Audit Data Dictionary
The following information includes details on the fields that are stored for each event in the administrator audit logs.
The following are the values in the Output column:
-
CSV—These fields are in the comma separated values (CSV) file that you download. For more information, see Review Your Administrator Activity Logs in Cisco Webex Control Hub
-
JSON—These fields will be available when the API is updated.
Audit Events Generated for Compliance
Name |
Type |
Output |
Example |
Description |
---|---|---|---|---|
timestamp |
datetime |
json, csv, ui |
|
The UTC time of the event to the nearest millisecond |
action_text |
string |
json, csv, ui |
|
A description of the action taken |
tracking_id |
string |
json, csv, ui |
|
The tracking of the current request which used to group other audit sub events |
event_category |
EventCategory |
json, csv, ui |
|
The category of the event |
actor_id |
string |
json, csv, ui |
|
The admin id |
actor_name |
string |
json, csv, ui |
|
The admin's full name |
actor_email |
|
json, csv, ui |
|
The admin's email address |
actor_org_id |
string |
json, csv, ui |
|
The admin's designated organization id |
actor_org_name |
string |
json, csv, ui |
|
The admin's designated organization name |
actor_user_agent |
string |
json, csv, ui |
|
The admin's browser user agent |
actor_ip |
ip_address |
json, csv, ui |
|
The admin's IP address |
target_type |
TargetResourceType |
json, csv, ui |
|
The type of target resource |
target_id |
string |
json, csv, ui |
|
The target resource/person's uuid |
target_name |
string |
json, csv, ui |
|
The target resource/person's full name |
target_org_id |
string |
json, csv, ui |
|
The target person's designated organization id |
Name |
Type |
Output |
Example |
Description |
---|---|---|---|---|
timestamp |
datetime |
json, csv, ui |
|
The UTC time of the event to the nearest millisecond |
action_text |
string |
json, csv, ui |
|
A description of the action taken |
tracking_id |
string |
json, csv, ui |
|
The tracking of the current request which used to group other audit sub events |
event_category |
EventCategory |
json, csv, ui |
|
The category of the event |
actor_id |
string |
json, csv, ui |
|
The admin id |
actor_name |
string |
json, csv, ui |
|
The admin's full name |
actor_email |
|
json, csv, ui |
|
The admin's email address |
actor_org_id |
string |
json, csv, ui |
|
The admin's designated organization id |
actor_org_name |
string |
json, csv, ui |
|
The admin's designated organization name |
actor_user_agent |
string |
json, csv, ui |
|
The admin's browser user agent |
actor_ip |
ip_address |
json, csv, ui |
|
The admin's IP address |
target_type |
TargetResourceType |
json, csv, ui |
|
The type of target resource |
target_id |
string |
json, csv, ui |
|
The target resource/person's uuid |
target_name |
string |
json, csv, ui |
|
The target resource/person's full name |
target_org_id |
string |
json, csv, ui |
|
The target person's designated organization id |
Name |
Type |
Output |
Example |
Description |
---|---|---|---|---|
timestamp |
datetime |
json, csv, ui |
|
The UTC time of the event to the nearest millisecond |
action_text |
string |
json, csv, ui |
|
A description of the action taken |
tracking_id |
string |
json, csv, ui |
|
The tracking of the current request which used to group other audit sub events |
event_category |
EventCategory |
json, csv, ui |
|
The category of the event |
actor_id |
string |
json, csv, ui |
|
The admin id |
actor_name |
string |
json, csv, ui |
|
The admin's full name |
actor_email |
|
json, csv, ui |
|
The admin's email address |
actor_org_id |
string |
json, csv, ui |
|
The admin's designated organization id |
actor_org_name |
string |
json, csv, ui |
|
The admin's designated organization name |
actor_user_agent |
string |
json, csv, ui |
|
The admin's browser user agent |
actor_ip |
ip_address |
json, csv, ui |
|
The admin's IP address |
target_type |
TargetResourceType |
json, csv, ui |
|
The type of target resource |
target_id |
string |
json, csv, ui |
|
The target resource/person's uuid |
target_name |
string |
json, csv, ui |
|
The target resource/person's full name |
target_org_id |
string |
json, csv, ui |
|
The target person's designated organization id |
Name |
Type |
Output |
Example |
Description |
---|---|---|---|---|
timestamp |
datetime |
json, csv, ui |
|
The UTC time of the event to the nearest millisecond |
action_text |
string |
json, csv, ui |
|
A description of the action taken |
tracking_id |
string |
json, csv, ui |
|
The tracking of the current request which used to group other audit sub events |
event_category |
EventCategory |
json, csv, ui |
|
The category of the event |
actor_id |
string |
json, csv, ui |
|
The admin id |
actor_name |
string |
json, csv, ui |
|
The admin's full name |
actor_email |
|
json, csv, ui |
|
The admin's email address |
actor_org_id |
string |
json, csv, ui |
|
The admin's designated organization id |
actor_org_name |
string |
json, csv, ui |
|
The admin's designated organization name |
actor_user_agent |
string |
json, csv, ui |
|
The admin's browser user agent |
actor_ip |
ip_address |
json, csv, ui |
|
The admin's IP address |
target_type |
TargetResourceType |
json, csv, ui |
|
The type of target resource |
target_id |
string |
json, csv, ui |
|
The target resource/person's uuid |
target_name |
string |
json, csv, ui |
|
The target resource/person's full name |
target_org_id |
string |
json, csv, ui |
|
The target person's designated organization id |
Name |
Type |
Output |
Example |
Description |
---|---|---|---|---|
timestamp |
datetime |
json, csv, ui |
