Audit events: Overview
User session
Session-related events capture the following attributes: actor_id, event_date, event_type, ip_address, and login_id.
| Event name | Description of the action that created the event |
|---|---|
| LOGON | A user signs in to StoredIQ® for Legal. |
| Import | |
| CLIENT_ADD | A new REST API client is registered for import. |
| CLIENT_REMOVE | A REST API client is unregistered. |
Object modification
Object-related events capture the following attributes: raw_data, actor_id, correlation_id, effect_type, event_date, event_type, object_id, object_type, parent_id, parent_type, and reason.
| Event name | Description of the action that created the event |
|---|---|
| Attachments | |
| ATTACHMENT_CREATE | A file is added to an object, such as a matter, a task, or a fulfillment item. |
| ATTACHMENT_DELETE | A file is deleted from an object. |
| ATTACHMENT_REFERENCES_ADD | One or more files are added to an object. The button for adding the files was defined as a custom attribute of data type Attribute or Attributes. |
| Audit queries | |
| REPORT_APPAUDIT_DOWNLOAD | The CSV file that contains the audit query results is downloaded in compressed format. |
| REPORT_APPAUDIT_REQUEST | The audit query results are exported to a CSV file. |
| Comments | |
| COMMENT_CREATE | A comment is added to a task. |
| COMMENT_DELETE | A comment is deleted from a task. If the comment included an attachment, also an ATTACHMENT_DELETE event is written. |
| Configuration | |
| CONFIG_CREATE | A configuration is created. For example, the connection to the directory server is defined. |
| CONFIG_DELETE | A configuration is deleted. |
| CONFIG_UPDATE | A configuration is changed. |
| Custom attributes | |
| ATTRIBUTE_CREATE | A new attribute is added to the list of predefined and custom attributes. |
| ATTRIBUTE_DELETE | A custom attribute is deleted. |
| ATTRIBUTE_UPDATE | The name or the settings of a custom attribute are changed. |
| Data boxes and data requests | |
| BOX_CANCEL_REQUEST | A data request is canceled. |
| BOX_CLOSE | A data box is closed. |
| BOX_COLLECT | A collection request is submitted. |
| BOX_CREATE_EXPAND | An existing data box is expanded. |
| BOX_CREATE_IDENTIFY | A data request is saved as a draft. |
| BOX_CREATE_REFINE | An existing data box is refined. |
| BOX_DELETE | A data box is deleted. |
| BOX_EXPAND_SAVE | An expanded data request is saved. |
| BOX_EXPORT | An export request is submitted. |
| BOX_OPEN | A data box is reopened. |
| BOX_REFINE_SAVE | A refined data request is saved. |
| BOX_REFRESH | A data box is refreshed. |
| BOX_REQUEST_EXCEPTIONS | Exception details are requested for a collection data box. |
| BOX_REQUEST_EXPAND | An expanded data request is submitted. |
| BOX_REQUEST_IDENTIFY | A data request is submitted. |
| BOX_REQUEST_REFINE | A refined data request is submitted. |
| BOX_UPDATE | A data request is changed, except for the list of custodians. |
| REPORT_BOX_REQUEST | One or more data box reports are requested. |
| REPORT_BOX_DOWNLOAD | A data box report is downloaded. |
| Data locales | |
| DATALOCALE_CREATE | A data locale is created. |
| DATALOCALE_DELETE | A data locale is deleted. |
| DATALOCALE_UPDATE | A data locale is changed. |
| Data requests | |
| DATAREQUEST_CANCEL | A submitted data request is canceled. All fulfillment activities are stopped. |
| DATAREQUEST_CREATE | A data request is created. |
| DATAREQUEST_CUSTODIANS_REFINEMENT_DOWNLOAD | Request information for custodians was exported to CSV. |
| DATAREQUEST_DELETE | A data request is deleted. |
| DATAREQUEST_DUPLICATE | A data request is duplicated. |
| DATAREQUEST_RELEASE | A release data request is created. |
| DATAREQUEST_REOPEN | A completed data request is reopened. |
| DATAREQUEST_SUBMIT | A data request is submitted. |
