resourceId": "u-ok7gjy"
        }
      },
      "result": "SUCCESS"
    },
    "authorizationInfo": {
      "result": "ALLOW"
    },
    "requestMetadata": {
      "connectionId": "166417237945300022",
      "requestId": [
        "166417237946400010"
      ],
      "clientId": "proxy:1856049",
      "clientAddress": [
        {
          "ip": "1.2.3.4"
        }
      ]
    },
    "request": {
      "accessType": "MODIFICATION",
      "data": {
        "linkName": "Link_0",
        "linkId": "AAAAAAAAAAAAAAAAAAAAAA",
        "clusterId": "lkc-rjjy79",
        "configs": [
          {
            "key": "auto.create.mirror.topics.filters",
            "value": "{\"topicFilters\":[{\"name\":\"test-link-\",\"patternType\":\"PREFIXED\",\"filterType\":\"INCLUDE\"}]}"
          },
          {
            "key": "auto.create.mirror.topics.enable",
            "value": "true"
          },
          {
            "key": "bootstrap.servers",
            "value": "pkc-xyz.us-central1.gcp.confluent.cloud:9092"
          },
          {
            "key": "consumer.offset.sync.enable",
            "value": "false"
          },
          {
            "key": "acl.sync.enable",
            "value": "false"
          }
        ],
        "validateOnly": false,
        "validateLink": false
      }
    },
    "result": {
      "status": "SUCCESS",
      "data": {
        "message": "",
        "errorCode": 0,
        "errorType": "NONE",
        "linkName": "Link_0",
        "linkId": "Dr-a1ZgRTdOmQSfrY9UrtA"
      }
    },
    "resourceName": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/environment=env-abc123/cloud-cluster=lkc-2jrm1o/kafka=lkc-2jrm1o/link=Link_0"
  },
  "subject": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/environment=env-abc123/cloud-cluster=lkc-2jrm1o/kafka=lkc-2jrm1o/link=Link_0",
  "specversion": "1.0",
  "id": "24986793-4afd-437c-baab-b7d30ab6ae07",
  "source": "crn://confluent.cloud/",
  "time": "2022-09-26T06:06:19.652Z",
  "type": "io.confluent.kafka.server/request"
}

FAILURE - "INVALID_CONFIG"

{
  "datacontenttype": "application/json",
  "data": {
    "serviceName": "crn://confluent.cloud/",
    "methodName": "kafka.CreateClusterLinks",
    "cloudResources": [
      {
        "scope": {
          "resources": [
            {
              "type": "ORGANIZATION",
              "resourceId": "91a07ac9-9a13-491e-a2cf-46a9a5cf339c"
            },
            {
              "type": "ENVIRONMENT",
              "resourceId": "env-abc123"
            },
            {
              "type": "CLOUD_CLUSTER",
              "resourceId": "lkc-rjjy79"
            },
            {
              "type": "KAFKA_CLUSTER",
              "resourceId": "lkc-rjjy79"
            }
          ]
        },
        "resource": {
          "type": "CLUSTER_LINK",
          "resourceId": "from-on-prem-link2"
        }
      }
    ],
    "authenticationInfo": {
      "principal": {
        "confluentUser": {
          "resourceId": "u-ok7gjy"
        }
      },
      "result": "SUCCESS"
    },
    "authorizationInfo": {
      "result": "ALLOW"
    },
    "requestMetadata": {
      "connectionId": "166392952395900034",
      "requestId": [
        "166392952568400010"
      ],
      "clientId": "adminclient-1",
      "clientAddress": [
        {
          "ip": "1.2.3.4"
        }
      ]
    },
    "request": {
      "accessType": "MODIFICATION",
      "data": {
        "linkName": "from-on-prem-link2",
        "linkId": "AAAAAAAAAAAAAAAAAAAAAA",
        "clusterId": "lkc-rjjy79",
        "configs": [
          {
            "key": "abc",
            "value": "[hidden]"
          }
        ],
        "validateOnly": false,
        "validateLink": true
      }
    },
    "result": {
      "status": "FAILURE",
      "data": {
        "message": "Unable to validate cluster link due to error: Unable to create client using provided properties when validating the cluster link: Missing required configuration \"bootstrap.servers\" which has no default value., root cause: org.apache.kafka.common.config.ConfigException: Missing required configuration \"bootstrap.servers\" which has no default value.",
        "errorCode": 40,
        "errorType": "INVALID_CONFIG",
        "linkName": "from-on-prem-link2",
        "linkId": "AAAAAAAAAAAAAAAAAAAAAA"
      }
    },
    "resourceName": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/environment=env-abc123/cloud-cluster=lkc-rjjy79/kafka=lkc-rjjy79/link=from-on-prem-link2"
  },
  "subject": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/environment=env-abc123/cloud-cluster=lkc-rjjy79/kafka=lkc-rjjy79/link=from-on-prem-link2",
  "specversion": "1.0",
  "id": "f3bc1313-d8ac-4ed0-818e-da9fbe96d507",
  "source": "crn://confluent.cloud/",
  "time": "2022-09-23T10:38:45.696Z",
  "type": "io.confluent.kafka.server/request"
}

kafka.CreatePartitions

The kafka.CreatePartitions event method is triggered by a request to add partitions to a Kafka topic.