|
The UTC time of the event to the nearest millisecond |
action_text |
string |
json, csv, ui |
|
A description of the action taken |
tracking_id |
string |
json, csv, ui |
|
The tracking of the current request which used to group other audit sub events |
event_category |
EventCategory |
json, csv, ui |
|
The category of the event |
actor_id |
string |
json, csv, ui |
|
The admin id |
actor_name |
string |
json, csv, ui |
|
The admin's full name |
actor_email |
|
json, csv, ui |
|
The admin's email address |
actor_org_id |
string |
json, csv, ui |
|
The admin's designated organization id |
actor_org_name |
string |
json, csv, ui |
|
The admin's designated organization name |
actor_user_agent |
string |
json, csv, ui |
|
The admin's browser user agent |
actor_ip |
ip_address |
json, csv, ui |
|
The admin's IP address |
target_type |
TargetResourceType |
json, csv, ui |
|
The type of target resource |
target_id |
string |
json, csv, ui |
|
The target resource/person's uuid |
target_name |
string |
json, csv, ui |
|
The target resource/person's full name |
target_org_id |
string |
json, csv, ui |
|
The target person's designated organization id |
Name |
Type |
Output |
Example |
Description |
---|---|---|---|---|
timestamp |
datetime |
json, csv, ui |
|
The UTC time of the event to the nearest millisecond |
action_text |
string |
json, csv, ui |
|
A description of the action taken |
tracking_id |
string |
json, csv, ui |
|
The tracking of the current request which used to group other audit sub events |
event_category |
EventCategory |
json, csv, ui |
|
The category of the event |
actor_id |
string |
json, csv, ui |
|
The admin id |
actor_name |
string |
json, csv, ui |
|
The admin's full name |
actor_email |
|
json, csv, ui |
|
The admin's email address |
actor_org_id |
string |
json, csv, ui |
|
The admin's designated organization id |
actor_org_name |
string |
json, csv, ui |
|
The admin's designated organization name |
actor_user_agent |
string |
json, csv, ui |
|
The admin's browser user agent |
actor_ip |
ip_address |
json, csv, ui |
|
The admin's IP address |
target_type |
TargetResourceType |
json, csv, ui |
|
The type of target resource |
target_id |
string |
json, csv, ui |
|
The target resource/person's uuid |
target_name |
string |
json, csv, ui |
|
The target resource/person's full name |
target_org_id |
string |
json, csv, ui |
|
The target person's designated organization id |
Audit Events Generated for Customers (By Partner)
Name |
Type |
Output |
Example |
Description |
---|---|---|---|---|
target_email |
|
json, csv, ui |
|
The target person's email address |
timestamp |
datetime |
json, csv, ui |
|
The UTC time of the event to the nearest millisecond |
action_text |
string |
json, csv, ui |
|
A description of the action taken |
tracking_id |
string |
json, csv, ui |
|
The tracking of the current request which used to group other audit sub events |
event_category |
EventCategory |
json, csv, ui |
|
The category of the event |
actor_id |
string |
json, csv, ui |
|
The admin id |
actor_name |
string |
json, csv, ui |
|
The admin's full name |
actor_email |
|
json, csv, ui |
|
The admin's email address |
actor_org_id |
string |
json, csv, ui |
|
The admin's designated organization id |
actor_org_name |
string |
json, csv, ui |
|
The admin's designated organization name |
actor_user_agent |
string |
json, csv, ui |
|
The admin's browser user agent |
actor_ip |
ip_address |
json, csv, ui |
|
The admin's IP address |
target_type |
TargetResourceType |
json, csv, ui |
|
The type of target resource |
target_id |
string |
json, csv, ui |
|
The target resource/person's uuid |
target_name |
string |
json, csv, ui |
|
The target resource/person's full name |
target_org_id |
string |
json, csv, ui |
|
The target person's designated organization id |
Name |
Type |
Output |
Example |
Description |
---|---|---|---|---|
timestamp |
datetime |
json, csv, ui |
|
The UTC time of the event to the nearest millisecond |
action_text |
string |
json, csv, ui |
|
A description of the action taken |
tracking_id |
string |
json, csv, ui |
|
The tracking of the current request which used to group other audit sub events |
event_category |
EventCategory |
json, csv, ui |
|
The category of the event |
actor_id |
string |
json, csv, ui |
|
The admin id |
actor_name |
string |
json, csv, ui |
|
The admin's full name |
actor_email |
|
json, csv, ui |
|
The admin's email address |
actor_org_id |
string |
json, csv, ui |
|
The admin's designated organization id |
actor_org_name |
string |
json, csv, ui |
|
The admin's designated organization name |
actor_user_agent |
string |
json, csv, ui |
|
The admin's browser user agent |
actor_ip |
ip_address |
json, csv, ui |
|
The admin's IP address |
target_type |
TargetResourceType |
json, csv, ui |
|
The type of target resource |
target_id |
string |
json, csv, ui |
|
The target resource/person's uuid |
target_name |
string |
json, csv, ui |
|
The target resource/person's full name |
target_org_id |
string |
json, csv, ui |
|
The target person's designated organization id |
Name |
Type |
Output |
Example |
Description |
---|---|---|---|---|
timestamp |
datetime |
json, csv, ui |
|
The UTC time of the event to the nearest millisecond |
action_text |
string |
json, csv, ui |
|
A description of the action taken |
tracking_id |
string |
json, csv, ui |
|
The tracking of the current request which used to group other audit sub events |
event_category |
EventCategory |
json, csv, ui |
|
The category of the event |
actor_id |
string |
json, csv, ui |
|
The admin id |
actor_name |
string |
json, csv, ui |
|
The admin's full name |
