> Audit log object

The following objects are directly related to the auditlog API.

Audit log

The audit log object contains information about user actions. It has the following properties.

PropertyTypeDescription
auditidstring(readonly) ID of audit log entry. Generated using CUID algorithm.
useridstringAudit log entry author userid.
usernamestringAudit log entry author username.
clocktimestampAudit log entry creation timestamp.
ipstringAudit log entry author IP address.
actionintegerAudit log entry action.

Possible values are:
0 - Add;
1 - Update;
2 - Delete;
4 - Logout;
7 - Execute;
8 - Login;
9 - Failed login;
10 - History clear.
resourcetypeintegerAudit log entry resource type.

Possible values are:
0 - User;
3 - Media type;
4 - Host;
5 - Action;
6 - Graph;
11 - User group;
13 - Trigger;
14 - Host group;
15 - Item;
16 - Image;
17 - Value map;
18 - Service;
19 - Map;
22 - Web scenario;
23 - Discovery rule;
25 - Script;
26 - Proxy;
27 - Maintenance;
28 - Regular expression;
29 - Macro;
30 - Template;
31 - Trigger prototype;
32 - Icon mapping;
33 - Dashboard;
34 - Event correlation;
35 - Graph prototype;
36 - Item prototype;
37 - Host prototype;
38 - Autoregistration;
39 - Module;
40 - Settings;
41 - Housekeeping;
42 - Authentication;
43 - Template dashboard;
44 - User role;
45 - Auth token;
46 - Scheduled report.
resourceidstringAudit log entry resource identifier.
resourcenamestringAudit log entry resource human readable name.
recordsetidstringAudit log entry recordset ID. The audit log records created during the same operation will have the same recordset ID. Generated using CUID algorithm.
detailstextAudit log entry details. The details are stored as JSON object where each property name is a path to property or nested object in which change occurred, and each value contain the data about the change of this property in array format.

Possible value formats are:
[“add”] - Nested object has been added;
[“add”, “<value>”] - The property of added object contain <value>;
[“update”] - Nested object has been updated;
[“update”, “<new value>”, “<old value>”] - The value of property of updated object was changed from <old value> to <new value>;
[“delete”] - Nested object has been deleted.