# Audit Log Create Event Learn about the Audit Log Create event. > For the index of this section of the site, see [llms.txt](https://fusionauth.io/docs/llms.txt) ## Audit Log Create Available since `1.30.0` This event is generated when an audit log is created. Event type audit-log.create ### Event Scope This is a system-scoped event. If enabled in Settings -> Webhooks -> Your Webhook , this event will be sent. The tenant webhook enable or disable settings do not apply and will be ignored. In version 1.65.0 and later, the event subject may be scoped to a tenant. In such cases events are delivered only to the tenants specified by the webhook configuration. ### Transaction Compatibility This event is non-transactional. The operation will succeed regardless of the webhook response status code. ### Event Body `event.createInstant` * Type: `Long` The [instant](https://fusionauth.io/docs/apis/data-types.md#instants) that the event was generated. `event.auditLog` * Type: `Object` The audit log for this event. See the [Audit Logs API](https://fusionauth.io/docs/apis/audit-logs.md) for property definitions and example JSON. `event.info.data` * Type: `Object` An object that can hold any information about the event that should be persisted. `event.info.deviceDescription` * Type: `String` The description of the device associated with the event. `event.info.deviceName` * Type: `String` The device name associated with the event. `event.info.deviceType` * Type: `String` The type of device associated with the event. `event.info.ipAddress` * Type: `String` The source IP address of the event. `event.info.location.city` * Type: `String` The city where the event originated. **Enterprise plan** To use event location data, you'll need [an Enterprise plan](https://fusionauth.io/docs/concepts/plans-and-limits/plans-features.md#enterprise-features). `event.info.location.country` * Type: `String` The country where the event originated. **Enterprise plan** To use event location data, you'll need [an Enterprise plan](https://fusionauth.io/docs/concepts/plans-and-limits/plans-features.md#enterprise-features). `event.info.location.latitude` * Type: `Double` The latitude where the event originated. **Enterprise plan** To use event location data, you'll need [an Enterprise plan](https://fusionauth.io/docs/concepts/plans-and-limits/plans-features.md#enterprise-features). `event.info.location.longitude` * Type: `Double` The longitude where the event originated. **Enterprise plan** To use event location data, you'll need [an Enterprise plan](https://fusionauth.io/docs/concepts/plans-and-limits/plans-features.md#enterprise-features). `event.info.location.region` * Type: `String` The geographic location where the event originated. **Enterprise plan** To use event location data, you'll need [an Enterprise plan](https://fusionauth.io/docs/concepts/plans-and-limits/plans-features.md#enterprise-features). `event.info.location.zipcode` * Type: `String` The zip code where the event originated. **Enterprise plan** To use event location data, you'll need [an Enterprise plan](https://fusionauth.io/docs/concepts/plans-and-limits/plans-features.md#enterprise-features). `event.info.os` * Type: `String` The operating system associated with the event. `event.info.userAgent` * Type: `String` The user agent associated with the event. `event.id` * Type: `UUID` The unique Id of the event. You may receive an event more than once based upon your transaction settings. This Id may be used to identify a duplicate event. `event.tenantId` * Type: `UUID` * Available since `1.65.0` The unique tenant identifier. This value may not be returned if not applicable. `event.type` * Type: `String` The event type, this value will always be `audit-log.create`. Example Event JSON ```json { "event": { "auditLog": { "id": 1773, "insertInstant": 1629141543059, "insertUser": "admin@example.com", "message": "Updated the user with Id [73092cb2-2119-4a5d-acb4-7db5a1facaf8] and loginId [adam68@example.com]", "newValue": { "active": true, "birthDate": "1984-09-13", "connectorId": "e3306678-a53a-4964-9040-1c96f36dda72", "data": { "city": "San Francisco", "favoriteColor": "Red", "lifeTimeValue": 375, "state": "CA" }, "email": "adam68@example.com", "firstName": "Adam", "id": "73092cb2-2119-4a5d-acb4-7db5a1facaf8", "imageUrl": "/images/demo/nope.gif", "insertInstant": 1625783587031, "lastName": "Green", "lastUpdateInstant": 1629141542987, "memberships": [], "passwordChangeRequired": false, "passwordLastUpdateInstant": 