Audit Framework

Audit Event Types Reference

The EventTypes class lists the different event categories logged by the audit framework. It specifies the action performed on the resource listed in the audit application. The EventTypes class defines 10 event types; see AI Hub Events below for the additional event types AI Hub emits.

Event TypeSupported ResourcesDescription
ADDObject entities1, Organizations, Roles, Users, UserGroupsThe listed resource has been added.
ASSIGNOrganizations, Roles, Users, UserGroupsThe resource has been assigned to something; for example, a role assigned to a user.
DELETEObject entities1, Organizations, Roles, Users, UserGroupsThe listed resource was deleted.
IMPERSONATEUsersA user was impersonated.
LOGINUsersA user has logged in.
LOGIN_DNEUsersThe username does not exist.
LOGIN_FAILUREUsersA login failed.
LOGOUTUsersA user has logged out.
UNASSIGNOrganizations, Roles, Users, UserGroupsThe resource has been unassigned from something; for example, a role removed from a user.
UPDATEAddresses, Contacts, Object entities1, Organizations, Roles, Users, UserGroupsThe listed resource was updated.
Note

The audit framework logs events for individual object entries. See Auditing Object Events for details on enabling this feature.

AI Hub Events

AI Hub emits a separate set of event types into the audit framework. Each event record stores the identifier of the account the event belongs to. Users with the Administrator or Analytics Administrator role can read events for any account, while users with the Account Administrator role can read only the events of accounts they administer. These events are available through the Audit REST API. See Monitoring AI Hub Activity for details.

Event TypeDescription
AI_HUB_AGENT_INSTANCE_COMPLETEAn agent run completed successfully.
AI_HUB_AGENT_INSTANCE_COMPLETE_EXCEPTIONALLYAn agent run failed.
AI_HUB_AGENT_INSTANCE_COMPLETE_PARTIALLYA step within an agent run returned a model response.
AI_HUB_AGENT_INSTANCE_STARTAn agent run started.
AI_HUB_GUARDRAIL_VIOLATIONA guardrail blocked input or output content.
AI_HUB_RAG_CONTENT_RETRIEVEAn agent queried a data source while answering a request.
AI_HUB_WORKFLOW_DEFINITION_ADDAn agent definition was created.
AI_HUB_WORKFLOW_DEFINITION_DELETEAn agent definition was deleted.
AI_HUB_WORKFLOW_DEFINITION_UPDATEAn agent definition was updated.

  1. Object entities include ObjectAction, ObjectDefinition, ObjectEntry, ObjectField, ObjectFieldSetting, ObjectLayout (including Boxes, Columns, Rows, and Tabs), ObjectRelationship, ObjectValidationRule, and ObjectView (including Columns and Sort Columns). ObjectEntryVersion is also tracked, but only for DELETE events.