Cisco Intersight Auditd API

openapi: 3.2.0
info:
  description: 'Cisco Intersight is a management platform delivered as a service with embedded analytics for your Cisco and

    3rd party IT infrastructure. This platform offers an intelligent level of management that enables

    IT organizations to analyze, simplify, and automate their environments in more advanced ways than the prior

    generations of tools. Cisco Intersight provides an integrated and intuitive management experience for

    resources in the traditional data center as well as at the edge. With flexible deployment options to address

    complex security needs, getting started with Intersight is quick and easy.

    Cisco Intersight has deep integration with Cisco UCS and HyperFlex systems allowing for remote deployment,

    configuration, and ongoing maintenance. The model-based deployment works for a single system in a remote

    location or hundreds of systems in a data center and enables rapid, standardized configuration and deployment.

    It also streamlines maintaining those systems whether you are working with small or very large configurations.

    The Intersight OpenAPI document defines the complete set of properties that are returned in the

    HTTP response. From that perspective, a client can expect that no additional properties are returned,

    unless these properties are explicitly defined in the OpenAPI document.

    However, when a client uses an older version of the Intersight OpenAPI document, the server may

    send additional properties because the software is more recent than the client. In that case, the client

    may receive properties that it does not know about.

    Some generated SDKs perform a strict validation of the HTTP response body against the OpenAPI document.