1625783587031, "preferredLanguages": [ "en", "fr" ], "registrations": [ { "applicationId": "d23ecde6-0661-44a7-808b-a23013e6dfdc", "data": {}, "id": "9693406b-1e62-4eb0-a3c1-7271de3f8ddf", "insertInstant": 1625783587031, "lastLoginInstant": 1625783587031, "lastUpdateInstant": 1625783587031, "preferredLanguages": [], "roles": [ "USER" ], "tokens": {}, "username": "Adam68", "usernameStatus": "ACTIVE", "verified": false } ], "tenantId": "a743e2cd-55bb-789c-b076-8846fdd3a51f", "timezone": "America/Denver", "twoFactor": { "methods": [], "recoveryCodes": [] }, "uniqueUsername": "Adam68", "username": "Adam68", "usernameStatus": "ACTIVE", "verified": true }, "oldValue": { "active": true, "birthDate": "1984-09-13", "connectorId": "e3306678-a53a-4964-9040-1c96f36dda72", "data": { "city": "San Francisco", "favoriteColor": "Red", "lifeTimeValue": 375, "state": "CA" }, "email": "adam68@example.com", "encryptionScheme": "salted-sha256", "firstName": "Adam", "id": "73092cb2-2119-4a5d-acb4-7db5a1facaf8", "imageUrl": "/images/demo/nope.gif", "insertInstant": 1625783587031, "lastName": "Gray", "lastUpdateInstant": 1625783587031, "memberships": [], "passwordChangeRequired": false, "passwordLastUpdateInstant": 1625783587031, "preferredLanguages": [ "en", "fr" ], "registrations": [ { "applicationId": "d23ecde6-0661-44a7-808b-a23013e6dfdc", "data": {}, "id": "9693406b-1e62-4eb0-a3c1-7271de3f8ddf", "insertInstant": 1625783587031, "lastLoginInstant": 1625783587031, "lastUpdateInstant": 1625783587031, "preferredLanguages": [], "roles": [ "USER" ], "tokens": {}, "username": "Adam68", "usernameStatus": "ACTIVE", "verified": false } ], "tenantId": "a743e2cd-55bb-789c-b076-8846fdd3a51f", "timezone": "America/Denver", "twoFactor": { "methods": [], "recoveryCodes": [] }, "uniqueUsername": "Adam68", "username": "Adam68", "usernameStatus": "ACTIVE", "verified": true }, "reason": "FusionAuth User Interface", "tenantId": "a743e2cd-55bb-789c-b076-8846fdd3a51f" }, "createInstant": 1629141543064, "id": "29e3f639-649e-4a5c-bc4b-eec7f89ee20c", "info": { "ipAddress": "42.42.42.42", "location": { "city": "Denver", "country": "US", "displayString": "Denver, CO, US", "latitude": 39.73915, "longitude": -104.9847, "region": "CO" }, "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.115 Safari/537.36" }, "tenantId": "a743e2cd-55bb-789c-b076-8846fdd3a51f", "type": "audit-log.create" } } ``` Related [Events Event Log Create Event Learn about the Event Log Create event. webhook eventfusionauth webhook](https://fusionauth.io/docs/events/reference/event-log-create.md) [Events User Login Id Duplicate Create Event Learn about the User Login Id Duplicate Create event. fusionauth webhookwebhook event](https://fusionauth.io/docs/events/reference/user/login/user-login-id-duplicate-create.md) [Events User Login Id Duplicate Update Event Learn about the User Login Id Duplicate Update event. fusionauth webhookwebhook event](https://fusionauth.io/docs/events/reference/user/login/user-login-id-duplicate-update.md) [APIs Webhook Event Log API Learn about the APIs for searching and retrieving webhook event and attempt logs. fusionauth webhook](https://fusionauth.io/docs/apis/webhook-event-logs.md) --- ## Other pages in Reference > For the full index of this section, see [Events](https://fusionauth.io/docs/llms-events.txt). - [CIMD Registration Failed Event](https://fusionauth.io/docs/events/reference/cimd/cimd-registration-failed.md): Learn about the CIMD Registration Failed event. - [CIMD Registration Success Event](https://fusionauth.io/docs/events/reference/cimd/cimd-registration-success.md): Learn about the CIMD Registration Success event. - [Entity Create Complete Event](https://fusionauth.io/docs/events/reference/entity/entity-create-complete.md): Learn about the Entity Create Complete event. - [Entity Create Event](https://fusionauth.io/docs/events/reference/entity/entity-create.md): Learn about the Entity Create event. - [Entity Delete Complete Event](https://fusionauth.io/docs/events/reference/entity/entity-delete-complete.md): Learn about the Entity Delete Complete event. - [Entity Delete Event](https://fusionauth.io/docs/events/reference/entity/entity-delete.md): Learn about the Entity Delete event. - [Entity Update Complete Event](https://fusionauth.io/docs/events/reference/entity/entity-update-complete.md): Learn about the Entity Update Complete event. - [Entity Update Event](https://fusionauth.io/docs/events/reference/entity/entity-update.md): Learn about the Entity Update