Audited Events

This page enumerates all the audited events that may be registered by Connect, including details of the data included in each event.

There are many types of events, for example a user creating a group:

time="2022-10-18T20:07:39.813Z" level=info msg="Added group Publishers" action=add_group actor_description="admin n (admin)" actor_guid=8c1c6df6-16bf-4901-b52c-50de0b1da233 actor_id=1 actor_role=administrator entry_id=73 group_guid=1b2c1790-c95f-4df3-9363-6563475070d0 group_id=2 group_name=Publishers type=audit

Taking this example, we can notice that the data associated with the event is provided as key=value pairs. We’ll always get the time (UTC), level=info, type=audit, action, actor_id, actor_description, actor_guid, actor_role and the message as msg. There is also additional data only relevant to each event, in this example creating a group we have group_guid, group_id and group_name.

Later on you will be able to see all the data fields related to each specific audit action.

The Actor Behind The Events

Audited actions can be triggered by a user or by the system, and each audited event specifies the type of actor with the included log fields.

Event records triggered by a user will have actor_id, actor_guid, actor_role and actor_description.

Example record:

actor_id=4 actor_guid=8c1c6df6-16bf-4901-b52c-50de0b1da233 actor_role=publisher actor_description="Frank Castell (fcastell)"

Events triggered by the system will have fixed actor_id and actor_role fields with 0 and system as the values, and will not have an actor_guid:

actor_id=0 actor_role=system actor_description="Scheduled email checker"

The actor_description provides more details about the system process related to the event.

Data Fields Types

Data fields included in log records are of type string, regardless of the configured format (TEXT or JSON), except for *_id fields which are of type int, like entry_id, content_id, user_id, group_id, etc. All events are listed below including their related data fields.

Note

The time in every log entry is logged in UTC. E.g: time=2022-01-01T20:00:00.000Z

User Events

`add_user`

Create a user.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, entry_id, level, msg, time, type, user_guid, user_id, user_role

`edit_user`

Change an existing user.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, entry_id, level, msg, new_email, new_first_name, new_last_name, new_user_role, new_username, previous_email, previous_first_name, previous_last_name, previous_user_role, previous_username, time, type, user_guid, user_id, user_role

`remove_user`

Delete a user. This action can only be performed via the usermanager administration command.

Event logging fields: action, actor_description, actor_id, actor_role, entry_id, level, msg, time, type, user_guid, user_id, user_role

`update_lock_user`

Set or remove a lock for an existing user.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, entry_id, level, msg, time, type, user_guid, user_id, user_role

`set_password`

Set password for user.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, entry_id, level, msg, time, type, user_guid, user_id, user_role

`user_login`

A user has started a dashboard session.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, entry_id, level, msg, time, type, user_guid, user_id, user_role

`user_login_failure`

A login attempt was unsuccessful.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, entry_id, level, msg, time, type, user_guid, user_id, user_role

`web_sudo`

A user needed to re-authenticate for a privileged action after a WebSudo timeout.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, entry_id, level, msg, time, type, user_guid, user_id, user_role

`activate_token`

Activate a token. Tokens are used by the rsconnect R package to authenticate a user.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, entry_id, level, msg, time, type

`add_api_key`

Create an API key.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, entry_id, level, msg, time, type

`edit_api_key`

Change an existing API key. This action can only be performed via the usermanager administration tool.

Event logging fields: action, actor_description, actor_id, actor_role, entry_id, level, msg, new_user_id, previous_user_id, time, type

`remove_api_key`

Remove API key.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, entry_id, level, msg, time, type

Group Events

`add_group`

Create group.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, entry_id, group_guid, group_id, group_name, level, msg, time, type

`edit_group`

Change an existing group.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, entry_id, group_guid, group_id, group_name, level, msg, new_name, new_owner_id, previous_name, previous_owner_id, time, type

`remove_group`

Delete a group.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, entry_id, group_guid, group_id, group_name, level, msg, time, type

`add_group_member`

Add a user to a group.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, entry_id, group_guid, group_id, group_name, level, msg, time, type, user_guid, user_id, user_role

`remove_group_member`

Remove a user from a group.

Content Events

`add_application`

Add new content.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_id, entry_id, level, msg, time, type

`remove_application`

Delete content.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_id, entry_id, level, msg, time, type

`edit_application`

Change content settings.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_id, entry_id, level, msg, new_access_type, new_connection_timeout, new_description, new_idle_timeout, new_init_timeout, new_load_factor, new_max_conns_per_process, new_max_processes, new_min_processes, new_name, new_read_timeout, new_title, previous_access_type, previous_connection_timeout, previous_description, previous_idle_timeout, previous_init_timeout, previous_load_factor, previous_max_conns_per_process, previous_max_processes, previous_min_processes, previous_name, previous_read_timeout, previous_title, time, type

`create_variant`

Create content variant.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_id, entry_id, level, msg, time, type, variant_id, variant_key, variant_name

`edit_variant`

Change variant settings.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_id, entry_id, level, msg, new_owner_id, previous_owner_id, time, type, variant_id, variant_key, variant_name

`promote_variant`

Promote variant.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_id, entry_id, level, msg, new_rendering_id, previous_rendering_id, time, type, variant_id, variant_key, variant_name

`duplicate_variant`

Duplicate variant.

`remove_variant`

Remove variant.

`create_variant_manual_overrides`

Create manual overrides for variant.

`promote_variant_manual_overrides`

Promoted manual overrides for variant.

`variant_sender`

Request to email variant.

`variant_render`

Request to render variant.