    This document was created on 2026-08-07T06:46:04Z.'
  version: 1.0.11-20260807064027971
  title: Cisco Intersight System Auditd API
  license:
    name: Apache License, Version 2.0
    url: https://www.apache.org/licenses/LICENSE-2.0.html
  contact:
    name: Intersight API support
    url: https://intersight.com/help
    email: intersight@cisco.com
  x-provenance:
    method: harvested
    authored_by: Cisco Intersight
    harvested_by: API Evangelist
    harvested_on: '2026-08-19'
    first_party: true
    provider_published: true
    source_host: cdn.intersight.com
    note: Cisco publishes the full Intersight OpenAPI 3.0.2 anonymously from its CDN (27.5MB master document; 3,963 operations / 2,448 paths / 5,612 schemas) plus 11 per-service documents covering 100% of the master's paths. Byte-identity reconfirmed 2026-08-19 by SHA-256. Note intersight.com itself is a soft-404 farm — the contract is on the CDN, not the app host.
  x-evidence:
  - type: source
    url: https://cdn.intersight.com/components/an-apidocs/1.0.11-20260807064027971/model/intersight-openapi-v3-1.0.11-20260807064027971.json
  - type: source
    url: https://intersight.com/apidocs/apirefs/
servers:
- url: https://{server}
  variables:
    server:
      default: intersight.com
  description: The Intersight URL for the cloud-based infrastructure management APIs.
tags:
- name: auditd
paths:
  /api/v1/auditd/Policies:
    get:
      tags:
      - auditd
      summary: Read a 'auditd.Policy' resource.
      operationId: GetAuditdPolicyList
      security:
      - cookieAuth: []
      - http_signature: []
      - oAuth2:
        - PRIVSET.Account Administrator
        - PRIVSET.Manage Switch Profiles
        - PRIVSET.Read-Only
        - PRIVSET.Read-only AuditD policies
        - PRIVSET.View Switch Profiles
        - READ.auditd.Policy
        - ROLE.Account Administrator
        - ROLE.Read-Only
      parameters:
      - $ref: '#/components/parameters/filterParam'
      - $ref: '#/components/parameters/orderbyParam'
      - $ref: '#/components/parameters/topParam'
      - $ref: '#/components/parameters/skipParam'
      - $ref: '#/components/parameters/selectParam'
      - $ref: '#/components/parameters/expandParam'
      - $ref: '#/components/parameters/applyParam'
      - $ref: '#/components/parameters/countParam'
      - $ref: '#/components/parameters/inlinecountParam'
      - $ref: '#/components/parameters/atParam'
      - $ref: '#/components/parameters/tagsParam'
      responses:
        '200':
          description: List of 'auditd.Policy' resources for the given filter criteria
          headers:
            Set-Cookie:
              $ref: '#/components/headers/Set-Cookie'
            x-starship-traceid:
              $ref: '#/components/headers/x-starship-traceid'
            Content-Disposition:
              $ref: '#/components/headers/Content-Disposition'
            Content-Length:
              $ref: '#/components/headers/Content-Length'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/auditd.Policy.Response'
            text/csv:
              schema:
                $ref: '#/components/schemas/CsvFile'
            application/vnd.openxmlformats-officedocument.spreadsheetml.sheet:
              schema:
                $ref: '#/components/schemas/ExcelFile'
        '400':
          $ref: '#/components/responses/http_status_400'
        '401':
          $ref: '#/components/responses/http_status_401'
        '403':
          $ref: '#/components/responses/http_status_403'
        '404':
          $ref: '#/components/responses/http_status_404'
        default:
          $ref: '#/components/responses/default'
    post:
      tags:
      - auditd
      summary: Create a 'auditd.Policy' resource.
      operationId: CreateAuditdPolicy
      security:
      - cookieAuth: []
      - http_signature: []
      - oAuth2:
        - CREATE.auditd.Policy
        - PRIVSET.Account Administrator
        - PRIVSET.Create, clone and edit AuditD policies
        - PRIVSET.Manage Switch Profiles
        - ROLE.Account Administrator
      parameters:
      - $ref: '#/components/parameters/IfMatch'
      - $ref: '#/components/parameters/IfNoneMatch'
      requestBody:
        description: The 'auditd.Policy' resource to create.
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/auditd.Policy'
      responses:
        '200':
          description: The HTTP 200 status response code indicates that the request has succeeded and the 'auditd.Policy' resource was created as requested. The 'auditd.Policy' resource is created before this response is sent back and the resource is returned in the body of the message.
          headers:
            Set-Cookie:
              $ref: '#/components/headers/Set-Cookie'
            x-starship-traceid:
              $ref: '#/components/headers/x-starship-traceid'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/auditd.Policy'
          links:
            GetAuditdPolicyByMoid:
              operationId: GetAuditdPolicyByMoid
              parameters:
                Moid: $response.body#/Moid
