Audited Events
This page enumerates Posit Connect’s auditable events.
There are many types of auditable events in Connect. For example, a user creating a group will generate the following event log:
time="2022-10-18T20:07:39.813Z" level=info msg="Added group Publishers" action=add_group actor_description="admin n (admin)" actor_guid=8c1c6df6-16bf-4901-b52c-50de0b1da233 actor_id=1 actor_role=administrator entry_id=73 group_guid=1b2c1790-c95f-4df3-9363-6563475070d0 group_id=2 group_name=Publishers type=audit
Notice that the data associated with the event is provided as key=value
pairs. Every audit event will always include the following fields: time
(UTC), level=info
, type=audit
, action
, actor_id
, actor_description
, actor_guid
, actor_role
. The audit event message will be recorded as msg
.
Some audit events will track additional fields. In the example above, group creation also records group_guid
, group_id
, and group_name
.
Audit actors
Audited actions can be triggered by a user or by an automated system process. Each audited event specifies the type of actor which triggered the event.
Event records triggered by a user will have actor_id
, actor_guid
, actor_role
and actor_description
:
actor_id=4 actor_guid=8c1c6df6-16bf-4901-b52c-50de0b1da233 actor_role=publisher actor_description="Frank Castell (fcastell)"
Events triggered by the system will have the fixed fields actor_id=0
and actor_role=system
. They will not have an actor_guid
:
actor_id=0 actor_role=system actor_description="Scheduled email checker"
The actor_description
provides more details about the system process which triggered the event.
Field data types
Data fields included in audit entries are of type string
, regardless of the configured format (TEXT
or JSON
), except for *_id
fields which are of type int
. Example *_id
fields include entry_id
, content_id
, user_id
, and group_id
.
The time
in every log entry is logged in UTC. E.g: time=2022-01-01T20:00:00.000Z
User events
add_user
Create a new user.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, level
, msg
, time
, type
, user_guid
, user_id
, user_role
edit_user
Modify an existing user.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, level
, msg
, new_email
, new_first_name
, new_last_name
, new_user_role
, new_username
, previous_email
, previous_first_name
, previous_last_name
, previous_user_role
, previous_username
, time
, type
, user_guid
, user_id
, user_role
remove_user
Remove an existing user. This action can only be performed via the usermanager
CLI tool.
Event logging fields: action
, actor_description
, actor_id
, actor_role
, entry_id
, level
, msg
, time
, type
, user_guid
, user_id
, user_role
update_lock_user
Modify the lock on an existing user.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, level
, msg
, time
, type
, user_guid
, user_id
, user_role
set_password
Set the password for a user.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, level
, msg
, time
, type
, user_guid
, user_id
, user_role
user_login
A user starts a dashboard session.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, level
, msg
, time
, type
, user_guid
, user_id
, user_role
user_login_failure
A login attempt is unsuccessful.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, level
, msg
, time
, type
, user_guid
, user_id
, user_role
web_sudo
A user needs to reauthenticate for a privileged action after a WebSudo timeout.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, level
, msg
, time
, type
, user_guid
, user_id
, user_role
activate_token
Activate a token. Tokens are used by the rsconnect R package to authenticate a user.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, level
, msg
, time
, type
add_api_key
Create an API key.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, level
, msg
, time
, type
edit_api_key
Modify an existing API key. This action can only be performed via the usermanager
CLI.
