LiteSOC icon

LiteSOC

Track security events and manage alerts with LiteSOC. Severity is automatically assigned based on event type.

Actions7

Event → Create

AI-generated

Summary

Create a security event record in LiteSOC with a specified event type and optional details about the actor, user IP, and additional metadata. Severity is assigned automatically by LiteSOC based on the chosen event type.

Inputs

  • Event Type (required) — Select the type of security event to track from predefined categories (e.g., admin actions, authentication events, security incidents). This determines the auto-assigned severity level.
  • Custom Event Type (required) — Specify a custom event type in category.action format if 'Custom Event' is selected as the Event Type.
  • Actor ID — Enter a unique identifier for the user or system actor who performed the action, up to 255 characters. Optional for system events.
  • Actor Email — Enter the email address of the actor performing the event (optional).
  • User IP — Provide the IP address of the user making the request (optional).
  • Metadata — Add additional custom key-value pairs to provide extra context or details for the event.

Output shape

a single event record object reflecting the created event with fields such as id (UUID), event_name, severity (critical/warning/info), actor_id, ip_address, metadata, and created_at timestamp.

The severity field is assigned automatically by LiteSOC based on the event type and cannot be manually set. The event type must be properly formatted (category.action) when using a custom event type. The response includes any custom metadata provided.

Examples

Example 1: Create an event recording a failed login attempt with actor details and user IP

Event Type: Auth: Login Failed; Actor ID: user_123; Actor Email: user@example.com; User IP: 192.168.1.100; Metadata: {reason: incorrect_password}

Links

Discussion