              description: The 'Moid' value returned in the response can be used as the 'Moid' parameter in 'GET /api/v1/auditd/Policies/{Moid}'.
            GetIamAccountByMoid:
              $ref: '#/components/links/GetIamAccountByMoid'
            GetIamDomainGroupByMoid:
              $ref: '#/components/links/GetIamDomainGroupByMoid'
        '400':
          $ref: '#/components/responses/http_status_400'
        '401':
          $ref: '#/components/responses/http_status_401'
        '403':
          $ref: '#/components/responses/http_status_403'
        '404':
          $ref: '#/components/responses/http_status_404'
        default:
          $ref: '#/components/responses/default'
  /api/v1/auditd/Policies/{Moid}:
    get:
      tags:
      - auditd
      summary: Read a 'auditd.Policy' resource.
      operationId: GetAuditdPolicyByMoid
      security:
      - cookieAuth: []
      - http_signature: []
      - oAuth2:
        - PRIVSET.Account Administrator
        - PRIVSET.Manage Switch Profiles
        - PRIVSET.Read-Only
        - PRIVSET.Read-only AuditD policies
        - PRIVSET.View Switch Profiles
        - READ.auditd.Policy
        - ROLE.Account Administrator
        - ROLE.Read-Only
      parameters:
      - $ref: '#/components/parameters/moidParam'
      - $ref: '#/components/parameters/selectParam'
      - $ref: '#/components/parameters/expandParam'
      - $ref: '#/components/parameters/atParam'
      responses:
        '200':
          description: An instance of the 'auditd.Policy' resource.
          headers:
            Set-Cookie:
              $ref: '#/components/headers/Set-Cookie'
            x-starship-traceid:
              $ref: '#/components/headers/x-starship-traceid'
            Content-Disposition:
              $ref: '#/components/headers/Content-Disposition'
            Content-Length:
              $ref: '#/components/headers/Content-Length'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/auditd.Policy'
            text/csv:
              schema:
                $ref: '#/components/schemas/CsvFile'
            application/vnd.openxmlformats-officedocument.spreadsheetml.sheet:
              schema:
                $ref: '#/components/schemas/ExcelFile'
          links:
            GetAuditdPolicyByMoid:
              operationId: GetAuditdPolicyByMoid
              parameters:
                Moid: $response.body#/Moid
              description: The 'Moid' value returned in the response can be used as the 'Moid' parameter in 'GET /api/v1/auditd/Policies/{Moid}'.
            GetIamAccountByMoid:
              $ref: '#/components/links/GetIamAccountByMoid'
            GetIamDomainGroupByMoid:
              $ref: '#/components/links/GetIamDomainGroupByMoid'
        '400':
          $ref: '#/components/responses/http_status_400'
        '401':
          $ref: '#/components/responses/http_status_401'
        '403':
          $ref: '#/components/responses/http_status_403'
        '404':
          $ref: '#/components/responses/http_status_404'
        default:
          $ref: '#/components/responses/default'
    post:
      tags:
      - auditd
      summary: Update a 'auditd.Policy' resource.
      operationId: UpdateAuditdPolicy
      security:
      - cookieAuth: []
      - http_signature: []
      - oAuth2:
        - PRIVSET.Account Administrator
        - PRIVSET.Edit AuditD policies
        - PRIVSET.Manage Switch Profiles
        - ROLE.Account Administrator
        - UPDATE.auditd.Policy
      parameters:
      - $ref: '#/components/parameters/moidParam'
      - $ref: '#/components/parameters/IfMatch'
      requestBody:
        description: The 'auditd.Policy' resource to update.
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/auditd.Policy'
          application/json-patch+json:
            schema:
              $ref: '#/components/schemas/PatchDocument'
      responses:
        '200':
          description: The HTTP 200 status response code indicates that the request has succeeded and the 'auditd.Policy' resource was modified as requested. The 'auditd.Policy' resource is modified before this response is sent back and the resource is returned in the body of the message.
          headers:
            Set-Cookie:
              $ref: '#/components/headers/Set-Cookie'
            x-starship-traceid:
              $ref: '#/components/headers/x-starship-traceid'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/auditd.Policy'
          links:
            GetAuditdPolicyByMoid:
              operationId: GetAuditdPolicyByMoid
              parameters:
                Moid: $response.body#/Moid
              description: The 'Moid' value returned in the response can be used as the 'Moid' parameter in 'GET /api/v1/auditd/Policies/{Moid}'.
            GetIamAccountByMoid:
              $ref: '#/components/links/GetIamAccountByMoid'
            GetIamDomainGroupByMoid:
              $ref: '#/components/links/GetIamDomainGroupByMoid'
        '400':
          $ref: '#/components/responses/http_status_400'
        '401':
          $ref: '#/components/responses/http_status_401'