SUCCESS

{
  "datacontenttype": "application/json",
  "data": {
    "serviceName": "crn://confluent.cloud/",
    "methodName": "kafka.CreatePartitions",
    "cloudResources": [
      {
        "scope": {
          "resources": [
            {
              "type": "ORGANIZATION",
              "resourceId": "91a07ac9-9a13-491e-a2cf-46a9a5cf339c"
            },
            {
              "type": "ENVIRONMENT",
              "resourceId": "env-abc123"
            },
            {
              "type": "CLOUD_CLUSTER",
              "resourceId": "lkc-rjjy79"
            },
            {
              "type": "KAFKA_CLUSTER",
              "resourceId": "lkc-rjjy79"
            }
          ]
        },
        "resource": {
          "type": "TOPIC",
          "resourceId": "topicAuditLog"
        }
      }
    ],
    "authenticationInfo": {
      "principal": {
        "confluentUser": {
          "resourceId": "u-ok7gjy"
        }
      },
      "result": "SUCCESS"
    },
    "authorizationInfo": {
      "result": "ALLOW"
    },
    "requestMetadata": {
      "connectionId": "166296051087600003",
      "requestId": [
        "166296051255700011"
      ],
      "clientId": "adminclient-1",
      "clientAddress": [
        {
          "ip": "1.2.3.4"
        }
      ]
    },
    "request": {
      "accessType": "MODIFICATION",
      "data": {
        "name": "topicAuditLog",
        "count": 4,
        "assignments": null,
        "validateOnly": false
      }
    },
    "result": {
      "status": "SUCCESS",
      "data": {
        "message": null,
        "errorCode": 0,
        "errorType": "NONE"
      }
    },
    "resourceName": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/environment=env-abc123/cloud-cluster=lkc-rjjy79/kafka=lkc-rjjy79/topic=topicAuditLog"
  },
  "subject": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/environment=env-abc123/cloud-cluster=lkc-rjjy79/kafka=lkc-rjjy79/topic=topicAuditLog",
  "specversion": "1.0",
  "id": "974638aa-7db9-4dc6-b490-668e3b848abb",
  "source": "crn://confluent.cloud/",
  "time": "2022-09-12T05:28:32.607Z",
  "type": "io.confluent.kafka.server/request"
}

FAILURE - "INVALID_PARTITIONS"

{
  "datacontenttype": "application/json",
  "data": {
    "serviceName": "crn://confluent.cloud/",
    "methodName": "kafka.CreatePartitions",
    "cloudResources": [
      {
        "scope": {
          "resources": [
            {
              "type": "ORGANIZATION",
              "resourceId": "91a07ac9-9a13-491e-a2cf-46a9a5cf339c"
            },
            {
              "type": "ENVIRONMENT",
              "resourceId": "env-abc123"
            },
            {
              "type": "CLOUD_CLUSTER",
              "resourceId": "lkc-rjjy79"
            },
            {
              "type": "KAFKA_CLUSTER",
              "resourceId": "lkc-rjjy79"
            }
          ]
        },
        "resource": {
          "type": "TOPIC",
          "resourceId": "topicAuditLog"
        }
      }
    ],
    "authenticationInfo": {
      "principal": {
        "confluentUser": {
          "resourceId": "u-ok7gjy"
        }
      },
      "result": "SUCCESS"
    },
    "authorizationInfo": {
      "result": "ALLOW"
    },
    "requestMetadata": {
      "connectionId": "166392415443600034",
      "requestId": [
        "166392415677400009"
      ],
      "clientId": "adminclient-1",
      "clientAddress": [
        {
          "ip": "1.2.3.4"
        }
      ]
    },
    "request": {
      "accessType": "MODIFICATION",
      "data": {
        "name": "topicAuditLog",
        "count": -1,
        "assignments": null,
        "validateOnly": false
      }
    },
    "result": {
      "status": "FAILURE",
      "data": {
        "message": "Cannot create -1 new partitions.",
        "errorCode": 37,
        "errorType": "INVALID_PARTITIONS"
      }
    },
    "resourceName": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/environment=env-abc123/cloud-cluster=lkc-rjjy79/kafka=lkc-rjjy79/topic=topicAuditLog"
  },
  "subject": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/environment=env-abc123/cloud-cluster=lkc-rjjy79/kafka=lkc-rjjy79/topic=topicAuditLog",
  "specversion": "1.0",
  "id": "42de3ec9-f556-45a0-b99a-5778de3d13ba",
  "source": "crn://confluent.cloud/",
  "time": "2022-09-23T09:09:16.783Z",
  "type": "io.confluent.kafka.server/request"
}

kafka.CreateTopics

The kafka.CreateTopics event method is triggered by a request to create Kafka topics.

SUCCESS

{
  "datacontenttype": "application/json",
  "data": {
    "serviceName": "crn://confluent.cloud/",
    "methodName": "kafka.CreateTopics",
    "cloudResources": [
      {
        "scope": {
          "resources": [
            {
              "type": "ORGANIZATION",
              "resourceId": "91a07ac9-9a13-491e-a2cf-46a9a5cf339c"
            },
            {
              "type": "ENVIRONMENT",
              "resourceId": "env-abc123"
            },
            {
              "type": "CLOUD_CLUSTER",
              "resourceId": "lkc-rjjy79"
            },
            {
              "type": "KAFKA_CLUSTER",
              "resourceId": "lkc-rjjy79"
            }
          ]
        },
        "resource": {
          "type": "TOPIC",
          "resourceId": "topicAuditLog"
        }
      }
    ],
    "authenticationInfo": {
      "principal": {
        "confluentUser": {
          "resourceId": "u-ok7gjy"
        }
      },
      "result": "SUCCESS"
    },
    "authorizationInfo": {
      "result": "ALLOW"
    },
    "requestMetadata": {
      "connectionId": "166296002995700003",
      "requestId": [
        "166296003160700008"
      ],
      "clientId": "adminclient-1",
      "clientAddress": [
        {
          "ip": "1.2.3.4"
        }
      ]
    },
    "request": {
      "accessType": "MODIFICATION",
      "data": {
        "name": "topicAuditLog",
        "numPartitions": 3,
        "replicationFactor": 3,
        "assignments": [],
        "configs": [],
        "validateOnly": false
      }
    },
    "result": {
      "status": "SUCCESS",
      "data": {
        "message": null,
        "errorCode": 0,
        "errorType": "NONE"
      }
    },
    "resourceName": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/environment=env-abc123/cloud-cluster=lkc-rjjy79/kafka=lkc-rjjy79/topic=topicAuditLog"
  },
  "subject": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/environment=env-abc123/cloud-cluster=lkc-rjjy79/kafka=lkc-rjjy79/topic=topicAuditLog",
  "specversion": "1.0",
  "id": "96281aef-9ebd-4f31-a579-271477a256d9",
  "source": "crn://confluent.cloud/",
  "time": "2022-09-12T05:20:31.686Z",
  "type": "io.confluent.kafka.server/request"
}

FAILURE - "TOPIC_ALREADY_EXISTS"

