Resources
🤖 For AI agents: The complete documentation index is available at /docs/llms.txt. A markdown version of this page is available at /docs/extend/events-and-webhooks/events/audit-log-create.md.

Audit Log Create

Edit on GitHub
View Markdown

Audit Log Create

version
This event has been available since 1.30.0

This event is generated when an audit log is created.

Event type
audit-log.create

Event Scope

This is a system scoped event. If enabled in Settings -> Webhooks -> Your Webhook , this event will be sent.

The tenant webhook enable or disable settings do not apply and will be ignored.

In version 1.65.0 and later, the event subject may be scoped to a tenant. In such cases events are delivered only to the tenants specified by the webhook configuration.

Transaction Compatibility

This event is non-transactional. The operation will succeed regardless of the webhook response status code.

Event Body

event.createInstant Long

The instant that the event was generated.

event.auditLog Object

The audit log for this event. See the Audit Logs API for property definitions and example JSON.

event.info.data Object

An object that can hold any information about the event that should be persisted.

event.info.deviceDescription String

The description of the device associated with the event.

event.info.deviceName String

The device name associated with the event.

event.info.deviceType String

The type of device associated with the event.

event.info.ipAddress String

The source IP address of the event.

event.info.location.city String

The city where the event originated.

Note: To use event location data, you'll need an Enterprise plan.

event.info.location.country String

The country where the event originated.

Note: To use event location data, you'll need an Enterprise plan.

event.info.location.latitude Double

The latitude where the event originated.

Note: To use event location data, you'll need an Enterprise plan.

event.info.location.longitude Double

The longitude where the event originated.

Note: To use event location data, you'll need an Enterprise plan.

event.info.location.region String

The geographic location where the event originated.

Note: To use event location data, you'll need an Enterprise plan.

event.info.location.zipcode String

The zip code where the event originated.

Note: To use event location data, you'll need an Enterprise plan.

event.info.os String

The operating system associated with the event.

event.info.userAgent String

The user agent associated with the event.

event.id UUID

The unique Id of the event. You may receive an event more than once based upon your transaction settings. This Id may be used to identify a duplicate event.

event.tenantId UUID Available since 1.65.0

The unique tenant identifier. This value may not be returned if not applicable.

event.type String

The event type, this value will always be audit-log.create.

Example Event JSON

{
  "event": {
    "auditLog": {
      "id": 1773,
      "insertInstant": 1629141543059,
      "insertUser": "admin@example.com",
      "message": "Updated the user with Id [73092cb2-2119-4a5d-acb4-7db5a1facaf8] and loginId [adam68@example.com]",
      "newValue": {
        "active": true,
        "birthDate": "1984-09-13",
        "connectorId": "e3306678-a53a-4964-9040-1c96f36dda72",
        "data": {
          "city": "San Francisco",
          "favoriteColor": "Red",
          "lifeTimeValue": 375,
          "state": "CA"
        },
        "email": "adam68@example.com",
        "firstName": "Adam",
        "id": "73092cb2-2119-4a5d-acb4-7db5a1facaf8",
        "imageUrl": "/images/demo/nope.gif",
        "insertInstant": 1625783587031,
        "lastName": "Green",
        "lastUpdateInstant": 1629141542987,
        "memberships": [],
        "passwordChangeRequired": false,
        "passwordLastUpdateInstant": 1625783587031,
        "preferredLanguages": [
          "en",
          "fr"
        ],
        "registrations": [
          {
            "applicationId": "d23ecde6-0661-44a7-808b-a23013e6dfdc",
            "data": {},
            "id": "9693406b-1e62-4eb0-a3c1-7271de3f8ddf",
            "insertInstant": 1625783587031,
            "lastLoginInstant": 1625783587031,
            "lastUpdateInstant": 1625783587031,
            "preferredLanguages": [],
            "roles": [
              "USER"
            ],
            "tokens": {},
            "username": "Adam68",
            "usernameStatus": "ACTIVE",
            "verified": false
          }
        ],
        "tenantId": "a743e2cd-55bb-789c-b076-8846fdd3a51f",
        "timezone": "America/Denver",
        "twoFactor": {
          "methods": [],
          "recoveryCodes": []
        },
        "uniqueUsername": "Adam68",
        "username": "Adam68",
        "usernameStatus": "ACTIVE",
        "verified": true
      },
      "oldValue": {
        "active": true,
        "birthDate": "1984-09-13",
        "connectorId": "e3306678-a53a-4964-9040-1c96f36dda72",
        "data": {
          "city": "San Francisco",
          "favoriteColor": "Red",
          "lifeTimeValue": 375,
          "state": "CA"
        },
        "email": "adam68@example.com",
        "encryptionScheme": "salted-sha256",
        "firstName": "Adam",
        "id": "73092cb2-2119-4a5d-acb4-7db5a1facaf8",
        "imageUrl": "/images/demo/nope.gif",
        "insertInstant": 1625783587031,
        "lastName": "Gray",
        "lastUpdateInstant": 1625783587031,
        "memberships": [],
        "passwordChangeRequired": false,
        "passwordLastUpdateInstant": 1625783587031,
        "preferredLanguages": [
          "en",
          "fr"
        ],
        "registrations": [
          {
            "applicationId": "d23ecde6-0661-44a7-808b-a23013e6dfdc",
            "data": {},
            "id": "9693406b-1e62-4eb0-a3c1-7271de3f8ddf",
            "insertInstant": 1625783587031,
            "lastLoginInstant": 1625783587031,
            "lastUpdateInstant": 1625783587031,
            "preferredLanguages": [],
            "roles": [
              "USER"
            ],
            "tokens": {},
            "username": "Adam68",
            "usernameStatus": "ACTIVE",
            "verified": false
          }
        ],
        "tenantId": "a743e2cd-55bb-789c-b076-8846fdd3a51f",
        "timezone": "America/Denver",
        "twoFactor": {
          "methods": [],
          "recoveryCodes": []
        },
        "uniqueUsername": "Adam68",
        "username": "Adam68",
        "usernameStatus": "ACTIVE",
        "verified": true
      },
      "reason": "FusionAuth User Interface",
      "tenantId": "a743e2cd-55bb-789c-b076-8846fdd3a51f"
    },
    "createInstant": 1629141543064,
    "id": "29e3f639-649e-4a5c-bc4b-eec7f89ee20c",
    "info": {
      "ipAddress": "42.42.42.42",
      "location": {
        "city": "Denver",
        "country": "US",
        "displayString": "Denver, CO, US",
        "latitude": 39.73915,
        "longitude": -104.9847,
        "region": "CO"
      },
      "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.115 Safari/537.36"
    },
    "tenantId": "a743e2cd-55bb-789c-b076-8846fdd3a51f",
    "type": "audit-log.create"
  }
}