Skip to content

Audited Events#

This page enumerates all the audited events that may be registered by Connect, including details of the data included in each event.

There are many types of events, for example a user creating a group:

time="2022-10-18T20:07:39.813Z" level=info msg="Added group Publishers" action=add_group actor_description="admin n (admin)" actor_guid=8c1c6df6-16bf-4901-b52c-50de0b1da233 actor_id=1 actor_role=administrator entry_id=73 group_guid=1b2c1790-c95f-4df3-9363-6563475070d0 group_id=2 group_name=Publishers type=audit

Taking this example, we can notice that the data associated with the event is provided as key=value pairs. We'll always get the time (UTC), level=info, type=audit, action, actor_id, actor_description, actor_guid, actor_role and the message as msg. There is also additional data only relevant to each event, in this example creating a group we have group_guid, group_id and group_name.

Later on you will be able to see all the data fields related to each specific audit action.

The Actor Behind The Events#

Audited actions can be triggered by a user or by the system, and each audited event specifies the type of actor with the included log fields.

Event records triggered by a user will have actor_id, actor_guid, actor_role and actor_description.

Example record:

actor_id=4 actor_guid=8c1c6df6-16bf-4901-b52c-50de0b1da233 actor_role=publisher actor_description="Frank Castell (fcastell)"

Events triggered by the system will have fixed actor_id and actor_role fields with 0 and system as the values, and will not have an actor_guid:

actor_id=0 actor_role=system actor_description="Scheduled email checker"

The actor_description provides more details about the system process related to the event.

Data Fields Types#

Data fields included in log records are of type string, regardless of the configured format (TEXT or JSON), except for *_id fields which are of type int, like entry_id, content_id, user_id, group_id, etc. All events are listed below including their related data fields.

Note

The time in every log entry is logged in UTC. E.g: time=2022-01-01T20:00:00.000Z

User Events#

add_user#

Create a user.

Event logging fields for add_user:

action, actor_description, actor_guid, actor_id, actor_role, entry_id, level, msg, time, type, user_guid, user_id, user_role

edit_user#

Change an existing user.

Event logging fields for edit_user:

action, actor_description, actor_guid, actor_id, actor_role, entry_id, level, msg, new_email, new_first_name, new_last_name, new_user_role, new_username, previous_email, previous_first_name, previous_last_name, previous_user_role, previous_username, time, type, user_guid, user_id, user_role

remove_user#

Delete a user. This action can only be performed via the usermanager administration command.

Event logging fields for remove_user:

action, actor_description, actor_id, actor_role, entry_id, level, msg, time, type, user_guid, user_id, user_role

update_lock_user#

Set or remove a lock for an existing user.

Event logging fields for update_lock_user:

action, actor_description, actor_guid, actor_id, actor_role, entry_id, level, msg, time, type, user_guid, user_id, user_role

set_password#

Set password for user.

Event logging fields for set_password:

action, actor_description, actor_guid, actor_id, actor_role, entry_id, level, msg, time, type, user_guid, user_id, user_role

user_login#

A user has started a dashboard session.

Event logging fields for user_login:

action, actor_description, actor_guid, actor_id, actor_role, entry_id, level, msg, time, type, user_guid, user_id, user_role

web_sudo#

A user needed to re-authenticate for a privileged action after a WebSudo timeout.

Event logging fields for web_sudo:

action, actor_description, actor_guid, actor_id, actor_role, entry_id, level, msg, time, type, user_guid, user_id, user_role

activate_token#

Activate a token. Tokens are used by the rsconnect package to authenticate a user.

Event logging fields for activate_token:

action, actor_description, actor_guid, actor_id, actor_role, entry_id, level, msg, time, type

add_api_key#

Create an API key.

Event logging fields for add_api_key:

action, actor_description, actor_guid, actor_id, actor_role, entry_id, level, msg, time, type

edit_api_key#

Change an existing API key. This action can only be performed via the usermanager administration tool.