{
  "datacontenttype": "application/json",
  "data": {
    "serviceName": "crn://confluent.cloud/",
    "methodName": "kafka.CreateTopics",
    "cloudResources": [
      {
        "scope": {
          "resources": [
            {
              "type": "ORGANIZATION",
              "resourceId": "91a07ac9-9a13-491e-a2cf-46a9a5cf339c"
            },
            {
              "type": "ENVIRONMENT",
              "resourceId": "env-abc123"
            },
            {
              "type": "CLOUD_CLUSTER",
              "resourceId": "lkc-rjjy79"
            },
            {
              "type": "KAFKA_CLUSTER",
              "resourceId": "lkc-rjjy79"
            }
          ]
        },
        "resource": {
          "type": "TOPIC",
          "resourceId": "topicAuditLog"
        }
      }
    ],
    "authenticationInfo": {
      "principal": {
        "confluentUser": {
          "resourceId": "u-ok7gjy"
        }
      },
      "result": "SUCCESS"
    },
    "authorizationInfo": {
      "result": "ALLOW"
    },
    "requestMetadata": {
      "connectionId": "166384414191900034",
      "requestId": [
        "166384414357500008"
      ],
      "clientId": "adminclient-1",
      "clientAddress": [
        {
          "ip": "1.2.3.4"
        }
      ]
    },
    "request": {
      "accessType": "MODIFICATION",
      "data": {
        "name": "topicAuditLog",
        "numPartitions": 3,
        "replicationFactor": 3,
        "assignments": [],
        "configs": [],
        "validateOnly": false
      }
    },
    "result": {
      "status": "FAILURE",
      "data": {
        "message": "Topic 'topicAuditLog' already exists.",
        "errorCode": 36,
        "errorType": "TOPIC_ALREADY_EXISTS"
      }
    },
    "resourceName": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/environment=env-abc123/cloud-cluster=lkc-rjjy79/kafka=lkc-rjjy79/topic=topicAuditLog"
  },
  "subject": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/environment=env-abc123/cloud-cluster=lkc-rjjy79/kafka=lkc-rjjy79/topic=topicAuditLog",
  "specversion": "1.0",
  "id": "f25e085c-dd6b-417c-b7aa-e0853708b714",
  "source": "crn://confluent.cloud/",
  "time": "2022-09-22T10:55:43.577Z",
  "type": "io.confluent.kafka.server/request"
}

kafka.DeleteAcls

The kafka.DeleteAcls event method is triggered by a request to delete a Kafka broker ACL.

SUCCESS

{
  "datacontenttype": "application/json",
  "data": {
    "serviceName": "crn://confluent.cloud/",
    "methodName": "kafka.DeleteAcls",
    "cloudResources": [
      {
        "scope": {
          "resources": [
            {
              "type": "ORGANIZATION",
              "resourceId": "91a07ac9-9a13-491e-a2cf-46a9a5cf339c"
            },
            {
              "type": "ENVIRONMENT",
              "resourceId": "env-abc123"
            },
            {
              "type": "CLOUD_CLUSTER",
              "resourceId": "lkc-rjjy79"
            }
          ]
        },
        "resource": {
          "type": "KAFKA_CLUSTER",
          "resourceId": "lkc-rjjy79"
        }
      }
    ],
    "authenticationInfo": {
      "principal": {
        "confluentUser": {
          "resourceId": "u-ok7gjy"
        }
      },
      "result": "SUCCESS"
    },
    "authorizationInfo": {
      "result": "ALLOW"
    },
    "requestMetadata": {
      "connectionId": "166299794190500034",
      "requestId": [
        "166299794354400008"
      ],
      "clientId": "adminclient-1",
      "clientAddress": [
        {
          "ip": "1.2.3.4"
        }
      ]
    },
    "request": {
      "accessType": "MODIFICATION",
      "data": {
        "filters": [
          {
            "resourceTypeFilter": "TOPIC",
            "resourceNameFilter": "topicAuditLog",
            "patternTypeFilter": "LITERAL",
            "principalFilter": "User:Alice",
            "hostFilter": "*",
            "operation": "WRITE",
            "permissionType": "ALLOW"
          }
        ]
      }
    },
    "result": {
      "status": "SUCCESS",
      "data": {
        "filterResults": [
          {
            "errorCode": 0,
            "errorMessage": null,
            "matchingAcls": [
              {
                "errorCode": 0,
                "errorMessage": null,
                "resourceType": "TOPIC",
                "resourceName": "topicAuditLog",
                "patternType": "LITERAL",
                "principal": "User:Alice",
                "host": "*",
                "operation": "WRITE",
                "permissionType": "ALLOW"
              }
            ]
          }
        ]
      }
    },
    "resourceName": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/environment=env-abc123/cloud-cluster=lkc-rjjy79/kafka=lkc-rjjy79"
  },
  "subject": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/environment=env-abc123/cloud-cluster=lkc-rjjy79/kafka=lkc-rjjy79",
  "specversion": "1.0",
  "id": "7bae9e4c-549d-4325-a573-f18d4fff7cdf",
  "source": "crn://confluent.cloud/",
  "time": "2022-09-12T15:52:23.553Z",
  "type": "io.confluent.kafka.server/request"
}

FAILURE - "CLUSTER_AUTHORIZATION_FAILED"

{
  "datacontenttype": "application/json",
  "data": {
    "serviceName": "crn://confluent.cloud/",
    "methodName": "kafka.DeleteAcls",
    "cloudResources": [
      {
        "scope": {
          "resources": [
            {
              "type": "ORGANIZATION",
              "resourceId": "91a07ac9-9a13-491e-a2cf-46a9a5cf339c"
            },
            {
              "type": "ENVIRONMENT",
              "resourceId": "env-abc123"
            },
            {
              "type": "CLOUD_CLUSTER",
              "resourceId": "lkc-rjjy79"
            }
          ]
        },
        "resource": {
          "type": "KAFKA_CLUSTER",
          "resourceId": "lkc-rjjy79"
        }
      }
    ],
    "authenticationInfo": {
      "principal": {
        "confluentUser": {
          "resourceId": "u-ok7gjy"
        }
      },
      "result": "SUCCESS"
    },
    "authorizationInfo": {
      "result": "ALLOW"
    },
    "requestMetadata": {
      "connectionId": "166391711194500000",
      "requestId": [
        "166391711374800008"
      ],
      "clientId": "adminclient-1",
      "clientAddress": [
        {
          "ip": "1.2.3.4"
        }
      ]
    },
    "request": {
      "accessType": "MODIFICATION",
      "data": {
        "filters": [
          {
            "resourceTypeFilter": "TOPIC",
            "resourceNameFilter": "topicAuditLog",
            "patternTypeFilter": "LITERAL",
            "principalFilter": "User:Alice",
            "hostFilter": "*",
            "operation": "WRITE",
            "permissionType": "ALLOW"
          }
        ]
      }
    },
    "result": {
      "status": "FAILURE",
      "data": {
        "filterResults": [
          {
            "errorCode": 31,
            "errorMessage": "Request DELETE_ACLS is not authorized",
            "matchingAcls": []
          }
        ]
      }
    },
    "resourceName": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/environment=env-abc123/cloud-cluster=lkc-rjjy79/kafka=lkc-rjjy79"
  },
  "subject": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/environment=env-abc123/cloud-cluster=lkc-rjjy79/kafka=lkc-rjjy79",
  "specversion": "1.0",
  "id": "330ebbfa-9f60-4405-b1be-5c402a5d0400",
  "source": "crn://confluent.cloud/",
  "time": "2022-09-23T07:11:53.792Z",
  "type": "io.confluent.kafka.server/request"
}

