Audit events: Overview

To view details about the audit events, you must know their names. The following tables give an overview of the audit events and describe when they are created. Each event captures who triggered the event and when.

User session

Session-related events capture the following attributes: actor_id, event_date, event_type, ip_address, and login_id.

Table 1. Session-related, licensing, and logging events
Event name Description of the action that created the event
LOGON A user signs in to StoredIQ® for Legal.
Import
CLIENT_ADD A new REST API client is registered for import.
CLIENT_REMOVE A REST API client is unregistered.

Object modification

Object-related events capture the following attributes: raw_data, actor_id, correlation_id, effect_type, event_date, event_type, object_id, object_type, parent_id, parent_type, and reason.

Table 2. Object-related events
Event name Description of the action that created the event
Attachments
ATTACHMENT_CREATE A file is added to an object, such as a matter, a task, or a fulfillment item.
ATTACHMENT_DELETE A file is deleted from an object.
ATTACHMENT_REFERENCES_ADD One or more files are added to an object. The button for adding the files was defined as a custom attribute of data type Attribute or Attributes.
Audit queries
REPORT_APPAUDIT_DOWNLOAD The CSV file that contains the audit query results is downloaded in compressed format.
REPORT_APPAUDIT_REQUEST The audit query results are exported to a CSV file.
Comments
COMMENT_CREATE A comment is added to a task.
COMMENT_DELETE A comment is deleted from a task. If the comment included an attachment, also an ATTACHMENT_DELETE event is written.
Configuration
CONFIG_CREATE A configuration is created. For example, the connection to the directory server is defined.
CONFIG_DELETE A configuration is deleted.
CONFIG_UPDATE A configuration is changed.
Custom attributes
ATTRIBUTE_CREATE A new attribute is added to the list of predefined and custom attributes.
ATTRIBUTE_DELETE A custom attribute is deleted.
ATTRIBUTE_UPDATE The name or the settings of a custom attribute are changed.
Data boxes and data requests
BOX_CANCEL_REQUEST A data request is canceled.
BOX_CLOSE A data box is closed.
BOX_COLLECT A collection request is submitted.
BOX_CREATE_EXPAND An existing data box is expanded.
BOX_CREATE_IDENTIFY A data request is saved as a draft.
BOX_CREATE_REFINE An existing data box is refined.
BOX_DELETE A data box is deleted.
BOX_EXPAND_SAVE An expanded data request is saved.
BOX_EXPORT An export request is submitted.
BOX_OPEN A data box is reopened.
BOX_REFINE_SAVE A refined data request is saved.
BOX_REFRESH A data box is refreshed.
BOX_REQUEST_EXCEPTIONS Exception details are requested for a collection data box.
BOX_REQUEST_EXPAND An expanded data request is submitted.
BOX_REQUEST_IDENTIFY A data request is submitted.
BOX_REQUEST_REFINE A refined data request is submitted.
BOX_UPDATE A data request is changed, except for the list of custodians.
REPORT_BOX_REQUEST One or more data box reports are requested.
REPORT_BOX_DOWNLOAD A data box report is downloaded.
Data locales
DATALOCALE_CREATE A data locale is created.
DATALOCALE_DELETE A data locale is deleted.
DATALOCALE_UPDATE A data locale is changed.
Data requests
DATAREQUEST_CANCEL A submitted data request is canceled. All fulfillment activities are stopped.
DATAREQUEST_CREATE A data request is created.
DATAREQUEST_CUSTODIANS_REFINEMENT_DOWNLOAD Request information for custodians was exported to CSV.
DATAREQUEST_DELETE A data request is deleted.
DATAREQUEST_DUPLICATE A data request is duplicated.
DATAREQUEST_RELEASE A release data request is created.
DATAREQUEST_REOPEN A completed data request is reopened.
DATAREQUEST_SUBMIT A data request is submitted.
DATAREQUEST_UPDATE A data request in draft state is changed, or the request information is updated after the data request is submitted.
DATAREQUESTDEFINITION_CREATE A data request template is created.
DATAREQUESTDEFINITION_DELETE A data request template is deleted.
DATAREQUESTDEFINITION_UPDATE A data request template is changed.
Data sources
DATASOURCE_CREATE A new data source is imported.
DATASOURCE_DELETE A data source is deleted.
DATASOURCE_UPDATE A data source is edited.
Data source applications
DATASOURCEAPPLICATION_CREATE An application that contains one or more data sources is imported.
DATASOURCEAPPLICATION_DELETE An application that contains one or more data sources is deleted.
DATASOURCEAPPLICATION_UPDATE An application that contains one or more data sources is edited.
Data source servers
DATASOURCESERVER_CREATE A server that contains one or more data sources is imported.