`deploy_application`

Deploy content to the server. Content may need to be published after deployment.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, bundle_id, content_guid, content_id, entry_id, level, msg, time, type

`upload_bundle`

Upload a bundle for a content item.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, bundle_id, content_guid, content_id, entry_id, level, msg, time, type

`remove_bundle`

Remove a bundle.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, bundle_id, content_guid, content_id, entry_id, level, msg, time, type

`download_bundle`

Download a bundle.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, bundle_id, content_guid, content_id, entry_id, level, msg, time, type

`add_vanity`

Add vanity URL.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_guid, content_id, content_id, entry_id, level, msg, time, type, vanity_id, vanity_prefix

`update_vanity`

Update vanity URL.

`remove_vanity`

Remove vanity URL.

`subscribe_app_variant`

Subscribe user to content variant.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, entry_id, level, msg, time, type, user_guid, user_id, user_role, variant_id, variant_key, variant_name

`unsubscribe_app_variant`

Unsubscribe user from content variant.

`remove_rendering`

Removed rendering for a given content.

Event logging fields: action, actor_description, actor_id, actor_role, entry_id, level, msg, time, type

`updated_environment_variables`

Update environment variables.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_id, entry_id, level, msg, time, type

`transfer_content`

Content ownership transfer.

`clear_variant_email_all`

Disable emailing scheduled reports to everyone on the server.

Event logging fields: action, actor_description, actor_id, actor_role, entry_id, level, msg, time, type, variant_id, variant_key, variant_name

`build_application`

Built bundle for content.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, bundle_id, content_guid, content_id, entry_id, level, msg, time, type

`add_image_to_app`

Add a preview image to a content item.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_id, entry_id, level, msg, time, type

`delete_image_from_app`

Delete a preview image from a content item.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_id, entry_id, level, msg, time, type

`register_kill_job_order`

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_id, entry_id, job_host, job_id, job_key, job_pid, level, msg, time, type

Content Permission Events

`assign_user_app_role`

Give a user view or edit access to content.

`remove_user_app_role`

Remove a user from view or edit access list.

`assign_group_app_role`

Give a group view or edit access to content.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_id, entry_id, group_guid, group_id, group_name, level, msg, time, type

`remove_group_app_role`

Remove a group from view or edit access list.

`clear_app_viewer_acl`

Change from a specific list of viewers to “just me”.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_id, entry_id, level, msg, time, type

`permission_request`

Permission request to access content.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, content_access_request_id, content_access_request_role, content_access_request_status, content_guid, content_id, entry_id, level, msg, time, type

Git Events

`set_git_repo`

Assign Git repository as source for content.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_id, entry_id, git_branch, git_path, git_url, level, msg, time, type

`fetch_git_repo`

Fetch Git repository.

Event logging fields: action, actor_description, actor_id, actor_role, entry_id, git_branch, git_path, git_url, level, msg, time, type

`update_git_repo`

Update Git repository.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, entry_id, git_branch, git_path, git_url, level, msg, new_branch, new_content_path, new_enabled, new_repository_url, previous_branch, previous_content_path, previous_enabled, previous_repository_url, time, type

`remove_git_repo`

Remove Git repository.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_id, entry_id, level, msg, time, type

`bundle_git_repo`

Created bundle fom Git location.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, bundle_id, content_guid, content_id, entry_id, level, msg, time, type

Scheduled Content Events

`update_schedule`

Update content’s schedule.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, entry_id, level, msg, new_next_run, new_schedule, new_start_time, new_time_zone, previous_next_run, previous_schedule, previous_start_time, previous_time_zone, schedule_id, schedule_next_run, schedule_timezone, schedule_type, time, type

`add_schedule`

Schedule content run.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, entry_id, level, msg, schedule_id, schedule_next_run, schedule_timezone, schedule_type, time, type, variant_id, variant_key, variant_name

`remove_schedule`

Remove content’s schedule.

Tag/Category Events

`add_tag`

Create a tag/category.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, entry_id, level, msg, tag_id, tag_name, tag_version, time, type

`add_tag_with_parent`

Create tag as a child of some parent tag/category.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, entry_id, level, msg, tag_id, tag_name, tag_version, time, type

`remove_tag`

Delete a tag/category.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, entry_id, level, msg, tag_id, tag_name, tag_version, time, type

`update_tag`

Update a tag/category.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, entry_id, level, msg, new_name, new_parent_id, new_version, previous_name, previous_parent_id, previous_version, tag_id, tag_name, tag_version, time, type

`assign_tag_to_parent`

Associate a tag with some parent tag/category.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, entry_id, level, msg, tag_id, tag_name, tag_version, time, type

`add_app_tag`

Associate a tag with content.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, content_guid, content_id, entry_id, level, msg, tag_id, tag_name, tag_version, time, type

`remove_app_tag`

Disassociate a tag with content.

`remove_tag_descendant`

Delete a child tag.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, entry_id, level, msg, tag_id, tag_name, tag_version, time, type

Python Environment Events

`remove_python_environment`

Remove unused python environment.

Event logging fields: action, actor_description, actor_id, actor_role, entry_id, level, msg, time, type

Execution Environment Events

`add_execution_environment`

Add new execution environment.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, entry_id, environment_guid, environment_id, level, msg, time, type

`remove_execution_environment`

Remove execution environment.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, entry_id, environment_guid, environment_id, level, msg, time, type

`update_execution_environment`

Update execution environment.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, entry_id, environment_guid, environment_id, level, msg, new_cluster_name, new_description, new_environment_type, new_matching, new_name, new_supervisor, new_title, previous_cluster_name, previous_description, previous_environment_type, previous_matching, previous_name, previous_supervisor, previous_title, time, type

Runtime Cache Deletion Events

`delete_runtime_cache`

Deleted runtime cache.

Event logging fields: action, actor_description, actor_guid, actor_id, actor_role, entry_id, level, msg, time, type