kafka.DeleteClusterLinks

The kafka.DeleteClusterLinks event method is triggered by a request to delete cluster links.

SUCCESS

{
   "specversion":"1.0",
   "id":"bd1550e6-97a5-4cab-979c-11b0ecc509a2",
   "source":"crn://confluent.cloud/organization=orgId/environment=envId/cloud-cluster=lkc-test1/kafka=lkc-test1",
   "type":"io.confluent.kafka.server/request",
   "datacontenttype":"application/json",
   "subject":"crn://confluent.cloud/organization=orgId/environment=envId/cloud-cluster=lkc-test1/kafka=lkc-test1/link=foo",
   "time":"2022-04-11T08:51:00Z",
   "data":{
      "serviceName":"crn://confluent.cloud/organization=orgId/environment=envId/cloud-cluster=lkc-test1/kafka=lkc-test1",
      "internalServiceName":"",
      "methodName":"kafka.DeleteClusterLinks",
      "cloudResources":[
         {
            "scope":{
               "resources":[
                  {
                     "type":"ORGANIZATION",
                     "resourceId":"orgId",
                     "internalId":""
                  },
                  {
                     "type":"ENVIRONMENT",
                     "resourceId":"envId",
                     "internalId":""
                  },
                  {
                     "type":"CLOUD_CLUSTER",
                     "resourceId":"lkc-test1",
                     "internalId":""
                  },
                  {
                     "type":"KAFKA_CLUSTER",
                     "resourceId":"lkc-test1",
                     "internalId":""
                  }
               ]
            },
            "resource":{
               "type":"CLUSTER_LINK",
               "resourceId":"foo",
               "internalId":""
            }
         }
      ],
      "authenticationInfo":{
         "exposure":"INTERNAL",
         "principal":{
            "email":"",
            "confluentUser":{
               "resourceId":"sa-Alice",
               "internalId":""
            }
         },
         "result":"SUCCESS",
         "errorMessage":""
      },
      "authorizationInfo":{
         "result":"ALLOW",
         "dryRun":false,
         "operation":""
      },
      "requestMetadata":{
         "connectionId":"",
         "requestId":[

         ],
         "clientAddress": [
            {
               "ip": "1.2.3.4"
            }
         ],
         "clientId":"test_client_id",
         "clientTraceId":"",
         "serviceTraceId":"",
         "serviceSpanId":"",
         "requestType":"HTTP",
         "requestPath":""
      },
      "request":{
         "accessType":"MODIFICATION",
         "schema":"",
         "data":{
            "linkName":"foo",
            "validateOnly":false,
            "force":false
         }
      },
      "result":{
         "status":"SUCCESS",
         "schema":"",
         "data":{
            "message":"",
            "errorCode":0.0,
            "errorType":"NONE"
         }
      },
      "platformResources":[

      ],
      "resourceName":"crn://confluent.cloud/organization=orgId/environment=envId/cloud-cluster=lkc-test1/kafka=lkc-test1/link=foo"
   }
}

FAILURE - "CLUSTER_LINK_NOT_FOUND"

{
  "datacontenttype": "application/json",
  "data": {
    "serviceName": "crn://confluent.cloud/",
    "methodName": "kafka.DeleteClusterLinks",
    "cloudResources": [
      {
        "scope": {
          "resources": [
            {
              "type": "ORGANIZATION",
              "resourceId": "91a07ac9-9a13-491e-a2cf-46a9a5cf339c"
            },
            {
              "type": "ENVIRONMENT",
              "resourceId": "env-abc123"
            },
            {
              "type": "CLOUD_CLUSTER",
              "resourceId": "lkc-rjjy79"
            },
            {
              "type": "KAFKA_CLUSTER",
              "resourceId": "lkc-rjjy79"
            }
          ]
        },
        "resource": {
          "type": "CLUSTER_LINK",
          "resourceId": "link1"
        }
      }
    ],
    "authenticationInfo": {
      "principal": {
        "confluentUser": {
          "resourceId": "u-ok7gjy"
        }
      },
      "result": "SUCCESS"
    },
    "authorizationInfo": {
      "result": "ALLOW"
    },
    "requestMetadata": {
      "connectionId": "166394454735400034",
      "requestId": [
        "166394454899300008"
      ],
      "clientId": "adminclient-1",
      "clientAddress": [
        {
          "ip": "1.2.3.4"
        }
      ]
    },
    "request": {
      "accessType": "MODIFICATION",
      "data": {
        "linkName": "link1",
        "validateOnly": false,
        "force": false
      }
    },
    "result": {
      "status": "FAILURE",
      "data": {
        "message": "Cluster link 'link1' does not exist.",
        "errorCode": 10000,
        "errorType": "CLUSTER_LINK_NOT_FOUND"
      }
    },
    "resourceName": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/environment=env-abc123/cloud-cluster=lkc-rjjy79/kafka=lkc-rjjy79/link=link1"
  },
  "subject": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/environment=env-abc123/cloud-cluster=lkc-rjjy79/kafka=lkc-rjjy79/link=link1",
  "specversion": "1.0",
  "id": "0fb062d8-2b70-4645-bd98-40e9b3b8906c",
  "source": "crn://confluent.cloud/",
  "time": "2022-09-23T14:49:08.995Z",
  "type": "io.confluent.kafka.server/request"
}

kafka.DeleteGroups

The kafka.DeleteGroups event method is triggered by a request to delete Kafka consumer groups.