DATASOURCESERVER_DELETE A data source server is deleted.
DATASOURCESERVER_UPDATE A data source server is changed.
Data type
DATATYPE_UPDATE A data type is updated through an internal program call.
Fulfillment connectors
FULFILLMENTCONNECTOR_LOG_DOWNLOAD A fulfillment connector log is downloaded.
FULFILLMENTCONNECTOR_REGISTER A fulfillment connector is registered.
FULFILLMENTCONNECTOR_UNREGISTER A fulfillment connector is unregistered.
FULFILLMENTCONNECTOR_UPDATE Fulfillment connector settings are updated.
Fulfillment items
FULFILLMENTITEM_CREATE A fulfillment item is created.
FULFILLMENTITEM_DELETE A fulfillment item is deleted.
FULFILLMENTITEMS_DOWNLOAD One or more fulfillment items are downloaded.
FULFILLMENTITEM_DUPLICATE A fulfillment item is duplicated.
FULFILLMENTITEM_RESULTS_UPDATE A fulfillment item is updated with the results of the data identification, preservation, or collection.
FULFILLMENTITEM_UPDATE A fulfillment item is edited.
FULFILLMENTWORKPACKAGE_CREATE A work package is created.
FULFILLMENTWORKPACKAGE_DELETE A work package is deleted.
FULFILLMENTWORKPACKAGE_SPLIT A work package is split.
FULFILLMENTWORKPACKAGE_SUBMIT A work package is submitted.
FULFILLMENTWORKPACKAGE_UPDATE The information about a work package is edited.
Fulfillment jobs
FULFILLMENTJOB_CREATE A fulfillment job is created.
FULFILLMENTJOB_DELETE A fulfillment is deleted.
FULFILLMENTJOB_KILL_REQUEST_ACCEPTED The request to end a fulfillment job is accepted.
FULFILLMENTJOB_UPDATE A fulfillment job is updated.
Global hold reminder
GLOBALHOLDREMINDER_CREATE The global hold reminder is created.
GLOBALHOLDREMINDER_EXPORT The information about the custodians who received a single reminder notice for all of their hold notices is exported as a CSV file.
GLOBALHOLDREMINDER_RESUME The global hold reminder is enabled.
GLOBALHOLDREMINDER_SETACTIVE The global hold reminder, or any updates to it, are activated.
GLOBALHOLDREMINDER_SETNEXTTRANSMISSIONDATE The date of the next reminder is changed.
GLOBALHOLDREMINDER_SUSPEND The global hold reminder is disabled.
GLOBALHOLDREMINDER_UPDATE_DRAFT The global hold reminder is updated.
Groups
GROUP_CREATE A group is created.
GROUP_DELETE A group is deleted.
GROUP_DOWNLOAD A list of members in a group is downloaded from the people catalog.
GROUP_UPDATE The list of members in a group is changed.
Hold notices
NOTICE_CREATE A hold notice is created.
NOTICE_UPDATE The details about a hold notice in draft state are changed.
NOTICE_PUBLISH A hold notice is published.
NOTICE_DELETE A hold notice is deleted.
NOTICE_DRAFT_APPLY A hold notice is republished or other changes to a published hold notice are applied.
Import mapping
IMPORT_MAPPING_CREATE During the import of a CSV file, a file column is mapped to the corresponding attribute, which is defined in StoredIQ for Legal.
IMPORT_MAPPING_UPDATE An import mapping is changed.
IMPORT_MAPPING_DELETE An import mapping is deleted.
Import request
IMPORT_REQUEST_CREATE An import request is created.
IMPORT_REQUEST_UPDATE An import request is changed.
IMPORT_REQUEST_DELETE An import request is deleted.
IMPORT_REQUEST_START The processing of an import request is started.
IMPORT_REQUEST_EXECUTION The import is completed.
ORGTREE_HISTORY_CLEANUP The department hierarchy is cleaned up.
PERSON_HISTORY_CLEANUP The employment history is cleaned up.
PERSONDISTINCTHISTORY_CLEANUP Person history records are cleaned up.
Interviews
INTERVIEW_CREATE An interview is created.
INTERVIEW_UPDATE The details about an interview are changed.
INTERVIEW_DELETE An interview is deleted.
Jurisdictions
JURISDICTION_CREATE A new jurisdiction is added to the list of jurisdictions.
JURISDICTION_UPDATE A jurisdiction is activated or deactivated.
JURISDICTION_DELETE A jurisdiction is deleted.
Matters
MATTER_CREATE A matter is created.
MATTER_UPDATE The matter details are changed.
MATTER_ASSIGNEES_ADD One or more assignees are added to a matter.
MATTER_ASSIGNEES_REMOVE One or more assignees are removed from a matter.
MATTER_CLOSE A matter is closed.
MATTER_REOPEN A closed matter is reopened.
MATTER_DELETE A matter is deleted.
MATTER_LIST_DOWNLOAD The list of matters is downloaded.
Matter categories
MATTERCATEGORY_CREATE A new matter category is imported, or a new matter category is added.
MATTERCATEGORY_UPDATE A matter category is edited.
MATTERCATEGORY_DELETE A matter category is deleted.
Miscellaneous (object type None or variable)
DELETE_DANGLING_REFERENCE The reference to a deleted object is deleted.
LOG_CONFIG_UPDATE A user changed the log settings.
