Hex¶
About¶
Hex is an integrated environment that helps you do amazing work with data, whether you're using SQL, Python, or no-code. Hex combines the best of traditional data science notebooks, with integrated AI assist, easy-to-build data apps and reports, and advanced collaboration, so your data and business teams can use data in new ways.
Product Details¶
Vendor URL: Hex
Product Type: Data Security
Product Tier: Tier II
Integration Method: Webhook
Log Guide: Audit Log Event Reference
Parser Details¶
Log Format: JSON
Expected Normalization Rate: 100%
Data Label: HEX
UDM Fields (list of all UDM fields leveraged in the Parser):
| Log File Field | UDM Field |
|---|---|
| event.action | metadata.product_event_type |
| event.actor.id | principal.user.userid |
| event.actor.metadata.email | principal.user.email_addresses |
| event.actor.metadata.email | principal.user.user_display_name |
| event.actor.metadata.email | principal.administrative_domain |
| event.actor.metadata.workspace | principal.user.company_name |
| event.actor.type | principal.user.attribute.roles |
| event.context.location | principal.ip |
| event.context.user_agent | network.http.user_agent |
| event.metadata.requestArgs.appSessionId | network.session_id |
| event.metadata.requestArgs.hexId | additional.fields |
| event.metadata.requestArgs.screenshotAppSessionId | network.session_id |
| event.metadata.requestArgs.sourceAppSessionId | network.session_id |
| event.metadata.requestArgs.triggeredFrom | additional.fields |
| event.metadata.requestArgs.uploadId | additional.fields |
| event.metadata.result | security_result.action_details |
| event.targets.id | about.resource.id |
| event.targets.id | target.resource.id |
| event.targets.id | target.asset_id |
| event.targets.metadata.representation.allowWriteback | additional.fields |
| event.targets.metadata.representation.authenticationType | extensions.auth.auth_details |
| event.targets.metadata.representation.canEditorsShare | about.resource.attribute.labels |
| event.targets.metadata.representation.canEditorsShare | target.resource.attribute.labels |
| event.targets.metadata.representation.cellType | target.resource_ancestors.resource_subtype |
| event.targets.metadata.representation.connectionDescription | target.resource.attribute.labels |
| event.targets.metadata.representation.connectionName | target.resource.name |
| event.targets.metadata.representation.created | additional.fields |
| event.targets.metadata.representation.creatorId | target.user.userid |
| event.targets.metadata.representation.description | security_result.description |
| event.targets.metadata.representation.email | target.user.email_addresses |
| event.targets.metadata.representation.embeddingStatus | target.resource.attribute.labels |
| event.targets.metadata.representation.embeddingStatus | about.resource.attribute.labels |
| event.targets.metadata.representation.filename | target.file.size |
| event.targets.metadata.representation.filesize | target.file.names |
| event.targets.metadata.representation.hexType | about.resource.resource_subtype |
| event.targets.metadata.representation.hexType | target.resource.resource_subtype |
| event.targets.metadata.representation.id | target.resource_ancestors.id |
| event.targets.metadata.representation.id | target.user.userid |
| event.targets.metadata.representation.isSsh | additional.fields |
| event.targets.metadata.representation.name | target.user.user_display_name |
| event.targets.metadata.representation.organizationRole | target.resource.attribute.roles.name |
| event.targets.metadata.representation.orgRole | target.user.attribute.permissions.name |
| event.targets.metadata.representation.projectLanguage | target.resource.attribute.labels |
| event.targets.metadata.representation.projectLanguage | about.resource.attribute.labels |
