Audit Log Event organizations.buckets.readonly

Event triggered by Falcon LogScale support performing an organization transfer to new cluster.

Field TypeTypeAvailabilityDescription
actorActorType  Actor, as defined in humio-audit Actor Structure
organizationIdString  Organization ID
readOnlyBoolean  Read-only
sensitiveBoolean  Whether the audited event is marked sensitive
timestampZonedDateTime  Timestamp of the audited event