Event logging fields for edit_api_key:

action, actor_description, actor_id, actor_role, entry_id, level, msg, new_user_id, previous_user_id, time, type

remove_api_key#

Remove API key.

Event logging fields for remove_api_key:

action, actor_description, actor_guid, actor_id, actor_role, entry_id, level, msg, time, type

Group Events#

add_group#

Create group.

Event logging fields for add_group:

action, actor_description, actor_guid, actor_id, actor_role, entry_id, group_guid, group_id, group_name, level, msg, time, type

edit_group#

Change an existing group.

Event logging fields for edit_group:

action, actor_description, actor_guid, actor_id, actor_role, entry_id, group_guid, group_id, group_name, level, msg, new_name, new_owner_id, previous_name, previous_owner_id, time, type

remove_group#

Delete a group.

Event logging fields for remove_group:

action, actor_description, actor_guid, actor_id, actor_role, entry_id, group_guid, group_id, group_name, level, msg, time, type

add_group_member#

Add a user to a group.

Event logging fields for add_group_member:

action, actor_description, actor_guid, actor_id, actor_role, entry_id, group_guid, group_id, group_name, level, msg, time, type, user_guid, user_id, user_role

remove_group_member#

Remove a user from a group.

Event logging fields for remove_group_member:

action, actor_description, actor_guid, actor_id, actor_role, entry_id, group_guid, group_id, group_name, level, msg, time, type, user_guid, user_id, user_role

Content Events#

add_application#

Add new content.

Event logging fields for add_application:

action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_id, entry_id, level, msg, time, type

remove_application#

Delete content.

Event logging fields for remove_application:

action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_id, entry_id, level, msg, time, type

edit_application#

Change content settings.

Event logging fields for edit_application:

action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_id, entry_id, level, msg, new_access_type, new_connection_timeout, new_description, new_idle_timeout, new_init_timeout, new_load_factor, new_max_conns_per_process, new_max_processes, new_min_processes, new_name, new_read_timeout, new_title, previous_access_type, previous_connection_timeout, previous_description, previous_idle_timeout, previous_init_timeout, previous_load_factor, previous_max_conns_per_process, previous_max_processes, previous_min_processes, previous_name, previous_read_timeout, previous_title, time, type

create_variant#

Create content variant.

Event logging fields for create_variant:

action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_id, entry_id, level, msg, time, type, variant_id, variant_key, variant_name

edit_variant#

Change variant settings.

Event logging fields for edit_variant:

action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_id, entry_id, level, msg, new_owner_id, previous_owner_id, time, type, variant_id, variant_key, variant_name

promote_variant#

Promote variant.

Event logging fields for promote_variant:

action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_id, entry_id, level, msg, new_rendering_id, previous_rendering_id, time, type, variant_id, variant_key, variant_name

duplicate_variant#

Duplicate variant.

Event logging fields for duplicate_variant:

action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_id, entry_id, level, msg, time, type, variant_id, variant_key, variant_name

remove_variant#

Remove variant.

Event logging fields for remove_variant:

action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_id, entry_id, level, msg, time, type, variant_id, variant_key, variant_name

create_variant_manual_overrides#

Create manual overrides for variant.

Event logging fields for create_variant_manual_overrides:

action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_id, entry_id, level, msg, time, type, variant_id, variant_key, variant_name

promote_variant_manual_overrides#

Promoted manual overrides for variant.

Event logging fields for promote_variant_manual_overrides:

action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_id, entry_id, level, msg, time, type, variant_id, variant_key, variant_name

variant_sender#

Request to email variant.

Event logging fields for variant_sender:

action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_id, entry_id, level, msg, time, type, variant_id, variant_key, variant_name

variant_render#

Request to render variant.

Event logging fields for variant_render:

action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_id, entry_id, level, msg, time, type, variant_id, variant_key, variant_name

deploy_application#

Deploy content to the server. Content may need to be published after deployment.

