-
Available audit event types
- Ai framework
- Audit events
- Authorization
- Build artifacts
- Code review
- Code review workflow
- Code suggestions
- Compliance management
- Container registry
- Continuous-integration
- Continuous delivery
- Continuous integration
- Deployment management
- Dynamic application security testing
- Environment management
- Feature flags
- Fleet visibility
- Fuzz testing
- Groups and projects
- Importers
- Incident management
- MLOps
- Not categorized
- Permissions
- Portfolio management
- Product analytics data management
- Project
- Quality management
- Runner
- Secret detection
- Secrets management
- Security policy management
- Self-hosted models
- Source code management
- System access
- Team planning
- User management
- User profile
- Verify security
- Webhooks
Audit event types
Tier: Premium, Ultimate
Offering: GitLab.com, Self-managed, GitLab Dedicated
Audit event types are used to filter streamed audit events:
Every audit event is associated with an event type. Audit event types can allow audit events to be:
- Saved to the database. Available in the Premium and Ultimate tier. You can retrieve audit events associated with these types by using the audit events dashboard or the audit events API.
- Streamed to external destinations. Available in the Ultimate tier. You can stream audit events associated with these types to external destinations if a destination is set.
Some audit event types don’t allow saving audit events to the database. Other audit event types don’t allow streaming audit events to external destinations.
An audit event type’s scope limits the availability of the audit event type to either:
- Project, group, or user audit events.
- Instance audit events.
Available audit event types
Audit event types belong to the following product categories.
Ai framework
| Name | Description | Saved to database | Streamed | Introduced in | Scope |
|---|---|---|---|---|---|
duo_features_enabled_updated
| GitLab Duo Features enabled setting on group or project changed | Yes | Yes | GitLab 16.10 | Group, Project |
Audit events
| Name | Description | Saved to database | Streamed | Introduced in | Scope |
|---|---|---|---|---|---|
amazon_s3_configuration_created
| Triggered when Amazon S3 configuration for audit events streaming is created. | Yes | Yes | GitLab 16.5 | Group |
amazon_s3_configuration_deleted
| Triggered when Amazon S3 configuration for audit events streaming is deleted. | Yes | Yes | GitLab 16.5 | Group |
amazon_s3_configuration_updated
| Triggered when Amazon S3 configuration for audit events streaming is updated. | Yes | Yes | GitLab 16.5 | Group |
audit_events_streaming_headers_create
| Triggered when a streaming header for audit events is created. | Yes | Yes | GitLab 15.3 | Group |
audit_events_streaming_headers_destroy
| Triggered when a streaming header for audit events is deleted. | Yes | Yes | GitLab 15.3 | Group |
audit_events_streaming_instance_headers_create
| Triggered when a streaming header for instance level external audit event destination is created. | Yes | Yes | GitLab 16.3 | Instance |
audit_events_streaming_instance_headers_destroy
| Triggered when a streaming header for instance level external audit event destination is deleted. | Yes | Yes | GitLab 16.3 | Instance |
audit_events_streaming_instance_headers_update
| Triggered when a streaming header for instance level external audit event destination is updated. | Yes | Yes | GitLab 16.3 | Instance |
create_event_streaming_destination
| Event triggered when an external audit event destination is created | Yes | Yes | GitLab 14.6 | Group |
create_http_namespace_filter
| Event triggered when a namespace filter for an external audit event destination for a top-level group is created | Yes | Yes | GitLab 16.6 | Group |
create_instance_event_streaming_destination
| Event triggered when an external audit event destination for an instance is created | Yes | Yes | GitLab 16.2 | Instance |
created_group_audit_event_streaming_destination
| Triggered when an external audit event destination for a top-level group is created | Yes | Yes | GitLab 16.11 | Group |
created_group_namespace_filter
| Triggered when a namespace filter for an external audit event destination for a top-level group is created | Yes | Yes | GitLab 17.0 | Group |
created_instance_audit_event_streaming_destination
| Triggered when an external audit event destination for an instance is created | Yes | Yes | GitLab 16.11 | Instance |
created_instance_namespace_filter
| Triggered when a namespace filter for an external audit event destination for an instance is created | Yes | Yes | GitLab 17.2 | Instance |
delete_http_namespace_filter
| Triggered when a namespace filter for an external audit event destination for a top-level group is deleted | Yes | Yes | GitLab 16.7 | Group |
deleted_group_audit_event_streaming_destination
| Triggered when an external audit event destination for a top-level group is deleted | Yes | Yes | GitLab 16.11 | Group |
deleted_group_namespace_filter
| Triggered when a namespace filter for an external audit event destination for a top-level group is deleted | Yes | Yes | GitLab 17.0 | Group |
deleted_instance_audit_event_streaming_destination
| Triggered when an external audit event destination for a GitLab instance is deleted | Yes | Yes | GitLab 16.11 | Instance |
deleted_instance_namespace_filter
| Triggered when a namespace filter for an external audit event destination for a GitLab instance is deleted | Yes | Yes | GitLab 17.2 | Instance |
destroy_event_streaming_destination
| Triggered when an external audit event destination is deleted | Yes | Yes | GitLab 14.6 | Group |
destroy_instance_event_streaming_destination
| Triggered when an instance level external audit event destination is deleted | Yes | Yes | GitLab 16.2 | Instance |
event_type_filters_created
| Triggered when a new audit events streaming event type filter is created | Yes | Yes | GitLab 15.10 | Group |
event_type_filters_deleted
| Triggered when an audit events streaming event type filter is deleted | Yes | Yes | GitLab 15.10 | Group |
google_cloud_logging_configuration_created
| Triggered when Google Cloud Logging configuration is created | Yes | Yes | GitLab 16.1 | Group |
google_cloud_logging_configuration_deleted
| Triggered when Google Cloud Logging configuration is deleted | Yes | Yes | GitLab 16.1 | Group |
google_cloud_logging_configuration_updated
| Triggered when Google Cloud Logging configuration is updated | Yes | Yes | GitLab 16.1 | Group |
instance_amazon_s3_configuration_created
| Triggered when instance Amazon S3 configuration for audit events streaming is created | Yes | Yes | GitLab 16.7 | Instance |
instance_amazon_s3_configuration_deleted
| Triggered when instance-level Amazon S3 configuration for audit events streaming is deleted | Yes | Yes | GitLab 16.7 | Instance |
instance_amazon_s3_configuration_updated
| Triggered when instance-level Amazon S3 configuration for audit events streaming is updated | Yes | Yes | GitLab 16.7 | Instance |
instance_google_cloud_logging_configuration_created
| Triggered when instance-level Google Cloud Logging configuration is created | Yes | Yes | GitLab 16.4 | Instance |