LOG_FILES_DOWNLOAD The log files are collected and downloaded.
MIGRATION_START Migration of notices or interviews from IBM® Atlas Policy Suite to StoredIQ for Legal started. This event is written once per migration run.
MIGRATION_END Migration of notices or interviews from IBM Atlas Policy Suite to StoredIQ for Legal ended. This event is written once per migration run.
TASK_LICENSES_COUNT A user licenses task is started.
People
MATTER_INVOLVEMENT_DOWNLOAD The information about a person's hold obligations and involvement in matters is exported as a CSV file.
PERSON_CREATE A test user is created in StoredIQ for Legal or a person is imported with a CSV file.
PERSON_LIST_DOWNLOAD A list of people is downloaded from the people catalog.
PERSON_UPDATE
CUSTODIAN_UPDATE
The profile of a person is changed.
PERSON_UPDATE_ROLES
CUSTODIAN_UPDATE_ROLES
A user is assigned roles or is assigned different or additional roles.
Server discovery connectors
SERVERDISCOVERYCONNECTOR_LOG_DOWNLOAD A server discovery connector log is downloaded.
SERVERDISCOVERYCONNECTOR_REGISTER A server discovery connector is registered.
SERVERDISCOVERYCONNECTOR_UNREGISTER A server discovery connector is unregistered.
SERVERDISCOVERYCONNECTOR_UPDATE Server discovery connector settings are updated.
Server discovery jobs
SERVERDISCOVERYJOB_CREATE A server discovery job is created.
SERVERDISCOVERYJOB_DELETE A server discovery job is deleted.
SERVERDISCOVERYJOB_KILL_REQUEST_ACCEPTED The request to end a server discovery job is accepted.
SERVERDISCOVERYJOB_UPDATE A server discovery job is updated.
Report definitions, report resources, and custom reports
REPORT_BIRT_DEFINITION_CREATE A custom report definition is imported.
REPORT_BIRT_DEFINITION_UPDATE A custom report definition is activated or suspended.
REPORT_BIRT_DEFINITION_DOWNLOAD A custom report definition is downloaded.
REPORT_BIRT_DEFINITION_DELETE A custom report definition is deleted.
REPORT_BIRT_DOWNLOAD A custom report is opened.
REPORT_BIRT_REQUEST The creation of a custom report is requested.
REPORT_BIRT_RESOURCE_CREATE A report resource is imported.
REPORT_BIRT_RESOURCE_DELETE A report resource is deleted.
REPORT_BIRT_RESOURCE_UPDATE A report resource is replaced.
REPORT_BIRT_RESOURCE_DOWNLOAD A report resource is exported.
REPORT_CUSTOMIZATION_CREATE Database customizations are added.
REPORT_CUSTOMIZATION_DELETE Database customizations are deleted.
REPORT_CUSTOMIZATION_DOWNLOAD Database customization information is downloaded.
REPORT_CUSTOMIZATION_UPDATE Database customizations have been replaced.
Scheduled reports and reporting database
TASK_REPORT_BIRT_CREATE A scheduled custom report is being created.
TASK_REPORTS_DELETE One or more scheduled reports are deleted.
TASK_REPORTING_DB_EXPORT The reporting database is refreshed.
Security groups
SECURITYGROUP_CREATE A security group is created.
SECURITYGROUP_UPDATE The list of members in a security group is changed.
SECURITYGROUP_DELETE A security group is deleted.
Templates
TEMPLATE_HOLD_CREATE A hold notice template is created.
TEMPLATE_HOLD_UPDATE A hold notice template in draft state is changed.
TEMPLATE_HOLD_ACTIVATE A hold notice template is activated.
TEMPLATE_HOLD_DEACTIVATE A hold notice template is deactivated.
TEMPLATE_HOLD_DELETE A hold notice template is deleted.
TEMPLATE_HOLD_IMPORT A hold notice template is imported.
TEMPLATE_HOLD_EXPORT A hold notice template is exported.
TEMPLATE_INTERVIEW_CREATE An interview template is created.
TEMPLATE_INTERVIEW_UPDATE An interview template in draft state is changed.
TEMPLATE_INTERVIEW_ACTIVATE An interview template is activated.
TEMPLATE_INTERVIEW_DEACTIVATE An interview template is deactivated.
TEMPLATE_INTERVIEW_DELETE An interview template is deleted.
TEMPLATE_INTERVIEW_IMPORT An interview template is imported.
TEMPLATE_INTERVIEW_EXPORT An interview template is exported.
TEMPLATE_FORM_CREATE A form template is created.
TEMPLATE_FORM_UPDATE A form template in draft state is changed.
TEMPLATE_FORM_ACTIVATE A form template is activated.
TEMPLATE_FORM_DEACTIVATE A form template is deactivated.
TEMPLATE_FORM_DELETE A form template is deleted.
TEMPLATE_FORM_IMPORT A form template is imported.
TEMPLATE_FORM_EXPORT A form template is exported.
User preferences
USERPREFERENCE_CREATE Notification settings are specified or out-of-office settings are enabled.
USERPREFERENCE_UPDATE Notification settings or out-of-office settings are changed.
USERPREFERENCE_DELETE Notification settings are removed or out-of-office settings are disabled.
User roles
ROLE_CREATE A user role is created.
ROLE_UPDATE A user role is edited.
ROLE_DELETE A user role is deleted.