Event logging fields: action
, actor_description
, actor_id
, actor_role
, entry_id
, level
, msg
, new_user_id
, new_user_role
, previous_user_id
, previous_user_role
, time
, type
remove_api_key
Remove an existing API key.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, level
, msg
, time
, type
create_oauth_integration
Create a new OAuth integration.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, level
, msg
, time
, type
, user_guid
, user_id
, user_role
remove_oauth_integration
Remove an OAuth integration.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, level
, msg
, time
, type
, user_guid
, user_id
, user_role
update_oauth_integration
Modify an OAuth integration.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, level
, msg
, time
, type
, user_guid
, user_id
, user_role
create_oauth_associations
Create an association between a content item and an OAuth integration.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, level
, msg
, time
, type
, user_guid
, user_id
, user_role
remove_oauth_association
Remove an association between a content item and an OAuth integration.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, level
, msg
, time
, type
, user_guid
, user_id
, user_role
remove_oauth_session
Remove an OAuth session.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, level
, msg
, time
, type
, user_guid
, user_id
, user_role
oauth_integration_login
Initiate a login flow against an OAuth integration.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, level
, msg
, time
, type
, user_guid
, user_id
, user_role
oauth_integration_logout
Logout of an OAuth integration.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, level
, msg
, time
, type
, user_guid
, user_id
, user_role
oauth_integration_callback
Complete a login flow against an OAuth integration.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, level
, msg
, time
, type
, user_guid
, user_id
, user_role
set_custom_documentation
Set custom documentation for the Connect server.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, level
, msg
, time
, type
delete_custom_documentation
Remove custom documentation for the Connect server.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, level
, msg
, time
, type
Group events
add_group
Create a new group.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, group_guid
, group_id
, group_name
, level
, msg
, time
, type
edit_group
Modify an existing group.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, group_guid
, group_id
, group_name
, level
, msg
, new_name
, new_owner_id
, previous_name
, previous_owner_id
, time
, type
remove_group
Remove an existing group.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, group_guid
, group_id
, group_name
, level
, msg
, time
, type
add_group_member
Add a user to an existing group.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, group_guid
, group_id
, group_name
, level
, msg
, time
, type
, user_guid
, user_id
, user_role
remove_group_member
Remove a user from a group.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, group_guid
, group_id
, group_name
, level
, msg
, time
, type
, user_guid
, user_id
, user_role
Content events
add_application
Create new content on the Connect server.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, content_guid
, content_id
, entry_id
, level
, msg
, time
, type
remove_application
Remove a published content item.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, content_guid
, content_id
, entry_id
, level
, msg
, time
, type
edit_application
Modify the settings of a content item.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, content_guid
, content_id
, entry_id
, level
, msg
, new_access_type
, new_connection_timeout
, new_description
, new_idle_timeout
, new_init_timeout
, new_load_factor
, new_max_conns_per_process
, new_max_processes
, new_min_processes
, new_name
, new_read_timeout
, new_title
, previous_access_type
, previous_connection_timeout
, previous_description
, previous_idle_timeout
, previous_init_timeout
, previous_load_factor
, previous_max_conns_per_process
, previous_max_processes
, previous_min_processes
, previous_name
, previous_read_timeout
, previous_title
, time
, type
create_variant
Create a new variant for a content item.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, content_guid
, content_id
, entry_id
, level
, msg
, time
, type
, variant_id
, variant_key
, variant_name
edit_variant
Modify the settings for a content item variant.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, content_guid
, content_id
, entry_id
, level
, msg
, new_owner_id
, previous_owner_id
, time
, type
, variant_id
, variant_key
, variant_name
promote_variant
Promote a variant for a content item.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, content_guid
, content_id
, entry_id
, level
, msg
, new_rendering_id
, previous_rendering_id
, time
, type
, variant_id
, variant_key
, variant_name
duplicate_variant
Create a new variant for a content item which duplicates an existing variant.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, content_guid
, content_id
, entry_id
, level
, msg
, time
, type
, variant_id
, variant_key
, variant_name
remove_variant
Remove a variant from a content item.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, content_guid
, content_id
, entry_id
, level
, msg
, time
, type
, variant_id
, variant_key
, variant_name
create_variant_manual_overrides
Create new manual overrides for a variant of a content item.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, content_guid
, content_id
, entry_id
, level
, msg
, time
, type
, variant_id
, variant_key
, variant_name
promote_variant_manual_overrides
Promote the manual overrides for a variant of a content item.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, content_guid
, content_id
, entry_id
, level
, msg
, time
, type
, variant_id
, variant_key
, variant_name
variant_sender
Request an email for a variant of a content item.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, content_guid