SUCCESS

{
  "datacontenttype": "application/json",
  "data": {
    "serviceName": "crn://confluent.cloud/",
    "methodName": "kafka.DeleteGroups",
    "cloudResources": [
      {
        "scope": {
          "resources": [
            {
              "type": "ORGANIZATION",
              "resourceId": "91a07ac9-9a13-491e-a2cf-46a9a5cf339c"
            },
            {
              "type": "ENVIRONMENT",
              "resourceId": "env-abc123"
            },
            {
              "type": "CLOUD_CLUSTER",
              "resourceId": "lkc-rjjy79"
            },
            {
              "type": "KAFKA_CLUSTER",
              "resourceId": "lkc-rjjy79"
            }
          ]
        },
        "resource": {
          "type": "GROUP",
          "resourceId": "topic2_temp"
        }
      }
    ],
    "authenticationInfo": {
      "principal": {
        "confluentUser": {
          "resourceId": "u-ok7gjy"
        }
      },
      "result": "SUCCESS"
    },
    "authorizationInfo": {
      "result": "ALLOW"
    },
    "requestMetadata": {
      "connectionId": "166264237970200034",
      "requestId": [
        "166264238153800009"
      ],
      "clientId": "adminclient-1",
      "clientAddress": [
        {
          "ip": "1.2.3.4"
        }
      ]
    },
    "request": {
      "accessType": "MODIFICATION",
      "data": {
        "groupName": "topic2_temp"
      }
    },
    "result": {
      "status": "SUCCESS",
      "data": {
        "message": "",
        "errorCode": 0,
        "errorType": "NONE"
      }
    },
    "resourceName": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/environment=env-abc123/cloud-cluster=lkc-rjjy79/kafka=lkc-rjjy79/group=topic2_temp"
  },
  "subject": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/environment=env-abc123/cloud-cluster=lkc-rjjy79/kafka=lkc-rjjy79/group=topic2_temp",
  "specversion": "1.0",
  "id": "88784d7c-007a-4aab-904d-6bbbdda74a59",
  "source": "crn://confluent.cloud/",
  "time": "2022-09-08T13:06:21.545Z",
  "type": "io.confluent.kafka.server/request"
}

FAILURE - "GROUP_ID_NOT_FOUND"

{
  "datacontenttype": "application/json",
  "data": {
    "serviceName": "crn://confluent.cloud/",
    "methodName": "kafka.DeleteGroups",
    "cloudResources": [
      {
        "scope": {
          "resources": [
            {
              "type": "ORGANIZATION",
              "resourceId": "91a07ac9-9a13-491e-a2cf-46a9a5cf339c"
            },
            {
              "type": "ENVIRONMENT",
              "resourceId": "env-abc123"
            },
            {
              "type": "CLOUD_CLUSTER",
              "resourceId": "lkc-rjjy79"
            },
            {
              "type": "KAFKA_CLUSTER",
              "resourceId": "lkc-rjjy79"
            }
          ]
        },
        "resource": {
          "type": "GROUP",
          "resourceId": "lkc-rjjy79_topic2_temp"
        }
      }
    ],
    "authenticationInfo": {
      "principal": {
        "confluentUser": {
          "resourceId": "u-ok7gjy"
        }
      },
      "result": "SUCCESS"
    },
    "authorizationInfo": {
      "result": "ALLOW"
    },
    "requestMetadata": {
      "connectionId": "166392233327700051",
      "requestId": [
        "166392233529100009"
      ],
      "clientId": "adminclient-1",
      "clientAddress": [
        {
          "ip": "1.2.3.4"
        }
      ]
    },
    "request": {
      "accessType": "MODIFICATION",
      "data": {
        "groupName": "lkc-rjjy79_topic2_temp"
      }
    },
    "result": {
      "status": "FAILURE",
      "data": {
        "message": "",
        "errorCode": 69,
        "errorType": "GROUP_ID_NOT_FOUND"
      }
    },
    "resourceName": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/environment=env-abc123/cloud-cluster=lkc-rjjy79/kafka=lkc-rjjy79/group=lkc-rjjy79_topic2_temp"
  },
  "subject": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/environment=env-abc123/cloud-cluster=lkc-rjjy79/kafka=lkc-rjjy79/group=lkc-rjjy79_topic2_temp",
  "specversion": "1.0",
  "id": "f5e6b7f7-8708-48e0-bc72-50e7aa9e755f",
  "source": "crn://confluent.cloud/",
  "time": "2022-09-23T08:38:55.305Z",
  "type": "io.confluent.kafka.server/request"
}

kafka.DeleteTopics

The kafka.DeleteTopics event method is triggered by a request to delete Kafka topics.

SUCCESS

{
  "datacontenttype": "application/json",
  "data": {
    "serviceName": "crn://confluent.cloud/",
    "methodName": "kafka.DeleteTopics",
    "cloudResources": [
      {
        "scope": {
          "resources": [
            {
              "type": "ORGANIZATION",
              "resourceId": "91a07ac9-9a13-491e-a2cf-46a9a5cf339c"
            },
            {
              "type": "ENVIRONMENT",
              "resourceId": "env-abc123"
            },
            {
              "type": "CLOUD_CLUSTER",
              "resourceId": "lkc-rjjy79"
            },
            {
              "type": "KAFKA_CLUSTER",
              "resourceId": "lkc-rjjy79"
            }
          ]
        },
        "resource": {
          "type": "TOPIC",
          "resourceId": "topicAuditLog"
        }
      }
    ],
    "authenticationInfo": {
      "principal": {
        "confluentUser": {
          "resourceId": "u-ok7gjy"
        }
      },
      "result": "SUCCESS"
    },
    "authorizationInfo": {
      "result": "ALLOW"
    },
    "requestMetadata": {
      "connectionId": "166296034962900003",
      "requestId": [
        "166296035138100009"
      ],
      "clientId": "adminclient-1",
      "clientAddress": [
        {
          "ip": "1.2.3.4"
        }
      ]
    },
    "request": {
      "accessType": "MODIFICATION",
      "data": {
        "name": "topicAuditLog"
      }
    },
    "result": {
      "status": "SUCCESS",
      "data": {
        "message": null,
        "errorCode": 0,
        "errorType": "NONE"
      }
    },
    "resourceName": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/environment=env-abc123/cloud-cluster=lkc-rjjy79/kafka=lkc-rjjy79/topic=topicAuditLog"
  },
  "subject": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/environment=env-abc123/cloud-cluster=lkc-rjjy79/kafka=lkc-rjjy79/topic=topicAuditLog",
  "specversion": "1.0",
  "id": "d58d10ee-bfd4-4a60-a3d0-538ba6d2ca39",
  "source": "crn://confluent.cloud/",
  "time": "2022-09-12T05:25:51.392Z",
  "type": "io.confluent.kafka.server/request"
}

