Skip to main content
The AuditEvent type represents an audit log entry for actions performed within your team. Events conform to the OCSF v1.5.0 standard.

Fields

String!
required
Unique identifier for the event.
String!
required
When the event occurred (ISO 8601 format).
AuditEventCategory!
required
High-level category: MEETING_OPERATIONS, TEAM_OPERATIONS, USER_OPERATIONS, or AUTHENTICATION.
AuditEventAction!
required
The specific action that occurred (e.g., MEETING_DELETED, TEAMMATE_ADDED).
String!
required
Event severity: informational, low, medium, high, critical, fatal.
String!
required
Event outcome: success or failure.
String
Human-readable event description.
Int!
required
OCSF class UID for compliance mapping.
Int!
required
OCSF activity ID for compliance mapping.
Int!
required
OCSF type UID, computed as class_uid * 100 + activity_id.
AuditEventActor
The user who performed the action. Contains user_id, and optionally email, full_name (when include_pii is true), and ip_address.
AuditEventResource
The affected resource with type (meeting or team) and id.
String
Additional context as a JSON string of key-value pairs.