Event logging fields for deploy_application:

action, actor_description, actor_guid, actor_id, actor_role, bundle_id, content_guid, content_id, entry_id, level, msg, time, type

upload_bundle#

Upload a bundle for a content item.

Event logging fields for upload_bundle:

action, actor_description, actor_guid, actor_id, actor_role, bundle_id, content_guid, content_id, entry_id, level, msg, time, type

remove_bundle#

Remove a bundle.

Event logging fields for remove_bundle:

action, actor_description, actor_guid, actor_id, actor_role, bundle_id, content_guid, content_id, entry_id, level, msg, time, type

download_bundle#

Download a bundle.

Event logging fields for download_bundle:

action, actor_description, actor_guid, actor_id, actor_role, bundle_id, content_guid, content_id, entry_id, level, msg, time, type

add_vanity#

Add vanity URL.

Event logging fields for add_vanity:

action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_guid, content_id, content_id, entry_id, level, msg, time, type, vanity_id, vanity_prefix

update_vanity#

Update vanity URL.

Event logging fields for update_vanity:

action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_guid, content_id, content_id, entry_id, level, msg, time, type, vanity_id, vanity_prefix

remove_vanity#

Remove vanity URL.

Event logging fields for remove_vanity:

action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_guid, content_id, content_id, entry_id, level, msg, time, type, vanity_id, vanity_prefix

subscribe_app_variant#

Subscribe user to content variant.

Event logging fields for subscribe_app_variant:

action, actor_description, actor_guid, actor_id, actor_role, entry_id, level, msg, time, type, user_guid, user_id, user_role, variant_id, variant_key, variant_name

unsubscribe_app_variant#

Unsubscribe user from content variant.

Event logging fields for unsubscribe_app_variant:

action, actor_description, actor_guid, actor_id, actor_role, entry_id, level, msg, time, type, user_guid, user_id, user_role, variant_id, variant_key, variant_name

remove_rendering#

Removed rendering for a given content.

Event logging fields for remove_rendering:

action, actor_description, actor_id, actor_role, entry_id, level, msg, time, type

updated_environment_variables#

Update environment variables.

Event logging fields for updated_environment_variables:

action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_id, entry_id, level, msg, time, type

transfer_content#

Content ownership transfer.

Event logging fields for transfer_content:

action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_id, entry_id, level, msg, time, type, user_guid, user_id, user_role

clear_variant_email_all#

Disable emailing scheduled reports to everyone on the server.

Event logging fields for clear_variant_email_all:

action, actor_description, actor_id, actor_role, entry_id, level, msg, time, type, variant_id, variant_key, variant_name

build_application#

Built bundle for content.

Event logging fields for build_application:

action, actor_description, actor_guid, actor_id, actor_role, bundle_id, content_guid, content_id, entry_id, level, msg, time, type

add_image_to_app#

Add a preview image to a content item.

Event logging fields for add_image_to_app:

action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_id, entry_id, level, msg, time, type

delete_image_from_app#

Delete a preview image from a content item.

Event logging fields for delete_image_from_app:

action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_id, entry_id, level, msg, time, type

register_kill_job_order#

Register order to kill a job.

Event logging fields for register_kill_job_order:

action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_id, entry_id, job_host, job_id, job_key, job_pid, level, msg, time, type

Content Permission Events#

assign_user_app_role#

Give a user view or edit access to content.

Event logging fields for assign_user_app_role:

action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_id, entry_id, level, msg, time, type, user_guid, user_id, user_role

remove_user_app_role#

Remove a user from view or edit access list.

Event logging fields for remove_user_app_role:

action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_id, entry_id, level, msg, time, type, user_guid, user_id, user_role

assign_group_app_role#

Give a group view or edit access to content.

Event logging fields for assign_group_app_role:

action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_id, entry_id, group_guid, group_id, group_name, level, msg, time, type

remove_group_app_role#

Remove a group from view or edit access list.

