Audit Event Fields
In addition to the Common Fields, Event Actor Fields and Event Target Fields listed above,
AUDIT events include a
changeType field and a
details block:
"type": "AUDIT",
"id": "361476",
"eventTime": "2017-06-06T20:44:47.000Z",
"changeType": "UPDATED",
"actor": {...},
"details": {
"type": "ADMIN",
"changes": [{
"name": "ENTERPRISE",
"to": "740d93f3-6128-4a84-93fe-b899d878b596"
}]
}
"target": {...}| Field | Type | Description |
|---|---|---|
| enum | The type of change. One of
CREATED, UPDATED, DELETED. |
| enum | One of
ADMIN, EMAIL_INVITE, CLASSIFICATION_POLICY, BLACKLIST_POLICY, WHITELIST_POLICY, ENTERPRISE, ENTERPRISE_FEATURE, ADMIN_LOGIN, MDM_CONNECTOR |
| String array | An array of attributes that the change modified. |
| String | The name of the modified attribute. |
| String | The original attribute value, if available. |
| String | The new attribute value, if available. |
