Audit log object

The following objects are directly related to the auditlog API.

Audit log

The audit log object contains information about user actions. It has the following properties.

Property Type Description
auditid string (readonly) ID of audit log entry. Generated using CUID algorithm.
userid string Audit log entry author userid.
username string Audit log entry author username.
clock timestamp Audit log entry creation timestamp.
ip string Audit log entry author IP address.
action integer Audit log entry action.

Possible values are:
0 - Add;
1 - Update;
2 - Delete;
4 - Logout;
7 - Execute;
8 - Login;
9 - Failed login;
10 - History clear.
resourcetype integer Audit log entry resource type.

Possible values are:
0 - User;
3 - Media type;
4 - Host;
5 - Action;
6 - Graph;
11 - User group;
13 - Trigger;
14 - Host group;
15 - Item;
16 - Image;
17 - Value map;
18 - Service;
19 - Map;
22 - Web scenario;
23 - Discovery rule;
25 - Script;
26 - Proxy;
27 - Maintenance;
28 - Regular expression;
29 - Macro;
30 - Template;
31 - Trigger prototype;
32 - Icon mapping;
33 - Dashboard;
34 - Event correlation;
35 - Graph prototype;
36 - Item prototype;
37 - Host prototype;
38 - Autoregistration;
39 - Module;
40 - Settings;
41 - Housekeeping;
42 - Authentication;
43 - Template dashboard;
44 - User role;
45 - API token;
46 - Scheduled report;
47 - High availability node;
48 - SLA.
resourceid string Audit log entry resource identifier.
resourcename string Audit log entry resource human readable name.
recordsetid string Audit log entry recordset ID. The audit log records created during the same operation will have the same recordset ID. Generated using CUID algorithm.
details text Audit log entry details. The details are stored as JSON object where each property name is a path to property or nested object in which change occurred, and each value contain the data about the change of this property in array format.

Possible value formats are:
["add"] - Nested object has been added;
["add", "<value>"] - The property of added object contain <value>;
["update"] - Nested object has been updated;
["update", "<new value>", "<old value>"] - The value of property of updated object was changed from <old value> to <new value>;
["delete"] - Nested object has been deleted.