Audit event types
- Tier: Premium, Ultimate
- Offering: GitLab.com, GitLab Self-Managed, GitLab Dedicated
History
Audit event types are used to filter streamed audit events:
Every audit event is associated with an event type. Audit event types can allow:
- Most audit events to be saved to the database. Available in the Premium and Ultimate tier. You can retrieve audit events associated with these types by using the audit events dashboard or the audit events API.
- All audit events to be streamed to external destinations. Available in the Ultimate tier. You can stream audit events associated with these types to external destinations if a destination is set.
An audit event type’s scope limits the availability of the audit event type to either:
- Project, group, or user audit events.
- Instance audit events.
Available audit event types
Audit event types belong to the following product categories.
Ai framework
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
duo_features_enabled_updated | GitLab Duo Features enabled setting on group or project changed | Yes | GitLab 16.10 | Group, Project |
q_onbarding_updated | Amazon Q instance settings changed | Yes | GitLab 17.8 | Instance |
Audit events
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
amazon_s3_configuration_created | Amazon S3 configuration for audit events streaming is created | Yes | GitLab 16.5 | Group |
amazon_s3_configuration_deleted | Amazon S3 configuration for audit events streaming is deleted | Yes | GitLab 16.5 | Group |
amazon_s3_configuration_updated | Amazon S3 configuration for audit events streaming is updated | Yes | GitLab 16.5 | Group |
audit_events_streaming_headers_create | A streaming header for audit events is created | Yes | GitLab 15.3 | Group |
audit_events_streaming_headers_destroy | A streaming header for audit events is deleted | Yes | GitLab 15.3 | Group |
audit_events_streaming_instance_headers_create | A streaming header for instance level external audit event destination is created | Yes | GitLab 16.3 | Instance |
audit_events_streaming_instance_headers_destroy | A streaming header for instance level external audit event destination is deleted | Yes | GitLab 16.3 | Instance |
audit_events_streaming_instance_headers_update | A streaming header for instance level external audit event destination is updated | Yes | GitLab 16.3 | Instance |
create_event_streaming_destination | An external audit event destination is created | Yes | GitLab 14.6 | Group |
create_http_namespace_filter | A namespace filter for an external audit event destination for a top-level group is created | Yes | GitLab 16.6 | Group |
create_instance_event_streaming_destination | An external audit event destination for an instance is created | Yes | GitLab 16.2 | Instance |
created_group_audit_event_streaming_destination | An external audit event destination for a top-level group is created | Yes | GitLab 16.11 | Group |
created_group_namespace_filter | A namespace filter for an external audit event destination for a top-level group is created | Yes | GitLab 17.0 | Group |
created_instance_audit_event_streaming_destination | An external audit event destination for an instance is created | Yes | GitLab 16.11 | Instance |
created_instance_namespace_filter | A namespace filter for an external audit event destination for an instance is created | Yes | GitLab 17.2 | Instance |
delete_http_namespace_filter | A namespace filter for an external audit event destination for a top-level group is deleted | Yes | GitLab 16.7 | Group |
deleted_group_audit_event_streaming_destination | An external audit event destination for a top-level group is deleted | Yes | GitLab 16.11 | Group |
deleted_group_namespace_filter | A namespace filter for an external audit event destination for a top-level group is deleted | Yes | GitLab 17.0 | Group |
deleted_instance_audit_event_streaming_destination | An external audit event destination for a GitLab instance is deleted | Yes | GitLab 16.11 | Instance |
deleted_instance_namespace_filter | A namespace filter for an external audit event destination for a GitLab instance is deleted | Yes | GitLab 17.2 | Instance |
destroy_event_streaming_destination | An external audit event destination is deleted | Yes | GitLab 14.6 | Group |
destroy_instance_event_streaming_destination | An instance level external audit event destination is deleted | Yes | GitLab 16.2 | Instance |