, content_id
, entry_id
, level
, msg
, time
, type
, variant_id
, variant_key
, variant_name
variant_render
Request a render for a variant of a content item.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, content_guid
, content_id
, entry_id
, level
, msg
, time
, type
, variant_id
, variant_key
, variant_name
deploy_application
Deploy content to the Connect server. Content may need to be published after deployment.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, bundle_id
, content_guid
, content_id
, entry_id
, level
, msg
, time
, type
upload_bundle
Upload a bundle for a content item.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, bundle_id
, content_guid
, content_id
, entry_id
, level
, msg
, time
, type
remove_bundle
Remove a bundle from a content item.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, bundle_id
, content_guid
, content_id
, entry_id
, level
, msg
, time
, type
activate_bundle
Activate a given bundle as the default source to run for a content item.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, bundle_id
, content_guid
, content_id
, entry_id
, level
, msg
, time
, type
launch_bundle
Run a bundle for a content item.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, bundle_id
, content_guid
, content_id
, entry_id
, level
, msg
, time
, type
download_bundle
Download a bundle for a content item.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, bundle_id
, content_guid
, content_id
, entry_id
, level
, msg
, time
, type
add_vanity
Create a new vanity URL for a content item.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, content_guid
, content_guid
, content_id
, content_id
, entry_id
, level
, msg
, time
, type
, vanity_id
, vanity_prefix
update_vanity
Modify a vanity URL for a content item.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, content_guid
, content_guid
, content_id
, content_id
, entry_id
, level
, msg
, time
, type
, vanity_id
, vanity_prefix
remove_vanity
Remove a vanity URL from a content item.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, content_guid
, content_guid
, content_id
, content_id
, entry_id
, level
, msg
, time
, type
, vanity_id
, vanity_prefix
subscribe_app_variant
Subscribe a user to a variant of a content item.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, level
, msg
, time
, type
, user_guid
, user_id
, user_role
, variant_id
, variant_key
, variant_name
unsubscribe_app_variant
Unsubscribe a user from a variant of a content item.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, level
, msg
, time
, type
, user_guid
, user_id
, user_role
, variant_id
, variant_key
, variant_name
remove_rendering
Remove a rendering for a variant of a content item.
Event logging fields: action
, actor_description
, actor_id
, actor_role
, entry_id
, level
, msg
, time
, type
updated_environment_variables
Modify environment variables for a content item.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, content_guid
, content_id
, entry_id
, level
, msg
, time
, type
transfer_content
Transfer content item ownership between users.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, content_guid
, content_id
, entry_id
, level
, msg
, time
, type
, user_guid
, user_id
, user_role
clear_variant_email_all
Disable global scheduled report emails.
Event logging fields: action
, actor_description
, actor_id
, actor_role
, entry_id
, level
, msg
, time
, type
, variant_id
, variant_key
, variant_name
build_application
Build a bundle for a content item.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, bundle_id
, content_guid
, content_id
, entry_id
, level
, msg
, time
, type
add_thumbnail_to_content
Create a preview image for a content item.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, content_guid
, content_id
, entry_id
, level
, msg
, time
, type
delete_thumbnail_from_content
Remove a preview image from a content item.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, content_guid
, content_id
, entry_id
, level
, msg
, time
, type
register_kill_job_order
Register an order to kill a content item job.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, content_guid
, content_id
, entry_id
, job_host
, job_id
, job_key
, job_pid
, level
, msg
, time
, type
Content permission events
assign_user_app_role
Give a user view or edit access to a content item.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, content_guid
, content_id
, entry_id
, level
, msg
, time
, type
, user_guid
, user_id
, user_role
remove_user_app_role
Remove a user from view or edit access list for a content item.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, content_guid
, content_id
, entry_id
, level
, msg
, time
, type
, user_guid
, user_id
, user_role
assign_group_app_role
Give a group view or edit access to a content item.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, content_guid
, content_id
, entry_id
, group_guid
, group_id
, group_name
, level
, msg
, time
, type
remove_group_app_role
Remove a group from view or edit access list for a content item.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, content_guid
, content_id
, entry_id
, group_guid
, group_id
, group_name
, level
, msg
, time
, type
clear_app_viewer_acl
Change the access list for a content item from a specific list of users to “just me”.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, content_guid
, content_id
, entry_id
, level
, msg
, time
, type
permission_request
Request permission for a user to access a content item.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, content_access_request_id
, content_access_request_role
, content_access_request_status
, content_guid
, content_id
, entry_id
, level
, msg
, time
, type
Git events
set_git_repo
Assign a Git repository as the source for a content item.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, content_guid
, content_id
, entry_id
, git_branch
, git_path
, git_url
, level
, msg
, time
, type
fetch_git_repo
Fetch a Git repository.