instance_google_cloud_logging_configuration_deleted
| Triggered when instance-level Google Cloud Logging configuration is deleted | Yes | Yes | GitLab 16.5 | Instance |
instance_google_cloud_logging_configuration_updated
| Triggered when instance-level Google Cloud Logging configuration is updated | Yes | Yes | GitLab 16.5 | Instance |
update_event_streaming_destination
| Event triggered when an external audit event destination is updated | Yes | Yes | GitLab 14.6 | Group |
update_instance_event_streaming_destination
| Event triggered when an instance level external audit event destination is updated | Yes | Yes | GitLab 16.2 | Instance |
updated_group_audit_event_streaming_destination
| Event triggered when an external audit event destination for a top-level group is updated. | Yes | Yes | GitLab 16.11 | Group |
updated_instance_audit_event_streaming_destination
| Event triggered when an external audit event destination for a GitLab instance is updated. | Yes | Yes | GitLab 16.11 | Instance |
Authorization
| Name | Description | Saved to database | Streamed | Introduced in | Scope |
|---|---|---|---|---|---|
secure_ci_job_token_policies_updated
| Event triggered when permissions are updated for a CI_JOB_TOKEN scope | Yes | Yes | GitLab 17.6 | Project |
Build artifacts
| Name | Description | Saved to database | Streamed | Introduced in | Scope |
|---|---|---|---|---|---|
job_artifact_downloaded
| Triggered when a user downloads a job artifact from a project | No | Yes | GitLab 16.8 | Project |
Code review
| Name | Description | Saved to database | Streamed | Introduced in | Scope |
|---|---|---|---|---|---|
delete_merge_request
| Triggered when a merge request is successfully deleted | No | Yes | GitLab 15.4 | Project |
Code review workflow
| Name | Description | Saved to database | Streamed | Introduced in | Scope |
|---|---|---|---|---|---|
merge_request_approval_operation
| Triggered when a merge request is approved | No | Yes | GitLab 15.3 | Project |
merge_request_closed_by_project_bot
| Triggered when a merge request is closed using a project access token | Yes | Yes | GitLab 16.1 | Project |
merge_request_created_by_project_bot
| Triggered when a merge request is created using a project access token | Yes | Yes | GitLab 16.1 | Project |
merge_request_invalid_approver_rules
| Triggered for an invalid rule when merge request is approved | Yes | Yes | GitLab 15.5 | Project |
merge_request_merged_by_project_bot
| Triggered when a merge request is merged using a project access token | Yes | Yes | GitLab 16.1 | Project |
merge_request_reopened_by_project_bot
| Triggered when a merge request is reopened using a project access token | Yes | Yes | GitLab 16.1 | Project |
project_merge_requests_template_updated
| Triggered when an merge request template for a project is updated | Yes | Yes | GitLab 15.0 | Project |
project_remove_source_branch_after_merge_updated
| Triggered when a project has its setting to remove branches after merges updated | Yes | Yes | GitLab 14.10 | Project |
project_reset_approvals_on_push_updated
| Triggered when a project has its setting on whether approvals are reset on a push is updated | Yes | Yes | GitLab 14.2 | Project |
selective_code_owner_removals_updated
| Event triggered when selective code owner removal is updated | Yes | Yes | GitLab 17.0 | Project |
Code suggestions
| Name | Description | Saved to database | Streamed | Introduced in | Scope |
|---|---|---|---|---|---|
project_suggestion_commit_message_updated
| Triggered when a project has its suggested commit message updated | Yes | Yes | GitLab 14.10 | Project |
Compliance management
| Name | Description | Saved to database | Streamed | Introduced in | Scope |
|---|---|---|---|---|---|
add_gpg_key
| Triggered when a GPG key is added. | Yes | Yes | GitLab 15.9 | User |
allow_author_approval_updated
| Triggered when ‘Prevent approval by author’ setting is updated. | Yes | Yes | GitLab 15.6 | Group |
allow_committer_approval_updated
| Triggered when ‘Prevent approvals by users who add commits’ setting is updated. | Yes | Yes | GitLab 15.6 | Group |
allow_overrides_to_approver_list_per_merge_request_updated
| Triggered when ‘Prevent editing approval rules in projects and merge requests’ setting is updated. | Yes | Yes | GitLab 15.6 | Group |
audit_events_streaming_headers_update
| Triggered when a streaming header for audit events is updated. | Yes | Yes | GitLab 15.3 | Group |
compliance_framework_added
| Triggered when a compliance framework is applied to a project | Yes | Yes | GitLab 17.2 | Project |
compliance_framework_deleted
| Triggered when a compliance framework is removed from a project | Yes | Yes | GitLab 14.1 | Project |
compliance_framework_id_updated
| Triggered when a compliance framework is updated for a project | Yes | Yes | GitLab 15.7 | Project |
compliance_framework_removed
| Triggered when a compliance framework is removed from a project | Yes | Yes | GitLab 17.2 | Project |
create_compliance_framework
| Triggered on when a compliance framework is successfully created | Yes | Yes | GitLab 14.6 | Group |
create_status_check
| Triggered when an external status check is created | Yes | Yes | GitLab 15.9 | Project |
created_compliance_requirement
| Triggered when a requirement is added to a compliance framework | Yes | Yes | GitLab 17.6 | Group |
delete_status_check
| Triggered when an external status check is deleted | Yes | Yes | GitLab 15.9 | Project |
destroy_compliance_framework
| Triggered when a compliance framework is successfully deleted | Yes | Yes | GitLab 14.6 | Group |
email_created
| Triggered when an email is created | Yes | Yes | GitLab 15.11 | User |
email_destroyed
| Triggered when an email is destroyed | Yes | Yes | GitLab 15.11 | User |
external_status_check_name_updated
| Triggered when the name of an external status check is updated | Yes | Yes | GitLab 15.7 | Project |
external_status_check_url_updated
| Triggered when the URL that is used for external status checks for a pipeline is updated | Yes | Yes | GitLab 15.0 | Project |
group_deletion_marked
| Triggered when a group is marked for deletion | Yes | Yes | GitLab 15.11 | Group |
group_destroyed
| Triggered when a group is destroyed | Yes | Yes | GitLab 15.11 | Group |
group_restored
| Triggered when a group is restored | Yes | Yes | GitLab 15.11 | Group |
group_saml_provider_create
| Triggered when a group SAML provider is created | Yes | Yes | GitLab 15.9 | Group |
group_saml_provider_update
| Triggered when a group SAML provider is updated | Yes | Yes | GitLab 15.9 | Group |
inactive_project_scheduled_for_deletion
| Triggered when an inactive project is scheduled for deletion | Yes | Yes | GitLab 16.4 | Project |
member_created
| Triggered when a membership is created | Yes | Yes | GitLab 15.9 | Group, Project |
member_destroyed
| Triggered when a membership is destroyed | Yes | Yes | GitLab 15.9 | Group, Project |
member_updated
| Triggered when a membership is updated | Yes | Yes | GitLab 15.9 | Group, Project |
merge_request_create
| Triggered when a merge request is created | No | Yes | GitLab 15.9 | Project |
merge_request_merged
| When a merge request is merged | Yes | Yes | GitLab 17.5 | Project |