Event logging fields for remove_group_app_role:

action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_id, entry_id, group_guid, group_id, group_name, level, msg, time, type

clear_app_viewer_acl#

Change from a specific list of viewers to "just me".

Event logging fields for clear_app_viewer_acl:

action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_id, entry_id, level, msg, time, type

permission_request#

Permission request to access content.

Event logging fields for permission_request:

action, actor_description, actor_guid, actor_id, actor_role, content_access_request_id, content_access_request_role, content_access_request_status, content_guid, content_id, entry_id, level, msg, time, type

Git Events#

set_git_repo#

Assign git repository as source for content.

Event logging fields for set_git_repo:

action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_id, entry_id, git_branch, git_path, git_url, level, msg, time, type

fetch_git_repo#

Fetch git repository.

Event logging fields for fetch_git_repo:

action, actor_description, actor_id, actor_role, entry_id, git_branch, git_path, git_url, level, msg, time, type

Scheduled Content Events#

update_schedule#

Update content's schedule.

Event logging fields for update_schedule:

action, actor_description, actor_guid, actor_id, actor_role, entry_id, level, msg, new_next_run, new_schedule, new_start_time, new_time_zone, previous_next_run, previous_schedule, previous_start_time, previous_time_zone, schedule_id, schedule_next_run, schedule_timezone, schedule_type, time, type

add_schedule#

Schedule content run.

Event logging fields for add_schedule:

action, actor_description, actor_guid, actor_id, actor_role, entry_id, level, msg, schedule_id, schedule_next_run, schedule_timezone, schedule_type, time, type, variant_id, variant_key, variant_name

remove_schedule#

Remove content's schedule.

Event logging fields for remove_schedule:

action, actor_description, actor_guid, actor_id, actor_role, entry_id, level, msg, schedule_id, schedule_next_run, schedule_timezone, schedule_type, time, type, variant_id, variant_key, variant_name

Tag/Category Events#

add_tag#

Create a tag/category.

Event logging fields for add_tag:

action, actor_description, actor_guid, actor_id, actor_role, entry_id, level, msg, tag_id, tag_name, tag_version, time, type

add_tag_with_parent#

Create tag as a child of some parent tag/category.

Event logging fields for add_tag_with_parent:

action, actor_description, actor_guid, actor_id, actor_role, entry_id, level, msg, tag_id, tag_name, tag_version, time, type

remove_tag#

Delete a tag/category.

Event logging fields for remove_tag:

action, actor_description, actor_guid, actor_id, actor_role, entry_id, level, msg, tag_id, tag_name, tag_version, time, type

update_tag#

Update a tag/category.

Event logging fields for update_tag:

action, actor_description, actor_guid, actor_id, actor_role, entry_id, level, msg, new_name, new_parent_id, new_version, previous_name, previous_parent_id, previous_version, tag_id, tag_name, tag_version, time, type

assign_tag_to_parent#

Associate a tag with some parent tag/category.

Event logging fields for assign_tag_to_parent:

action, actor_description, actor_guid, actor_id, actor_role, entry_id, level, msg, tag_id, tag_name, tag_version, time, type

add_app_tag#

Associate a tag with content.

Event logging fields for add_app_tag:

action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_id, entry_id, level, msg, tag_id, tag_name, tag_version, time, type

remove_app_tag#

Disassociate a tag with content.

Event logging fields for remove_app_tag:

action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_id, entry_id, level, msg, tag_id, tag_name, tag_version, time, type

remove_tag_descendant#

Delete a child tag.

Event logging fields for remove_tag_descendant:

action, actor_description, actor_guid, actor_id, actor_role, entry_id, level, msg, tag_id, tag_name, tag_version, time, type

Environment Events#

remove_python_environment#

Remove unused python environment.

Event logging fields for remove_python_environment:

action, actor_description, actor_id, actor_role, entry_id, level, msg, time, type