        '403':
          $ref: '#/components/responses/http_status_403'
        '404':
          $ref: '#/components/responses/http_status_404'
        default:
          $ref: '#/components/responses/default'
    patch:
      tags:
      - auditd
      summary: Update a 'auditd.Policy' resource.
      operationId: PatchAuditdPolicy
      security:
      - cookieAuth: []
      - http_signature: []
      - oAuth2:
        - PRIVSET.Account Administrator
        - PRIVSET.Edit AuditD policies
        - PRIVSET.Manage Switch Profiles
        - ROLE.Account Administrator
        - UPDATE.auditd.Policy
      parameters:
      - $ref: '#/components/parameters/moidParam'
      - $ref: '#/components/parameters/IfMatch'
      requestBody:
        description: The 'auditd.Policy' resource to update.
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/auditd.Policy'
          application/json-patch+json:
            schema:
              $ref: '#/components/schemas/PatchDocument'
      responses:
        '200':
          description: The HTTP 200 status response code indicates that the request has succeeded and the 'auditd.Policy' resource was patched as requested. The 'auditd.Policy' resource is patched before this response is sent back and the resource is returned in the body of the message.
          headers:
            Set-Cookie:
              $ref: '#/components/headers/Set-Cookie'
            x-starship-traceid:
              $ref: '#/components/headers/x-starship-traceid'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/auditd.Policy'
          links:
            GetAuditdPolicyByMoid:
              operationId: GetAuditdPolicyByMoid
              parameters:
                Moid: $response.body#/Moid
              description: The 'Moid' value returned in the response can be used as the 'Moid' parameter in 'GET /api/v1/auditd/Policies/{Moid}'.
            GetIamAccountByMoid:
              $ref: '#/components/links/GetIamAccountByMoid'
            GetIamDomainGroupByMoid:
              $ref: '#/components/links/GetIamDomainGroupByMoid'
        '400':
          $ref: '#/components/responses/http_status_400'
        '401':
          $ref: '#/components/responses/http_status_401'
        '403':
          $ref: '#/components/responses/http_status_403'
        '404':
          $ref: '#/components/responses/http_status_404'
        default:
          $ref: '#/components/responses/default'
    delete:
      tags:
      - auditd
      summary: Delete a 'auditd.Policy' resource.
      operationId: DeleteAuditdPolicy
      security:
      - cookieAuth: []
      - http_signature: []
      - oAuth2:
        - DELETE.auditd.Policy
        - PRIVSET.Account Administrator
        - PRIVSET.Delete AuditD policies
        - PRIVSET.Manage Switch Profiles
        - ROLE.Account Administrator
      parameters:
      - $ref: '#/components/parameters/moidParam'
      responses:
        '200':
          description: Resource has been deleted successfully.
          headers:
            Set-Cookie:
              $ref: '#/components/headers/Set-Cookie'
            x-starship-traceid:
              $ref: '#/components/headers/x-starship-traceid'
        '400':
          $ref: '#/components/responses/http_status_400'
        '401':
          $ref: '#/components/responses/http_status_401'
        '403':
          $ref: '#/components/responses/http_status_403'
        '404':
          $ref: '#/components/responses/http_status_404'
        default:
          $ref: '#/components/responses/default'
components:
  headers:
    x-starship-traceid:
      description: A value that uniquely identifies a HTTP request and its response.
      schema:
        type: string
    Set-Cookie:
      description: Cookie authentication key for use with the `cookieAuth` apiKey authentication.
      schema:
        type: string
        example: X-Starship-Token=abcde12345; Path=/
    Content-Length:
      description: Indicates the size of the entity-body, in bytes, sent to the recipient.
      schema:
        type: integer
    Content-Disposition:
      description: If not present, indicates the response content is expected to be displayed inline in the browser, that is, as a Web page or as part of a Web page. If present, indicates the response content is expected to be an attachment, that is downloaded and saved locally.
      schema:
        type: string
  schemas:
    pkix.KeyGenerationSpec:
      title: Pkix:Key Generation Spec
      description: The key generation spec provides the algorithm and the parameters required for this algorithm to generate a key.
      x-allOf-name: pkix.KeyGenerationSpec
      allOf:
      - $ref: '#/components/schemas/mo.BaseComplexType'
      - type: object
        description: Definition of the list of properties defined in 'pkix.KeyGenerationSpec', excluding properties defined in parent classes.
        required:
        - ClassId
        - ObjectType
        properties:
          ClassId:
            description: 'The fully-qualified name of the instantiated, concrete type.

