Audit Log Events
These events are captured by Audit Log. All events are of type "string".
Account
| Event | Description | Scopes | Data (parameters) |
|---|---|---|---|
| Login | Login to account | Account | |
| Deleted | Account was deleted. | Account | planId |
Approval
| Event | Description | Scopes | Data (parameters) |
|---|---|---|---|
| Add approval channel | New approval channel was added to Stack Automation's Approval Channels administration page.. | - Name - Type | |
| Delete approval channel | Approval channel was deleted from Stack Automation's Approval Channels administration page. | - Name - Type | |
| Policy auto approved | Policy was approved automatically by OPA. | Account/Space | - Name - Type |
| Update approval channel | Approval channel's settings were updated, like description or approvers list. | - Approval type (auto/manual) - Approval status (approved/denied) - Entity type - Entity name - Action (Launch/Extend) - Policy path + name - Approver Email (if approval type is manual) - Notes (if exist) |
Blueprint
| Event | Description | Scopes | Data (parameters) |
|---|---|---|---|
| Content Modified | Blueprint YAML was modified. | Account/Space/Blueprint | |
| Published | Blueprint was published | Account/Space/Blueprint. | - Repository name |
| Removed | User removed blueprint. This applies to blueprints that were discovered from assets, not for blueprints who are defined in the repository. | ||
| Unpublished | Blueprint was unpublished. | Account/Space/Blueprint | - Repository name |
Cloud Account (cost target)
| Event | Description | Scopes | Data (parameters) |
|---|---|---|---|
| Created | Cloud account was created. | Account | - Name - Cloud |
| Deleted | Cloud account was deleted. | Account | - Name - Cloud |
Cost
| Event | Description | Scopes | Data (parameters) |
|---|---|---|---|
| Exported | Cost data was exported using the Cost page's Export to CSV button. | Account |
Credential
| Event | Description | Scopes | Data (parameters) |
|---|---|---|---|
| Created | New credential was created in the Credentials store. | Account | - Name - Cloud Type - Credential Type |
| Deleted | A credential was deleted. | Account | - Name |
| Modified | A credential was modified. | Account | - Name |
Environment
| Event | Description | Scopes | Data (parameters) |
|---|---|---|---|
| Collaborators Added | Collaborators were added to a deployment. | Account/Space/Environment | - list of new collaborators |
| Collaborators Removed | Deployment's collaborators were removed. | Account/Space/Environment | - list of removed collaborators |
| Drift Detected | Deployment's resources were modified externally. | Account/Space/Environment | - Grain |
| Drift Reconcile Started | Deployment's Reconcile operation was initiated to reset the deployment to its original state. | Account/Space/Environment | - Grain |
| Drift Reconcile Completed | Deployment's Reconcile operation completed. | Account/Space/Environment | - Grain |
| Environment Extended | Deployment's duration was extended. | Account/Space/Environment | - Extension Duration |
| Environment Launch Started | Deployment was launched. | Account/Space/Environment | - is_sample: "true" indicates that the deployment was created from a sample blueprint |
| Environment Launch Completed | Deployment's launch completed and the deployment's state changed to Active. | Account/Space/Environment | - is_sample: "true" indicates that the deployment was created from a sample blueprint - Duration |
| Termination Started | Deployment's termination was initiated. | Account/Space/Environment | |
| Termination Completed | Deployment's termination completed. | Account/Space/Environment | |
| Force Terminate | Deployment was force terminated immediately. | Account/Space/Environment | |
| Owner changed | Deployment's owner was changed. | Account/Space/Environment | - New owner |
| Updates Detected | Stack Automation detected a change in the asset files in the repository. | Account/Space/Environment | - Grain |
| Update Started | Deployment's update was initiated by the user to update the deployment with the latest changes to the asset files. | Account/Space/Environment | - Grain |
| Update Complete | Deployment was updated. | Account/Space/Environment | - Grain |
| Update Dismissed | User dismissed updates to the asset files, choosing to leave their deployment as is. | Account/Space/Environment | - Grain |
Host/Management Server
| Event | Description | Scopes | Data (parameters) |
|---|---|---|---|
| Added to Space | Added a management server to a space. | Account/Space | - Host name - Cloud - Type (Docker, K8s), Space |
| Created | Created a new management server. | Account | - Host name - Cloud - Type (Docker, K8s) |
| Connected | Management server was successfully connected to the cluster. | Account | - host_name - Type (Docker, K8s) |
| Deleted | Management server was deleted from Stack Automation. | Account | - Host name - Cloud - Type (Docker, K8s) |
