Skip to content
LogoLogScale DocumentationFull Library Knowledge Base Release Notes Integrations Query Examples Training API GraphQL API Contacting Support
help

Versions of this Page

    • LogScale System Repository Schema Guide
    • The humio Repository
      • Query data in the humio Repository
    • The humio-activity Repository
        • Action
        • Action/Action
        • AggregateAlert/Alert
        • AggregateAlert/Query
        • Alert/Action
        • Alert/Alert
        • Alert/Query
        • Fdr/Entity
        • Fdr/Ingest
        • FilterAlert/Alert
        • FilterAlert/Query
        • PermissionAssignment/groupAssignments
        • PermissionAssignment/numberOfGroups
        • PermissionAssignment/numberOfUsers
        • PermissionAssignment/userAssignments
        • PermissionAssignment/userPermissionCounts
        • Query
        • Request
        • ScheduledSearch/Action
        • ScheduledSearch/Query
        • ScheduledSearch/Schedule
        • ScheduledSearch/ScheduledSearch
        • SystemPrivilege/ChangeSystemPermission
        • SystemPrivilege/ManageOrganizations
      • Alert, Scheduled Search, and Scheduled Report Errors and Resolutions
    • The humio-audit Repository
      • Common humio-audit Structures
        • humio-audit Actor Structure
          • Query Actor Data
        • humio-audit Query Structure
      • humio-audit Event types
      • Examples of queries for humio-audit
    • The humio-fleet Repository
    • The humio-measurements Repository
    • The humio-metrics Repository
      • Node-Level Metrics
      • Object-Level Metrics
      • Example queries
    • The humio-usage Repository
      • humio-organization-usage View
    • The humio-trigger-execution-info Repository
Falcon LogScale Documentation
/ LogScale System Repository Schema Guide
/ The humio-audit Repository
/ humio-audit Event types

Audit Log Event transfer.segment

Event triggered by Falcon LogScale support performing an organization transfer to new cluster.

Field TypeTypeValueAvailabilityDescription
actorActorType   Actor, as defined in humio-audit Actor Structure
datasourceIdString   Datasource ID
dataspaceIdString   ID of the repository
segmentIdString   ID of the affected segment
sensitiveBoolean   Whether the audited event is marked sensitive
timestampZonedDateTime   Timestamp of the audited event
Support
  • Twitter
  • LinkedIn
  • Youtube

© 2025 CrowdStrike All other marks contained herein are the property of their respective owners.

  • Security Audit Entries

    • Audit Log Event flushingstate.org.clear
    • Audit Log Event flushingstate.org.update
    • Audit Log Event org.datasources.import
    • Audit Log Event org.metadata.import.rollback
    • Audit Log Event org.metadata.import
    • Audit Log Event org.segments.import
    • Audit Log Event organizations.buckets.readonly
    • Audit Log Event organizations.selected.batch
    • Audit Log Event orgtransfer-job-status.create
    • Audit Log Event orgtransfer-job-status.delete
    • Audit Log Event redirectingest.org.clear
    • Audit Log Event redirectingest.org.update
    • Audit Log Event transfer.ingest-redirection
    • Audit Log Event transfer.metadata
    • Audit Log Event transfer.snapshot
    • Audit Log Event transfercheckmark.org.update
    • Audit Log Event transfercheckmarks.org.update
    • Audit Log Event transferstate.org.update

Enter search term