              This property is used as a discriminator to identify the type of the payload

              when marshaling and unmarshaling data.

              The enum values provides the list of concrete types that can be instantiated from this abstract type.'
            enum:
            - pkix.EcdsaKeySpec
            - pkix.EddsaKeySpec
            - pkix.RsaAlgorithm
            x-enum-as-string: true
          ObjectType:
            description: 'The fully-qualified name of the instantiated, concrete type.

              The value should be the same as the ''ClassId'' property.

              The enum values provides the list of concrete types that can be instantiated from this abstract type.'
            enum:
            - pkix.EcdsaKeySpec
            - pkix.EddsaKeySpec
            - pkix.RsaAlgorithm
            x-enum-as-string: true
          Name:
            description: 'Name of the key generation algorithm.

              * `RSA` - Key pairs should be generated by the RSA algorithm.'
            type: string
            enum:
            - RSA
            default: RSA
            readOnly: true
            x-omitempty: true
    policy.AbstractPolicy.Relationship:
      description: A relationship to the 'policy.AbstractPolicy' resource, or the expanded 'policy.AbstractPolicy' resource, or the 'null' value.
      x-one-of-name: policy.AbstractPolicy.Relationship
      oneOf:
      - type: 'null'
      - $ref: '#/components/schemas/mo.MoRef'
      - $ref: '#/components/schemas/policy.AbstractPolicy'
      discriminator:
        propertyName: ClassId
    iam.System.Relationship:
      description: A relationship to the 'iam.System' resource, or the expanded 'iam.System' resource, or the 'null' value.
      x-one-of-name: iam.System.Relationship
      oneOf:
      - type: 'null'
      - $ref: '#/components/schemas/mo.MoRef'
      - $ref: '#/components/schemas/iam.System'
      discriminator:
        propertyName: ClassId
    mo.BaseMo.Relationship:
      description: A relationship to the 'mo.BaseMo' resource, or the expanded 'mo.BaseMo' resource, or the 'null' value.
      x-one-of-name: mo.BaseMo.Relationship
      oneOf:
      - type: 'null'
      - $ref: '#/components/schemas/mo.MoRef'
      - $ref: '#/components/schemas/mo.BaseMo'
      discriminator:
        propertyName: ClassId
    iam.ResourceRoles.Relationship:
      description: A relationship to the 'iam.ResourceRoles' resource, or the expanded 'iam.ResourceRoles' resource, or the 'null' value.
      x-one-of-name: iam.ResourceRoles.Relationship
      oneOf:
      - type: 'null'
      - $ref: '#/components/schemas/mo.MoRef'
      - $ref: '#/components/schemas/iam.ResourceRoles'
      discriminator:
        propertyName: ClassId
    iam.SwitchAccountPermission:
      title: Iam:Switch Account Permission
      description: SwitchScope parameters related to the Account to/from which user switched.
      x-allOf-name: iam.SwitchAccountPermission
      allOf:
      - $ref: '#/components/schemas/mo.BaseComplexType'
      - type: object
        description: Definition of the list of properties defined in 'iam.SwitchAccountPermission', excluding properties defined in parent classes.
        required:
        - ClassId
        - ObjectType
        properties:
          ClassId:
            description: 'The fully-qualified name of the instantiated, concrete type.

              This property is used as a discriminator to identify the type of the payload

              when marshaling and unmarshaling data.'
            enum:
            - iam.SwitchAccountPermission
            default: iam.SwitchAccountPermission
            x-enum-as-string: true
          ObjectType:
            description: 'The fully-qualified name of the instantiated, concrete type.

              The value should be the same as the ''ClassId'' property.'
            enum:
            - iam.SwitchAccountPermission
            default: iam.SwitchAccountPermission
            x-enum-as-string: true
          AccountId:
            description: Moid of the Account to/from which user switched the scope.
            type: string
            readOnly: true
            x-omitempty: true
          PermissionId:
            description: Moid of the Permission for the Account to/from which user switched the scope.
            type: string
            readOnly: true
            x-omitempty: true
    iam.EndPointPrivilege:
      title: Iam:End Point Privilege
      description: 'EndPointPrivilege models privileges defined on managed endpoints (e.g., UCS, IMC), enabling cross-launch or delegated actions.

        #### Purpose

        It exposes endpoint-side authorization elements that can be assigned to platform users via endpoint roles.

        #### Key Concepts

        - **Endpoint Integration:** Bridges device-level capabilities to platform users.

        - **Read-only Catalog:** Reflects endpoint-defined actions.

        - **Role Assignment:** Consumed by EndPointRole for user access.'
      x-allOf-name: iam.EndPointPrivilege
      allOf:
      - $ref: '#/components/schemas/mo.BaseMo'
      - type: object
        description: Definition of the list of properties defined in 'iam.EndPointPrivilege', excluding properties defined in parent classes.
        required:
        - ClassId
        - ObjectType
        properties:
          ClassId:
            description: 'The fully-qualified name of the instantiated, concrete type.

              This property is used as a discriminator to identify the type of the payload

              when marshaling and unmarshaling data.'
            enum:
            - iam.EndPointPrivilege
            default: iam.EndPointPrivilege
            x-enum-as-string: true
          ObjectType:
            description: 'The fully-qualified name of the instantiated, concrete type.