FAILURE - "UNKNOWN_TOPIC_OR_PARTITION"

{
  "datacontenttype": "application/json",
  "data": {
    "serviceName": "crn://confluent.cloud/",
    "methodName": "kafka.DeleteTopics",
    "cloudResources": [
      {
        "scope": {
          "resources": [
            {
              "type": "ORGANIZATION",
              "resourceId": "91a07ac9-9a13-491e-a2cf-46a9a5cf339c"
            },
            {
              "type": "ENVIRONMENT",
              "resourceId": "env-abc123"
            },
            {
              "type": "CLOUD_CLUSTER",
              "resourceId": "lkc-rjjy79"
            },
            {
              "type": "KAFKA_CLUSTER",
              "resourceId": "lkc-rjjy79"
            }
          ]
        },
        "resource": {
          "type": "TOPIC",
          "resourceId": "topicAuditLog123"
        }
      }
    ],
    "authenticationInfo": {
      "principal": {
        "confluentUser": {
          "resourceId": "u-ok7gjy"
        }
      },
      "result": "SUCCESS"
    },
    "authorizationInfo": {
      "result": "ALLOW"
    },
    "requestMetadata": {
      "connectionId": "166392403310200034",
      "requestId": [
        "166392403317900009"
      ],
      "clientId": "adminclient-10467",
      "clientAddress": [
        {
          "ip": "1.2.3.4"
        }
      ]
    },
    "request": {
      "accessType": "MODIFICATION",
      "data": {
        "name": "topicAuditLog123"
      }
    },
    "result": {
      "status": "FAILURE",
      "data": {
        "message": null,
        "errorCode": 3,
        "errorType": "UNKNOWN_TOPIC_OR_PARTITION"
      }
    },
    "resourceName": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/environment=env-abc123/cloud-cluster=lkc-rjjy79/kafka=lkc-rjjy79/topic=topicAuditLog123"
  },
  "subject": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/environment=env-abc123/cloud-cluster=lkc-rjjy79/kafka=lkc-rjjy79/topic=topicAuditLog123",
  "specversion": "1.0",
  "id": "c8992afa-c188-4165-87fb-94cba6be457f",
  "source": "crn://confluent.cloud/",
  "time": "2022-09-23T09:07:13.183Z",
  "type": "io.confluent.kafka.server/request"
}

kafka.Fetch

The kafka.Fetch event method is triggered by a request from a Kafka consumer to read a batch of records from a Kafka topic. Only the first fetch request per connection (identified by connection ID) generates an auditable event.

SUCCESS

{
  "datacontenttype": "application/json",
  "data": {
    "serviceName": "crn://confluent.cloud/",
    "methodName": "kafka.Fetch",
    "cloudResources": [
      {
        "scope": {
          "resources": [
            {
              "type": "ORGANIZATION",
              "resourceId": "351a9861-bfad-4a12-8196-9aac20815d00"
            },
            {
              "type": "ENVIRONMENT",
              "resourceId": "env-pj1v2m"
            },
            {
              "type": "CLOUD_CLUSTER",
              "resourceId": "lkc-3dr2z0"
            },
            {
              "type": "KAFKA_CLUSTER",
              "resourceId": "lkc-3dr2z0"
            }
          ]
        },
        "resource": {
          "type": "TOPIC",
          "resourceId": "R2JSrfGMSWqToy9nt_LSyw"
        }
      }
    ],
    "authenticationInfo": {
      "principal": {
        "confluentUser": {
          "resourceId": "u-0kxozp"
        }
      },
      "result": "SUCCESS",
      "identity": "crn://confluent.cloud/organization=351a9861-bfad-4a12-8196-9aac20815d00/identity-provider=Confluent/identity=u-0kxozp"
    },
    "authorizationInfo": {
      "result": "ALLOW"
    },
    "requestMetadata": {
      "connectionId": "168485009819200057",
      "requestId": [
        "168485010019300002"
      ],
      "clientId": "consumer-yep-1",
      "clientAddress": [
        {
          "ip": "1.2.3.4"
        }
      ]
    },
    "request": {
      "accessType": "MODIFICATION",
      "data": {
        "partition": null,
        "offset": null
      }
    },
    "result": {
      "status": "SUCCESS",
      "data": {
        "message": "NONE",
        "errorCode": 0,
        "errorType": "NONE"
      }
    },
    "resourceName": "crn://confluent.cloud/organization=351a9861-bfad-4a12-8196-9aac20815d00/environment=env-pj1v2m/cloud-cluster=lkc-3dr2z0/kafka=lkc-3dr2z0/topic=R2JSrfGMSWqToy9nt_LSyw"
  },
  "subject": "crn://confluent.cloud/organization=351a9861-bfad-4a12-8196-9aac20815d00/environment=env-pj1v2m/cloud-cluster=lkc-3dr2z0/kafka=lkc-3dr2z0/topic=R2JSrfGMSWqToy9nt_LSyw",
  "specversion": "1.0",
  "id": "268c2ad0-cb17-4ada-8006-3388429fe719",
  "source": "crn://confluent.cloud/",
  "time": "2023-05-23T13:55:00.194663126Z",
  "type": "io.confluent.kafka.server/request"
}

FAILURE - "Topic authorization failed"