| Removed From Space | Management server was removed from a space. | Account/Space | - Host name - Cloud - Type (Docker, K8s), Space |
| Renamed | Management server's name was changed. | Account | -old_host_name - new_host_name - type |
Notification
| Event | Description | Scopes | Data (parameters) |
|---|---|---|---|
| Added | New notification target was created. | Account, Space | - Name - Target |
| Deleted | Notification target was deleted from Stack Automation. | Account/Space | - Old Name - New Name - Old Target type - New Target type |
| Enabled Toggled | Notifications were enabled for a notification target. | Account/Space | - Name - Old enabled - New enabled |
| Modified | Notification target was modified (name, enabled notifications, etc. | Account/Space | - Name |
Parameter
| Event | Description | Scopes | Data (parameters) |
|---|---|---|---|
| Created | New parameter was created in the Parameters store. | Account or Account/Space | - Name (parameter event) - Sensitive - Value - Description |
| Deleted | Parameter was deleted from the Parameters store. | Account or Account/Space | - Name (parameter event) |
| Modified | Parameter's settings were modified. | Account or Account/Space | - Name (parameter event) - oldIsSensitive - newIsSensitive |
Policy
| Event | Description | Scopes | Data (parameters) |
|---|---|---|---|
| Deleted | Policy was deleted from Stack Automation. | Account | - Name - approvalChannel - overridable - manualInitiation |
| Disabled | Policy was disabled. | Account | - policyName - enabledValue |
| Duplicated | A copy of an existing policy was created. | Account | - policyName - existingPolicyName - isCustom - spaceNames |
| Enabled | Policy was enabled. | Account | - policyName - enabledValue |
| Imported | Policy was imported from a connected policy repository. | Account | - policyName |
| Modified | Policy's settings were modified. | Account | - policyName |
| Synchronized | The version of a custom policy in Stack Automation was synced with the policy version in the repository. | Account | - policyName |
Repository
| Event | Description | Scopes | Data (parameters) |
|---|---|---|---|
| Assets Discovered | Assets were discovered from a space's repository. | Account/Space | Name |
| Connected | A repository was connected to a space. | Account/Space | - Name - Type - Branch - Url |
| Disconnected | A repository was disconnected from a space. | Account/Space | Name |
Space
| Event | Description | Scopes | Data (parameters) |
|---|---|---|---|
| Create | New space was created in Stack Automation. | Account/Space | |
| Modify | Space's settings were modified (name, icon, banner color). | Account/Space | - oldProperties (name, color, icon) - newProperties (name, color, icon) |
| Delete | Space was deleted from Stack Automation. | Account/Space |
Tag
| Event | Description | Scopes | Data (parameters) |
|---|---|---|---|
| Created | New tag created in the Tags administration page. | Account | - Name - Scope - possibleValues - description |
| Deleted | Tag was deleted. | Account | - Name |
| Modified | Tag was modified. | Account | -Name - Scope - oldProperties - newProperties |
| Overridden | User changed a space-level tag's value in the space's Tags page. | Account | - Name - OldValue - NewValue |
User
| Event | Description | Scopes | Data (parameters) |
|---|---|---|---|
| Invited | User was invited to join Stack Automation (Stack Automation invitation email). | Account | - User Email |
| Invitation Cancelled | Stack Automation invitation was cancelled by an admin. | Account | - User Email - User Role - Space |
| Sign up | New user signed up to Stack Automation. | Account | - User Email |
| User Account Role Updated | User's account role was changed (or attached - for new users). | Account | - User Email - oldRole - newRole |
| Deleted | User was deleted from Stack Automation. | Account | - User Email |
| Login | User logged into Stack Automation. | Account | - User Email |
| Reset Password | User's password was reset. | Account | - User Email |
| User Added to Space | User was added to a space. | Account/Space | - User Email - reason - space name - given space role |
| User Space Role Updated | User's space role was changed (space admin/dev/member). | Account | - User Email - oldRole - newRole |
Workflows
| Event | Description | Scopes | Data (parameters) |
|---|---|---|---|
| Created | Created a new workflow. | Account | - Name |
| Deleted | Deleted a workflow from Stack Automation. | Account | - Name |
| Disabled | Disabled a workflow. | Account | - Name |
| Enabled | Enabled a workflow. | Account | - Name |
| Ended | Workflow's execution ended at the completion of all its actions. | Account/Environment | - Name - Actor (User/Schedule) -If the actor is User, user details (email) is displayed |
| Invoked | Workflow was triggered, either by the workflow's defined schedule or manually by the deployment end-user. | Account/Environment | - Name - Actor (User/Schedule) - If the actor is User, user details (email) is displayed |