People, users, and custodians

Events related to people, users, and custodians capture the following attributes: actor_id, correlation_id, custodian_id, custodian_id_max, custodian_id_min, custodians, event_date, event_type, object_id, object_type, parent_id, parent_type, and reason.

Table 3. Events related to people, users, and custodians
Event name Description of the action that created the event
Actions on people, users, and custodians
BOX_CUSTODIANS_ADD One or more custodians are added to the data box.
BOX_CUSTODIANS_RELEASE One or more custodians are removed from the data box.
BOX_CUSTODIANS_DOWNLOAD The list of custodians that belongs to a data box is downloaded.
DATAREQUEST_CUSTODIANS_ADD One or more custodians are added to a data request.
DATAREQUEST_CUSTODIANS_DOWNLOAD The list of custodians that belongs to a data request is downloaded.
DATAREQUEST_CUSTODIANS_REMOVE One or more custodians are removed from a data request.
DATAREQUEST_CUSTODIANS_OVERRIDE_CRITERIA The request information is edited for one or more custodians of a data request.
DATAREQUEST_CUSTODIANS_UPDATE_PRIORITY The priority of one or more custodians is changed.
DATAREQUEST_CUSTODIANS_DATASOURCES_ADD One or more data sources are added to one or more custodians.
DATAREQUEST_CUSTODIANS_DATASOURCES_REMOVE One or more data sources are removed from one or more custodians.
GROUP_CUSTODIANS_ADD A person is added to a group.
GROUP_CUSTODIANS_REMOVE A person is removed from a group.
INTERVIEW_CUSTODIAN_NOTES_UPDATE A note is added to one or more custodians when viewing the status of the custodians within an interview or when viewing the results of an interview.
INTERVIEW_DRAFT_CUSTODIANS_ADD One or more custodians are added to an interview that is not published yet.
INTERVIEW_DRAFT_CUSTODIANS_REMOVE One or more custodians are removed from an interview that is not published yet.
INTERVIEW_CUSTODIANS_ADD One or more custodians are added to a published interview.
INTERVIEW_CUSTODIANS_SUSPEND An interview is suspended for one or more custodians.
INTERVIEW_CUSTODIANS_RESUME An interview is resumed for one or more custodians.
INTERVIEW_CUSTODIANS_CONCLUDE An interview is concluded for one or more custodians.
INTERVIEW_CUSTODIANS_DOWNLOAD The list of custodians that belong to an interview is downloaded.
INTERVIEW_QUESTIONRESPONSE_NOTES_UPDATE A note is added to the custodian when viewing the results of an interview by custodian.
NOTICE_CUSTODIAN_NOTES_UPDATE A note is added to one or more custodians when viewing the status of the custodians within a hold notice.
NOTICE_CUSTODIAN_CC_NOTES_UPDATE A note is added to one or more courtesy copy recipients when viewing the status of the courtesy copy recipients within a hold notice.
NOTICE_CUSTODIANS_ADD One or more custodians are added to a published hold notice.
NOTICE_CUSTODIANS_RELEASE One or more custodians are released from a published notice.
NOTICE_CUSTODIANS_RESUME A hold notice is released for one or more custodians.
NOTICE_CUSTODIANS_SUSPEND A hold notice is suspended for one or more custodians.
NOTICE_CUSTODIANS_DOWNLOAD The list of custodians that belong to a hold notice is downloaded.
NOTICE_CUSTODIANS_CC_ADD One or more courtesy copy recipients are added to a hold notice.
NOTICE_CUSTODIANS_CC_REMOVE One or more courtesy copy recipients are removed from a hold notice.
NOTICE_DRAFT_CUSTODIANS_ADD One or more custodians are added to a hold notice that is not published yet.
NOTICE_DRAFT_CUSTODIANS_REMOVE One or more custodians are removed from a hold notice that is not published yet.
NOTICE_DRAFT_SILENT_CUSTODIANS_ADD One or more silent custodians are added to a hold notice that is not published yet.
