Does this tool connect to my IBM Cloud account?

No. This tool runs entirely in your browser and generates configuration JSON that you can copy and paste into your infrastructure-as-code templates, CLI commands, or cloud console. It never connects to any cloud account or sends data externally.

Are the generated configurations production-ready?

The tool produces syntactically valid configurations based on current IBM Cloud service specifications. Always review generated configs against your organization security policies and test in a non-production environment before deploying.

IBM Activity Tracker Config Builder

MonitoringIBM Cloud

Build Activity Tracker event routing configurations with COS archiving, filters, and security alerts.

IBM Cloud Activity Tracker Configuration

Build Activity Tracker event routing configurations with COS archiving, event filters, and security alerts.

Required Fields

instanceNametarget

{
  "instanceName": "prod-activity-tracker",
  "plan": "30-day",
  "region": "us-south",
  "target": {
    "type": "cloud_object_storage",
    "cosBucket": "audit-trail-archive",
    "cosInstanceCrn": "crn:v1:bluemix:public:cloud-object-storage:global:a/acct-id:cos-id::",
    "cosEndpoint": "s3.private.us-south.cloud-object-storage.appdomain.cloud"
  },
  "routes": [
    {
      "name": "all-management-events",
      "rules": [
        {
          "targetIds": ["cos-target-id"],
          "locations": ["us-south", "us-east", "global"]
        }
      ]
    }
  ],
  "eventFilters": [
    {
      "name": "iam-changes",
      "query": "action:iam-identity.* OR action:iam-groups.* OR action:iam-am.*",
      "description": "Track all IAM configuration changes"
    },
    {
      "name": "key-management",
      "query": "action:kms.secrets.* OR action:hs-crypto.*",
      "description": "Track encryption key lifecycle events"
    },
    {
      "name": "network-changes",
      "query": "action:is.security-group.* OR action:is.network-acl.* OR action:is.vpc.*",
      "description": "Track VPC networking changes"
    },
    {
      "name": "login-activity",
      "query": "action:iam-identity.user-apikey.login OR action:iam-identity.serviceid-apikey.login",
      "description": "Track all API key login events"
    }
  ],
  "alerts": [
    {
      "name": "suspicious-iam-activity",
      "type": "presence",
      "query": "action:iam-identity.user-apikey.create OR action:iam-groups.member.add",
      "condition": {
        "threshold": 5,
        "timeframe": "15m"
      },
      "channels": [
        { "type": "email", "recipients": ["security@example.com"] },
        { "type": "slack", "channel": "#security-alerts" }
      ]
    },
    {
      "name": "root-account-login",
      "type": "presence",
      "query": "action:iam-identity.account-owner.login",
      "condition": {
        "threshold": 1,
        "timeframe": "1h"
      },
      "channels": [
        { "type": "pagerduty", "severity": "high" }
      ]
    }
  ]
}

Generated Output

Output will appear here...

About This Tool

Build Activity Tracker event routing configurations with COS archiving, filters, and security alerts. This tool helps IBM Cloud engineers generate valid configurations quickly without consulting documentation, reducing errors and accelerating infrastructure deployment. All processing runs in your browser with no data sent to external servers.

When to Use This Tool

•Generating configurations for new IBM Cloud infrastructure deployments.
•Validating existing configurations against best practices before applying changes.
•Learning IBM Cloud service configuration patterns through interactive examples.
•Accelerating infrastructure-as-code development by producing correct JSON/YAML starting points.

Frequently Asked Questions

Does this tool connect to my IBM Cloud account?: No. This tool runs entirely in your browser and generates configuration JSON that you can copy and paste into your infrastructure-as-code templates, CLI commands, or cloud console. It never connects to any cloud account or sends data externally.
Are the generated configurations production-ready?: The tool produces syntactically valid configurations based on current IBM Cloud service specifications. Always review generated configs against your organization security policies and test in a non-production environment before deploying.

Related Learning Guides

IBM Cloud Cost Optimization22 min read

Disclaimer: This tool runs entirely in your browser. No data is sent to our servers. Always verify outputs before using them in production. AWS, Azure, and GCP are trademarks of their respective owners.