event. - [Event Log Create Event](https://fusionauth.io/docs/events/reference/event-log-create.md): Learn about the Event Log Create event. - [Group Create Complete Event](https://fusionauth.io/docs/events/reference/group/group-create-complete.md): Learn about the Group Create Complete event. - [Group Create Event](https://fusionauth.io/docs/events/reference/group/group-create.md): Learn about the Group Create event. - [Group Delete Complete Event](https://fusionauth.io/docs/events/reference/group/group-delete-complete.md): Learn about the Group Delete Complete event. - [Group Delete Event](https://fusionauth.io/docs/events/reference/group/group-delete.md): Learn about the Group Delete event. - [Group Member Add Complete Event](https://fusionauth.io/docs/events/reference/group/group-member-add-complete.md): Learn about the Group Member Add Complete event. - [Group Member Add Event](https://fusionauth.io/docs/events/reference/group/group-member-add.md): Learn about the Group Member Add event. - [Group Member Remove Complete Event](https://fusionauth.io/docs/events/reference/group/group-member-remove-complete.md): Learn about the Group Member Remove Complete. - [Group Member Remove Event](https://fusionauth.io/docs/events/reference/group/group-member-remove.md): Learn about the Group Member Remove event. - [Group Member Update Complete Event](https://fusionauth.io/docs/events/reference/group/group-member-update-complete.md): Learn about the Group Member Update Complete event. - [Group Member Update Event](https://fusionauth.io/docs/events/reference/group/group-member-update.md): Learn about the Group Member Update event. - [Group Update Complete Event](https://fusionauth.io/docs/events/reference/group/group-update-complete.md): Learn about the Group Update Complete event. - [Group Update Event](https://fusionauth.io/docs/events/reference/group/group-update.md): Learn about the Group Update event. - [Reference](https://fusionauth.io/docs/events/reference.md): Learn about FusionAuth events. - [JWT Public Key Update Event](https://fusionauth.io/docs/events/reference/jwt/jwt-public-key-update.md): Learn about the JWT Public Key Update event. - [JWT Refresh Token Revoke Event](https://fusionauth.io/docs/events/reference/jwt/jwt-refresh-token-revoke.md): Learn about the JWT Refresh Token Revoke event. - [JWT Refresh Event](https://fusionauth.io/docs/events/reference/jwt/jwt-refresh.md): Learn about the JWT Refresh event. - [Kickstart Success Event](https://fusionauth.io/docs/events/reference/kickstart-success.md): Learn about the Learn about the Kickstart Success event. - [Token Exchange Complete Event](https://fusionauth.io/docs/events/reference/token/token-exchange-complete.md): Learn about the Token Exchange Complete event. - [Token Exchange Event](https://fusionauth.io/docs/events/reference/token/token-exchange.md): Learn about the Token Exchange event. - [User Login Failed Event](https://fusionauth.io/docs/events/reference/user/login/user-login-failed.md): Learn about the User Login Failed event. - [User Login Id Duplicate Create Event](https://fusionauth.io/docs/events/reference/user/login/user-login-id-duplicate-create.md): Learn about the User Login Id Duplicate Create event. - [User Login Id Duplicate Update Event](https://fusionauth.io/docs/events/reference/user/login/user-login-id-duplicate-update.md): Learn about the User Login Id Duplicate Update event. - [User Login New Device Event](https://fusionauth.io/docs/events/reference/user/login/user-login-new-device.md): Learn about the User Login New Device event. - [User Login Success Event](https://fusionauth.io/docs/events/reference/user/login/user-login-success.md): Learn about the User Login Success event. - [User Login Suspicious Event](https://fusionauth.io/docs/events/reference/user/login/user-login-suspicious.md): Learn about the User Login Suspicious event. - [User Password Breach Event](https://fusionauth.io/docs/events/reference/user/password/user-password-breach.md): Learn about the User Password Breach event. - [User Password Reset Send Event](https://fusionauth.io/docs/events/reference/user/password/user-password-reset-send.md): Learn about the User Password Reset Send event. - [User Password Reset Start Event](https://fusionauth.io/docs/events/reference/user/password/user-password-reset-start.md): Learn about the User Password Reset Start event. - [User Password Reset Success Event](https://fusionauth.io/docs/events/reference/user/password/user-password-reset-success.md): Learn