actor_email |
|
json, csv, ui |
|
The admin's email address |
actor_org_id |
string |
json, csv, ui |
|
The admin's designated organization id |
actor_org_name |
string |
json, csv, ui |
|
The admin's designated organization name |
actor_user_agent |
string |
json, csv, ui |
|
The admin's browser user agent |
actor_ip |
ip_address |
json, csv, ui |
|
The admin's IP address |
target_type |
TargetResourceType |
json, csv, ui |
|
The type of target resource |
target_id |
string |
json, csv, ui |
|
The target resource/person's uuid |
target_name |
string |
json, csv, ui |
|
The target resource/person's full name |
target_org_id |
string |
json, csv, ui |
|
The target person's designated organization id |
Name |
Type |
Output |
Example |
Description |
---|---|---|---|---|
timestamp |
datetime |
json, csv, ui |
|
The UTC time of the event to the nearest millisecond |
action_text |
string |
json, csv, ui |
|
A description of the action taken |
tracking_id |
string |
json, csv, ui |
|
The tracking of the current request which used to group other audit sub events |
event_category |
EventCategory |
json, csv, ui |
|
The category of the event |
actor_id |
string |
json, csv, ui |
|
The admin id |
actor_name |
string |
json, csv, ui |
|
The admin's full name |
actor_email |
|
json, csv, ui |
|
The admin's email address |
actor_org_id |
string |
json, csv, ui |
|
The admin's designated organization id |
actor_org_name |
string |
json, csv, ui |
|
The admin's designated organization name |
actor_user_agent |
string |
json, csv, ui |
|
The admin's browser user agent |
actor_ip |
ip_address |
json, csv, ui |
|
The admin's IP address |
target_type |
TargetResourceType |
json, csv, ui |
|
The type of target resource |
target_id |
string |
json, csv, ui |
|
The target resource/person's uuid |
target_name |
string |
json, csv, ui |
|
The target resource/person's full name |
target_org_id |
string |
json, csv, ui |
|
The target person's designated organization id |
Name |
Type |
Output |
Example |
Description |
---|---|---|---|---|
timestamp |
datetime |
json, csv, ui |
|
The UTC time of the event to the nearest millisecond |
action_text |
string |
json, csv, ui |
|
A description of the action taken |
tracking_id |
string |
json, csv, ui |
|
The tracking of the current request which used to group other audit sub events |
event_category |
EventCategory |
json, csv, ui |
|
The category of the event |
actor_id |
string |
json, csv, ui |
|
The admin id |
actor_name |
string |
json, csv, ui |
|
The admin's full name |
actor_email |
|
json, csv, ui |
|
The admin's email address |
actor_org_id |
string |
json, csv, ui |
|
The admin's designated organization id |
actor_org_name |
string |
json, csv, ui |
|
The admin's designated organization name |
actor_user_agent |
string |
json, csv, ui |
|
The admin's browser user agent |
actor_ip |
ip_address |
json, csv, ui |
|
The admin's IP address |
target_type |
TargetResourceType |
json, csv, ui |
|
The type of target resource |
target_id |
string |
json, csv, ui |
|
The target resource/person's uuid |
target_name |
string |
json, csv, ui |
|
The target resource/person's full name |
target_org_id |
string |
json, csv, ui |
|
The target person's designated organization id |
Name |
Type |
Output |
Example |
Description |
---|---|---|---|---|
timestamp |
datetime |
json, csv, ui |
|
The UTC time of the event to the nearest millisecond |
action_text |
string |
json, csv, ui |
|
A description of the action taken |
tracking_id |
string |
json, csv, ui |
|
The tracking of the current request which used to group other audit sub events |
event_category |
EventCategory |
json, csv, ui |
|
The category of the event |
actor_id |
string |
json, csv, ui |
|
The admin id |
actor_name |
string |
json, csv, ui |
|
The admin's full name |
actor_email |
|
json, csv, ui |
|
The admin's email address |
actor_org_id |
string |
json, csv, ui |
|
The admin's designated organization id |
actor_org_name |
string |
json, csv, ui |
|
The admin's designated organization name |
actor_user_agent |
string |
json, csv, ui |
|
The admin's browser user agent |
actor_ip |
ip_address |
json, csv, ui |
|
The admin's IP address |
target_type |
TargetResourceType |
json, csv, ui |
|
The type of target resource |
target_id |
string |
json, csv, ui |
|
The target resource/person's uuid |
target_name |
string |
json, csv, ui |
|
The target resource/person's full name |
target_org_id |
string |
json, csv, ui |
|
The target person's designated organization id |
Name |
Type |
Output |
Example |
Description |
---|---|---|---|---|
timestamp |
datetime |
json, csv, ui |
|
The UTC time of the event to the nearest millisecond |
action_text |
string |
json, csv, ui |
|
A description of the action taken |
tracking_id |
string |
json, csv, ui |
|
The tracking of the current request which used to group other audit sub events |
event_category |
EventCategory |
json, csv, ui |
|
The category of the event |
actor_id |
string |
json, csv, ui |
|
The admin id |
actor_name |
string |
json, csv, ui |
|
The admin's full name |
actor_email |
|
json, csv, ui |
|
The admin's email address |
actor_org_id |
string |
json, csv, ui |
|
The admin's designated organization id |
actor_org_name |
string |
json, csv, ui |
|
The admin's designated organization name |
actor_user_agent |
string |
json, csv, ui |
|
The admin's browser user agent |
actor_ip |
ip_address |
json, csv, ui |
|
The admin's IP address |
target_type |
TargetResourceType |
json, csv, ui |
|
The type of target resource |
target_id |
string |
json, csv, ui |
|
The target resource/person's uuid |
target_name |
string |