| DATAREQUEST_UPDATE | A data request in draft state is changed, or the request information is updated after the data request is submitted. |
| DATAREQUESTDEFINITION_CREATE | A data request template is created. |
| DATAREQUESTDEFINITION_DELETE | A data request template is deleted. |
| DATAREQUESTDEFINITION_UPDATE | A data request template is changed. |
| Data sources | |
| DATASOURCE_CREATE | A new data source is imported. |
| DATASOURCE_DELETE | A data source is deleted. |
| DATASOURCE_UPDATE | A data source is edited. |
| Data source applications | |
| DATASOURCEAPPLICATION_CREATE | An application that contains one or more data sources is imported. |
| DATASOURCEAPPLICATION_DELETE | An application that contains one or more data sources is deleted. |
| DATASOURCEAPPLICATION_UPDATE | An application that contains one or more data sources is edited. |
| Data source servers | |
| DATASOURCESERVER_CREATE | A server that contains one or more data sources is imported. |
| DATASOURCESERVER_DELETE | A data source server is deleted. |
| DATASOURCESERVER_UPDATE | A data source server is changed. |
| Data type | |
| DATATYPE_UPDATE | A data type is updated through an internal program call. |
| Fulfillment connectors | |
| FULFILLMENTCONNECTOR_LOG_DOWNLOAD | A fulfillment connector log is downloaded. |
| FULFILLMENTCONNECTOR_REGISTER | A fulfillment connector is registered. |
| FULFILLMENTCONNECTOR_UNREGISTER | A fulfillment connector is unregistered. |
| FULFILLMENTCONNECTOR_UPDATE | Fulfillment connector settings are updated. |
| Fulfillment items | |
| FULFILLMENTITEM_CREATE | A fulfillment item is created. |
| FULFILLMENTITEM_DELETE | A fulfillment item is deleted. |
| FULFILLMENTITEMS_DOWNLOAD | One or more fulfillment items are downloaded. |
| FULFILLMENTITEM_DUPLICATE | A fulfillment item is duplicated. |
| FULFILLMENTITEM_RESULTS_UPDATE | A fulfillment item is updated with the results of the data identification, preservation, or collection. |
| FULFILLMENTITEM_UPDATE | A fulfillment item is edited. |
| FULFILLMENTWORKPACKAGE_CREATE | A work package is created. |
| FULFILLMENTWORKPACKAGE_DELETE | A work package is deleted. |
| FULFILLMENTWORKPACKAGE_SPLIT | A work package is split. |
| FULFILLMENTWORKPACKAGE_SUBMIT | A work package is submitted. |
| FULFILLMENTWORKPACKAGE_UPDATE | The information about a work package is edited. |
| Fulfillment jobs | |
| FULFILLMENTJOB_CREATE | A fulfillment job is created. |
| FULFILLMENTJOB_DELETE | A fulfillment is deleted. |
| FULFILLMENTJOB_KILL_REQUEST_ACCEPTED | The request to end a fulfillment job is accepted. |
| FULFILLMENTJOB_UPDATE | A fulfillment job is updated. |
| Global hold reminder | |
| GLOBALHOLDREMINDER_CREATE | The global hold reminder is created. |
| GLOBALHOLDREMINDER_EXPORT | The information about the custodians who received a single reminder notice for all of their hold notices is exported as a CSV file. |
| GLOBALHOLDREMINDER_RESUME | The global hold reminder is enabled. |
| GLOBALHOLDREMINDER_SETACTIVE | The global hold reminder, or any updates to it, are activated. |
| GLOBALHOLDREMINDER_SETNEXTTRANSMISSIONDATE | The date of the next reminder is changed. |
| GLOBALHOLDREMINDER_SUSPEND | The global hold reminder is disabled. |
| GLOBALHOLDREMINDER_UPDATE_DRAFT | The global hold reminder is updated. |
| Groups | |
| GROUP_CREATE | A group is created. |
| GROUP_DELETE | A group is deleted. |
| GROUP_DOWNLOAD | A list of members in a group is downloaded from the people catalog. |
| GROUP_UPDATE | The list of members in a group is changed. |
| Hold notices | |
| NOTICE_CREATE | A hold notice is created. |
| NOTICE_UPDATE | The details about a hold notice in draft state are changed. |
| NOTICE_PUBLISH | A hold notice is published. |
| NOTICE_DELETE | A hold notice is deleted. |