omniauth_login_failed
| Triggered when an OmniAuth login fails | Yes | Yes | GitLab 16.3 | User |
password_reset_requested
| Triggered when a user requests a password reset using a registered email address | Yes | Yes | GitLab 15.11 | User |
personal_access_token_created
| Triggered when a user creates a personal access token | Yes | Yes | GitLab 15.9 | User |
personal_access_token_revoked
| Triggered when a personal access token is revoked | Yes | Yes | GitLab 15.9 | User |
project_archived
| Triggered when a project is archived | Yes | Yes | GitLab 15.11 | Project |
project_deletion_marked
| Triggered when a project is marked for deletion | Yes | Yes | GitLab 15.11 | Project |
project_destroyed
| Triggered when a project is destroyed | Yes | Yes | GitLab 15.11 | Group |
project_export_file_download_started
| Triggered when a download of a project export file is started | Yes | Yes | GitLab 15.11 | Project |
project_group_link_created
| Triggered when a group is invited to a project | Yes | Yes | GitLab 15.9 | Group |
project_group_link_deleted
| Triggered when a project group link is deleted | Yes | Yes | GitLab 15.9 | Group |
project_group_link_updated
| Triggered when a project group link is updated | Yes | Yes | GitLab 15.9 | Project |
project_imported
| Triggered when a project is imported | Yes | Yes | GitLab 15.11 | Group |
project_restored
| Triggered when a project is restored | Yes | Yes | GitLab 15.11 | Project |
project_topics_updated
| Triggered when a project’s topics assignments are changed | Yes | Yes | GitLab 17.4 | Project |
project_unarchived
| Triggered when a project is unarchived | Yes | Yes | GitLab 15.11 | Project |
protected_branch_allow_force_push_updated
| Triggered when a protected branch has its ability to allow force pushes is updated | Yes | Yes | GitLab 14.3 | Project |
public_repository_download_operation
| Triggered when a Git repository for a public project is downloaded | No | Yes | GitLab 17.0 | Project |
registration_created
| Triggered when a user registers for instance access | Yes | Yes | GitLab 16.3 | User |
release_created
| Triggered when a release is created | Yes | Yes | GitLab 15.9 | Project |
release_deleted_audit_event
| Triggered when a release is deleted | Yes | Yes | GitLab 15.9 | Project |
release_milestones_updated
| Triggered when a release’s associated milestones are updated | Yes | Yes | GitLab 15.9 | Project |
release_updated
| Triggered when a release is updated | Yes | Yes | GitLab 15.9 | Project |
remove_gpg_key
| Triggered when a GPG key is deleted | Yes | Yes | GitLab 15.9 | User |
repository_download_operation
| Triggered when a Git repository for a private or internal project is downloaded | Yes | Yes | GitLab 15.9 | Project |
require_password_to_approve_updated
| Triggered when require user password for approvals from group merge request setting is updated | Yes | Yes | GitLab 15.6 | Group |
retain_approvals_on_push_updated
| Triggered when require new approvals when new commits are added to an MR from group merge request setting is updated | Yes | Yes | GitLab 15.6 | Group |
saml_group_links_created
| Triggered when a SAML Group Link is created | Yes | Yes | GitLab 15.9 | Group |
saml_group_links_removed
| Triggered when a SAML Group Link is removed | Yes | Yes | GitLab 15.9 | Group |
smartcard_authentication_created
| Triggered when a user authenticates with smartcard | Yes | Yes | GitLab 16.0 | User |
update_approval_rules
| Event triggered on updating a merge approval rule | Yes | Yes | GitLab 15.2 | Project |
update_compliance_framework
| Triggered when a compliance framework is updated | Yes | Yes | GitLab 14.6 | Group |
update_status_check
| Event triggered when an external status check is updated | Yes | Yes | GitLab 15.9 | Project |
Container registry
| Name | Description | Saved to database | Streamed | Introduced in | Scope |
|---|---|---|---|---|---|
container_repository_created
| Triggered when a container repository is first pushed to the registry | Yes | Yes | GitLab 17.5 | Project |
container_repository_deleted
| Triggered when a project’s container registry is deleted | Yes | Yes | GitLab 17.2 | Project |
container_repository_deletion_marked
| Triggered when a project’s container repository is marked for deletion | Yes | Yes | GitLab 17.2 | Project |
container_repository_tags_deleted
| Triggered when a project’s container repository tag is deleted | Yes | Yes | GitLab 17.2 | Project |
Continuous-integration
| Name | Description | Saved to database | Streamed | Introduced in | Scope |
|---|---|---|---|---|---|
multi_project_downstream_pipeline_created
| Triggered when multi project downstream pipeline is created | No | Yes | GitLab 17.6 | Project |
Continuous delivery
| Name | Description | Saved to database | Streamed | Introduced in | Scope |
|---|---|---|---|---|---|
deploy_key_added
| Triggered when a deploy key is added | Yes | Yes | GitLab 15.3 | Project |
deploy_key_removed
| Triggered when a deploy key is removed | Yes | Yes | GitLab 15.3 | Project |
deploy_token_created
| Triggered when a deploy token is created | Yes | Yes | GitLab 15.1 | Project |
deploy_token_creation_failed
| Triggered when a deploy token fails to create | Yes | Yes | GitLab 15.1 | Project |
deploy_token_destroyed
| Triggered when a deploy token is destroyed | Yes | Yes | GitLab 15.1 | Project |
deploy_token_revoked
| Triggered when a project deploy token is revoked | Yes | Yes | GitLab 15.1 | Project |
deployment_approved
| Triggered when a deployment is approved | Yes | Yes | GitLab 17.1 | Project |
deployment_rejected
| Triggered when a deployment is rejected | Yes | Yes | GitLab 17.1 | Project |
deployment_started
| Triggered when a deployment to a protected environment is started | Yes | Yes | GitLab 17.2 | Project |
group_deploy_token_created
| Triggered when a group deploy token is created | Yes | Yes | GitLab 15.3 | Group |
group_deploy_token_creation_failed
| Triggered when creating a group deploy token failed | Yes | Yes | GitLab 15.3 | Group |
group_deploy_token_destroyed
| Triggered when a group deploy token is destroyed | Yes | Yes | GitLab 15.3 | Group |
group_deploy_token_revoked
| Triggered when a group deploy token is revoked | Yes | Yes | GitLab 15.3 | Group |
Continuous integration
| Name | Description | Saved to database | Streamed | Introduced in | Scope |
|---|---|---|---|---|---|
allow_merge_on_skipped_pipeline_updated
| Triggered when ‘Skipped pipelines are considered successful’ setting is updated. | Yes | Yes | GitLab 14.10 | Project |
ci_group_variable_created
| Triggered when a CI/CD variable is created for a group | Yes | Yes | GitLab 15.2 | Group |
ci_group_variable_deleted
| Triggered when a CI/CD variable is deleted for a group | Yes | Yes | GitLab 15.2 | Group |
ci_group_variable_updated
| Triggered when a CI/CD variable is updated for a group | Yes | Yes | GitLab 15.2 | Group |
ci_instance_variable_created
| Triggered when a CI/CD variable is created for an instance | Yes | Yes | GitLab 16.5 | Instance |
ci_instance_variable_deleted
| Triggered when a CI/CD variable is deleted for an instance | Yes | Yes | GitLab 16.5 | Instance |
ci_instance_variable_updated