NOTICE_DRAFT_SILENT_CUSTODIANS_REMOVE One or more silent custodians are removed from a hold notice that is not published yet.
NOTICE_SILENT_CUSTODIANS_ADD One or more users are added to a hold notice as silent custodians.
NOTICE_SILENT_CUSTODIANS_MOVE_TO_ACTIVE One or more silent custodians on a hold notice are made active custodians.
NOTICE_SILENT_CUSTODIANS_MOVE_TO_SILENT One or more active custodians on a hold notice are made silent custodians.
NOTICE_SILENT_CUSTODIANS_REMOVE One or more silent custodians are removed from a hold notice.
SECURITYGROUP_CUSTODIANS_ADD One or more users are added to a security group.
SECURITYGROUP_CUSTODIANS_REMOVE One or more users are removed from a security group.
Responses to hold notices
NOTICE_CONFIRM A custodian confirms a hold notice.
NOTICE_CONTACT A custodian requests to be contacted.
NOTICE_CONFIRM_ON_BEHALF A paralegal confirms a hold notice on behalf of a custodian.
Responses to interviews
INTERVIEW_RESPOND A custodian responds to an interview.
INTERVIEW_RESPOND_ON_BEHALF A paralegal responds to an interview on behalf of a custodian.
Interview transmissions
INTERVIEW_SEND_INITIAL The initial interview is sent.
INTERVIEW_SEND_INITIAL_FOLLOWUP The message to follow up on the initial interview is sent.
INTERVIEW_SEND_REMINDER The recurring interview is sent.
INTERVIEW_SEND_REMINDER_FOLLOWUP The message to follow up on the recurring interview is sent.
INTERVIEW_RESEND_INITIAL The initial interview is resent.
INTERVIEW_RESEND_INITIAL_FOLLOWUP The message to follow up on the initial interview is resent.
INTERVIEW_RESEND_REMINDER The recurring interview is resent.
INTERVIEW_RESEND_REMINDER_FOLLOWUP The message to follow up on the recurring interview is resent.
Hold-notice transmissions
NOTICE_SEND_INITIAL The initial notice is sent.
NOTICE_SEND_INITIAL_FOLLOWUP The message to follow up on the initial notice is sent.
NOTICE_SEND_REMINDER An individual reminder notice is sent.
NOTICE_SEND_GLOBAL_REMINDER The global reminder notice is sent.
NOTICE_SEND_REMINDER_FOLLOWUP The message to follow up on an individual reminder notice is sent.
NOTICE_SEND_GLOBAL_REMINDER_FOLLOWUP The message to follow up on the global reminder notice is sent.
NOTICE_RESEND_INITIAL The initial notice is resent.
NOTICE_RESEND_INITIAL_FOLLOWUP The message to follow up on the initial notice is resent.
NOTICE_RESEND_REMINDER An individual reminder notice is resent.
NOTICE_RESEND_GLOBAL_REMINDER The global reminder notice is resent.
NOTICE_RESEND_REMINDER_FOLLOWUP The message to follow up on an individual reminder notice is resent.
NOTICE_RESEND_GLOBAL_REMINDER_FOLLOWUP The message to follow up on the global reminder notice is resent.
Email notifications
EMAIL_NOTIFICATION_SEND_DATA_REQUEST_CANCEL The data request is canceled.
EMAIL_NOTIFICATION_SEND_WF_COMMENT_ADD A comment is added to the task.
EMAIL_NOTIFICATION_SEND_WF_TERMINATE A workflow instance is terminated.
EMAIL_NOTIFICATION_SEND_WF_TASK_ASSIGNEE_CHANGE The task is assigned or returned.
EMAIL_NOTIFICATION_SEND_WF_TASK_COMPLETE The task is completed.
EMAIL_NOTIFICATION_SEND_WF_TASK_OVERDUE_REMINDER The due date of the task approaches.
EMAIL_NOTIFICATION_SEND_WF_TASK_UPDATE The priority or the due date of the task is updated.
EMAIL_NOTIFICATION_SEND_WF_SUBSCRIBER_USERS_ADD A subscriber is added to the task.
EMAIL_NOTIFICATION_SEND_WF_SUBSCRIBER_USERS_REMOVE A subscriber is removed from the task.
EMAIL_NOTIFICATION_SEND_WORK_PACKAGE_CUSTODIANS_REMOVE A custodian is removed from the data request.
EMAIL_NOTIFICATION_SEND_WORK_PACKAGE_PRIORITY_CHANGE The priority of a custodian in a data request is changed.

