Skip to content

Commit 95a3a07

Browse files
tothmanotothmano
authored
Add list of audit log actions (#288)
1 parent 3d28d7d commit 95a3a07

File tree

1 file changed

+104
-36
lines changed

1 file changed

+104
-36
lines changed

‎reference/audit-log.mdx

Lines changed: 104 additions & 36 deletions
Original file line numberDiff line numberDiff line change
@@ -41,39 +41,107 @@ To restrict access to the audit log, use Axiom’s role-based access control to
4141

4242
## List of trackable actions
4343

44-
The `action` field specifies the type of activity that happened in your Axiom organization. The most common actions that Audit logs allow you to track are the following:
45-
46-
- **createAdvancedApiToken** means that a user created an advanced API token.
47-
- **createAnnotation** means that a user created an annotation.
48-
- **createBasicApiToken** means that a user created a basic API token.
49-
- **createDashboard** means that a user created a dashboard.
50-
- **createDataset** means that a user created a dataset.
51-
- **createMonitor** means that a user created a monitor.
52-
- **createNotifier** means that a user created a notifier.
53-
- **createOrg** means that a user created an organization.
54-
- **createPersonalAccessToken** means that a user created a personal access token.
55-
- **createUser** means that a user created another user.
56-
- **deleteDashboard** means that a user deleted a dashboard.
57-
- **deleteDataset** means that a user deleted a dataset.
58-
- **logout** means that a user logged out.
59-
- **notifierFailed** means that a notifier failed.
60-
- **notifierTriggered** means that a notifier triggered.
61-
- **removeUserFromOrg** means that a user removed another user from an organization.
62-
- **runAplQuery** means that a user ran an APL query.
63-
- **sendMessage** means that Axiom sent a message to a channel defined by a notifier.
64-
- **sendUserDeletedEmail** means that a user was deleted and Axiom sent out a notification email about the deletion.
65-
- **streamDataset** means that a user viewed the stream of a dataset.
66-
- **trimDataset** means that a user trimmed a dataset.
67-
- **updateDashboard** means that a user updated a dashboard.
68-
- **updateMonitor** means that a user deleted a monitor.
69-
- **updateUserSettings** means that a user updated their user settings.
70-
- **updateVirtualField** means that a user updated a virtual field.
71-
72-
<Note>
73-
The list above is non-exhaustive. To see all the different actions that happened in your Axiom organization, run the following query:
74-
75-
```kusto
76-
['axiom-audit']
77-
| distinct action
78-
```
79-
</Note>
44+
The `action` field specifies the type of activity that happened in your Axiom organization. The actions that Audit logs allow you to track are the following:
45+
46+
- aplDelete
47+
- createAnnotation
48+
- createAPIToken
49+
- createDashboard
50+
- createDataset
51+
- createEndpoint
52+
- createFlowConfiguration
53+
- createFlowDestination
54+
- createFlowReplay
55+
- createFlowStream
56+
- createGroup
57+
- createMapField
58+
- createMonitor
59+
- createNotifier
60+
- createOrg
61+
- createOrgStorage
62+
- createPersonalToken
63+
- createRole
64+
- createUser
65+
- createView
66+
- createVirtualField
67+
- deleteAnnotation
68+
- deleteAPIToken
69+
- deleteDashboard
70+
- deleteDataset
71+
- deleteEndpoint
72+
- deleteFlowConfiguration
73+
- deleteFlowDestination
74+
- deleteGroup
75+
- deleteMapField
76+
- deleteMonitor
77+
- deleteNotifier
78+
- deleteOrg
79+
- deletePersonalToken
80+
- deleteRepo
81+
- deleteRole
82+
- deleteSession
83+
- deleteShareLink
84+
- deleteView
85+
- downgradeOrg
86+
- downgradePlan
87+
- fieldLimitApproached
88+
- fieldLimitExceeded
89+
- getDashboard
90+
- getDatasetFields
91+
- getField
92+
- getSharedRepos
93+
- logout
94+
- logoutEverywhere
95+
- messageSent
96+
- notifierFailed
97+
- notifierTriggered
98+
- notifyCustomerIOIssues
99+
- postRepos
100+
- regenerateAPIToken
101+
- regeneratePersonalToken
102+
- removeRBAC
103+
- removeUserFromOrg
104+
- resolveMonitor
105+
- resolveMonitorAll
106+
- resumeFlowReplay
107+
- resumeFlowStream
108+
- rotateSharedAccessKeys
109+
- runAPLQuery
110+
- sendOrgDeletedEmails
111+
- sendOrgMonthlyIngestedExceededEmail
112+
- sendOrgMonthlyIngestedNearLimitEmail
113+
- sendUserDeletedEmail
114+
- sendWelcomeEmail
115+
- setEnableAI
116+
- shareRepo
117+
- stopFlowReplay
118+
- stopFlowStream
119+
- streamDataset
120+
- triggerNotifier
121+
- triggerNotifierWithID
122+
- trimDataset
123+
- unShareRepo
124+
- updateDashboard
125+
- updateDataset
126+
- updateDatasetSettings
127+
- updateEndpoint
128+
- updateField
129+
- updateFlowConfiguration
130+
- updateFlowDestination
131+
- updateGroup
132+
- updateMapFields
133+
- updateMonitor
134+
- updateNotifier
135+
- updateOrg
136+
- updatePersonalToken
137+
- updateRepo
138+
- updateRole
139+
- updateUser
140+
- updateUserSettings
141+
- updateView
142+
- updateVirtualField
143+
- upgradeOrg
144+
- upgradePlan
145+
- usageCalculated
146+
- useShareLink
147+
- vacuumDataset

0 commit comments

Comments
 (0)