Audit Log Create Event
On this page
Audit Log Create
Available since1.30.0This event is generated when an audit log is created.
Event type
audit-log.create
Event Scope
This is a system-scoped event. If enabled in Settings -> Webhooks -> Your Webhook , this event will be sent.
The tenant webhook enable or disable settings do not apply and will be ignored.
In version 1.65.0 and later, the event subject may be scoped to a tenant. In such cases events are delivered only to the tenants specified by the webhook configuration.
Transaction Compatibility
This event is non-transactional. The operation will succeed regardless of the webhook response status code.
Event Body
event.createInstant The instant that the event was generated.
event.auditLog The audit log for this event. See the Audit Logs API for property definitions and example JSON.
event.info.data An object that can hold any information about the event that should be persisted.
event.info.deviceDescription The description of the device associated with the event.
event.info.deviceName The device name associated with the event.
event.info.deviceType The type of device associated with the event.
event.info.ipAddress The source IP address of the event.
event.info.location.city The city where the event originated.
Enterprise plan To use event location data, you'll need an Enterprise plan.
event.info.location.country The country where the event originated.
Enterprise plan To use event location data, you'll need an Enterprise plan.
event.info.location.latitude The latitude where the event originated.
Enterprise plan To use event location data, you'll need an Enterprise plan.
event.info.location.longitude The longitude where the event originated.
Enterprise plan To use event location data, you'll need an Enterprise plan.
event.info.location.region The geographic location where the event originated.
Enterprise plan To use event location data, you'll need an Enterprise plan.
event.info.location.zipcode The zip code where the event originated.
Enterprise plan To use event location data, you'll need an Enterprise plan.
event.info.os The operating system associated with the event.
event.info.userAgent The user agent associated with the event.
event.id The unique Id of the event. You may receive an event more than once based upon your transaction settings. This Id may be used to identify a duplicate event.
event.tenantId The unique tenant identifier. This value may not be returned if not applicable.
event.type The event type, this value will always be audit-log.create.
{
"event": {
"auditLog": {
"id": 1773,
"insertInstant": 1629141543059,
"insertUser": "admin@example.com",
"message": "Updated the user with Id [73092cb2-2119-4a5d-acb4-7db5a1facaf8] and loginId [adam68@example.com]",
"newValue": {
"active": true,
"birthDate": "1984-09-13",
"connectorId": "e3306678-a53a-4964-9040-1c96f36dda72",
"data": {
"city": "San Francisco",
"favoriteColor": "Red",
"lifeTimeValue": 375,
"state": "CA"
},
"email": "adam68@example.com",
"firstName": "Adam",
"id": "73092cb2-2119-4a5d-acb4-7db5a1facaf8",
"imageUrl": "/images/demo/nope.gif",
"insertInstant": 1625783587031,
"lastName": "Green",
"lastUpdateInstant": 1629141542987,
"memberships": [],
"passwordChangeRequired": false,
"passwordLastUpdateInstant": 1625783587031,
"preferredLanguages": [
"en",
"fr"
],
"registrations": [
{
"applicationId": "d23ecde6-0661-44a7-808b-a23013e6dfdc",
"data": {},
"id": "9693406b-1e62-4eb0-a3c1-7271de3f8ddf",
"insertInstant": 1625783587031,
"lastLoginInstant": 1625783587031,
"lastUpdateInstant": 1625783587031,
"preferredLanguages": [],
"roles": [
"USER"
],
"tokens": {},
"username": "Adam68",
"usernameStatus": "ACTIVE",
"verified": false
}
],
"tenantId": "a743e2cd-55bb-789c-b076-8846fdd3a51f",
"timezone": "America/Denver",
"twoFactor": {
"methods": [],
"recoveryCodes": []
},
"uniqueUsername": "Adam68",
"username": "Adam68",
"usernameStatus": "ACTIVE",
"verified": true
},
"oldValue": {
"active": true,
"birthDate": "1984-09-13",
"connectorId": "e3306678-a53a-4964-9040-1c96f36dda72",
"data": {
"city": "San Francisco",
"favoriteColor": "Red",
"lifeTimeValue": 375,
"state": "CA"
},
"email": "adam68@example.com",
"encryptionScheme": "salted-sha256",
"firstName": "Adam",
"id": "73092cb2-2119-4a5d-acb4-7db5a1facaf8",
"imageUrl": "/images/demo/nope.gif",
"insertInstant": 1625783587031,
"lastName": "Gray",
"lastUpdateInstant": 1625783587031,
"memberships": [],
"passwordChangeRequired": false,
"passwordLastUpdateInstant": 1625783587031,
"preferredLanguages": [
"en",
"fr"
],
"registrations": [
{
"applicationId": "d23ecde6-0661-44a7-808b-a23013e6dfdc",
"data": {},
"id": "9693406b-1e62-4eb0-a3c1-7271de3f8ddf",
"insertInstant": 1625783587031,
"lastLoginInstant": 1625783587031,
"lastUpdateInstant": 1625783587031,
"preferredLanguages": [],
"roles": [
"USER"
],
"tokens": {},
"username": "Adam68",
"usernameStatus": "ACTIVE",
"verified": false
}
],
"tenantId": "a743e2cd-55bb-789c-b076-8846fdd3a51f",
"timezone": "America/Denver",
"twoFactor": {
"methods": [],
"recoveryCodes": []
},
"uniqueUsername": "Adam68",
"username": "Adam68",
"usernameStatus": "ACTIVE",
"verified": true
},
"reason": "FusionAuth User Interface",
"tenantId": "a743e2cd-55bb-789c-b076-8846fdd3a51f"
},
"createInstant": 1629141543064,
"id": "29e3f639-649e-4a5c-bc4b-eec7f89ee20c",
"info": {
"ipAddress": "42.42.42.42",
"location": {
"city": "Denver",
"country": "US",
"displayString": "Denver, CO, US",
"latitude": 39.73915,
"longitude": -104.9847,
"region": "CO"
},
"userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.115 Safari/537.36"
},
"tenantId": "a743e2cd-55bb-789c-b076-8846fdd3a51f",
"type": "audit-log.create"
}
}Related
Learn about the Event Log Create event.
Learn about the User Login Id Duplicate Create event.
Learn about the User Login Id Duplicate Update event.
Learn about the APIs for searching and retrieving webhook event and attempt logs.