{
  "datacontenttype": "application/json",
  "data": {
    "serviceName": "crn://confluent.cloud/",
    "methodName": "kafka.Fetch",
    "cloudResources": [
      {
        "scope": {
          "resources": [
            {
              "type": "ORGANIZATION",
              "resourceId": "351a9861-bfad-4a12-8196-9aac20815d00"
            },
            {
              "type": "ENVIRONMENT",
              "resourceId": "env-pj1v2m"
            },
            {
              "type": "CLOUD_CLUSTER",
              "resourceId": "lkc-3dr2z0"
            },
            {
              "type": "KAFKA_CLUSTER",
              "resourceId": "lkc-3dr2z0"
            }
          ]
        },
        "resource": {
          "type": "TOPIC",
          "resourceId": "R2JSrfGMSWqToy9nt_LSyw"
        }
      }
    ],
    "authenticationInfo": {
      "principal": {
        "confluentServiceAccount": {
          "resourceId": "sa-j2z32m"
        }
      },
      "result": "SUCCESS",
      "identity": "crn://confluent.cloud/organization=351a9861-bfad-4a12-8196-9aac20815d00/identity-provider=Confluent/identity=sa-j2z32m"
    },
    "authorizationInfo": {
      "result": "DENY"
    },
    "requestMetadata": {
      "connectionId": "168486288116500091",
      "requestId": [
        "168486288296800001"
      ],
      "clientId": "consumer-nike-1",
      "clientAddress": [
        {
          "ip": "1.2.3.4"
        }
      ]
    },
    "request": {
      "accessType": "MODIFICATION",
      "data": {
        "partition": null,
        "offset": null
      }
    },
    "result": {
      "status": "FAILURE",
      "data": {
        "message": "Topic authorization failed.",
        "errorCode": 29,
        "errorType": "TOPIC_AUTHORIZATION_FAILED"
      }
    },
    "resourceName": "crn://confluent.cloud/organization=351a9861-bfad-4a12-8196-9aac20815d00/environment=env-pj1v2m/cloud-cluster=lkc-3dr2z0/kafka=lkc-3dr2z0/topic=R2JSrfGMSWqToy9nt_LSyw"
  },
  "subject": "crn://confluent.cloud/organization=351a9861-bfad-4a12-8196-9aac20815d00/environment=env-pj1v2m/cloud-cluster=lkc-3dr2z0/kafka=lkc-3dr2z0/topic=R2JSrfGMSWqToy9nt_LSyw",
  "specversion": "1.0",
  "id": "569b9484-a553-40b9-b47f-268285754354",
  "source": "crn://confluent.cloud/",
  "time": "2023-05-23T17:28:02.970434803Z",
  "type": "io.confluent.kafka.server/request"
}

kafka.IncrementalAlterConfigs

The kafka.IncrementalAlterConfigs event method is triggered by a request to update or alter the dynamic configuration of a Kafka broker.

SUCCESS

{
  "datacontenttype": "application/json",
  "data": {
    "serviceName": "crn://confluent.cloud/",
    "methodName": "kafka.IncrementalAlterConfigs",
    "cloudResources": [
      {
        "scope": {
          "resources": [
            {
              "type": "ORGANIZATION",
              "resourceId": "91a07ac9-9a13-491e-a2cf-46a9a5cf339c"
            },
            {
              "type": "ENVIRONMENT",
              "resourceId": "env-abc123"
            },
            {
              "type": "CLOUD_CLUSTER",
              "resourceId": "lkc-rjjy79"
            }
          ]
        },
        "resource": {
          "type": "KAFKA_CLUSTER",
          "resourceId": "lkc-rjjy79"
        }
      }
    ],
    "authenticationInfo": {
      "principal": {
        "confluentUser": {
          "resourceId": "u-ok7gjy"
        }
      },
      "result": "SUCCESS"
    },
    "authorizationInfo": {
      "result": "ALLOW"
    },
    "requestMetadata": {
      "connectionId": "166296087683600038",
      "requestId": [
        "166296087891100010"
      ],
      "clientId": "adminclient-1",
      "clientAddress": [
        {
          "ip": "1.2.3.4"
        }
      ]
    },
    "request": {
      "accessType": "MODIFICATION",
      "data": {
        "resources": [
          {
            "resourceType": "TOPIC",
            "resourceName": "topicAuditLog",
            "configs": [
              {
                "name": "retention.ms",
                "configOperation": "SET",
                "value": "600000"
              }
            ]
          }
        ],
        "validateOnly": false
      }
    },
    "result": {
      "status": "SUCCESS",
      "data": {
        "responses": [
          {
            "errorCode": 0,
            "errorMessage": null,
            "resourceType": "TOPIC",
            "resourceName": "topicAuditLog"
          }
        ]
      }
    },
    "resourceName": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/environment=env-abc123/cloud-cluster=lkc-rjjy79/kafka=lkc-rjjy79"
  },
  "subject": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/environment=env-abc123/cloud-cluster=lkc-rjjy79/kafka=lkc-rjjy79",
  "specversion": "1.0",
  "id": "549d1a16-43e1-471e-94c7-7068a4484fd7",
  "source": "crn://confluent.cloud/",
  "time": "2022-09-12T05:34:38.939Z",
  "type": "io.confluent.kafka.server/request"
}

FAILURE - "INVALID_CONFIG"

{
  "datacontenttype": "application/json",
  "data": {
    "serviceName": "crn://confluent.cloud/",
    "methodName": "kafka.IncrementalAlterConfigs",
    "cloudResources": [
      {
        "scope": {
          "resources": [
            {
              "type": "ORGANIZATION",
              "resourceId": "91a07ac9-9a13-491e-a2cf-46a9a5cf339c"
            },
            {
              "type": "ENVIRONMENT",
              "resourceId": "env-abc123"
            },
            {
              "type": "CLOUD_CLUSTER",
              "resourceId": "lkc-rjjy79"
            }
          ]
        },
        "resource": {
          "type": "KAFKA_CLUSTER",
          "resourceId": "lkc-rjjy79"
        }
      }
    ],
    "authenticationInfo": {
      "principal": {
        "confluentUser": {
          "resourceId": "u-ok7gjy"
        }
      },
      "result": "SUCCESS"
    },
    "authorizationInfo": {
      "result": "ALLOW"
    },
    "requestMetadata": {
      "connectionId": "166392198382100034",
      "requestId": [
        "166392198588800009"
      ],
      "clientId": "adminclient-1",
      "clientAddress": [
        {
          "ip": "1.2.3.4"
        }
      ]
    },
    "request": {
      "accessType": "MODIFICATION",
      "data": {
        "resources": [
          {
            "resourceType": "TOPIC",
            "resourceName": "topicAuditLog",
            "configs": [
              {
                "name": "retention.ms",
                "configOperation": "SET",
                "value": ""
              }
            ]
          }
        ],
        "validateOnly": false
      }
    },
    "result": {
      "status": "FAILURE",
      "data": {
        "responses": [
          {
            "errorCode": 40,
            "errorMessage": "Invalid config value for resource ConfigResource(type=TOPIC, name='topicAuditLog'): Invalid value  for configuration retention.ms: Not a number of type LONG",
            "resourceType": "TOPIC",
            "resourceName": "topicAuditLog"
          }
        ]
      }
    },
    "resourceName": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/environment=env-abc123/cloud-cluster=lkc-rjjy79/kafka=lkc-rjjy79"
  },
  "subject": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/environment=env-abc123/cloud-cluster=lkc-rjjy79/kafka=lkc-rjjy79",
  "specversion": "1.0",
  "id": "19312ac5-e5a4-47b9-9667-351e9e4b7f58",
  "source": "crn://confluent.cloud/",
  "time": "2022-09-23T08:33:05.896Z",
  "type": "io.confluent.kafka.server/request"
}