| Triggered when a CI/CD variable is updated for an instance | Yes | Yes | GitLab 16.5 | Instance |
ci_variable_created
| Triggered when a CI/CD variable is created for a project | Yes | Yes | GitLab 15.2 | Project |
ci_variable_deleted
| Triggered when a CI/CD variable is deleted for a project | Yes | Yes | GitLab 15.2 | Project |
ci_variable_updated
| Triggered when a CI/CD variable is updated for a project | Yes | Yes | GitLab 15.2 | Project |
destroy_pipeline
| Triggered when a pipeline is deleted | Yes | Yes | GitLab 16.6 | Project |
Deployment management
| Name | Description | Saved to database | Streamed | Introduced in | Scope |
|---|---|---|---|---|---|
cluster_agent_create_failed
| Triggered when a user attempts to create a cluster agent but it failed | Yes | Yes | GitLab 17.3 | Project |
cluster_agent_created
| Triggered when a user creates a cluster agent | Yes | Yes | GitLab 17.3 | Project |
cluster_agent_delete_failed
| Triggered when a user attempts to delete a cluster agent but it failed | Yes | Yes | GitLab 17.3 | Project |
cluster_agent_deleted
| Triggered when a user deletes a cluster agent | Yes | Yes | GitLab 17.3 | Project |
cluster_agent_token_created
| Triggered when a user creates a cluster agent token | Yes | Yes | GitLab 15.10 | Project |
cluster_agent_token_revoked
| Triggered when a user revokes a cluster agent token | Yes | Yes | GitLab 15.10 | Project |
Dynamic application security testing
| Name | Description | Saved to database | Streamed | Introduced in | Scope |
|---|---|---|---|---|---|
dast_profile_create
| Triggered when a dynamic application security testing profile is created | Yes | Yes | GitLab 14.1 | Project |
dast_profile_destroy
| Triggered when a dynamic application security profile is removed | Yes | Yes | GitLab 14.1 | Project |
dast_profile_schedule_create
| Triggered when a dynamic application security testing profile schedule is created | Yes | Yes | GitLab 14.3 | Project |
dast_profile_schedule_update
| Triggered when a dynamic application security testing profile schedule is updated | Yes | Yes | GitLab 14.3 | Project |
dast_profile_update
| Triggered when a dynamic application security profile is updated | Yes | Yes | GitLab 14.1 | Project |
dast_scanner_profile_create
| Triggered when a dynamic application security testing scanner profile is created | Yes | Yes | GitLab 14.0 | Project |
dast_scanner_profile_destroy
| Triggered when a dynamic application security testing scanner profile is removed | Yes | Yes | GitLab 14.0 | Project |
dast_scanner_profile_update
| Triggered when a dynamic application security testing scanner profile is updated | Yes | Yes | GitLab 14.0 | Project |
dast_site_profile_create
| Triggered when a dynamic application security testing site profile is created | Yes | Yes | GitLab 14.0 | Project |
dast_site_profile_destroy
| Triggered when a dynamic application security testing site profile is removed | Yes | Yes | GitLab 14.0 | Project |
dast_site_profile_update
| Triggered when a dynamic application security testing site profile is updated | Yes | Yes | GitLab 14.0 | Project |
Environment management
| Name | Description | Saved to database | Streamed | Introduced in | Scope |
|---|---|---|---|---|---|
environment_protected
| Triggered when a protected environment is created | Yes | Yes | GitLab 15.8 | Group, Project |
environment_unprotected
| Triggered when a protected environment is unprotected | Yes | Yes | GitLab 15.8 | Group, Project |
protected_environment_approval_rule_added
| Triggered when an approval rule is added to a protected environment | Yes | Yes | GitLab 16.5 | Group, Project |
protected_environment_approval_rule_deleted
| Triggered when an approval rule is removed from a protected environment | Yes | Yes | GitLab 16.5 | Project, Group |
protected_environment_approval_rule_updated
| Triggered when an approval rule of a protected environment is updated | Yes | Yes | GitLab 16.5 | Project, Group |
protected_environment_deploy_access_level_added
| Triggered when a deploy access level is added to a protected environment | Yes | Yes | GitLab 16.5 | Group, Project |
protected_environment_deploy_access_level_deleted
| Triggered when a deploy access level is removed from a protected environment | Yes | Yes | GitLab 16.5 | Group, Project |
protected_environment_deploy_access_level_updated
| Triggered when a deploy access level of a protected environment is updated | Yes | Yes | GitLab 16.5 | Project |
protected_environment_updated
| Triggered when a protected environment is updated | Yes | Yes | GitLab 16.5 | Group, Project |
Feature flags
| Name | Description | Saved to database | Streamed | Introduced in | Scope |
|---|---|---|---|---|---|
feature_flag_created
| Triggered when a feature flag is created. | Yes | Yes | GitLab 15.10 | Project |
feature_flag_deleted
| Triggered when a feature flag is deleted. | Yes | Yes | GitLab 15.10 | Project |
feature_flag_updated
| Triggered when a feature flag is updated. | Yes | Yes | GitLab 15.10 | Project |
Fleet visibility
| Name | Description | Saved to database | Streamed | Introduced in | Scope |
|---|---|---|---|---|---|
ci_runner_usage_export
| Triggered when a runner usage report is generated | Yes | Yes | GitLab 16.8 | Instance |
Fuzz testing
| Name | Description | Saved to database | Streamed | Introduced in | Scope |
|---|---|---|---|---|---|
coverage_fuzzing_corpus_create
| Event triggered on a corpus action is added | Yes | Yes | GitLab 14.5 | Project |
Groups and projects
| Name | Description | Saved to database | Streamed | Introduced in | Scope |
|---|---|---|---|---|---|
allow_mfa_for_subgroups_updated
| Triggered when setting for Subgroups can set up their own two-factor authentication rules updated | Yes | Yes | GitLab 17.4 | Group |
allow_runner_registration_token_updated
| Triggered when setting Allow members of projects and groups to create runners with runner registration tokens is updated | Yes | Yes | GitLab 16.0 | Group, Project |
allowed_email_domain_updated
| Triggered when group setting allowed email domain entry is updated | Yes | Yes | GitLab 17.5 | Group |
create_ssh_certificate
| Triggered when an SSH certificate is created | Yes | Yes | GitLab 16.6 | Group |
default_branch_name_updated
| Triggered when default branch name for the group repository is changed | Yes | Yes | GitLab 17.4 | Group |
delete_ssh_certificate
| Triggered when an SSH certificate is deleted | Yes | Yes | GitLab 16.6 | Group |
disable_personal_access_tokens_updated
| Triggered when setting Disable personal access tokens is updated | Yes | Yes | GitLab 17.4 | Group |
emails_enabled_updated
| Triggered when setting Enable email notifications is updated | Yes | Yes | GitLab 17.4 | Group |
enabled_git_access_protocol_updated
| Triggered when setting Enabled Git access protocols is updated | Yes | Yes | GitLab 17.4 | Group |
enforce_ssh_certificates_updated
| Triggered when setting Enforce SSH Certificates is updated | Yes | Yes | GitLab 17.4 | Group |
group_created
| Triggered when a group is created | Yes | Yes | GitLab 16.3 | Group |
group_description_updated
| Triggered when group description is updated | Yes | Yes | GitLab 17.4 | Group |
group_lfs_enabled_updated
| Triggered when LFS enabled for a group is updated | Yes | Yes | GitLab 15.7 | Group |
