- Home
- /
- Article
Thanks for your feedback.
Audit events generated for compliance and retention
In this article
Feedback?eDiscovery Report Download Was Started
|
Name |
Type |
Output |
Example |
Description |
|---|---|---|---|---|
|
timestamp |
datetime |
json, csv, ui |
|
The UTC time of the event to the nearest millisecond |
|
action_text |
string |
json, csv, ui |
|
A description of the action taken |
|
tracking_id |
string |
json, csv, ui |
|
The tracking of the current request which used to group other audit sub events |
|
event_category |
EventCategory |
json, csv, ui |
|
The category of the event |
|
actor_id |
string |
json, csv, ui |
|
The admin id |
|
actor_name |
string |
json, csv, ui |
|
The admin's full name |
|
actor_email |
|
json, csv, ui |
|
The admin's email address |
|
actor_org_id |
string |
json, csv, ui |
|
The admin's designated organization id |
|
actor_org_name |
string |
json, csv, ui |
|
The admin's designated organization name |
|
actor_user_agent |
string |
json, csv, ui |
|
The admin's browser user agent |
|
actor_ip |
ip_address |
json, csv, ui |
|
The admin's IP address |
|
target_type |
TargetResourceType |
json, csv, ui |
|
The type of target resource |
|
target_id |
string |
json, csv, ui |
|
The target resource/person's uuid |
|
target_name |
string |
json, csv, ui |
|
The target resource/person's full name |
|
target_org_id |
string |
json, csv, ui |
|
The target person's designated organization id |
eDiscovery Report Generation Was Cancelled
|
Name |
Type |
Output |
Example |
Description |
|---|---|---|---|---|
|
timestamp |
datetime |
json, csv, ui |
|
The UTC time of the event to the nearest millisecond |
|
action_text |
string |
json, csv, ui |
|
A description of the action taken |
|
tracking_id |
string |
json, csv, ui |
|
The tracking of the current request which used to group other audit sub events |
|
event_category |
EventCategory |
json, csv, ui |
|
The category of the event |
|
actor_id |
string |
json, csv, ui |
|
The admin id |
|
actor_name |
string |
json, csv, ui |
|
The admin's full name |
|
actor_email |
|
json, csv, ui |
|
The admin's email address |
|
actor_org_id |
string |
json, csv, ui |
|
The admin's designated organization id |
|
actor_org_name |
string |
json, csv, ui |
|
The admin's designated organization name |
|
actor_user_agent |
string |
json, csv, ui |
|
The admin's browser user agent |
|
actor_ip |
ip_address |
json, csv, ui |
|
The admin's IP address |
|
target_type |
TargetResourceType |
json, csv, ui |
|
The type of target resource |
|
target_id |
string |
json, csv, ui |
|
The target resource/person's uuid |
|
target_name |
string |
json, csv, ui |
|
The target resource/person's full name |
|
target_org_id |
string |
json, csv, ui |
|
The target person's designated organization id |
eDiscovery Report Was Created
|
Name |
Type |
Output |
Example |
Description |
|---|---|---|---|---|
|
timestamp |
datetime |
json, csv, ui |
|
The UTC time of the event to the nearest millisecond |
|
action_text |
string |
json, csv, ui |
|
A description of the action taken |
|
tracking_id |
string |
json, csv, ui |
|
The tracking of the current request which used to group other audit sub events |
|
event_category |
EventCategory |
json, csv, ui |
|
The category of the event |
|
actor_id |
string |
json, csv, ui |
|
The admin id |
|
actor_name |
string |
json, csv, ui |
|
The admin's full name |
|
actor_email |
|
json, csv, ui |
|
The admin's email address |
|
actor_org_id |
string |
json, csv, ui |
|
The admin's designated organization id |
|
actor_org_name |
string |
json, csv, ui |
|
The admin's designated organization name |
|
actor_user_agent |
string |
json, csv, ui |
|
The admin's browser user agent |
|
actor_ip |
ip_address |
json, csv, ui |
|
The admin's IP address |
|
target_type |
TargetResourceType |
json, csv, ui |
|
The type of target resource |
|
target_id |
string |
json, csv, ui |
|
The target resource/person's uuid |
|
target_name |
string |
json, csv, ui |
|
The target resource/person's full name |
|
target_org_id |
string |
json, csv, ui |
|
The target person's designated organization id |
eDiscovery Report Was Deleted
|
Name |
Type |
Output |
Example |
Description |
|---|---|---|---|---|
|
timestamp |
datetime |
json, csv, ui |
|
The UTC time of the event to the nearest millisecond |
|
action_text |
string |