kafka.Produce

The kafka.Produce event method is triggered by a request from a Kafka producer to write a batch of records to a Kafka topic. Only the first produce request per connection (identified by connection ID) generates an auditable event.

SUCCESS

{
  "datacontenttype": "application/json",
  "data": {
    "serviceName": "crn://confluent.cloud/",
    "methodName": "kafka.Produce",
    "cloudResources": [
      {
        "scope": {
          "resources": [
            {
              "type": "ORGANIZATION",
              "resourceId": "351a9861-bfad-4a12-8196-9aac20815d00"
            },
            {
              "type": "ENVIRONMENT",
              "resourceId": "env-pj1v2m"
            },
            {
              "type": "CLOUD_CLUSTER",
              "resourceId": "lkc-3dr2z0"
            },
            {
              "type": "KAFKA_CLUSTER",
              "resourceId": "lkc-3dr2z0"
            }
          ]
        },
        "resource": {
          "type": "TOPIC",
          "resourceId": "my-topic"
        }
      }
    ],
    "authenticationInfo": {
      "principal": {
        "confluentUser": {
          "resourceId": "u-0kxozp"
        }
      },
      "result": "SUCCESS",
      "identity": "crn://confluent.cloud/organization=351a9861-bfad-4a12-8196-9aac20815d00/identity-provider=Confluent/identity=u-0kxozp"
    },
    "authorizationInfo": {
      "result": "ALLOW"
    },
    "requestMetadata": {
      "connectionId": "168484981323800057",
      "requestId": [
        "168484981514400003"
      ],
      "clientId": "producer-1",
      "clientAddress": [
        {
          "ip": "1.2.3.4"
        }
      ]
    },
    "request": {
      "accessType": "MODIFICATION",
      "data": {
        "topic": "my-topic",
        "partition": null
      }
    },
    "result": {
      "status": "SUCCESS",
      "data": {
        "offset": null,
        "message": null,
        "errorCode": 0,
        "errorType": "NONE"
      }
    },
    "resourceName": "crn://confluent.cloud/organization=351a9861-bfad-4a12-8196-9aac20815d00/environment=env-pj1v2m/cloud-cluster=lkc-3dr2z0/kafka=lkc-3dr2z0/topic=my-topic"
  },
  "subject": "crn://confluent.cloud/organization=351a9861-bfad-4a12-8196-9aac20815d00/environment=env-pj1v2m/cloud-cluster=lkc-3dr2z0/kafka=lkc-3dr2z0/topic=my-topic",
  "specversion": "1.0",
  "id": "51761ab7-f642-465d-af24-fc0e07458dfb",
  "source": "crn://confluent.cloud/",
  "time": "2023-05-23T13:50:15.148055707Z",
  "type": "io.confluent.kafka.server/request"
}

FAILURE - "MESSAGE_TOO_LARGE"

{
  "datacontenttype": "application/json",
  "data": {
    "serviceName": "crn://confluent.cloud/",
    "methodName": "kafka.Produce",
    "cloudResources": [
      {
        "scope": {
          "resources": [
            {
              "type": "ORGANIZATION",
              "resourceId": "91a07ac9-9a13-491e-a2cf-46a9a5cf339c"
            },
            {
              "type": "ENVIRONMENT",
              "resourceId": "env-5oxdq"
            },
            {
              "type": "CLOUD_CLUSTER",
              "resourceId": "lkc-xkmpz1"
            },
            {
              "type": "KAFKA_CLUSTER",
              "resourceId": "lkc-xkmpz1"
            }
          ]
        },
        "resource": {
          "type": "TOPIC",
          "resourceId": "test-topic"
        }
      }
    ],
    "authenticationInfo": {
      "principal": {
        "confluentUser": {
          "resourceId": "u-r0qdv1"
        }
      },
      "result": "SUCCESS",
      "identity": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/identity-provider=Confluent/identity=u-r0qdv1"
    },
    "authorizationInfo": {
      "result": "ALLOW"
    },
    "requestMetadata": {
      "connectionId": "168503008883800043",
      "requestId": [
        "168503009076400003"
      ],
      "clientId": "Confluent-CLI_v3.11.0",
      "clientAddress": [
        {
          "ip": "1.2.3.4"
        }
      ]
    },
    "request": {
      "accessType": "MODIFICATION",
      "data": {
        "topic": "test-topic",
        "partition": null
      }
    },
    "result": {
      "status": "FAILURE",
      "data": {
        "offset": null,
        "message": null,
        "errorCode": 10,
        "errorType": "MESSAGE_TOO_LARGE"
      }
    },
    "resourceName": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/environment=env-5oxdq/cloud-cluster=lkc-xkmpz1/kafka=lkc-xkmpz1/topic=test-topic"
  },
  "subject": "crn://confluent.cloud/organization=91a07ac9-9a13-491e-a2cf-46a9a5cf339c/environment=env-5oxdq/cloud-cluster=lkc-xkmpz1/kafka=lkc-xkmpz1/topic=test-topic",
  "specversion": "1.0",
  "id": "11e00123-b9b8-4ff6-a0d3-e6197cf3059f",
  "source": "crn://confluent.cloud/",
  "time": "2023-05-25T15:54:50.765968071Z",
  "type": "io.confluent.kafka.server/request"
}