Event logging fields: action
, actor_description
, actor_id
, actor_role
, entry_id
, git_branch
, git_path
, git_url
, level
, msg
, time
, type
update_git_repo
Modify a Git repository as the source for a content item.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, git_branch
, git_path
, git_url
, level
, msg
, new_branch
, new_content_path
, new_enabled
, new_repository_url
, previous_branch
, previous_content_path
, previous_enabled
, previous_repository_url
, time
, type
remove_git_repo
Remove a Git repository as the source for a content item.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, content_guid
, content_id
, entry_id
, level
, msg
, time
, type
bundle_git_repo
Create a new content item bundle from a Git location.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, bundle_id
, content_guid
, content_id
, entry_id
, level
, msg
, time
, type
Scheduled content events
update_schedule
Modify the schedule for a variant of a content item.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, level
, msg
, new_next_run
, new_schedule
, new_start_time
, new_time_zone
, previous_next_run
, previous_schedule
, previous_start_time
, previous_time_zone
, schedule_id
, schedule_next_run
, schedule_timezone
, schedule_type
, time
, type
add_schedule
Create a schedule for a variant of a content item.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, level
, msg
, schedule_id
, schedule_next_run
, schedule_timezone
, schedule_type
, time
, type
, variant_id
, variant_key
, variant_name
remove_schedule
Remove a schedule from a variant of a content item.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, level
, msg
, schedule_id
, schedule_next_run
, schedule_timezone
, schedule_type
, time
, type
, variant_id
, variant_key
, variant_name
Tag/category events
add_tag
Create a tag/category.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, level
, msg
, tag_id
, tag_name
, time
, type
add_tag_with_parent
Create a tag as a child of a parent tag/category.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, level
, msg
, tag_id
, tag_name
, time
, type
remove_tag
Remove a tag/category.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, level
, msg
, tag_id
, tag_name
, time
, type
update_tag
Modify a tag/category.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, level
, msg
, new_name
, new_parent_id
, previous_name
, previous_parent_id
, tag_id
, tag_name
, time
, type
add_app_tag
Associate a tag with a content item.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, content_guid
, content_id
, entry_id
, level
, msg
, tag_id
, tag_name
, time
, type
remove_app_tag
Remove a tag from a content item.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, content_guid
, content_id
, entry_id
, level
, msg
, tag_id
, tag_name
, time
, type
remove_tag_descendant
Remove a child tag.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, level
, msg
, tag_id
, tag_name
, time
, type
Python environment events
remove_python_environment
Remove an unused Python environment.
Event logging fields: action
, actor_description
, actor_id
, actor_role
, entry_id
, level
, msg
, time
, type
Execution environment events
add_execution_environment
Add a new execution environment.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, environment_guid
, environment_id
, level
, msg
, time
, type
remove_execution_environment
Remove an execution environment.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, environment_guid
, environment_id
, level
, msg
, time
, type
update_execution_environment
Modify an execution environment.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, environment_guid
, environment_id
, level
, msg
, new_cluster_name
, new_description
, new_environment_type
, new_matching
, new_name
, new_supervisor
, new_title
, previous_cluster_name
, previous_description
, previous_environment_type
, previous_matching
, previous_name
, previous_supervisor
, previous_title
, time
, type
Runtime cache deletion events
delete_runtime_cache
Remove a runtime cache.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, level
, msg
, time
, type
Execution environment permission events
create_execution_environment_permission
Create user/group permissions to access an execution environment.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, environment_permission_guid
, environment_permission_id
, level
, msg
, time
, type
delete_execution_environment_permission
Remove user/group permissions to access an execution environment.
Event logging fields: action
, actor_description
, actor_guid
, actor_id
, actor_role
, entry_id
, environment_permission_guid
, environment_permission_id
, level
, msg
, time
, type