Workflow

Workflow-related events capture the following attributes: raw_data, actor_id, correlation_id, event_date, event_type, proc_def_id, proc_def_key, proc_error, proc_inst_id, task_assignee_id, task_category, task_id, task_name, and task_type.

Table 4. Workflow-related events
Event name Description of the action that created the event
WF_ERROR A workflow fails due an error. For more information, see Workflow fails due to an error.
WF_INSTANCE_CANCEL A workflow instance is terminated.
WF_INSTANCE_END A workflow instance is finished.
WF_INSTANCE_RESUME A suspended workflow instance was resumed.
WF_INSTANCE_START A workflow instance is started.
WF_INSTANCE_SUBSCRIBERS_ADD A subscriber is added to a task. The subscriber is then informed about all changes with regard to all tasks in the same workflow.
WF_INSTANCE_SUBSCRIBERS_REMOVE A subscriber is removed from a task. The subscriber is then no longer informed about any task changes in the workflow.
WF_INSTANCE_SUSPEND A workflow instances was suspended.
WF_PROCDEF_CREATE A workflow definition is added.
WF_PROCDEF_DELETE A workflow definition is deleted.
WF_PROCDEF_ACTIVATE A workflow is activated.
WF_PROCDEF_SUSPEND A workflow is suspended.
WF_PROCDEF_CANCEL_SCHEDULE The schedule for activating or suspending a workflow is canceled.
WF_MAPPING_CREATE
WORKFLOWMAPPING_CREATE
A workflow definition is mapped to an object.
WF_MAPPING_DELETE
WORKFLOWMAPPING_DELETE
A workflow definition is no longer mapped to a specific object.
WF_MAPPING_UPDATE
WORKFLOWMAPPING_UPDATE
A workflow definition is mapped to another object.
WF_TASK_READ A task is opened.
WF_TASK_START A task is started.
WF_TASK_UPDATE A task is changed.
WF_TASK_CLAIM A task is assigned to oneself.
WF_TASK_ASSIGN A task is assigned or reassigned.
WF_TASK_RETURN A task is returned.
WF_TASK_COMPLETE A task is completed.
WF_TASK_END A task is finished.
WF_TASK_LIST_DOWNLOAD A list of tasks was downloaded.