json, csv, ui |
|
The target resource/person's full name |
target_org_id |
string |
json, csv, ui |
|
The target person's designated organization id |
Name |
Type |
Output |
Example |
Description |
---|---|---|---|---|
timestamp |
datetime |
json, csv, ui |
|
The UTC time of the event to the nearest millisecond |
action_text |
string |
json, csv, ui |
|
A description of the action taken |
tracking_id |
string |
json, csv, ui |
|
The tracking of the current request which used to group other audit sub events |
event_category |
EventCategory |
json, csv, ui |
|
The category of the event |
actor_id |
string |
json, csv, ui |
|
The admin id |
actor_name |
string |
json, csv, ui |
|
The admin's full name |
actor_email |
|
json, csv, ui |
|
The admin's email address |
actor_org_id |
string |
json, csv, ui |
|
The admin's designated organization id |
actor_org_name |
string |
json, csv, ui |
|
The admin's designated organization name |
actor_user_agent |
string |
json, csv, ui |
|
The admin's browser user agent |
actor_ip |
ip_address |
json, csv, ui |
|
The admin's IP address |
target_type |
TargetResourceType |
json, csv, ui |
|
The type of target resource |
target_id |
string |
json, csv, ui |
|
The target resource/person's uuid |
target_name |
string |
json, csv, ui |
|
The target resource/person's full name |
target_org_id |
string |
json, csv, ui |
|
The target person's designated organization id |
Name |
Type |
Output |
Example |
Description |
---|---|---|---|---|
timestamp |
datetime |
json, csv, ui |
|
The UTC time of the event to the nearest millisecond |
action_text |
string |
json, csv, ui |
|
A description of the action taken |
tracking_id |
string |
json, csv, ui |
|
The tracking of the current request which used to group other audit sub events |
event_category |
EventCategory |
json, csv, ui |
|
The category of the event |
actor_id |
string |
json, csv, ui |
|
The admin id |
actor_name |
string |
json, csv, ui |
|
The admin's full name |
actor_email |
|
json, csv, ui |
|
The admin's email address |
actor_org_id |
string |
json, csv, ui |
|
The admin's designated organization id |
actor_org_name |
string |
json, csv, ui |
|
The admin's designated organization name |
actor_user_agent |
string |
json, csv, ui |
|
The admin's browser user agent |
actor_ip |
ip_address |
json, csv, ui |
|
The admin's IP address |
target_type |
TargetResourceType |
json, csv, ui |
|
The type of target resource |
target_id |
string |
json, csv, ui |
|
The target resource/person's uuid |
target_name |
string |
json, csv, ui |
|
The target resource/person's full name |
target_org_id |
string |
json, csv, ui |
|
The target person's designated organization id |
Audit Events Generated for Devices
Name |
Type |
Output |
Example |
Description |
---|---|---|---|---|
timestamp |
datetime |
json, csv, ui |
|
The UTC time of the event to the nearest millisecond |
action_text |
string |
json, csv, ui |
|
A description of the action taken |
tracking_id |
string |
json, csv, ui |
|
The tracking of the current request which used to group other audit sub events |
event_category |
EventCategory |
json, csv, ui |
|
The category of the event |
actor_id |
string |
json, csv, ui |
|
The admin id |
actor_name |
string |
json, csv, ui |
|
The admin's full name |
actor_email |
|
json, csv, ui |
|
The admin's email address |
actor_org_id |
string |
json, csv, ui |
|
The admin's designated organization id |
actor_org_name |
string |
json, csv, ui |
|
The admin's designated organization name |
actor_user_agent |
string |
json, csv, ui |
|
The admin's browser user agent |
actor_ip |
ip_address |
json, csv, ui |
|
The admin's IP address |
target_type |
TargetResourceType |
json, csv, ui |
|
The type of target resource |
target_id |
string |
json, csv, ui |
|
The target resource/person's uuid |
target_name |
string |
json, csv, ui |
|
The target resource/person's full name |
target_org_id |
string |
json, csv, ui |
|
The target person's designated organization id |
Name |
Type |
Output |
Example |
Description |
---|---|---|---|---|
timestamp |
datetime |
json, csv, ui |
|
The UTC time of the event to the nearest millisecond |
action_text |
string |
json, csv, ui |
|
A description of the action taken |
tracking_id |
string |
json, csv, ui |
|
The tracking of the current request which used to group other audit sub events |
event_category |
EventCategory |
json, csv, ui |
|
The category of the event |
actor_id |
string |
json, csv, ui |
|
The admin id |
actor_name |
string |
json, csv, ui |
|
The admin's full name |
actor_email |
|
json, csv, ui |
|
The admin's email address |
actor_org_id |
string |
json, csv, ui |
|
The admin's designated organization id |
actor_org_name |
string |
json, csv, ui |
|
The admin's designated organization name |
actor_user_agent |
string |
json, csv, ui |
|
The admin's browser user agent |
actor_ip |
ip_address |
json, csv, ui |
|
The admin's IP address |
target_type |
TargetResourceType |
json, csv, ui |
|
The type of target resource |
target_id |
string |
json, csv, ui |
|
The target resource/person's uuid |
target_name |
string |
json, csv, ui |
|
The target resource/person's full name |
target_org_id |
string |
json, csv, ui |
|
The target person's designated organization id |
Name |
Type |
Output |
Example |
Description |
---|---|---|---|---|
timestamp |
datetime |
json, csv, ui |
|
The UTC time of the event to the nearest millisecond |
action_text |
string |
json, csv, ui |
|
A description of the action taken |
tracking_id |
string |
json, csv, ui |
|
The tracking of the current request which used to group other audit sub events |
event_category |
