Skip to content
LogoLogScale DocumentationFull Library Knowledge Base Release Notes Integrations Query Examples Training API GraphQL API Contacting Support
Help button for documentation
    • LogScale System Repository Schema Guide
    • The humio Repository
      • Query data in the humio Repository
    • The humio-activity Repository
        • Action
        • Action/Action
        • AggregateAlert/Alert
        • AggregateAlert/Query
        • Alert/Action
        • Alert/Alert
        • Alert/Query
        • Fdr/Entity
        • Fdr/Ingest
        • FilterAlert/Alert
        • FilterAlert/Query
        • GraphQL/Deprecation
        • PermissionAssignment/groupAssignments
        • PermissionAssignment/numberOfGroups
        • PermissionAssignment/numberOfUsers
        • PermissionAssignment/userAssignments
        • PermissionAssignment/userPermissionCounts
        • Query
        • Request
        • ScheduledSearch/Action
        • ScheduledSearch/Query
        • ScheduledSearch/Schedule
        • ScheduledSearch/ScheduledSearch
        • SystemPrivilege/ChangeSystemPermission
        • SystemPrivilege/ManageOrganizations
      • Alert, Scheduled Search, and Scheduled Report Errors and Resolutions
    • The humio-audit Repository
      • Common humio-audit Structures
        • humio-audit Actor Structure
          • Query Actor Data
        • humio-audit Query Structure
      • humio-audit Event types
      • Examples of queries for humio-audit
    • The humio-fleet Repository
    • The humio-measurements Repository
    • The humio-metrics Repository
      • Node-Level Metrics
      • Object-Level Metrics
      • Example queries
    • The humio-usage Repository
      • humio-organization-usage View
    • The humio-trigger-execution-info Repository
Falcon LogScale Documentation
/ LogScale System Repository Schema Guide
/ The humio-audit Repository
/ humio-audit Event types

Audit Log Event system-repository.create

LogScale system repository has been created

Field TypeTypeValueAvailabilityDescription
actionNameString   The name of the action, for example create, delete or update
  create  
actorActorType   Actor, as defined in humio-audit Actor Structure
sensitiveBoolean   Whether the audited event is marked sensitive
systemRepositoryTypeString   System repository type
timestampZonedDateTime   Timestamp of the audited event
viewViewAudit   View name
Support
  • Twitter
  • LinkedIn
  • Youtube

© 2025 CrowdStrike All other marks contained herein are the property of their respective owners.

  • Other articles on this topic

    • Creating a Repository or View
    • Lookup Files
    • Manage Repositories and Views
    • createLookupFileFromPackageTemplate()
    • createRepository()
    • removeFile()
    • updateFile()
  • Similar Content

    • Query data in the humio Repository
  • Related Release Notes

    • Falcon LogScale 1.167.0 GA (2024-12-03)
    • Falcon LogScale 1.171.1 LTS (2025-02-11)
    • Falcon LogScale 1.171.2 LTS (2025-03-19)
    • Falcon LogScale 1.171.3 LTS (2025-04-23)
  • Related GraphQL API

    • createLookupFileFromPackageTemplate()
    • removeFile()
    • updateFile()
  • Security Audit Entries

    • Audit Log Event dataspace.datatype
    • Audit Log Event dataspace.delete
    • Audit Log Event dataspace.limit-id
    • Audit Log Event dataspace.settings
    • Audit Log Event repository.create
    • Audit Log Event role.viewpermissions.change
    • Audit Log Event view.delete
    • Audit Log Event view.rename

Enter search term