event_type_filters_created | A new audit events streaming event type filter is created | Yes | GitLab 15.10 | Group |
event_type_filters_deleted | An audit events streaming event type filter is deleted | Yes | GitLab 15.10 | Group |
google_cloud_logging_configuration_created | Google Cloud Logging configuration is created | Yes | GitLab 16.1 | Group |
google_cloud_logging_configuration_deleted | Google Cloud Logging configuration is deleted | Yes | GitLab 16.1 | Group |
google_cloud_logging_configuration_updated | Google Cloud Logging configuration is updated | Yes | GitLab 16.1 | Group |
instance_amazon_s3_configuration_created | Instance Amazon S3 configuration for audit events streaming is created | Yes | GitLab 16.7 | Instance |
instance_amazon_s3_configuration_deleted | Instance-level Amazon S3 configuration for audit events streaming is deleted | Yes | GitLab 16.7 | Instance |
instance_amazon_s3_configuration_updated | Instance-level Amazon S3 configuration for audit events streaming is updated | Yes | GitLab 16.7 | Instance |
instance_google_cloud_logging_configuration_created | Instance-level Google Cloud Logging configuration is created | Yes | GitLab 16.4 | Instance |
instance_google_cloud_logging_configuration_deleted | Instance-level Google Cloud Logging configuration is deleted | Yes | GitLab 16.5 | Instance |
instance_google_cloud_logging_configuration_updated | Instance-level Google Cloud Logging configuration is updated | Yes | GitLab 16.5 | Instance |
update_event_streaming_destination | An external audit event destination is updated | Yes | GitLab 14.6 | Group |
update_instance_event_streaming_destination | An instance level external audit event destination is updated | Yes | GitLab 16.2 | Instance |
updated_group_audit_event_streaming_destination | An external audit event destination for a top-level group is updated | Yes | GitLab 16.11 | Group |
updated_instance_audit_event_streaming_destination | An external audit event destination for a GitLab instance is updated | Yes | GitLab 16.11 | Instance |
Authorization
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
secure_ci_job_token_policies_updated | Permissions are updated for a CI_JOB_TOKEN scope | Yes | GitLab 17.6 | Project |
user_authorized_oauth_application | User authorized an OAuth application | Yes | GitLab 17.9 | User |
Build artifacts
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
job_artifact_downloaded | A user downloads a job artifact from a project | No | GitLab 16.8 | Project |
Code review
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
delete_merge_request | A merge request is successfully deleted | No | GitLab 15.4 | Project |
Code review workflow
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
merge_request_approval_operation | A merge request is approved | No | GitLab 15.3 | Project |
merge_request_closed_by_project_bot | A merge request is closed using a project access token | Yes | GitLab 16.1 | Project |
merge_request_created_by_project_bot | A merge request is created using a project access token | Yes | GitLab 16.1 | Project |
merge_request_invalid_approver_rules | An invalid rule when merge request is approved | Yes | GitLab 15.5 | Project |
merge_request_merged_by_project_bot | A merge request is merged using a project access token | Yes | GitLab 16.1 | Project |
merge_request_reopened_by_project_bot | A merge request is reopened using a project access token | Yes | GitLab 16.1 | Project |
project_merge_requests_template_updated | A merge request template for a project is updated | Yes | GitLab 15.0 | Project |
project_remove_source_branch_after_merge_updated | A project has its setting to remove branches after merges updated | Yes | GitLab 14.10 | Project |
project_reset_approvals_on_push_updated | A project has its setting on whether approvals are reset on a push is updated | Yes | GitLab 14.2 | Project |
selective_code_owner_removals_updated | Selective code owner removal is updated | Yes | GitLab 17.0 | Project |
Code suggestions
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
project_suggestion_commit_message_updated | A project has its suggested commit message updated | Yes | GitLab 14.10 | Project |
Compliance management
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
add_gpg_key | A GPG key is added | Yes | GitLab 15.9 | User |