              The value should be the same as the ''ClassId'' property.'
            enum:
            - iam.EndPointPrivilege
            default: iam.EndPointPrivilege
            x-enum-as-string: true
          Description:
            description: The functionality of this privilege.
            type: string
            readOnly: true
            x-omitempty: true
          Name:
            description: The name of the end point privilege.
            type: string
            readOnly: true
            x-omitempty: true
          Type:
            description: 'The type of the end point like Cisco UCS Fabric Interconnect or Cisco IMC.

              * `` - An unrecognized platform type.

              * `APIC` - A Cisco Application Policy Infrastructure Controller (APIC) cluster.

              * `CAPIC` - A Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) instance.

              * `DCNM` - A Cisco Data Center Network Manager (DCNM) instance.

              * `UCSFI` - A Cisco UCS Fabric Interconnect that is managed by Cisco UCS Manager (UCSM).

              * `UCSFIISM` - A Cisco UCS Fabric Interconnect that is managed by Cisco Intersight.

              * `IMC` - A standalone Cisco UCS rack server (Deprecated).

              * `IMCM4` - A standalone Cisco UCS C-Series or S-Series M4 server.

              * `IMCM5` - A standalone Cisco UCS C-Series or S-Series M5 server.

              * `IMCRack` - A standalone Cisco UCS C-Series or S-Series M6 or newer server.

              * `UCSIOM` - A Cisco UCS Blade Chassis I/O Module (IOM).

              * `UCSPCIeNODE` - A Cisco UCS PCIe Node in a blade form factor.

              * `UCSXFM` - A Cisco UCS Fabric Extender Module (XFM).

              * `HX` - A Cisco HyperFlex (HX) cluster.

              * `UCSD` - A Cisco UCS Director (UCSD) instance.

              * `UCSXECMC` - A Cisco UCSXE Chassis Management Controller.

              * `UCSXESecureRouter` - A secure networking router node designed to operate as part of a UCSXE chassis.

              * `IntersightAppliance` - A Cisco Intersight Connected Virtual Appliance instance.

              * `IntersightAssist` - A Cisco Intersight Assist instance.

              * `PureStorageFlashArray` - A Pure Storage FlashArray that is managed using Cisco Intersight Assist. Cisco Intersight Workload Optimizer and storage management features are supported on this device.

              * `PureStorageFlashBladeSystem` - A Pure Storage FlashBlade target that is managed using Cisco Intersight Assist. Storage management feature is supported on this device.

              * `NexusDevice` - A Cisco Nexus Network Switch that is managed using Cisco Intersight Assist.

              * `ACISwitch` - A Cisco Nexus Network Switch with the embedded Device Connector and is a part of the Cisco ACI fabric.

              * `NexusSwitch` - A standalone Cisco Nexus Network Switch with the embedded Device Connector.

              * `MDSSwitch` - A Cisco MDS Switch that is managed using the embedded Device Connector.

              * `MDSDevice` - A Cisco MDS Switch that is managed using Cisco Intersight Assist.

              * `UCSC885` - A standalone Cisco UCS C885 Server.

              * `CAI845A` - A standalone Cisco AI 845A Server.

              * `UCSC890` - A standalone Cisco UCS C890 server managed using Cisco Intersight Assist.

              * `RedfishServer` - A generic target type for servers that support Redfish APIs and is managed using Cisco Intersight Assist. Support is limited to HPE and Dell Servers.

              * `NetAppOntap` - A Netapp ONTAP Storage system that is managed using Cisco Intersight Assist. Cisco Intersight Workload Optimizer features are supported on this device.

              * `NetAppActiveIqUnifiedManager` - A NetApp Active IQ Unified Manager (AIQUM) that is managed using Cisco Intersight Assist.

              * `EmcScaleIo` - An EMC ScaleIO Software Defined Storage system that is managed using Cisco Intersight Assist. Cisco Intersight Workload Optimizer features are supported on this device.

              * `EmcVmax` - An EMC VMAX 2 or 3 series enterprise storage array that is managed using Cisco Intersight Assist. Cisco Intersight Workload Optimizer features are supported on this device.

              * `EmcVplex` - An EMC VPLEX virtual storage system that is managed using Cisco Intersight Assist. Cisco Intersight Workload Optimizer features are supported on this device.

              * `EmcXtremIo` - An EMC XtremIO SSD storage system that is managed using Cisco Intersight Assist. Cisco Intersight Workload Optimizer features are supported on this device.