EventCategory |
json, csv, ui |
|
The category of the event |
actor_id |
string |
json, csv, ui |
|
The admin id |
actor_name |
string |
json, csv, ui |
|
The admin's full name |
actor_email |
|
json, csv, ui |
|
The admin's email address |
actor_org_id |
string |
json, csv, ui |
|
The admin's designated organization id |
actor_org_name |
string |
json, csv, ui |
|
The admin's designated organization name |
actor_user_agent |
string |
json, csv, ui |
|
The admin's browser user agent |
actor_ip |
ip_address |
json, csv, ui |
|
The admin's IP address |
target_type |
TargetResourceType |
json, csv, ui |
|
The type of target resource |
target_id |
string |
json, csv, ui |
|
The target resource/person's uuid |
target_name |
string |
json, csv, ui |
|
The target resource/person's full name |
target_org_id |
string |
json, csv, ui |
|
The target person's designated organization id |
Name |
Type |
Output |
Example |
Description |
---|---|---|---|---|
timestamp |
datetime |
json, csv, ui |
|
The UTC time of the event to the nearest millisecond |
action_text |
string |
json, csv, ui |
|
A description of the action taken |
tracking_id |
string |
json, csv, ui |
|
The tracking of the current request which used to group other audit sub events |
event_category |
EventCategory |
json, csv, ui |
|
The category of the event |
actor_id |
string |
json, csv, ui |
|
The admin id |
actor_name |
string |
json, csv, ui |
|
The admin's full name |
actor_email |
|
json, csv, ui |
|
The admin's email address |
actor_org_id |
string |
json, csv, ui |
|
The admin's designated organization id |
actor_org_name |
string |
json, csv, ui |
|
The admin's designated organization name |
actor_user_agent |
string |
json, csv, ui |
|
The admin's browser user agent |
actor_ip |
ip_address |
json, csv, ui |
|
The admin's IP address |
target_type |
TargetResourceType |
json, csv, ui |
|
The type of target resource |
target_id |
string |
json, csv, ui |
|
The target resource/person's uuid |
target_name |
string |
json, csv, ui |
|
The target resource/person's full name |
target_org_id |
string |
json, csv, ui |
|
The target person's designated organization id |
Name |
Type |
Output |
Example |
Description |
---|---|---|---|---|
timestamp |
datetime |
json, csv, ui |
|
The UTC time of the event to the nearest millisecond |
action_text |
string |
json, csv, ui |
|
A description of the action taken |
tracking_id |
string |
json, csv, ui |
|
The tracking of the current request which used to group other audit sub events |
event_category |
EventCategory |
json, csv, ui |
|
The category of the event |
actor_id |
string |
json, csv, ui |
|
The admin id |
actor_name |
string |
json, csv, ui |
|
The admin's full name |
actor_email |
|
json, csv, ui |
|
The admin's email address |
actor_org_id |
string |
json, csv, ui |
|
The admin's designated organization id |
actor_org_name |
string |
json, csv, ui |
|
The admin's designated organization name |
actor_user_agent |
string |
json, csv, ui |
|
The admin's browser user agent |
actor_ip |
ip_address |
json, csv, ui |
|
The admin's IP address |
target_type |
TargetResourceType |
json, csv, ui |
|
The type of target resource |
target_id |
string |
json, csv, ui |
|
The target resource/person's uuid |
target_name |
string |
json, csv, ui |
|
The target resource/person's full name |
target_org_id |
string |
json, csv, ui |
|
The target person's designated organization id |
Name |
Type |
Output |
Example |
Description |
---|---|---|---|---|
timestamp |
datetime |
json, csv, ui |
|
The UTC time of the event to the nearest millisecond |
action_text |
string |
json, csv, ui |
|
A description of the action taken |
tracking_id |
string |
json, csv, ui |
|
The tracking of the current request which used to group other audit sub events |
event_category |
EventCategory |
json, csv, ui |
|
The category of the event |
actor_id |
string |
json, csv, ui |
|
The admin id |
actor_name |
string |
json, csv, ui |
|
The admin's full name |
actor_email |
|
json, csv, ui |
|
The admin's email address |
actor_org_id |
string |
json, csv, ui |
|
The admin's designated organization id |
actor_org_name |
string |
json, csv, ui |
|
The admin's designated organization name |
actor_user_agent |
string |
json, csv, ui |
|
The admin's browser user agent |
actor_ip |
ip_address |
json, csv, ui |
|
The admin's IP address |
target_type |
TargetResourceType |
json, csv, ui |
|
The type of target resource |
target_id |
string |
json, csv, ui |
|
The target resource/person's uuid |
target_name |
string |
json, csv, ui |
|
The target resource/person's full name |
target_org_id |
string |
json, csv, ui |
|
The target person's designated organization id |
Name |
Type |
Output |
Example |
Description |
---|---|---|---|---|
timestamp |
datetime |
csv, json, ui |
|
The UTC time of the event to the nearest millisecond |
action_text |
string |
csv, ui |
|
A description of the action taken |
tracking_id |
string |
csv, json, ui |
|
The tracking of the current request which used to group other audit sub events |
event_category |
EventCategory |
csv, json, ui |
|
The category of the event |
actor_id |
string |
csv, json, ui |
|
The admin id |
actor_name |
string |
csv, json, ui |
|
The admin's full name |
actor_email |
|
csv, json, ui |
|
The admin's email address |
actor_org_id |
string |
csv, json, ui |
|
The admin's designated organization id |
actor_org_name |
string |
csv, json, ui |
|
The admin's designated organization name |
actor_user_agent |
string |
csv, json, ui |
|
The admin's browser user agent |
actor_ip |
ip_address |
csv, json, ui |
|
The admin's IP address |
target_type |
TargetResourceType |