allow_author_approval_updated | Prevent approval by author setting is updated | Yes | GitLab 15.6 | Group |
allow_committer_approval_updated | Prevent approvals by users who add commits setting is updated | Yes | GitLab 15.6 | Group |
allow_overrides_to_approver_list_per_merge_request_updated | Prevent editing approval rules in projects and merge requests setting is updated | Yes | GitLab 15.6 | Group |
audit_events_streaming_headers_update | A streaming header for audit events is updated | Yes | GitLab 15.3 | Group |
compliance_framework_added | A compliance framework is applied to a project | Yes | GitLab 17.2 | Project |
compliance_framework_deleted | A compliance framework is removed from a project | Yes | GitLab 14.1 | Project |
compliance_framework_id_updated | A compliance framework is updated for a project | Yes | GitLab 15.7 | Project |
compliance_framework_removed | A compliance framework is removed from a project | Yes | GitLab 17.2 | Project |
create_compliance_framework | A compliance framework is successfully created | Yes | GitLab 14.6 | Group |
create_status_check | An external status check is created | Yes | GitLab 15.9 | Project |
created_compliance_requirement | A requirement is added to a compliance framework | Yes | GitLab 17.6 | Group |
created_compliance_requirement_control | A control is added to a compliance requirement. | Yes | GitLab 17.9 | Group |
delete_status_check | An external status check is deleted | Yes | GitLab 15.9 | Project |
destroy_compliance_framework | A compliance framework is successfully deleted | Yes | GitLab 14.6 | Group |
destroyed_compliance_requirement | A compliance framework requirement is destroyed | Yes | GitLab 17.7 | Group |
destroyed_compliance_requirement_control | A compliance requirement control is destroyed. | Yes | GitLab 17.9 | Group |
email_created | An email is created | Yes | GitLab 15.11 | User |
email_destroyed | An email is destroyed | Yes | GitLab 15.11 | User |
external_status_check_name_updated | The name of an external status check is updated | Yes | GitLab 15.7 | Project |
external_status_check_url_updated | The URL that is used for external status checks for a pipeline is updated | Yes | GitLab 15.0 | Project |
group_deletion_marked | A group is marked for deletion | Yes | GitLab 15.11 | Group |
group_destroyed | A group is destroyed | Yes | GitLab 15.11 | Group |
group_restored | A group is restored | Yes | GitLab 15.11 | Group |
group_saml_provider_create | A group SAML provider is created | Yes | GitLab 15.9 | Group |
group_saml_provider_update | A group SAML provider is updated | Yes | GitLab 15.9 | Group |
inactive_project_scheduled_for_deletion | An inactive project is scheduled for deletion | Yes | GitLab 16.4 | Project |
member_created | A membership is created | Yes | GitLab 15.9 | Group, Project |
member_destroyed | A membership is destroyed | Yes | GitLab 15.9 | Group, Project |
member_updated | A membership is updated | Yes | GitLab 15.9 | Group, Project |
merge_request_create | A merge request is created | No | GitLab 15.9 | Project |
merge_request_merged | A merge request is merged | Yes | GitLab 17.5 | Project |
omniauth_login_failed | An OmniAuth login fails | Yes | GitLab 16.3 | User |
password_reset_requested | A user requests a password reset using a registered email address | Yes | GitLab 15.11 | User |
pending_compliance_external_control_failed | A project’s compliance external control status is updated to fail because of timeout. | Yes | GitLab 17.9 | Project |
personal_access_token_created | A user creates a personal access token | Yes | GitLab 15.9 | User |
personal_access_token_revoked | A personal access token is revoked | Yes | GitLab 15.9 | User |
project_archived | A project is archived | Yes | GitLab 15.11 | Project |
project_deletion_marked | A project is marked for deletion | Yes | GitLab 15.11 | Project |
project_destroyed | A project is destroyed | Yes | GitLab 15.11 | Group |
project_export_file_download_started | A download of a project export file is started | Yes | GitLab 15.11 | Project |
project_group_link_created | A group is invited to a project | Yes | GitLab 15.9 | Group |
project_group_link_deleted | A project group link is deleted | Yes | GitLab 15.9 | Group |
project_group_link_updated | A project group link is updated | Yes | GitLab 15.9 | Project |