group_membership_lock_updated
| Triggered when membership lock for a group is updated | Yes | Yes | GitLab 15.7 | Group |
group_mentions_disabled_updated
| Triggered when a group’s setting to notify group members on group mention is updated | Yes | Yes | GitLab 17.4 | Group |
group_merge_request_approval_setting_created
| Triggered when merge request approval settings are added to a group | Yes | Yes | GitLab 15.1 | Group |
group_name_updated
| Triggered when a group’s name is updated | Yes | Yes | GitLab 15.7 | Group |
group_path_updated
| Triggered when a group’s path is updated | Yes | Yes | GitLab 15.7 | Group |
group_project_creation_level_updated
| Triggered when a group’s project creation level is updated | Yes | Yes | GitLab 15.7 | Group |
group_repository_size_limit_updated
| Triggered when a group’s repository size limit is updated | Yes | Yes | GitLab 15.7 | Group |
group_request_access_enabled_updated
| Triggered when a group’s request access enabled is updated | Yes | Yes | GitLab 15.7 | Group |
group_require_two_factor_authentication_updated
| Triggered when a group’s require two factor authentication setting is updated | Yes | Yes | GitLab 15.7 | Group |
group_share_with_group_link_created
| Triggered when you invite a group to another group by using the group’s membership page | Yes | Yes | GitLab 15.10 | Group |
group_share_with_group_link_removed
| Triggered when you remove a group from another group by using the group’s membership page | Yes | Yes | GitLab 15.10 | Group |
group_share_with_group_link_updated
| Triggered when you update a group’s access settings to another group by using the group’s membership page | Yes | Yes | GitLab 15.10 | Group |
group_shared_runners_minutes_limit_updated
| Triggered when a group’s shared runners minutes limit is updated | Yes | Yes | GitLab 15.7 | Group |
group_shared_with_group_lock_updated
| Triggered when group can be shared with other group setting is updated | Yes | Yes | GitLab 17.4 | Group |
group_two_factor_grace_period_updated
| Triggered when a group’s two factor grace period is updated | Yes | Yes | GitLab 15.7 | Group |
group_visibility_level_updated
| Triggered when a group’s visibility level is updated | Yes | Yes | GitLab 15.7 | Group |
merge_commit_template_updated
| Triggered when merge commit template is updated | Yes | Yes | GitLab 15.8 | Project |
new_user_signups_cap_updated
| Triggered when setting Number of users for user cap is updated | Yes | Yes | GitLab 17.4 | Group |
prevent_forking_outside_group_updated
| Triggered when setting for Prevent forking outside current group is changed | Yes | Yes | GitLab 17.4 | Group |
prevent_sharing_groups_outside_hierarchy_updated
| Triggered when a group’s setting to Members cannot invite groups outside of group and its sugroup updated | Yes | Yes | GitLab 17.4 | Group |
project_cicd_merge_pipelines_enabled_updated
| Triggered when the CI/CD merge pipelines setting for a project is updated | Yes | Yes | GitLab 15.8 | Project |
project_cicd_merge_trains_enabled_updated
| Triggered when the CI/CD merge trains settings for a project is updated | Yes | Yes | GitLab 15.8 | Project |
project_created
| Triggered when a project is created | Yes | Yes | GitLab 16.0 | Project |
project_default_branch_updated
| Triggered when default branch of a project’s repository is updated | Yes | Yes | GitLab 16.0 | Project |
project_description_updated
| Triggered when a project’s description is updated | No | Yes | GitLab 16.3 | Project |
project_disable_overriding_approvers_per_merge_request_updated
| Triggered when the disable overriding approvers per MR setting for a project is updated | Yes | Yes | GitLab 15.7 | Project |
project_feature_analytics_access_level_updated
| Triggered when a project’s analytics access level setting is updated | Yes | Yes | GitLab 15.7 | Project |
project_feature_builds_access_level_updated
| Triggered when a project’s builds access level setting is updated | Yes | Yes | GitLab 15.7 | Project |
project_feature_container_registry_access_level_updated
| Triggered when a project’s container registry access level setting is updated | Yes | Yes | GitLab 15.7 | Project |
project_feature_environments_access_level_updated
| Triggered when a project’s environments access level setting is updated | Yes | Yes | GitLab 15.7 | Project |
project_feature_feature_flags_access_level_updated
| Triggered when a project’s feature flags access level setting is updated | Yes | Yes | GitLab 15.7 | Project |
project_feature_forking_access_level_updated
| Triggered when a project’s feature forking access level setting is updated | Yes | Yes | GitLab 15.7 | Project |
project_feature_infrastructure_access_level_updated
| Triggered when a project’s infrastructure access level setting is updated | Yes | Yes | GitLab 15.7 | Project |
project_feature_issues_access_level_updated
| Triggered when a project’s issues access level setting is updated | Yes | Yes | GitLab 15.7 | Project |
project_feature_merge_requests_access_level_updated
| Triggered when a project’s merge request access level setting is updated | Yes | Yes | GitLab 15.7 | Project |
project_feature_metrics_dashboard_access_level_updated
| Triggered when a project’s metrics dashboard access level setting is updated | Yes | Yes | GitLab 15.7 | Project |
project_feature_monitor_access_level_updated
| Triggered when a project’s monitor access level setting is updated | Yes | Yes | GitLab 15.7 | Project |
project_feature_operations_access_level_updated
| Triggered when a project’s operation access level setting is updated | Yes | Yes | GitLab 15.7 | Project |
project_feature_package_registry_access_level_updated
| Triggered when a project’s package registry access level setting is updated | Yes | Yes | GitLab 15.7 | Project |
project_feature_pages_access_level_updated
| Triggered when a project’s page access level setting is updated | Yes | Yes | GitLab 15.7 | Project |
project_feature_releases_access_level_updated
| Triggered when a project’s releases access level setting is updated | Yes | Yes | GitLab 15.7 | Project |
project_feature_repository_access_level_updated
| Triggered when a project’s repository access level setting is updated | Yes | Yes | GitLab 15.7 | Project |
project_feature_requirements_access_level_updated
| Triggered when a project’s requirements access level setting is updated | Yes | Yes | GitLab 15.7 | Project |
project_feature_security_and_compliance_access_level_updated
| Triggered when a project’s security and compliance access level setting is updated | Yes | Yes | GitLab 15.7 | Project |
project_feature_snippets_access_level_updated
| Triggered when a project’s snippet access level setting is updated | Yes | Yes | GitLab 15.7 | Project |
project_feature_wiki_access_level_updated
| Triggered when a project’s wiki access level setting is updated | Yes | Yes | GitLab 15.7 | Project |
project_merge_method_updated
| Triggered when a project’s merge request method is updated | Yes | Yes | GitLab 14.10 | Project |
project_merge_requests_author_approval_updated
| Triggered when a project’s MR author approval setting is updated | Yes | Yes | GitLab 15.7 | Project |