| NOTICE_DRAFT_APPLY | A hold notice is republished or other changes to a published hold notice are applied. |
| Import mapping | |
| IMPORT_MAPPING_CREATE | During the import of a CSV file, a file column is mapped to the corresponding attribute, which is defined in StoredIQ for Legal. |
| IMPORT_MAPPING_UPDATE | An import mapping is changed. |
| IMPORT_MAPPING_DELETE | An import mapping is deleted. |
| Import request | |
| IMPORT_REQUEST_CREATE | An import request is created. |
| IMPORT_REQUEST_UPDATE | An import request is changed. |
| IMPORT_REQUEST_DELETE | An import request is deleted. |
| IMPORT_REQUEST_START | The processing of an import request is started. |
| IMPORT_REQUEST_EXECUTION | The import is completed. |
| ORGTREE_HISTORY_CLEANUP | The department hierarchy is cleaned up. |
| PERSON_HISTORY_CLEANUP | The employment history is cleaned up. |
| PERSONDISTINCTHISTORY_CLEANUP | Person history records are cleaned up. |
| Interviews | |
| INTERVIEW_CREATE | An interview is created. |
| INTERVIEW_UPDATE | The details about an interview are changed. |
| INTERVIEW_DELETE | An interview is deleted. |
| Jurisdictions | |
| JURISDICTION_CREATE | A new jurisdiction is added to the list of jurisdictions. |
| JURISDICTION_UPDATE | A jurisdiction is activated or deactivated. |
| JURISDICTION_DELETE | A jurisdiction is deleted. |
| Matters | |
| MATTER_CREATE | A matter is created. |
| MATTER_UPDATE | The matter details are changed. |
| MATTER_ASSIGNEES_ADD | One or more assignees are added to a matter. |
| MATTER_ASSIGNEES_REMOVE | One or more assignees are removed from a matter. |
| MATTER_CLOSE | A matter is closed. |
| MATTER_REOPEN | A closed matter is reopened. |
| MATTER_DELETE | A matter is deleted. |
| MATTER_LIST_DOWNLOAD | The list of matters is downloaded. |
| Matter categories | |
| MATTERCATEGORY_CREATE | A new matter category is imported, or a new matter category is added. |
| MATTERCATEGORY_UPDATE | A matter category is edited. |
| MATTERCATEGORY_DELETE | A matter category is deleted. |
| Miscellaneous (object type None or variable) | |
| DELETE_DANGLING_REFERENCE | The reference to a deleted object is deleted. |
| LOG_CONFIG_UPDATE | A user changed the log settings. |
| LOG_FILES_DOWNLOAD | The log files are collected and downloaded. |
| MIGRATION_START | Migration of notices or interviews from IBM® Atlas Policy Suite to StoredIQ for Legal started. This event is written once per migration run. |
| MIGRATION_END | Migration of notices or interviews from IBM Atlas Policy Suite to StoredIQ for Legal ended. This event is written once per migration run. |
| TASK_LICENSES_COUNT | A user licenses task is started. |
| People | |
| MATTER_INVOLVEMENT_DOWNLOAD | The information about a person's hold obligations and involvement in matters is exported as a CSV file. |
| PERSON_CREATE | A test user is created in StoredIQ for Legal or a person is imported with a CSV file. |
| PERSON_LIST_DOWNLOAD | A list of people is downloaded from the people catalog. |
| PERSON_UPDATE CUSTODIAN_UPDATE |
The profile of a person is changed. |
| PERSON_UPDATE_ROLES CUSTODIAN_UPDATE_ROLES |
A user is assigned roles or is assigned different or additional roles. |
| Server discovery connectors | |
| SERVERDISCOVERYCONNECTOR_LOG_DOWNLOAD | A server discovery connector log is downloaded. |
| SERVERDISCOVERYCONNECTOR_REGISTER | A server discovery connector is registered. |
| SERVERDISCOVERYCONNECTOR_UNREGISTER | A server discovery connector is unregistered. |
| SERVERDISCOVERYCONNECTOR_UPDATE | Server discovery connector settings are updated. |
| Server discovery jobs | |
| SERVERDISCOVERYJOB_CREATE | A server discovery job is created. |
| SERVERDISCOVERYJOB_DELETE | A server discovery job is deleted. |