about the User Password Reset Success event. - [User Password Update Event](https://fusionauth.io/docs/events/reference/user/password/user-password-update.md): Learn about the User Password Update event. - [User Registration Create Complete Event](https://fusionauth.io/docs/events/reference/user/registration/user-registration-create-complete.md): Learn about the User Registration Create Complete event. - [User Registration Create Event](https://fusionauth.io/docs/events/reference/user/registration/user-registration-create.md): Learn about the User Registration Create event. - [User Registration Delete Complete Event](https://fusionauth.io/docs/events/reference/user/registration/user-registration-delete-complete.md): Learn about the User Registration Delete Complete event. - [User Registration Delete Event](https://fusionauth.io/docs/events/reference/user/registration/user-registration-delete.md): Learn about the User Registration Delete event. - [User Registration Update Complete Event](https://fusionauth.io/docs/events/reference/user/registration/user-registration-update-complete.md): Learn about the User Registration Update Complete event. - [User Registration Update Event](https://fusionauth.io/docs/events/reference/user/registration/user-registration-update.md): Learn about the User Registration Update event. - [User Registration Verified Event](https://fusionauth.io/docs/events/reference/user/registration/user-registration-verified.md): Learn about the User Registration Verified event. - [User Action Event](https://fusionauth.io/docs/events/reference/user/user-actions.md): Learn about the User Action event. - [User Bulk Create Event](https://fusionauth.io/docs/events/reference/user/user-bulk-create.md): Learn about the User Bulk Create event. - [User Create Complete Event](https://fusionauth.io/docs/events/reference/user/user-create-complete.md): Learn about the User Create Complete event. - [User Create Event](https://fusionauth.io/docs/events/reference/user/user-create.md): Learn about the User Create event. - [User Deactivate Event](https://fusionauth.io/docs/events/reference/user/user-deactivate.md): Learn about the User Deactivate event. - [User Delete Complete Event](https://fusionauth.io/docs/events/reference/user/user-delete-complete.md): Learn about the User Delete Complete event. - [User Delete Event](https://fusionauth.io/docs/events/reference/user/user-delete.md): Learn about the User Delete event. - [User Email Update Event](https://fusionauth.io/docs/events/reference/user/user-email-update.md): Learn about the User Email Update event. - [User Email Verified Event](https://fusionauth.io/docs/events/reference/user/user-email-verified.md): Learn about the User Email Verified event. - [User Identity Provider Link Event](https://fusionauth.io/docs/events/reference/user/user-identity-provider-link.md): Learn about the User Identity Provider Link event. - [User Identity Provider Unlink Event](https://fusionauth.io/docs/events/reference/user/user-identity-provider-unlink.md): Learn about the User Identity Provider Unlink event. - [User Identity Verified Event](https://fusionauth.io/docs/events/reference/user/user-identity-verified.md): Learn about the User Identity Verified event. - [User Reactivate Event](https://fusionauth.io/docs/events/reference/user/user-reactivate.md): Learn about the User Reactivate event. - [User Two-factor Challenge Event](https://fusionauth.io/docs/events/reference/user/user-two-factor-challenge.md): Learn about the User Two-factor Challenge event. - [User Two-factor Failed Attempt Event](https://fusionauth.io/docs/events/reference/user/user-two-factor-failed-attempt.md): Learn about the User Two-factor Failed Attempt event. - [User Two-factor Method Add Event](https://fusionauth.io/docs/events/reference/user/user-two-factor-method-add.md): Learn about the User Two-factor Method Add event. - [User Two-factor Method Remove Event](https://fusionauth.io/docs/events/reference/user/user-two-factor-method-remove.md): Learn about the User Two-factor Method Remove event. - [User Two-factor Success Event](https://fusionauth.io/docs/events/reference/user/user-two-factor-success.md): Learn about the User Two-factor Success event. - [User Update Complete Event](https://fusionauth.io/docs/events/reference/user/user-update-complete.md): Learn about the User Update Complete event. - [User Update Event](https://fusionauth.io/docs/events/reference/user/user-update.md): Learn about the User Update event.