project_merge_requests_disable_committers_approval_updated
| Triggered when a project’s setting for disabling committers approval on merge requests is updated | Yes | Yes | GitLab 15.7 | Project |
project_name_updated
| Triggered when a project has its name updated | Yes | Yes | GitLab 10.2 | Project |
project_namespace_updated
| Triggered when project’s namespace is updated | Yes | Yes | GitLab 15.7 | Project |
project_only_allow_merge_if_all_discussions_are_resolved_updated
| Triggered when a project’s setting for allowing merge only when all discussions are resolved is updated | Yes | Yes | GitLab 15.7 | Project |
project_only_allow_merge_if_pipeline_succeeds_updated
| Triggered when a project’s only allow merge if pipeline succeeds setting is updated | Yes | Yes | GitLab 15.7 | Project |
project_packages_enabled_updated
| Triggered when the setting that controls packages for a project is updated | Yes | Yes | GitLab 11.5 | Project |
project_path_updated
| Triggered when a project’s path is updated | Yes | Yes | GitLab 15.5 | Project |
project_printing_merge_request_link_enabled_updated
| Triggered when setting for projects for enabling printing merge request link is updated | Yes | Yes | GitLab 15.7 | Project |
project_repository_size_limit_updated
| Triggered when the repository size limit of a project is updated | Yes | Yes | GitLab 15.7 | Project |
project_require_password_to_approve_updated
| Triggered when a project’s setting for requiring a user’s password for approval of merge request is updated | Yes | Yes | GitLab 15.7 | Project |
project_resolve_outdated_diff_discussions_updated
| Triggered when a project’s resolve outdated diff discussions setting is updated | Yes | Yes | GitLab 15.7 | Project |
project_security_setting_updated
| Triggered when a project’s security setting is updated | Yes | Yes | GitLab 17.0 | Project |
project_visibility_level_updated
| Triggered when a project’s visibility level setting is updated | Yes | Yes | GitLab 15.7 | Project |
remove_dormant_members_period_updated
| Triggered when setting Days of inactivity before removal is updated | Yes | Yes | GitLab 17.4 | Group |
remove_dormant_members_updated
| Triggered when setting Dormant members is updated | Yes | Yes | GitLab 17.4 | Group |
resource_access_token_creation_allowed_updated
| Triggered when setting for Users can create project access tokens and group access tokens in this group is updated | Yes | Yes | GitLab 17.4 | Group, Project |
runner_registration_enabled_updated
| Triggered when setting Runner registration is updated | Yes | Yes | GitLab 17.4 | Group |
seat_control_updated
| Triggered when setting Seat control is updated | Yes | Yes | GitLab 17.4 | Group |
service_access_tokens_expiration_enforced_updated
| Triggered when setting Service account token expiration is updated | Yes | Yes | GitLab 17.4 | Group |
show_diff_preview_in_email_updated
| Triggered when setting Email notification to include diff preview is updated | Yes | Yes | GitLab 17.4 | Group, Project |
squash_commit_template_updated
| Triggered when the merge request squash commit template for a project is updated | Yes | Yes | GitLab 15.8 | Project |
squash_option_updated
| Triggered when squash option setting is updated | Yes | Yes | GitLab 15.0 | Project |
Importers
| Name | Description | Saved to database | Streamed | Introduced in | Scope |
|---|---|---|---|---|---|
group_export_created
| Triggered when a group file export is created | Yes | Yes | GitLab 17.0 | Group |
project_export_created
| Triggered when a project file export is created | Yes | Yes | GitLab 17.0 | Project |
Incident management
| Name | Description | Saved to database | Streamed | Introduced in | Scope |
|---|---|---|---|---|---|
incident_closed_by_project_bot
| Triggered when an incident is closed using a project access token | Yes | Yes | GitLab 16.1 | Project |
incident_created_by_project_bot
| Triggered when an incident is created using a project access token | Yes | Yes | GitLab 16.1 | Project |
incident_reopened_by_project_bot
| Triggered when an incident is reopened using a project access token | Yes | Yes | GitLab 16.1 | Project |
MLOps
| Name | Description | Saved to database | Streamed | Introduced in | Scope |
|---|---|---|---|---|---|
project_feature_model_experiments_access_level_updated
| Triggered when a project’s model experiments access level is updated | Yes | Yes | GitLab 16.1 | Project |
ml_model_created
| ML model is created | Yes | Yes | GitLab 17.4 | Project |
ml_model_destroyed
| ML model destroyed | Yes | Yes | GitLab 17.4 | Project |
ml_model_version_created
| ML model version is created | Yes | Yes | GitLab 17.4 | Project |
ml_model_version_destroyed
| ML model version destroyed | Yes | Yes | GitLab 17.4 | Project |
project_feature_model_registry_access_level_updated
| Model registry access level was updated | Yes | Yes | GitLab 16.7 | Project |
Not categorized
| Name | Description | Saved to database | Streamed | Introduced in | Scope |
|---|---|---|---|---|---|
experiment_features_enabled_updated
| Triggered when enabling experiment AI features setting is toggled | Yes | Yes | GitLab 16.0 | Group |
Permissions
| Name | Description | Saved to database | Streamed | Introduced in | Scope |
|---|---|---|---|---|---|
member_role_created
| Triggered when a custom role is created | Yes | Yes | GitLab 16.7 | Group, Instance |
member_role_deleted
| Triggered when a custom role is deleted | Yes | Yes | GitLab 16.9 | Group, Instance |
member_role_updated
| Triggered when a custom role is updated | Yes | Yes | GitLab 16.9 | Group, Instance |
Portfolio management
| Name | Description | Saved to database | Streamed | Introduced in | Scope |
|---|---|---|---|---|---|
delete_epic
| Triggered when an epic is successfully deleted | No | Yes | GitLab 15.4 | Group |
epic_closed_by_project_bot
| Triggered when an epic is closed by a group access token | Yes | Yes | GitLab 16.1 | Group |
epic_created_by_project_bot
| Triggered when an epic is created by a group access token | Yes | Yes | GitLab 16.1 | Group |
epic_reopened_by_project_bot
| Triggered when an epic is reopened by a group access token | Yes | Yes | GitLab 16.1 | Group |
Product analytics data management
| Name | Description | Saved to database | Streamed | Introduced in | Scope |
|---|---|---|---|---|---|
product_analytics_settings_update
| Triggered when product analytics settings are changed | Yes | Yes | GitLab 17.1 | Project |
Project
| Name | Description | Saved to database | Streamed | Introduced in | Scope |
|---|---|---|---|---|---|
project_access_token_created
| Triggered when a project access token is created | Yes | Yes | GitLab 15.2 | Project |
project_access_token_creation_failed
| Triggered when creating a project access token fails | Yes | Yes | GitLab 15.2 | Project |
project_access_token_deleted
| Triggered when a project access token is deleted | Yes | Yes | GitLab 15.2 | Project |
project_access_token_deletion_failed
| Triggered when deleting a project access token fails | Yes | Yes | GitLab 15.2 | Project |
Quality management
| Name | Description | Saved to database | Streamed | Introduced in | Scope |
|---|---|---|---|---|---|
test_case_closed_by_project_bot