| SERVERDISCOVERYJOB_KILL_REQUEST_ACCEPTED | The request to end a server discovery job is accepted. |
| SERVERDISCOVERYJOB_UPDATE | A server discovery job is updated. |
| Report definitions, report resources, and custom reports | |
| REPORT_BIRT_DEFINITION_CREATE | A custom report definition is imported. |
| REPORT_BIRT_DEFINITION_UPDATE | A custom report definition is activated or suspended. |
| REPORT_BIRT_DEFINITION_DOWNLOAD | A custom report definition is downloaded. |
| REPORT_BIRT_DEFINITION_DELETE | A custom report definition is deleted. |
| REPORT_BIRT_DOWNLOAD | A custom report is opened. |
| REPORT_BIRT_REQUEST | The creation of a custom report is requested. |
| REPORT_BIRT_RESOURCE_CREATE | A report resource is imported. |
| REPORT_BIRT_RESOURCE_DELETE | A report resource is deleted. |
| REPORT_BIRT_RESOURCE_UPDATE | A report resource is replaced. |
| REPORT_BIRT_RESOURCE_DOWNLOAD | A report resource is exported. |
| REPORT_CUSTOMIZATION_CREATE | Database customizations are added. |
| REPORT_CUSTOMIZATION_DELETE | Database customizations are deleted. |
| REPORT_CUSTOMIZATION_DOWNLOAD | Database customization information is downloaded. |
| REPORT_CUSTOMIZATION_UPDATE | Database customizations have been replaced. |
| Scheduled reports and reporting database | |
| TASK_REPORT_BIRT_CREATE | A scheduled custom report is being created. |
| TASK_REPORTS_DELETE | One or more scheduled reports are deleted. |
| TASK_REPORTING_DB_EXPORT | The reporting database is refreshed. |
| Security groups | |
| SECURITYGROUP_CREATE | A security group is created. |
| SECURITYGROUP_UPDATE | The list of members in a security group is changed. |
| SECURITYGROUP_DELETE | A security group is deleted. |
| Templates | |
| TEMPLATE_HOLD_CREATE | A hold notice template is created. |
| TEMPLATE_HOLD_UPDATE | A hold notice template in draft state is changed. |
| TEMPLATE_HOLD_ACTIVATE | A hold notice template is activated. |
| TEMPLATE_HOLD_DEACTIVATE | A hold notice template is deactivated. |
| TEMPLATE_HOLD_DELETE | A hold notice template is deleted. |
| TEMPLATE_HOLD_IMPORT | A hold notice template is imported. |
| TEMPLATE_HOLD_EXPORT | A hold notice template is exported. |
| TEMPLATE_INTERVIEW_CREATE | An interview template is created. |
| TEMPLATE_INTERVIEW_UPDATE | An interview template in draft state is changed. |
| TEMPLATE_INTERVIEW_ACTIVATE | An interview template is activated. |
| TEMPLATE_INTERVIEW_DEACTIVATE | An interview template is deactivated. |
| TEMPLATE_INTERVIEW_DELETE | An interview template is deleted. |
| TEMPLATE_INTERVIEW_IMPORT | An interview template is imported. |
| TEMPLATE_INTERVIEW_EXPORT | An interview template is exported. |
| TEMPLATE_FORM_CREATE | A form template is created. |
| TEMPLATE_FORM_UPDATE | A form template in draft state is changed. |
| TEMPLATE_FORM_ACTIVATE | A form template is activated. |
| TEMPLATE_FORM_DEACTIVATE | A form template is deactivated. |
| TEMPLATE_FORM_DELETE | A form template is deleted. |
| TEMPLATE_FORM_IMPORT | A form template is imported. |
| TEMPLATE_FORM_EXPORT | A form template is exported. |
| User preferences | |
| USERPREFERENCE_CREATE | Notification settings are specified or out-of-office settings are enabled. |
| USERPREFERENCE_UPDATE | Notification settings or out-of-office settings are changed. |
| USERPREFERENCE_DELETE | Notification settings are removed or out-of-office settings are disabled. |
| User roles | |
| ROLE_CREATE | A user role is created. |
| ROLE_UPDATE | A user role is edited. |
| ROLE_DELETE | A user role is deleted. |
People, users, and custodians
Events related to people, users, and custodians capture the following attributes: actor_id, correlation_id, custodian_id, custodian_id_max, custodian_id_min, custodians, event_date, event_type, object_id, object_type, parent_id, parent_type, and reason.