| event.targets.metadata.representation.publicRole | about.resource.attribute.labels |
| event.targets.metadata.representation.publicRole | target.resource.attribute.labels |
| event.targets.metadata.representation.title | target.resource.name |
| event.targets.metadata.representation.type | target.resource.resource_subtype |
| event.targets.metadata.representation.version | target.resource.attribute.labels |
| event.targets.metadata.representation.viewType | additional.fields |
| keySuffix | metadata.product_log_id |
| source | metadata.vendor_name |
| version | metadata.product_version |
Product Event Types¶
| Event | UDM Event Classification |
|---|---|
| PUBLISH_PROJECT, IMPORT_DATA_CONNECTION, CREATE_PROJECT, CREATE_EXPLORE_FROM_PROJECT_CELL, DUPLICATE_PROJECT | RESOURCE_CREATION |
| REQUEST_PROJECT_ROLE, GRANT_USERS_PROJECT_ACCESS | USER_CHANGE_PERMISSIONS |
| RUN_PROJECT, RUN_CELL | USER_RESOURCE_UPDATE_CONTENT |
| UPLOAD_FILE_TO_PROJECT, EDIT_PROJECT_SECRET, EDIT_DATA_CONNECTION | RESOURCE_WRITTEN |
| DELETE_PROJECT | RESOURCE_DELETION |
| DOWNLOAD_FILE_FROM_PROJECT | FILE_READ |
| VIEW_PROJECT | RESOURCE_READ |
Log Sample¶
{"event":{"action":"CREATE_PROJECT","actor":{"id":"1234abcd-3829-4112-9463-528bc62aeabd","metadata":{"email":"janedoe@example.com","workspace":"Example Workspace","workspaceId":"example_workspace"},"type":"USER"},"context":{"location":"10.196.84.162","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0"},"metadata":{"failureReason":"","requestArgs":"{\"autoPublish\":null,\"categoryIds\":[],\"cellIdsToCopy\":null,\"cellsToCreate\":\"\u003credacted\u003e\",\"collectionId\":null,\"collectionProjectRole\":null,\"dataConnectionIds\":null,\"description\":\"\u003credacted\u003e\",\"hexType\":\"PROJECT\",\"isTour\":false,\"kernelImage\":null,\"kernelSize\":null,\"name\":\"\u003credacted\u003e\",\"projectLanguage\":\"PYTHON\",\"statusId\":null}","result":"SUCCESS"},"occurred_at":"2024-11-19T17:22:02.315Z","targets":[{"id":"abcd1234-fe8b-4a8a-add5-40c76c10020f","metadata":{"created":true,"representation":"{\"id\":\"abcd1234-fe8b-4a8a-add5-40c76c10020f\",\"createdDate\":\"2024-11-19T17:22:02.228Z\",\"updatedDate\":\"2024-11-19T17:22:02.228Z\",\"archivedDate\":null,\"creatorId\":\"1234abcd-3829-4112-9463-528bc62aeabd\",\"canEditorsShare\":true,\"projectLanguage\":\"PYTHON\",\"embeddingStatus\":\"NOT_PROCESSED\",\"hexType\":\"PROJECT\",\"organizationRole\":null,\"publicRole\":null}"},"type":"project"}],"version":1},"keySuffix":"01JD2Q42YB6EAAA2GD5JZ96QRX","source":"Hex","timestamp":"2024-11-19T17:22:02.315Z"}
Sample Parsing¶
metadata.event_type = "RESOURCE_CREATION"
metadata.log_type = "HEX"
metadata.product_event_type = "CREATE_PROJECT"
metadata.product_log_id = "01JD2Q42YB6EAAA2GD5JZ96QRX"
metadata.vendor_name = "Hex"
network.http.user_agent = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0"
principal.administrative_domain = "example.com"
principal.ip = "10.196.84.162"
principal.user.attribute.roles.name = "USER"
principal.user.company_name = "Example Workspace"
principal.user.email_addresses = "janedoe@example.com"
principal.user.user_display_name = "janedoe"
principal.user.userid = "1234abcd-3829-4112-9463-528bc62aeabd"
security_result.action_details = "SUCCESS"
security_result.action = "ALLOW"
target.resource.attribute.labels.key = "Project Language"
target.resource.attribute.labels.value = "PYTHON"
target.resource.attribute.labels.key = "canEditorsShare"
target.resource.attribute.labels.value = "true"
target.resource.attribute.labels.key = "embeddingStatus"
target.resource.attribute.labels.value = "NOT_PROCESSED"
target.resource.id = "abcd1234-fe8b-4a8a-add5-40c76c10020f"
target.resource.resource_subtype = "PROJECT"
target.resource.resource_type = "CLOUD_PROJECT"
target.user.userid = "1234abcd-3829-4112-9463-528bc62aeabd"