| Triggered when a test case is closed using a project access token | Yes | Yes | GitLab 16.1 | Project |
test_case_created_by_project_bot
| Triggered when a test case is created using a project access token | Yes | Yes | GitLab 16.1 | Project |
test_case_reopened_by_project_bot
| Triggered when a test case is reopened using a project access token | Yes | Yes | GitLab 16.1 | Project |
Runner
| Name | Description | Saved to database | Streamed | Introduced in | Scope |
|---|---|---|---|---|---|
set_runner_associated_projects
| Triggered when associated projects are successfully assigned to a CI/CD runner | Yes | Yes | GitLab 15.4 | User |
Secret detection
| Name | Description | Saved to database | Streamed | Introduced in | Scope |
|---|---|---|---|---|---|
project_security_exclusion_applied
| Triggered when a project security exclusion is applied in one of the security scanners | Yes | Yes | GitLab 17.6 | Project |
project_security_exclusion_created
| Triggered when a project security exclusion is created | Yes | Yes | GitLab 17.5 | Project |
project_security_exclusion_deleted
| Triggered when a project security exclusion is deleted | Yes | Yes | GitLab 17.5 | Project |
project_security_exclusion_updated
| Triggered when a project security exclusion is updated | Yes | Yes | GitLab 17.5 | Project |
skip_secret_push_protection
| Triggered when secret push protection is skipped by the user | Yes | Yes | GitLab 16.11 | Project |
Secrets management
| Name | Description | Saved to database | Streamed | Introduced in | Scope |
|---|---|---|---|---|---|
user_authenticated_using_job_token
| Triggered when a user is authenticated using job token | No | Yes | GitLab 17.4 | Project |
Security policy management
| Name | Description | Saved to database | Streamed | Introduced in | Scope |
|---|---|---|---|---|---|
policy_project_updated
| Triggered when the security policy project is updated for a project | Yes | Yes | GitLab 15.6 | Group, Project |
Self-hosted models
| Name | Description | Saved to database | Streamed | Introduced in | Scope |
|---|---|---|---|---|---|
self_hosted_model_created
| A new self-hosted model configuration was added | Yes | Yes | GitLab 17.4 | Instance |
self_hosted_model_destroyed
| A new self-hosted model configuration was destroyed | Yes | Yes | GitLab 17.4 | Instance |
self_hosted_model_feature_changed
| A self-hosted model feature had its configuration changed | Yes | Yes | GitLab 17.4 | Instance |
self_hosted_model_terms_accepted
| Terms for usage of self-hosted models were accepted | Yes | Yes | GitLab 17.4 | Instance |
self_hosted_model_updated
| A self-hosted model configuration was updated | Yes | Yes | GitLab 17.4 | Instance |
Source code management
| Name | Description | Saved to database | Streamed | Introduced in | Scope |
|---|---|---|---|---|---|
approval_rule_created
| Triggered when a merge request approval rule is created. | Yes | Yes | GitLab 15.2 | Project |
approval_rule_deleted
| Triggered when a merge request approval rule is deleted. | Yes | Yes | GitLab 14.9 | Project |
group_push_rules_author_email_regex_updated
| Triggered when a group’s push rules settings is changed for author email regex | Yes | Yes | GitLab 15.7 | Group |
group_push_rules_branch_name_regex_updated
| Triggered when a group’s push rules settings is changed for branch name regex | Yes | Yes | GitLab 15.7 | Group |
group_push_rules_commit_committer_check_updated
| Triggered when a group’s push rule setting is updated for reject unverified users | Yes | Yes | GitLab 15.0 | Group |
group_push_rules_commit_message_negative_regex_updated
| Triggered when a group’s push rules settings is changed for commit message negative regex | Yes | Yes | GitLab 15.7 | Group |
group_push_rules_commit_message_regex_updated
| Triggered when a group’s push rules settings is changed for commit message regex | Yes | Yes | GitLab 15.7 | Group |
group_push_rules_file_name_regex_updated
| Triggered when a group’s push rules settings is changed for filename regex | Yes | Yes | GitLab 15.7 | Group |
group_push_rules_max_file_size_updated
| Triggered when a group’s push rules settings is changed for max file size | Yes | Yes | GitLab 15.7 | Group |
group_push_rules_prevent_secrets_updated
| Triggered when a group’s push rule setting is updated to prevent pushing secret files | Yes | Yes | GitLab 15.0 | Group |
group_push_rules_reject_deny_delete_tag_updated
| Triggered when a group’s push rule setting is updated to deny deletion of tags using Git push | Yes | Yes | GitLab 15.0 | Group |
group_push_rules_reject_member_check_updated
| Triggered when a group’s push rule setting is updated to check if commit author is a GitLab user | Yes | Yes | GitLab 15.0 | Group |
group_push_rules_reject_non_dco_commits_updated
| Triggered when a group’s push rule setting is updated for reject non DCO certified commits | Yes | Yes | GitLab 15.0 | Group |
group_push_rules_reject_unsigned_commits_updated
| Triggered when a group push’s rule setting is updated for reject unsigned commits | Yes | Yes | GitLab 15.0 | Group |
merged_merge_request_deleted
| Triggered when a merged merge request is deleted | No | Yes | GitLab 16.0 | Project |
merged_merge_request_deletion_started
| Triggered when a merged merge request’s deletion is started | No | Yes | GitLab 16.1 | Project |
project_fork_operation
| Triggered when a project is forked | Yes | Yes | GitLab 15.2 | Project |
project_fork_relationship_removed
| Triggered when a project’s fork relationship is successfully removed | Yes | Yes | GitLab 15.6 | Project |
project_push_rules_commit_committer_check_updated
| Triggered when a project’s push rule setting for reject unverified users is updated | Yes | Yes | GitLab 16.5 | Project |
protected_branch_code_owner_approval_required_updated
| Triggered when the protected branch code owner approval required setting is updated | Yes | Yes | GitLab 15.8 | Project |
protected_branch_created
| Triggered when a protected branch is created | Yes | Yes | GitLab 15.2 | Project |
protected_branch_removed
| Triggered when a protected branch is removed | Yes | Yes | GitLab 15.2 | Project |
protected_branch_updated
| Triggered when the setting for protected branches is updated | Yes | Yes | GitLab 15.8 | Project |
repository_git_operation
| Triggered when authenticated users push, pull, or clone a project using SSH, HTTP(S), or the UI | No | Yes | GitLab 14.9 | Project |
require_reauthentication_to_approve_updated
| Triggered when the setting for requiring reauthentication for merge requqest approvals is updated | Yes | Yes | GitLab 17.1 | Group, Project |
manually_trigger_housekeeping
| Triggered when manually triggering housekeeping via API or admin UI | Yes | Yes | GitLab 15.9 | Project |
project_blobs_removal
| Triggered when removing blobs via the GraphQL API or project settings UI | Yes | Yes | GitLab 17.0 | Project |
project_text_replacement
| Triggered when replacing text via the GraphQL API or project settings UI | Yes | Yes | GitLab 17.1 | Project |
System access
| Name | Description | Saved to database | Streamed | Introduced in | Scope |
|---|---|---|---|---|---|
application_setting_updated
| Triggered when an application setting is updated. | Yes | Yes | GitLab 16.3 | Instance |
