Skip to main content
This page describes the fields included in each audit log event type. Payloads can contain Omni metadata, which can be safely ignored.

​
Query context events

Occurs when a user loads a document (workbook or dashboard). Event type: QUERY_CONTEXT
​
string
The unique ID of the workbook or dashboard within Omni, found within the URL for the document.
​
string
If applicable, the value will be the value of the entity field in an embed URL generated for a user.
​
string
The type of the event. This will be QUERY_CONTEXT.
​
string
Additional detail passed from the log.
​
string
The unique identifier for the Omni organization.
​
string
The unique identifier for the Omni user associated with the event.
​
number
The maximum number of query execution events that a query context event can trigger. Can be used to calculate cache hit rate as the denominator.
​
string
The URL of the page where the event was issued.
​
string
The source of the query context event. Possible values:
  • DASHBOARD
  • WORKBOOK
  • QUERY_DOWNLOAD
  • SUGGESTIONS
  • SUMMARY_VALUES
  • AI_FETCH_FIELD_VALUES
​
string
Deprecated. Use query_source instead.
The first 6 characters of this field are overwritten with stdout in delivered audit logs (e.g., DASHBOARD becomes stdoutARD). The query_source field contains the correct uncorrupted value. This field is retained for backwards compatibility only.
​
string
The time the event occurred.
​
string
A uuid that can be used to trace the event across other log entries. For example, from a query context or dashboard download event to the query execution events that were subsequently run.
​
string
The URL of the page where the event occurred.

​
Query execution events

Occurs when a user runs a query, which may be sent back to the warehouse. Event type: QUERY_EXECUTE
​
string
The time the event occurred.
​
number
The total length of query execution within the warehouse.
​
string
The type of the event. This will be QUERY_EXECUTE.
​
string
The ID of the corresponding job in the warehouse where the query was executed.
​
string
Detail passed from the infrastructure back to the user, if applicable.
​
string
A uuid for the query being executed within Omni. Used for query killing purposes.
​
string
The unique identifier for the Omni organization.
​
string
The query that was executed.
​
string
A uuid that can be used to trace the event across other log entries. For example, from a query context or dashboard download event to the query execution events that were subsequently run.
​
boolean
Indicates if the query executed successfully. Note: This doesn’t indicate the success of the job, only the individual query.

​
Dashboard download events

Occurs when a user downloads a full dashboard. Event type: DASHBOARD_DOWNLOAD
​
string
The unique ID of the workbook or dashboard within Omni, found within the URL for the document.
​
string
If applicable, the value will be the value of the entity field in an embed URL generated for a user.
​
string
The type of the event. This will be DASHBOARD_DOWNLOAD.
​
string
Additional detail passed from the log.
​
string
The unique identifier for the Omni organization.
​
string
The unique identifier for the Omni user associated with the event.
​
string
The time the event occurred.
​
string
A uuid that can be used to trace the event across other log entries. For example, from a query context or dashboard download event to the query execution events that were subsequently run.
​
string
The URL of the page where the event occurred.

​
Connection base role events

Occurs when the base role for a connection changes. Event type: UPDATE_CONNECTION_BASE_ROLE
​
object
Details about the Omni user associated with the event.
​
string
The ID of the connection associated with the role change.
​
string
The type of the event. This will be UPDATE_CONNECTION_BASE_ROLE.
​
string
Additional detail passed from the log.
​
string
The name of the updated base connection role.
​
string
The time the event occurred.
​
string
A uuid that can be used to trace the event across other log entries.

​
User connection role events

Occurs when a user’s connection role changes. Event type: UPDATE_USER_CONNECTION_ROLE
​
string
The ID of the connection associated with the role change.
​
string
The type of the event. This will be UPDATE_USER_CONNECTION_ROLE.
​
string
Additional detail passed from the log.
​
string
The unique identifier for the Omni organization.
​
string
The unique identifier for the Omni user associated with the event.
​
string
The time the event occurred.
​
string
A uuid that can be used to trace the event across other log entries.

​
User group connection role events

Occurs when the connection role for a user group changes. Event type: UPDATE_GROUP_CONNECTION_ROLE
​
object
Details about the Omni user associated with the event.
​
string
The ID of the connection associated with the role change.
​
string
The type of the event. This will be UPDATE_GROUP_CONNECTION_ROLE.
​
string
Additional detail passed from the log.
​
string
The unique identifier for the Omni organization.
​
string
The name of the updated connection role.
​
string
The membership of the user group associated with the event.
​
string
The time the event occurred.
​
string
A uuid that can be used to trace the event across other log entries.
​
string
The ID of the Omni user group associated with the event.

​
User invite events

Occurs when a new user is invited to the organization. Event type: USER_INVITE
​
string
The type of the event. This will be USER_INVITE.
​
string
The ID of the invited user.
​
string
Additional detail passed from the log.
​
string
The unique identifier for the Omni organization.
​
string
The unique identifier for the Omni user associated with the event.
​
string
The time the event occurred.
​
string
A uuid that can be used to trace the event across other log entries.