project_imported | A project is imported | Yes | GitLab 15.11 | Group |
project_restored | A project is restored | Yes | GitLab 15.11 | Project |
project_topics_updated | A project’s topics assignments are changed | Yes | GitLab 17.4 | Project |
project_unarchived | A project is unarchived | Yes | GitLab 15.11 | Project |
protected_branch_allow_force_push_updated | A protected branch has its ability to allow force pushes is updated | Yes | GitLab 14.3 | Project |
public_repository_download_operation | A Git repository for a public project is downloaded | No | GitLab 17.0 | Project |
registration_created | A user registers for instance access | Yes | GitLab 16.3 | User |
release_created | A release is created | Yes | GitLab 15.9 | Project |
release_deleted_audit_event | A release is deleted | Yes | GitLab 15.9 | Project |
release_milestones_updated | A release’s associated milestones are updated | Yes | GitLab 15.9 | Project |
release_updated | A release is updated | Yes | GitLab 15.9 | Project |
remove_gpg_key | A GPG key is deleted | Yes | GitLab 15.9 | User |
repository_download_operation | A Git repository for a private or internal project is downloaded | Yes | GitLab 15.9 | Project |
request_to_compliance_external_control_failed | Request to compliance external control failed | Yes | GitLab 17.9 | Project |
request_to_compliance_external_control_successful | Request to compliance external control successful | No | GitLab 17.9 | Project |
require_password_to_approve_updated | Require user password for approvals from group merge request setting is updated | Yes | GitLab 15.6 | Group |
retain_approvals_on_push_updated | Require new approvals when new commits are added to an MR from group merge request setting is updated | Yes | GitLab 15.6 | Group |
saml_group_links_created | A SAML Group Link is created | Yes | GitLab 15.9 | Group |
saml_group_links_removed | A SAML Group Link is removed | Yes | GitLab 15.9 | Group |
smartcard_authentication_created | A user authenticates with smartcard | Yes | GitLab 16.0 | User |
update_approval_rules | Updating a merge approval rule | Yes | GitLab 15.2 | Project |
update_compliance_framework | A compliance framework is updated | Yes | GitLab 14.6 | Group |
update_compliance_requirement | A compliance framework requirement is updated. | Yes | GitLab 17.7 | Group |
update_status_check | An external status check is updated | Yes | GitLab 15.9 | Project |
updated_compliance_requirement_control | Compliance requirement control updated. | Yes | GitLab 17.9 | Group |
Container registry
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
container_repository_created | A container repository is first pushed to the registry | Yes | GitLab 17.5 | Project |
container_repository_deleted | A project’s container registry is deleted | Yes | GitLab 17.2 | Project |
container_repository_deletion_marked | A project’s container repository is marked for deletion | Yes | GitLab 17.2 | Project |
container_repository_tags_deleted | A project’s container repository tag is deleted | Yes | GitLab 17.2 | Project |
Continuous-integration
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
multi_project_downstream_pipeline_created | Multi project downstream pipeline is created | No | GitLab 17.6 | Project |
Continuous delivery
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
deploy_key_added | A deploy key is added | Yes | GitLab 15.3 | Project |
deploy_key_removed | A deploy key is removed | Yes | GitLab 15.3 | Project |
deploy_token_created | A deploy token is created | Yes | GitLab 15.1 | Project |
deploy_token_creation_failed | A deploy token fails to create | Yes | GitLab 15.1 | Project |
deploy_token_destroyed | A deploy token is destroyed | Yes | GitLab 15.1 | Project |
deploy_token_revoked | A project deploy token is revoked | Yes | GitLab 15.1 | Project |
deployment_approved | A deployment is approved | Yes | GitLab 17.1 | Project |
deployment_rejected | A deployment is rejected | Yes | GitLab 17.1 | Project |
deployment_started | A deployment to a protected environment is started | Yes | GitLab 17.2 | Project |
group_deploy_token_created | A group deploy token is created | Yes | GitLab 15.3 | Group |
group_deploy_token_creation_failed | Creating a group deploy token failed | Yes | GitLab 15.3 | Group |
group_deploy_token_destroyed | A group deploy token is destroyed | Yes | GitLab 15.3 | Group |