group_access_token_created
| Triggered when a group access token is created | Yes | Yes | GitLab 15.2 | Group |
group_access_token_creation_failed
| Triggered when creating a group access token failed | Yes | Yes | GitLab 15.2 | Group |
group_access_token_deleted
| Triggered when a group access token is deleted | Yes | Yes | GitLab 15.2 | Group |
group_access_token_deletion_failed
| Triggered when deleting a group access token failed | Yes | Yes | GitLab 15.2 | Group |
ip_restrictions_changed
| Event triggered on any changes in the IP allowlist | Yes | Yes | GitLab 15.0 | Group |
login_failed_with_otp_authentication
| Triggered when sign-in fails because of an incorrect OTP | Yes | Yes | GitLab 16.4 | User |
login_failed_with_standard_authentication
| Triggered when sign-in to GitLab fails with standard authentication, such as password | Yes | Yes | GitLab 16.4 | Instance |
login_failed_with_webauthn_authentication
| Triggered when sign-in fails when using a WebAuthn device | Yes | Yes | GitLab 16.4 | User |
update_mismatched_group_saml_extern_uid
| Triggered when the external UID is changed on a SAML identity. | Yes | Yes | GitLab 15.7 | User |
user_access_locked
| Event triggered when user access to the instance is locked | Yes | Yes | GitLab 16.2 | User |
user_access_unlocked
| Event triggered when user access to the instance is unlocked | Yes | Yes | GitLab 16.2 | User |
user_disable_two_factor
| Audit event triggered when user disables two factor authentication. Group scope was introduced in GitLab 17.6. | Yes | Yes | GitLab 15.1 | User, Group |
user_enable_admin_mode
| Event triggered on enabling Admin Mode | Yes | Yes | GitLab 15.7 | User |
Team planning
| Name | Description | Saved to database | Streamed | Introduced in | Scope |
|---|---|---|---|---|---|
comment_by_project_bot
| Triggered when a comment is added to an issue or a merge request when using a project access token | No | Yes | GitLab 16.1 | Project |
delete_issue
| Triggered when an issue is successfully deleted | No | Yes | GitLab 15.4 | Project |
delete_work_item
| Triggered when a work item is successfully deleted | No | Yes | GitLab 15.4 | Project |
issue_closed_by_project_bot
| Triggered when an issue is closed using a project access token | Yes | Yes | GitLab 16.1 | Project |
issue_created_by_project_bot
| Triggered when an issue is created using a project access token | Yes | Yes | GitLab 16.1 | Project |
issue_reopened_by_project_bot
| Triggered when an issue is reopened using a project access token | Yes | Yes | GitLab 16.1 | Project |
task_closed_by_project_bot
| Triggered when a task is closed using a project access token | Yes | Yes | GitLab 16.1 | Project |
task_created_by_project_bot
| Triggered when a task is created using a project access token | Yes | Yes | GitLab 16.1 | Project |
task_reopened_by_project_bot
| Triggered when a task is reopened using a project access token | Yes | Yes | GitLab 16.1 | Project |
User management
| Name | Description | Saved to database | Streamed | Introduced in | Scope |
|---|---|---|---|---|---|
authenticated_with_group_saml
| Triggered when successfully signing in with SAML authentication. | Yes | Yes | GitLab 12.10 | Group |
ban_user
| Triggered when a user is banned, unbanned, blocked, or unblocked | Yes | Yes | GitLab 15.11 | User |
change_membership_state
| Triggered when a user’s membership is updated | Yes | Yes | GitLab 15.1 | Group |
password_reset_failed
| Triggered when a password reset fails for a user | No | Yes | GitLab 16.4 | User |
unban_user
| Event triggered on user unban action | Yes | Yes | GitLab 15.11 | User |
unblock_user
| Event triggered on user unblock action | Yes | Yes | GitLab 15.11 | User |
user_activate
| Event triggered on user activate action | Yes | Yes | GitLab 16.1 | User |
user_approved
| Event triggered when a user is approved for an instance | Yes | Yes | GitLab 15.11 | User |
user_blocked
| Event triggered when a user is blocked | Yes | Yes | GitLab 15.11 | User |
user_created
| Event triggered when a user is created | Yes | Yes | GitLab 15.10 | User |
user_deactivate
| Event triggered on user deactivate action | Yes | Yes | GitLab 16.0 | User |
user_destroyed
| Event triggered when a user is scheduled for removal from the instance. Group and Project scopes were introduced in GitLab 17.5. | Yes | Yes | GitLab 15.11 | User, Group, Project |
user_email_changed_and_user_signed_in
| audit when user emailed changed and user signed in | Yes | Yes | GitLab 15.8 | User |
user_impersonation
| Triggered when an instance administrator starts or stops impersonating a user | Yes | Yes | GitLab 14.8 | User, Group |
user_password_updated
| audit when user password is updated | Yes | Yes | GitLab 15.7 | User |
user_rejected
| Event triggered when a user registration is rejected | Yes | Yes | GitLab 15.11 | User |
User profile
| Name | Description | Saved to database | Streamed | Introduced in | Scope |
|---|---|---|---|---|---|
email_confirmation_sent
| Triggered when users add or change an email address and it must be confirmed | No | Yes | GitLab 16.3 | User |
remove_ssh_key
| Triggered when a SSH key is removed | Yes | Yes | GitLab 14.1 | User |
user_admin_status_updated
| Adds an audit event when a user is either made an administrator, or removed as an administrator | Yes | Yes | GitLab 14.1 | User |
user_auditor_status_updated
| Adds an audit event when a user is either made an auditor, or removed as an auditor | Yes | Yes | GitLab 16.6 | User |
user_email_address_updated
| Adds an audit event when a user updates their email address | Yes | Yes | GitLab 10.1 | User |
user_name_updated
| Event triggered on updating a user’s name | Yes | Yes | GitLab 17.5 | User |
user_profile_visiblity_updated
| Triggered when user toggles private profile user setting | No | Yes | GitLab 16.3 | User |
user_username_updated
| Event triggered on updating a user’s username | Yes | Yes | GitLab 15.7 | User |
Verify security
| Name | Description | Saved to database | Streamed | Introduced in | Scope |
|---|---|---|---|---|---|
secure_ci_job_token_group_added
| Triggered when group added to CI_JOB_TOKEN scope | Yes | Yes | GitLab 17.3 | Project |
secure_ci_job_token_group_removed
| Triggered when group removed from CI_JOB_TOKEN scope | Yes | Yes | GitLab 17.3 | Project |
secure_ci_job_token_inbound_disabled
| Triggered when CI_JOB_TOKEN permissions disabled for inbound | Yes | Yes | GitLab 16.0 | Project |
secure_ci_job_token_inbound_enabled
| Triggered when CI_JOB_TOKEN permissions enabled for inbound | Yes | Yes | GitLab 16.0 | Project |
secure_ci_job_token_project_added
| Triggered when project added to inbound CI_JOB_TOKEN scope | Yes | Yes | GitLab 16.0 | Project |
secure_ci_job_token_project_removed
| Triggered when project removed from inbound CI_JOB_TOKEN scope | Yes | Yes | GitLab 16.0 | Project |
Webhooks
| Name | Description | Saved to database | Streamed | Introduced in | Scope |
|---|---|---|---|---|---|
webhook_created
| Event triggered when a webhook is created. | Yes | Yes | GitLab 17.1 | Project, Group, Instance |
webhook_destroyed
| Event triggered when a webhook is destroyed. | Yes | Yes | GitLab 17.0 | Project, Group, Instance |