AuditEvent type represents an audit log entry for actions performed within your team. Events conform to the OCSF v1.5.0 standard.
Fields
String!
required
Unique identifier for the event.
String!
required
When the event occurred (ISO 8601 format).
AuditEventCategory!
required
High-level category:
MEETING_OPERATIONS, TEAM_OPERATIONS, USER_OPERATIONS, or AUTHENTICATION.AuditEventAction!
required
The specific action that occurred (e.g.,
MEETING_DELETED, TEAMMATE_ADDED).String!
required
Event severity:
informational, low, medium, high, critical, fatal.String!
required
Event outcome:
success or failure.String
Human-readable event description.
Int!
required
OCSF class UID for compliance mapping.
Int!
required
OCSF activity ID for compliance mapping.
Int!
required
OCSF type UID, computed as
class_uid * 100 + activity_id.AuditEventActor
The user who performed the action. Contains
user_id, and optionally email, full_name (when include_pii is true), and ip_address.AuditEventResource
The affected resource with
type (meeting or team) and id.String
Additional context as a JSON string of key-value pairs.
Related Types
- AuditEventCategory - Category enum
- AuditEventAction - Action enum
- Audit Events Query - Query documentation