Skip to content
LogoLogScale DocumentationFull Library Knowledge Base Release Notes Integrations Query Examples Training API GraphQL API Contacting Support
help

Versions of this Page

    • LogScale System Repository Schema Guide
    • The humio Repository
      • Query data in the humio Repository
    • The humio-activity Repository
        • Action
        • Action/Action
        • AggregateAlert/Alert
        • AggregateAlert/Query
        • Alert/Action
        • Alert/Alert
        • Alert/Query
        • Fdr/Entity
        • Fdr/Ingest
        • FilterAlert/Alert
        • FilterAlert/Query
        • PermissionAssignment/groupAssignments
        • PermissionAssignment/numberOfGroups
        • PermissionAssignment/numberOfUsers
        • PermissionAssignment/userAssignments
        • PermissionAssignment/userPermissionCounts
        • Query
        • Request
        • ScheduledSearch/Action
        • ScheduledSearch/Query
        • ScheduledSearch/Schedule
        • ScheduledSearch/ScheduledSearch
        • SystemPrivilege/ChangeSystemPermission
        • SystemPrivilege/ManageOrganizations
      • Alert, Scheduled Search, and Scheduled Report Errors and Resolutions
    • The humio-audit Repository
      • Common humio-audit Structures
        • humio-audit Actor Structure
          • Query Actor Data
        • humio-audit Query Structure
      • humio-audit Event types
      • Examples of queries for humio-audit
    • The humio-fleet Repository
    • The humio-measurements Repository
    • The humio-metrics Repository
      • Node-Level Metrics
      • Object-Level Metrics
      • Example queries
    • The humio-usage Repository
      • humio-organization-usage View
    • The humio-trigger-execution-info Repository
Falcon LogScale Documentation
/ LogScale System Repository Schema Guide
/ The humio-audit Repository
/ humio-audit Event types

Audit Log Event organization.userdefaults.update

User defaults for organization updated

Field TypeTypeValueAvailabilityDescription
actorActorType   Actor, as defined in humio-audit Actor Structure
newDefaultTimeZoneOption[String]   New default time zone
orgIDString   Organization ID
timestampZonedDateTime   Timestamp of the audited event
Support
  • Twitter
  • LinkedIn
  • Youtube

© 2025 CrowdStrike All other marks contained herein are the property of their respective owners.

  • Other articles on this topic

    • General information about triggers
    • Organization Query Monitor (Cloud)
    • Organization Query Monitor (Self-Hosted)
    • Understanding Your Organization (Cloud)
    • Understanding Your Organization (Self-Hosted)
  • Security Audit Entries

    • Audit Log Event action
    • Audit Log Event flushingstate.org.update
    • Audit Log Event limit.delete
    • Audit Log Event org.datasources.import
    • Audit Log Event org.metadata.import.rollback
    • Audit Log Event org.metadata.import
    • Audit Log Event org.segments.import
    • Audit Log Event organizations.link.unlink.child
    • Audit Log Event organizations.link.unlink
    • Audit Log Event organizations.subscription.change
    • Audit Log Event organizations.transfer.user
    • Audit Log Event organizations.update.foreignkey
    • Audit Log Event organizations.users.batch
    • Audit Log Event organizations.users
    • Audit Log Event organizations
    • Audit Log Event sessions.change.config
    • Audit Log Event subdomain.remove
    • Audit Log Event subdomain.set

Enter search term