csv, json, ui |
|
The type of target resource |
target_id |
string |
csv, json, ui |
|
The target resource/person's uuid |
target_name |
string |
csv, json, ui |
|
The target resource/person's full name |
target_org_id |
string |
csv, json, ui |
|
The target person's designated organization id |
Audit Events Generated for Help Desk
Name |
Type |
Output |
Example |
Description |
---|---|---|---|---|
event_id |
uuid |
json, ui |
|
A unique id for each event generated |
timestamp |
datetime |
json, csv, ui |
|
The UTC time of the event to the nearest millisecond |
action_text |
string |
json, csv, ui |
|
A description of the action taken |
tracking_id |
string |
json, csv, ui |
|
The tracking of the current request which used to group other audit sub events |
event_category |
EventCategory |
json, csv, ui |
|
The category of the event |
actor_id |
string |
json, csv, ui |
|
The admin id |
actor_name |
string |
json, csv, ui |
|
The admin's full name |
actor_email |
|
json, csv, ui |
|
The admin's email address |
actor_org_id |
string |
json, csv, ui |
|
The admin's designated organization id |
actor_org_name |
string |
json, csv, ui |
|
The admin's designated organization name |
actor_user_agent |
string |
json, csv, ui |
|
The admin's browser user agent |
actor_ip |
ip_address |
json, csv, ui |
|
The admin's IP address |
target_type |
TargetResourceType |
json, csv, ui |
|
The type of target resource |
target_id |
string |
json, csv, ui |
|
The target resource/person's uuid |
target_name |
string |
json, csv, ui |
|
The target resource/person's full name |
target_org_id |
string |
json, csv, ui |
|
The target person's designated organization id |
Name |
Type |
Output |
Example |
Description |
---|---|---|---|---|
timestamp |
datetime |
csv, json, ui |
|
The UTC time of the event to the nearest millisecond |
action_text |
string |
csv, ui |
|
A description of the action taken |
tracking_id |
string |
csv, json, ui |
|
The tracking of the current request which used to group other audit sub events |
event_category |
EventCategory |
csv, json, ui |
|
The category of the event |
actor_id |
string |
csv, json, ui |
|
The admin id |
actor_name |
string |
csv, json, ui |
|
The admin's full name |
actor_email |
|
csv, json, ui |
|
The admin's email address |
actor_org_id |
string |
csv, json, ui |
|
The admin's designated organization id |
actor_org_name |
string |
csv, json, ui |
|
The admin's designated organization name |
actor_user_agent |
string |
csv, json, ui |
|
The admin's browser user agent |
actor_ip |
ip_address |
csv, json, ui |
|
The admin's IP address |
target_type |
TargetResourceType |
csv, json, ui |
|
The type of target resource |
target_id |
string |
csv, json, ui |
|
The target resource/person's uuid |
target_name |
string |
csv, json, ui |
|
The target resource/person's full name |
target_org_id |
string |
csv, json, ui |
|
The target person's designated organization id |
Name |
Type |
Output |
Example |
Description |
---|---|---|---|---|
target_email |
|
csv, json, ui |
|
The target person's email address |
timestamp |
datetime |
csv, json, ui |
|
The UTC time of the event to the nearest millisecond |
action_text |
string |
csv, ui |
|
A description of the action taken |
tracking_id |
string |
csv, json, ui |
|
The tracking of the current request which used to group other audit sub events |
event_category |
EventCategory |
csv, json, ui |
|
The category of the event |
actor_id |
string |
csv, json, ui |
|
The admin id |
actor_name |
string |
csv, json, ui |
|
The admin's full name |
actor_email |
|
csv, json, ui |
|
The admin's email address |
actor_org_id |
string |
csv, json, ui |
|
The admin's designated organization id |
actor_org_name |
string |
csv, json, ui |
|
The admin's designated organization name |
actor_user_agent |
string |
csv, json, ui |
|
The admin's browser user agent |
actor_ip |
ip_address |
csv, json, ui |
|
The admin's IP address |
target_type |
TargetResourceType |
csv, json, ui |
|
The type of target resource |
target_id |
string |
csv, json, ui |
|
The target resource/person's uuid |
target_name |
string |
csv, json, ui |
|
The target resource/person's full name |
target_org_id |
string |
csv, json, ui |
|
The target person's designated organization id |
Audit Events Generated for Hybrid Services
Name |
Type |
Output |
Example |
Description |
---|---|---|---|---|
home_cluster_fqdn |
string |
json, ui |
|
The UCM home cluster FQDN |
event_id |
uuid |
json, ui |
|
A unique id for each event generated |
timestamp |
datetime |
json, csv, ui |
|
The UTC time of the event to the nearest millisecond |
event_description |
string |
json, ui |
|
A short description of the type of event |
action_text |
string |
json, csv, ui |
|
A description of the action taken |
tracking_id |
string |
json, csv, ui |
|
The tracking of the current request which used to group other audit sub events |
event_category |
EventCategory |
json, csv, ui |
|
The category of the event |
actor_id |
string |
json, csv, ui |
|
The admin id |
actor_name |
string |
json, csv, ui |
|
The admin's full name |
actor_email |
|
json, csv, ui |
|
The admin's email address |
actor_org_id |
string |
json, csv, ui |
|
The admin's designated organization id |
actor_org_name |
string |
json, csv, ui |
|
The admin's designated organization name |
actor_user_agent |
string |
json, csv, ui |
|
The admin's browser user agent |
actor_ip |
ip_address |
json, csv, ui |
|
The admin's IP address |
target_type |
TargetResourceType |
json, csv, ui |
|
The type of target resource |
target_id |
string |
json, csv, ui |
|
The target resource/person's uuid |