              * `VmwareVcenter` - A VMware vCenter instance that is managed using Cisco Intersight Assist. Cisco Intersight Workload Optimizer and Virtualization features are supported on this hypervisor.

              * `MicrosoftHyperV` - A Microsoft Hyper-V host that is managed using Cisco Intersight Assist. Optionally, other hosts in the cluster can be discovered through this host. Cisco Intersight Workload Optimizer features are supported on this hypervisor.

              * `AppDynamics` - An AppDynamics controller running in a SaaS or on-prem datacenter. On-prem AppDynamics instance is managed using Cisco Intersight Assist. Cisco Intersight Workload Optimizer features are supported on this controller.

              * `Dynatrace` - A Dynatrace Server instance running in a SaaS or on-prem datacenter. On-prem Dynatrace instance is managed using Cisco Intersight Assist. Cisco Intersight Workload Optimizer features are supported on this server.

              * `NewRelic` - A NewRelic user account. The NewRelic instance monitors the application infrastructure. Cisco Intersight Workload Optimizer features are supported on this server.

              * `ServiceNow` - A cloud-based workflow automation platform that enables enterprise organizations to improve operational efficiencies by streamlining and automating routine work tasks.

              * `Umbrella` - Umbrella cloud target that discovers and monitors an organization. It discovers entities like Datacenters, Devices, Tunnels, Networks, etc.

              * `CloudFoundry` - An open source cloud platform on which developers can build, deploy, run and scale applications.

              * `MicrosoftAzureApplicationInsights` - A feature of Azure Monitor, is an extensible Application Performance Management service for developers and DevOps professionals to monitor their live applications.

              * `OpenStack` - An OpenStack target manages Virtual Machines, Physical Machines, Datacenters and Virtual Datacenters using different OpenStack services as administrative endpoints.

              * `MicrosoftSqlServer` - A Microsoft SQL database server that is managed using Cisco Intersight Assist. Cisco Intersight Workload Optimizer features are supported on this database.

              * `MySqlServer` - A MySQL database server that is managed using Cisco Intersight Assist. Cisco Intersight Workload Optimizer features are supported on this database.

              * `OracleDatabaseServer` - An Oracle database server that is managed using Cisco Intersight Assist. Cisco Intersight Workload Optimizer features are supported on this database.

              * `IBMWebSphereApplicationServer` - An IBM WebSphere Application server that is managed using Cisco Intersight Assist. Cisco Intersight Workload Optimizer features are supported on this application server.

              * `OracleWebLogicServer` - Oracle WebLogic Server is a unified and extensible platform for developing, deploying and running enterprise applications, such as Java, for on-premises and in the cloud. WebLogic Server offers a robust, mature, and scalable implementation of Java Enterprise Edition (EE) and Jakarta EE.

              * `ApacheTomcatServer` - An Apache Tomcat server that is managed using Cisco Intersight Assist. Cisco Intersight Workload Optimizer features are supported on this server.

              * `JavaVirtualMachine` - A JVM Application with JMX configured that is managed using Cisco Intersight Assist. Cisco Intersight Workload Optimizer features are supported on this application.

              * `RedHatJBossApplicationServer` - JBoss Application Server is an open-source, cross-platform Java application server developed by JBoss, a division of Red Hat Inc. It is an open-source implementation of Java 2 Enterprise Edition (J2EE) that is used for implementing Java applications and other Web-based applications and software.

              * `Kubernetes` - A Kubernetes cluster that runs containerized applications, with Kubernetes Collector installed. Cisco Intersight Workload Optimizer features are supported on Kubernetes cluster.

              * `AmazonWebService` - An Amazon Web Service cloud account. Cisco Intersight Workload Optimizer and Virtualization features are supported on this cloud.

              * `AmazonWebServiceBilling` - An Amazon Web Service cloud billing account used to retrieve billing information stored in S3 bucket. Cisco Intersight Workload Optimizer features are supported on this cloud.

              * `GoogleCloudPlatform` - A Google Cloud Platform service account with access to one 

# --- truncated at 32 KB (912 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/intersight/refs/heads/main/openapi/intersight-auditd-api-openapi.yml