json, csv, ui |
|
A description of the action taken |
|
tracking_id |
string |
json, csv, ui |
|
The tracking of the current request which used to group other audit sub events |
|
event_category |
EventCategory |
json, csv, ui |
|
The category of the event |
|
actor_id |
string |
json, csv, ui |
|
The admin id |
|
actor_name |
string |
json, csv, ui |
|
The admin's full name |
|
actor_email |
|
json, csv, ui |
|
The admin's email address |
|
actor_org_id |
string |
json, csv, ui |
|
The admin's designated organization id |
|
actor_org_name |
string |
json, csv, ui |
|
The admin's designated organization name |
|
actor_user_agent |
string |
json, csv, ui |
|
The admin's browser user agent |
|
actor_ip |
ip_address |
json, csv, ui |
|
The admin's IP address |
|
target_type |
TargetResourceType |
json, csv, ui |
|
The type of target resource |
|
target_id |
string |
json, csv, ui |
|
The target resource/person's uuid |
|
target_name |
string |
json, csv, ui |
|
The target resource/person's full name |
|
target_org_id |
string |
json, csv, ui |
|
The target person's designated organization id |
eDiscovery Report Was Restarted
|
Name |
Type |
Output |
Example |
Description |
|---|---|---|---|---|
|
timestamp |
datetime |
json, csv, ui |
|
The UTC time of the event to the nearest millisecond |
|
action_text |
string |
json, csv, ui |
|
A description of the action taken |
|
tracking_id |
string |
json, csv, ui |
|
The tracking of the current request which used to group other audit sub events |
|
event_category |
EventCategory |
json, csv, ui |
|
The category of the event |
|
actor_id |
string |
json, csv, ui |
|
The admin id |
|
actor_name |
string |
json, csv, ui |
|
The admin's full name |
|
actor_email |
|
json, csv, ui |
|
The admin's email address |
|
actor_org_id |
string |
json, csv, ui |
|
The admin's designated organization id |
|
actor_org_name |
string |
json, csv, ui |
|
The admin's designated organization name |
|
actor_user_agent |
string |
json, csv, ui |
|
The admin's browser user agent |
|
actor_ip |
ip_address |
json, csv, ui |
|
The admin's IP address |
|
target_type |
TargetResourceType |
json, csv, ui |
|
The type of target resource |
|
target_id |
string |
json, csv, ui |
|
The target resource/person's uuid |
|
target_name |
string |
json, csv, ui |
|
The target resource/person's full name |
|
target_org_id |
string |
json, csv, ui |
|
The target person's designated organization id |
eDiscovery Summary Report Download Was Started
|
Name |
Type |
Output |
Example |
Description |
|---|---|---|---|---|
|
timestamp |
datetime |
json, csv, ui |
|
The UTC time of the event to the nearest millisecond |
|
action_text |
string |
json, csv, ui |
|
A description of the action taken |
|
tracking_id |
string |
json, csv, ui |
|
The tracking of the current request which used to group other audit sub events |
|
event_category |
EventCategory |
json, csv, ui |
|
The category of the event |
|
actor_id |
string |
json, csv, ui |
|
The admin id |
|
actor_name |
string |
json, csv, ui |
|
The admin's full name |
|
actor_email |
|
json, csv, ui |
|
The admin's email address |
|
actor_org_id |
string |
json, csv, ui |
|
The admin's designated organization id |
|
actor_org_name |
string |
json, csv, ui |
|
The admin's designated organization name |
|
actor_user_agent |
string |
json, csv, ui |
|
The admin's browser user agent |
|
actor_ip |
ip_address |
json, csv, ui |
|
The admin's IP address |
|
target_type |
TargetResourceType |
json, csv, ui |
|
The type of target resource |
|
target_id |
string |
json, csv, ui |
|
The target resource/person's uuid |
|
target_name |
string |
json, csv, ui |
|
The target resource/person's full name |
|
target_org_id |
string |
json, csv, ui |
|
The target person's designated organization id |
Events Api Was Accessed By An Admin User
|
Name |
Type |
Output |
Example |
Description |
|---|---|---|---|---|
|
operation |
EventsAccessOperation |
json, ui |
|
The type of events access operation performed |
|
resource_types |
string |
json, ui |
|
The resource types queried (e.g., messages, memberships) |
|
event_types |
string |
json, ui |
|
The event types queried (e.g., created, deleted) |
|
query_from |
string |
json, ui |
|
The start date of the query range |
|
query_to |
string |
json, ui |
|
The end date of the query range |
|
event_ids |
string |
json, ui |
|