group_deploy_token_revoked | A group deploy token is revoked | Yes | GitLab 15.3 | Group |
Continuous integration
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
allow_merge_on_skipped_pipeline_updated | Skipped pipelines are considered successful setting is updated | Yes | GitLab 14.10 | Project |
ci_group_variable_created | A CI/CD variable is created for a group | Yes | GitLab 15.2 | Group |
ci_group_variable_deleted | A CI/CD variable is deleted for a group | Yes | GitLab 15.2 | Group |
ci_group_variable_updated | A CI/CD variable is updated for a group | Yes | GitLab 15.2 | Group |
ci_instance_variable_created | A CI/CD variable is created for an instance | Yes | GitLab 16.5 | Instance |
ci_instance_variable_deleted | A CI/CD variable is deleted for an instance | Yes | GitLab 16.5 | Instance |
ci_instance_variable_updated | A CI/CD variable is updated for an instance | Yes | GitLab 16.5 | Instance |
ci_variable_created | A CI/CD variable is created for a project | Yes | GitLab 15.2 | Project |
ci_variable_deleted | A CI/CD variable is deleted for a project | Yes | GitLab 15.2 | Project |
ci_variable_updated | A CI/CD variable is updated for a project | Yes | GitLab 15.2 | Project |
destroy_pipeline | A pipeline is deleted | Yes | GitLab 16.6 | Project |
Deployment management
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
cluster_agent_create_failed | A user attempts to create a cluster agent but it failed | Yes | GitLab 17.3 | Project |
cluster_agent_created | A user creates a cluster agent | Yes | GitLab 17.3 | Project |
cluster_agent_delete_failed | A user attempts to delete a cluster agent but it failed | Yes | GitLab 17.3 | Project |
cluster_agent_deleted | A user deletes a cluster agent | Yes | GitLab 17.3 | Project |
cluster_agent_token_created | A user creates a cluster agent token | Yes | GitLab 15.10 | Project |
cluster_agent_token_revoked | A user revokes a cluster agent token | Yes | GitLab 15.10 | Project |
Duo workflow
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
api_request_access_with_scope | A susbset of API requests authenticated by a token with an audited scope | Yes | GitLab 17.7 | User |
Dynamic application security testing
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
dast_profile_create | A dynamic application security testing profile is created | Yes | GitLab 14.1 | Project |
dast_profile_destroy | A dynamic application security profile is removed | Yes | GitLab 14.1 | Project |
dast_profile_schedule_create | A dynamic application security testing profile schedule is created | Yes | GitLab 14.3 | Project |
dast_profile_schedule_update | A dynamic application security testing profile schedule is updated | Yes | GitLab 14.3 | Project |
dast_profile_update | A dynamic application security profile is updated | Yes | GitLab 14.1 | Project |
dast_scanner_profile_create | A dynamic application security testing scanner profile is created | Yes | GitLab 14.0 | Project |
dast_scanner_profile_destroy | A dynamic application security testing scanner profile is removed | Yes | GitLab 14.0 | Project |
dast_scanner_profile_update | A dynamic application security testing scanner profile is updated | Yes | GitLab 14.0 | Project |
dast_site_profile_create | A dynamic application security testing site profile is created | Yes | GitLab 14.0 | Project |
dast_site_profile_destroy | A dynamic application security testing site profile is removed | Yes | GitLab 14.0 | Project |
dast_site_profile_update | A dynamic application security testing site profile is updated | Yes | GitLab 14.0 | Project |
Environment management
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
environment_protected | A protected environment is created | Yes | GitLab 15.8 | Group, Project |
environment_unprotected | A protected environment is unprotected | Yes | GitLab 15.8 | Group, Project |
protected_environment_approval_rule_added | An approval rule is added to a protected environment | Yes | GitLab 16.5 | Group, Project |
protected_environment_approval_rule_deleted | An approval rule is removed from a protected environment | Yes | GitLab 16.5 | Project, Group |
protected_environment_approval_rule_updated | An approval rule of a protected environment is updated | Yes | GitLab 16.5 | Project, Group |
protected_environment_deploy_access_level_added | A deploy access level is added to a protected environment | Yes | GitLab 16.5 | Group, Project |