| Event name | Description of the action that created the event |
|---|---|
| Actions on people, users, and custodians | |
| BOX_CUSTODIANS_ADD | One or more custodians are added to the data box. |
| BOX_CUSTODIANS_RELEASE | One or more custodians are removed from the data box. |
| BOX_CUSTODIANS_DOWNLOAD | The list of custodians that belongs to a data box is downloaded. |
| DATAREQUEST_CUSTODIANS_ADD | One or more custodians are added to a data request. |
| DATAREQUEST_CUSTODIANS_DOWNLOAD | The list of custodians that belongs to a data request is downloaded. |
| DATAREQUEST_CUSTODIANS_REMOVE | One or more custodians are removed from a data request. |
| DATAREQUEST_CUSTODIANS_OVERRIDE_CRITERIA | The request information is edited for one or more custodians of a data request. |
| DATAREQUEST_CUSTODIANS_UPDATE_PRIORITY | The priority of one or more custodians is changed. |
| DATAREQUEST_CUSTODIANS_DATASOURCES_ADD | One or more data sources are added to one or more custodians. |
| DATAREQUEST_CUSTODIANS_DATASOURCES_REMOVE | One or more data sources are removed from one or more custodians. |
| GROUP_CUSTODIANS_ADD | A person is added to a group. |
| GROUP_CUSTODIANS_REMOVE | A person is removed from a group. |
| INTERVIEW_CUSTODIAN_NOTES_UPDATE | A note is added to one or more custodians when viewing the status of the custodians within an interview or when viewing the results of an interview. |
| INTERVIEW_DRAFT_CUSTODIANS_ADD | One or more custodians are added to an interview that is not published yet. |
| INTERVIEW_DRAFT_CUSTODIANS_REMOVE | One or more custodians are removed from an interview that is not published yet. |
| INTERVIEW_CUSTODIANS_ADD | One or more custodians are added to a published interview. |
| INTERVIEW_CUSTODIANS_SUSPEND | An interview is suspended for one or more custodians. |
| INTERVIEW_CUSTODIANS_RESUME | An interview is resumed for one or more custodians. |
| INTERVIEW_CUSTODIANS_CONCLUDE | An interview is concluded for one or more custodians. |
| INTERVIEW_CUSTODIANS_DOWNLOAD | The list of custodians that belong to an interview is downloaded. |
| INTERVIEW_QUESTIONRESPONSE_NOTES_UPDATE | A note is added to the custodian when viewing the results of an interview by custodian. |
| NOTICE_CUSTODIAN_NOTES_UPDATE | A note is added to one or more custodians when viewing the status of the custodians within a hold notice. |
| NOTICE_CUSTODIAN_CC_NOTES_UPDATE | A note is added to one or more courtesy copy recipients when viewing the status of the courtesy copy recipients within a hold notice. |
| NOTICE_CUSTODIANS_ADD | One or more custodians are added to a published hold notice. |
| NOTICE_CUSTODIANS_RELEASE | One or more custodians are released from a published notice. |
| NOTICE_CUSTODIANS_RESUME | A hold notice is released for one or more custodians. |
| NOTICE_CUSTODIANS_SUSPEND | A hold notice is suspended for one or more custodians. |
| NOTICE_CUSTODIANS_DOWNLOAD | The list of custodians that belong to a hold notice is downloaded. |
| NOTICE_CUSTODIANS_CC_ADD | One or more courtesy copy recipients are added to a hold notice. |
| NOTICE_CUSTODIANS_CC_REMOVE | One or more courtesy copy recipients are removed from a hold notice. |
