Audit Log Event scheduled-search.create
A scheduled search has been created
This audit log type records operations for the following features:
| Field Type | Type | Value | Availability | Description |
|---|---|---|---|---|
| actionIds | List[String] | List of action IDs | ||
| actor | ActorType | Actor, as defined in humio-audit Actor Structure | ||
| backfillLimit | Int | Configured backfill limit | ||
| description | Option[String] | Description of the entity of object | ||
| enabled | Boolean | Whether the entity has been enabled or not | ||
| installedAsPartOf | Option[Versioned] | Installed as part of what resource | ||
| maxWaitTimeSeconds | Option[Long] | (added in 1.177) | Max wait time value in seconds | |
| query | String | Query string | ||
| queryOwnership | QueryOwnershipInfo | Owner information for query | ||
| queryTimestampType | String | (added in 1.177) | Timestamp type for the scheduled search | |
| repoId | String | ID of the repository | ||
| repoName | String | Name of the repository | ||
| schedule | String | Schedule | ||
| scheduledSearchId | String | Scheduled search ID | ||
| scheduledSearchName | String | Name of the scheduled search | ||
| searchIntervalOffsetSeconds | Option[Long] | (added in 1.177) | The search interval offset in seconds | |
| searchIntervalSeconds | Long | (added in 1.177) | The search interval in seconds | |
| sensitive | Boolean | Whether the audited event is marked sensitive | ||
| timestamp | ZonedDateTime | Timestamp of the audited event | ||
| timezone | String | Time zone | ||
| triggerOnEmptyResult | Boolean | (added in 1.194) |