target_name |
string |
json, csv, ui |
|
The target resource/person's full name |
target_org_id |
string |
json, csv, ui |
|
The target person's designated organization id |
target_org_name |
string |
json, ui |
|
The target person's designated organization name |
Name |
Type |
Output |
Example |
Description |
---|---|---|---|---|
sip_domain |
string |
json, ui |
|
The SIP destination |
home_cluster_fqdn |
string |
json, ui |
|
The UCM home cluster FQDN |
event_id |
uuid |
json, ui |
|
A unique id for each event generated |
timestamp |
datetime |
json, csv, ui |
|
The UTC time of the event to the nearest millisecond |
event_description |
string |
json, ui |
|
A short description of the type of event |
action_text |
string |
json, csv, ui |
|
A description of the action taken |
tracking_id |
string |
json, csv, ui |
|
The tracking of the current request which used to group other audit sub events |
event_category |
EventCategory |
json, csv, ui |
|
The category of the event |
actor_id |
string |
json, csv, ui |
|
The admin id |
actor_name |
string |
json, csv, ui |
|
The admin's full name |
actor_email |
|
json, csv, ui |
|
The admin's email address |
actor_org_id |
string |
json, csv, ui |
|
The admin's designated organization id |
actor_org_name |
string |
json, csv, ui |
|
The admin's designated organization name |
actor_user_agent |
string |
json, csv, ui |
|
The admin's browser user agent |
actor_ip |
ip_address |
json, csv, ui |
|
The admin's IP address |
target_type |
TargetResourceType |
json, csv, ui |
|
The type of target resource |
target_id |
string |
json, csv, ui |
|
The target resource/person's uuid |
target_name |
string |
json, csv, ui |
|
The target resource/person's full name |
target_org_id |
string |
json, csv, ui |
|
The target person's designated organization id |
target_org_name |
string |
json, ui |
|
The target person's designated organization name |
Name |
Type |
Output |
Example |
Description |
---|---|---|---|---|
timestamp |
datetime |
json, csv, ui |
|
The UTC time of the event to the nearest millisecond |
action_text |
string |
json, csv, ui |
|
A description of the action taken |
tracking_id |
string |
json, csv, ui |
|
The tracking of the current request which used to group other audit sub events |
event_category |
EventCategory |
json, csv, ui |
|
The category of the event |
actor_id |
string |
json, csv, ui |
|
The admin id |
actor_name |
string |
json, csv, ui |
|
The admin's full name |
actor_email |
|
json, csv, ui |
|
The admin's email address |
actor_org_id |
string |
json, csv, ui |
|
The admin's designated organization id |
actor_org_name |
string |
json, csv, ui |
|
The admin's designated organization name |
actor_user_agent |
string |
json, csv, ui |
|
The admin's browser user agent |
actor_ip |
ip_address |
json, csv, ui |
|
The admin's IP address |
target_type |
TargetResourceType |
json, csv, ui |
|
The type of target resource |
target_id |
string |
json, csv, ui |
|
The target resource/person's uuid |
target_name |
string |
json, csv, ui |
|
The target resource/person's full name |
target_org_id |
string |
json, csv, ui |
|
The target person's designated organization id |
Name |
Type |
Output |
Example |
Description |
---|---|---|---|---|
timestamp |
datetime |
json, csv, ui |
|
The UTC time of the event to the nearest millisecond |
action_text |
string |
json, csv, ui |
|
A description of the action taken |
tracking_id |
string |
json, csv, ui |
|
The tracking of the current request which used to group other audit sub events |
event_category |
EventCategory |
json, csv, ui |
|
The category of the event |
actor_id |
string |
json, csv, ui |
|
The admin id |
actor_name |
string |
json, csv, ui |
|
The admin's full name |
actor_email |
|
json, csv, ui |
|
The admin's email address |
actor_org_id |
string |
json, csv, ui |
|
The admin's designated organization id |
actor_org_name |
string |
json, csv, ui |
|
The admin's designated organization name |
actor_user_agent |
string |
json, csv, ui |
|
The admin's browser user agent |
actor_ip |
ip_address |
json, csv, ui |
|
The admin's IP address |
target_type |
TargetResourceType |
json, csv, ui |
|
The type of target resource |
target_id |
string |
json, csv, ui |
|
The target resource/person's uuid |
target_name |
string |
json, csv, ui |
|
The target resource/person's full name |
target_org_id |
string |
json, csv, ui |
|
The target person's designated organization id |
Name |
Type |
Output |
Example |
Description |
---|---|---|---|---|
timestamp |
datetime |
json, csv, ui |
|
The UTC time of the event to the nearest millisecond |
action_text |
string |
json, csv, ui |
|
A description of the action taken |
tracking_id |
string |
json, csv, ui |
|
The tracking of the current request which used to group other audit sub events |
event_category |
EventCategory |
json, csv, ui |
|
The category of the event |
actor_id |
string |
json, csv, ui |
|
The admin id |
actor_name |
string |
json, csv, ui |
|
The admin's full name |
actor_email |
|
json, csv, ui |
|
The admin's email address |
actor_org_id |
string |
json, csv, ui |
|
The admin's designated organization id |
actor_org_name |
string |
json, csv, ui |
|
The admin's designated organization name |
actor_user_agent |
string |
json, csv, ui |
|
The admin's browser user agent |
actor_ip |
ip_address |
json, csv, ui |
|
The admin's IP address |
target_type |
TargetResourceType |
json, csv, ui |
|
The type of target resource |
target_id |
string |
json, csv, ui |
|
The target resource/person's uuid |
target_name |
string |
json, csv, ui |
|
The target resource/person's full name |
target_org_id |
string |