| NOTICE_DRAFT_CUSTODIANS_ADD | One or more custodians are added to a hold notice that is not published yet. |
| NOTICE_DRAFT_CUSTODIANS_REMOVE | One or more custodians are removed from a hold notice that is not published yet. |
| NOTICE_DRAFT_SILENT_CUSTODIANS_ADD | One or more silent custodians are added to a hold notice that is not published yet. |
| NOTICE_DRAFT_SILENT_CUSTODIANS_REMOVE | One or more silent custodians are removed from a hold notice that is not published yet. |
| NOTICE_SILENT_CUSTODIANS_ADD | One or more users are added to a hold notice as silent custodians. |
| NOTICE_SILENT_CUSTODIANS_MOVE_TO_ACTIVE | One or more silent custodians on a hold notice are made active custodians. |
| NOTICE_SILENT_CUSTODIANS_MOVE_TO_SILENT | One or more active custodians on a hold notice are made silent custodians. |
| NOTICE_SILENT_CUSTODIANS_REMOVE | One or more silent custodians are removed from a hold notice. |
| SECURITYGROUP_CUSTODIANS_ADD | One or more users are added to a security group. |
| SECURITYGROUP_CUSTODIANS_REMOVE | One or more users are removed from a security group. |
| Responses to hold notices | |
| NOTICE_CONFIRM | A custodian confirms a hold notice. |
| NOTICE_CONTACT | A custodian requests to be contacted. |
| NOTICE_CONFIRM_ON_BEHALF | A paralegal confirms a hold notice on behalf of a custodian. |
| Responses to interviews | |
| INTERVIEW_RESPOND | A custodian responds to an interview. |
| INTERVIEW_RESPOND_ON_BEHALF | A paralegal responds to an interview on behalf of a custodian. |
| Interview transmissions | |
| INTERVIEW_SEND_INITIAL | The initial interview is sent. |
| INTERVIEW_SEND_INITIAL_FOLLOWUP | The message to follow up on the initial interview is sent. |
| INTERVIEW_SEND_REMINDER | The recurring interview is sent. |
| INTERVIEW_SEND_REMINDER_FOLLOWUP | The message to follow up on the recurring interview is sent. |
| INTERVIEW_RESEND_INITIAL | The initial interview is resent. |
| INTERVIEW_RESEND_INITIAL_FOLLOWUP | The message to follow up on the initial interview is resent. |
| INTERVIEW_RESEND_REMINDER | The recurring interview is resent. |
| INTERVIEW_RESEND_REMINDER_FOLLOWUP | The message to follow up on the recurring interview is resent. |
| Hold-notice transmissions | |
| NOTICE_SEND_INITIAL | The initial notice is sent. |
| NOTICE_SEND_INITIAL_FOLLOWUP | The message to follow up on the initial notice is sent. |
| NOTICE_SEND_REMINDER | An individual reminder notice is sent. |
| NOTICE_SEND_GLOBAL_REMINDER | The global reminder notice is sent. |
| NOTICE_SEND_REMINDER_FOLLOWUP | The message to follow up on an individual reminder notice is sent. |
| NOTICE_SEND_GLOBAL_REMINDER_FOLLOWUP | The message to follow up on the global reminder notice is sent. |
| NOTICE_RESEND_INITIAL | The initial notice is resent. |
| NOTICE_RESEND_INITIAL_FOLLOWUP | The message to follow up on the initial notice is resent. |
| NOTICE_RESEND_REMINDER | An individual reminder notice is resent. |
| NOTICE_RESEND_GLOBAL_REMINDER | The global reminder notice is resent. |
| NOTICE_RESEND_REMINDER_FOLLOWUP | The message to follow up on an individual reminder notice is resent. |
| NOTICE_RESEND_GLOBAL_REMINDER_FOLLOWUP | The message to follow up on the global reminder notice is resent. |
| Email notifications | |
| EMAIL_NOTIFICATION_SEND_DATA_REQUEST_CANCEL | The data request is canceled. |
| EMAIL_NOTIFICATION_SEND_WF_COMMENT_ADD | A comment is added to the task. |
| EMAIL_NOTIFICATION_SEND_WF_TERMINATE | A workflow instance is terminated. |
| EMAIL_NOTIFICATION_SEND_WF_TASK_ASSIGNEE_CHANGE | The task is assigned or returned. |
| EMAIL_NOTIFICATION_SEND_WF_TASK_COMPLETE | The task is completed. |
| EMAIL_NOTIFICATION_SEND_WF_TASK_OVERDUE_REMINDER | The due date of the task approaches. |
| EMAIL_NOTIFICATION_SEND_WF_TASK_UPDATE | The priority or the due date of the task is updated. |
| EMAIL_NOTIFICATION_SEND_WF_SUBSCRIBER_USERS_ADD | A subscriber is added to the task. |
| EMAIL_NOTIFICATION_SEND_WF_SUBSCRIBER_USERS_REMOVE | A subscriber is removed from the task. |
| EMAIL_NOTIFICATION_SEND_WORK_PACKAGE_CUSTODIANS_REMOVE | A custodian is removed from the data request. |
| EMAIL_NOTIFICATION_SEND_WORK_PACKAGE_PRIORITY_CHANGE | The priority of a custodian in a data request is changed. |
Workflow
Workflow-related events capture the following attributes: raw_data, actor_id, correlation_id, event_date, event_type, proc_def_id, proc_def_key, proc_error, proc_inst_id, task_assignee_id, task_category, task_id, task_name, and task_type.
| Event name | Description of the action that created the event |
|---|---|
| WF_ERROR | A workflow fails due an error. For more information, see Workflow fails due to an error. |
| WF_INSTANCE_CANCEL | A workflow instance is terminated. |
| WF_INSTANCE_END | A workflow instance is finished. |
| WF_INSTANCE_RESUME | A suspended workflow instance was resumed. |
| WF_INSTANCE_START | A workflow instance is started. |
| WF_INSTANCE_SUBSCRIBERS_ADD | A subscriber is added to a task. The subscriber is then informed about all changes with regard to all tasks in the same workflow. |
| WF_INSTANCE_SUBSCRIBERS_REMOVE | A subscriber is removed from a task. The subscriber is then no longer informed about any task changes in the workflow. |
| WF_INSTANCE_SUSPEND | A workflow instances was suspended. |
| WF_PROCDEF_CREATE | A workflow definition is added. |
| WF_PROCDEF_DELETE | A workflow definition is deleted. |
| WF_PROCDEF_ACTIVATE | A workflow is activated. |
| WF_PROCDEF_SUSPEND | A workflow is suspended. |
| WF_PROCDEF_CANCEL_SCHEDULE | The schedule for activating or suspending a workflow is canceled. |
| WF_MAPPING_CREATE WORKFLOWMAPPING_CREATE |
A workflow definition is mapped to an object. |
| WF_MAPPING_DELETE WORKFLOWMAPPING_DELETE |
A workflow definition is no longer mapped to a specific object. |
| WF_MAPPING_UPDATE WORKFLOWMAPPING_UPDATE |
A workflow definition is mapped to another object. |
| WF_TASK_READ | A task is opened. |
| WF_TASK_START | A task is started. |
| WF_TASK_UPDATE | A task is changed. |
| WF_TASK_CLAIM | A task is assigned to oneself. |
| WF_TASK_ASSIGN | A task is assigned or reassigned. |
| WF_TASK_RETURN | A task is returned. |
| WF_TASK_COMPLETE | A task is completed. |
| WF_TASK_END | A task is finished. |
| WF_TASK_LIST_DOWNLOAD | A list of tasks was downloaded. |