The specific event IDs accessed (for single/batch lookups) |
|
outcome |
EventsAccessOutcome |
json, ui |
|
Outcome of the events access operation |
|
target_type |
TargetResourceType |
json, csv, ui |
|
The type of target resource |
|
target_id |
string |
json, csv, ui |
|
The target resource/person's uuid |
|
target_name |
string |
json, csv, ui |
|
The target resource/person's full name |
|
target_org_id |
string |
json, csv, ui |
|
The target person's designated organization id |
|
target_org_name |
string |
json, ui |
|
The target person's designated organization name |
|
target_tenant_uid |
string |
json, csv, ui |
|
The target person's designated tenant id |
|
target_management_realm |
string |
json, csv, ui |
|
The target person's designated managementRealm |
|
event_category |
EventCategory |
json, csv, ui |
|
The category of the event |
|
config_type |
string |
json, csv, ui |
|
The type of configuration that represents provisioning entity name |
|
config_id |
string |
json, csv, ui |
|
config id |
|
config_data |
string |
json, csv, ui |
|
The config data that represents the payload of entity |
|
config_operation_type |
OperationType |
json, csv, ui |
|
The operation type represents operation type against entity |
|
is_internal |
boolean |
json, csv, ui |
|
Flag indicates whether the audit response should contain the events or not |
|
display_name |
string |
json, csv, ui |
|
Display name for the entity type, to show in the CH UI |
|
event_id |
uuid |
json, ui |
|
A unique id for each event generated |
|
timestamp |
datetime |
json, csv, ui |
|
The UTC time of the event to the nearest millisecond |
|
event_description |
string |
json, ui |
|
A short description of the type of event |
|
action_text |
string |
json, csv, ui |
|
A description of the action taken |
|
tracking_id |
string |
json, csv, ui |
|
The tracking of the current request which used to group other audit sub events |
|
actor_id |
string |
json, csv, ui |
|
The admin id |
|
actor_name |
string |
json, csv, ui |
|
The admin's full name |
|
actor_email |
|
json, csv, ui |
|
The admin's email address |
|
actor_org_id |
string |
json, csv, ui |
|
The admin's designated organization id |
|
actor_org_name |
string |
json, csv, ui |
|
The admin's designated organization name |
|
actor_tenant_uid |
string |
json, csv, ui |
|
The admin's designated tenant id |
|
actor_management_realm |
string |
json, csv, ui |
|
The admin's designated managementRealm |
|
actor_user_agent |
string |
json, csv, ui |
|
The admin's browser user agent |
|
actor_ip |
ip_address |
json, csv, ui |
|
The admin's IP address |
Record Automatically Triggered Deletion Events.
|
Name |
Type |
Output |
Example |
Description |
|---|---|---|---|---|
|
deletionType |
string |
json, ui |
|
The type of delete request |
|
deleteBeforeDate |
string |
json, ui |
|
The datetime that used by delete data |
|
target_type |
TargetResourceType |
json, csv, ui |
|
The type of target resource |
|
target_id |
string |
json, csv, ui |
|
The target resource/person's uuid |
|
target_name |
string |
json, csv, ui |
|
The target resource/person's full name |
|
target_org_id |
string |
json, csv, ui |
|
The target person's designated organization id |
|
target_org_name |
string |
json, ui |
|
The target person's designated organization name |
|
event_category |
EventCategory |
json, csv, ui |
|
The category of the event |
|
event_id |
uuid |
json, ui |
|
A unique id for each event generated |
|
timestamp |
datetime |
json, csv, ui |
|
The UTC time of the event to the nearest millisecond |
|
event_description |
string |
json, ui |
|
A short description of the type of event |
|
action_text |
string |
json, csv, ui |
|
A description of the action taken |
|
tracking_id |
string |
json, csv, ui |
|
The tracking of the current request which used to group other audit sub events |
|
actor_id |
string |
json, csv, ui |
|
The admin id |
|
actor_name |
string |
json, csv, ui |
|
The admin's full name |
|
actor_email |
|
json, csv, ui |
|
The admin's email address |
|
actor_org_id |
string |
json, csv, ui |
|
The admin's designated organization id |
|
actor_org_name |
string |
json, csv, ui |
|
The admin's designated organization name |
|
actor_user_agent |
string |
json, csv, ui |
|
The admin's browser user agent |
|
actor_ip |
ip_address |
json, csv, ui |
|
The admin's IP address |