json, csv, ui |
|
The target person's designated organization id |
Name |
Type |
Output |
Example |
Description |
---|---|---|---|---|
timestamp |
datetime |
csv, json, ui |
|
The UTC time of the event to the nearest millisecond |
action_text |
string |
csv, ui |
|
A description of the action taken |
tracking_id |
string |
csv, json, ui |
|
The tracking of the current request which used to group other audit sub events |
event_category |
EventCategory |
csv, json, ui |
|
The category of the event |
actor_id |
string |
csv, json, ui |
|
The admin id |
actor_name |
string |
csv, json, ui |
|
The admin's full name |
actor_email |
|
csv, json, ui |
|
The admin's email address |
actor_org_id |
string |
csv, json, ui |
|
The admin's designated organization id |
actor_org_name |
string |
csv, json, ui |
|
The admin's designated organization name |
actor_user_agent |
string |
csv, json, ui |
|
The admin's browser user agent |
actor_ip |
ip_address |
csv, json, ui |
|
The admin's IP address |
target_type |
TargetResourceType |
csv, json, ui |
|
The type of target resource |
target_id |
string |
csv, json, ui |
|
The target resource/person's uuid |
target_name |
string |
csv, json, ui |
|
The target resource/person's full name |
target_org_id |
string |
csv, json, ui |
|
The target person's designated organization id |
Name |
Type |
Output |
Example |
Description |
---|---|---|---|---|
upgrade_schedule_frequency |
string |
json, ui |
|
The upgrade schedule frequency of the updated cluster |
cluster_id |
string |
json, ui |
|
The id of the updated cluster |
cluster_name |
string |
json, ui |
|
The name of the updated cluster |
event_id |
uuid |
json, ui |
|
A unique id for each event generated |
timestamp |
datetime |
json, csv, ui |
|
The UTC time of the event to the nearest millisecond |
event_description |
string |
json, ui |
|
A short description of the type of event |
action_text |
string |
json, csv, ui |
|
A description of the action taken |
tracking_id |
string |
json, csv, ui |
|
The tracking of the current request which used to group other audit sub events |
event_category |
EventCategory |
json, csv, ui |
|
The category of the event |
actor_id |
string |
json, csv, ui |
|
The admin id |
actor_name |
string |
json, csv, ui |
|
The admin's full name |
actor_email |
|
json, csv, ui |
|
The admin's email address |
actor_org_id |
string |
json, csv, ui |
|
The admin's designated organization id |
actor_org_name |
string |
json, csv, ui |
|
The admin's designated organization name |
actor_user_agent |
string |
json, csv, ui |
|
The admin's browser user agent |
actor_ip |
ip_address |
json, csv, ui |
|
The admin's IP address |
target_type |
TargetResourceType |
json, csv, ui |
|
The type of target resource |
target_id |
string |
json, csv, ui |
|
The target resource/person's uuid |
target_name |
string |
json, csv, ui |
|
The target resource/person's full name |
target_org_id |
string |
json, csv, ui |
|
The target person's designated organization id |
target_org_name |
string |
json, ui |
|
The target person's designated organization name |
Name |
Type |
Output |
Example |
Description |
---|---|---|---|---|
upgrade_schedule_time |
string |
json, ui |
|
The upgrade schedule time of the updated cluster |
cluster_id |
string |
json, ui |
|
The id of the updated cluster |
cluster_name |
string |
json, ui |
|
The name of the updated cluster |
event_id |
uuid |
json, ui |
|
A unique id for each event generated |
timestamp |
datetime |
json, csv, ui |
|
The UTC time of the event to the nearest millisecond |
event_description |
string |
json, ui |
|
A short description of the type of event |
action_text |
string |
json, csv, ui |
|
A description of the action taken |
tracking_id |
string |
json, csv, ui |
|
The tracking of the current request which used to group other audit sub events |
event_category |
EventCategory |
json, csv, ui |
|
The category of the event |
actor_id |
string |
json, csv, ui |
|
The admin id |
actor_name |
string |
json, csv, ui |
|
The admin's full name |
actor_email |
|
json, csv, ui |
|
The admin's email address |
actor_org_id |
string |
json, csv, ui |
|
The admin's designated organization id |
actor_org_name |
string |
json, csv, ui |
|
The admin's designated organization name |
actor_user_agent |
string |
json, csv, ui |
|
The admin's browser user agent |
actor_ip |
ip_address |
json, csv, ui |
|
The admin's IP address |
target_type |
TargetResourceType |
json, csv, ui |
|
The type of target resource |
target_id |
string |
json, csv, ui |
|
The target resource/person's uuid |
target_name |
string |
json, csv, ui |
|
The target resource/person's full name |
target_org_id |
string |
json, csv, ui |
|
The target person's designated organization id |
target_org_name |
string |
json, ui |
|
The target person's designated organization name |
Name |
Type |
Output |
Example |
Description |
---|---|---|---|---|
upgrade_schedule_timezone |
string |
json, ui |
|
The upgrade schedule time zone of the updated cluster |
cluster_id |
string |
json, ui |
|
The id of the updated cluster |
cluster_name |
string |
json, ui |
|
The name of the updated cluster |
event_id |
uuid |
json, ui |
|
A unique id for each event generated |
timestamp |
datetime |
json, csv, ui |
|
The UTC time of the event to the nearest millisecond |
event_description |
string |
json, ui |
|
A short description of the type of event |
action_text |
string |
json, csv, ui |
|
A description of the action taken |
tracking_id |
string |
json, csv, ui |
|
The tracking of the current request which used to group other audit sub events |
event_category |
EventCategory |
json, csv, ui |
|