protected_environment_deploy_access_level_deleted | A deploy access level is removed from a protected environment | Yes | GitLab 16.5 | Group, Project |
protected_environment_deploy_access_level_updated | A deploy access level of a protected environment is updated | Yes | GitLab 16.5 | Project |
protected_environment_updated | A protected environment is updated | Yes | GitLab 16.5 | Group, Project |
Feature flags
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
feature_flag_created | A feature flag is created | Yes | GitLab 15.10 | Project |
feature_flag_deleted | A feature flag is deleted | Yes | GitLab 15.10 | Project |
feature_flag_updated | A feature flag is updated | Yes | GitLab 15.10 | Project |
Fleet visibility
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
ci_runner_created | Triggered when a runner is created | Yes | GitLab 17.8 | Instance, Group, Project |
ci_runner_usage_export | A runner usage report is generated | Yes | GitLab 16.8 | Instance |
ci_runners_bulk_deleted | Runners are deleted in bulk | Yes | GitLab 17.7 | User |
Fuzz testing
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
coverage_fuzzing_corpus_create | A corpus action is added | Yes | GitLab 14.5 | Project |
Groups and projects
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
allow_mfa_for_subgroups_updated | Setting for Subgroups can set up their own two-factor authentication rules updated | Yes | GitLab 17.4 | Group |
allow_runner_registration_token_updated | Setting Allow members of projects and groups to create runners with runner registration tokens is updated | Yes | GitLab 16.0 | Group, Project |
allowed_email_domain_updated | Group setting allowed email domain entry is updated | Yes | GitLab 17.5 | Group |
create_ssh_certificate | An SSH certificate is created | Yes | GitLab 16.6 | Group |
default_branch_name_updated | Default branch name for the group repository is changed | Yes | GitLab 17.4 | Group |
delete_ssh_certificate | An SSH certificate is deleted | Yes | GitLab 16.6 | Group |
disable_personal_access_tokens_updated | Setting Disable personal access tokens is updated | Yes | GitLab 17.4 | Group |
emails_enabled_updated | Setting Enable email notifications is updated | Yes | GitLab 17.4 | Group |
enabled_git_access_protocol_updated | Setting Enabled Git access protocols is updated | Yes | GitLab 17.4 | Group |
enforce_ssh_certificates_updated | Setting Enforce SSH Certificates is updated | Yes | GitLab 17.4 | Group |
group_created | A group is created | Yes | GitLab 16.3 | Group |
group_description_updated | Group description is updated | Yes | GitLab 17.4 | Group |
group_lfs_enabled_updated | LFS enabled for a group is updated | Yes | GitLab 15.7 | Group |
group_membership_lock_updated | Membership lock for a group is updated | Yes | GitLab 15.7 | Group |
group_mentions_disabled_updated | A group’s setting to notify group members on group mention is updated | Yes | GitLab 17.4 | Group |
group_merge_request_approval_setting_created | Merge request approval settings are added to a group | Yes | GitLab 15.1 | Group |
group_name_updated | A group’s name is updated | Yes | GitLab 15.7 | Group |
group_path_updated | A group’s path is updated | Yes | GitLab 15.7 | Group |
group_project_creation_level_updated | A group’s project creation level is updated | Yes | GitLab 15.7 | Group |
group_repository_size_limit_updated | A group’s repository size limit is updated | Yes | GitLab 15.7 | Group |
group_request_access_enabled_updated | A group’s request access enabled is updated | Yes | GitLab 15.7 | Group |
group_require_two_factor_authentication_updated | A group’s require two factor authentication setting is updated | Yes | GitLab 15.7 | Group |
group_share_with_group_link_created | You invite a group to another group by using the group’s membership page | Yes | GitLab 15.10 | Group |
group_share_with_group_link_removed | You remove a group from another group by using the group’s membership page | Yes | GitLab 15.10 | Group |
group_share_with_group_link_updated | You update a group’s access settings to another group by using the group’s membership page | Yes | GitLab 15.10 | Group |
group_shared_runners_minutes_limit_updated | A group’s shared runners minutes limit is updated | Yes | GitLab 15.7 | Group |
group_shared_with_group_lock_updated | