Audit Log Event group.membership.change

A user has been added or removed in a group

This audit log type records operations for the following features:

Field TypeTypeValueAvailabilityDescription
actionNameString   The name of the action, for example create, delete or update
  addUsers  
  removeUsers  
actorActorType   Actor, as defined in humio-audit Actor Structure
groupIdString   Unique ID string of the group
groupNameString   Group Name
sensitiveBoolean   Whether the audited event is marked sensitive
timestampZonedDateTime   Timestamp of the audited event
userNamesSet[String]   List of user names