Table of Contents
> Audit log object
The following objects are directly related to the auditlog API.
Audit log
The audit log object contains information about user actions. It has the following properties.
| Property | Type | Description |
|---|---|---|
| auditid | string | (readonly) ID of audit log entry. Generated using CUID algorithm. |
| userid | string | Audit log entry author userid. |
| username | string | Audit log entry author username. |
| clock | timestamp | Audit log entry creation timestamp. |
| ip | string | Audit log entry author IP address. |
| action | integer | Audit log entry action. Possible values are: 0 - Add; 1 - Update; 2 - Delete; 4 - Logout; 7 - Execute; 8 - Login; 9 - Failed login; 10 - History clear. |
| resourcetype | integer | Audit log entry resource type. Possible values are: 0 - User; 3 - Media type; 4 - Host; 5 - Action; 6 - Graph; 11 - User group; 13 - Trigger; 14 - Host group; 15 - Item; 16 - Image; 17 - Value map; 18 - Service; 19 - Map; 22 - Web scenario; 23 - Discovery rule; 25 - Script; 26 - Proxy; 27 - Maintenance; 28 - Regular expression; 29 - Macro; 30 - Template; 31 - Trigger prototype; 32 - Icon mapping; 33 - Dashboard; 34 - Event correlation; 35 - Graph prototype; 36 - Item prototype; 37 - Host prototype; 38 - Autoregistration; 39 - Module; 40 - Settings; 41 - Housekeeping; 42 - Authentication; 43 - Template dashboard; 44 - User role; 45 - API token; 46 - Scheduled report; 47 - High availability node; 48 - SLA. |
| resourceid | string | Audit log entry resource identifier. |
| resourcename | string | Audit log entry resource human readable name. |
| recordsetid | string | Audit log entry recordset ID. The audit log records created during the same operation will have the same recordset ID. Generated using CUID algorithm. |
| details | text | Audit log entry details. The details are stored as JSON object where each property name is a path to property or nested object in which change occurred, and each value contain the data about the change of this property in array format. Possible value formats are: ["add"] - Nested object has been added; ["add", "<value>"] - The property of added object contain <value>; ["update"] - Nested object has been updated; ["update", "<new value>", "<old value>"] - The value of property of updated object was changed from <old value> to <new value>; ["delete"] - Nested object has been deleted. |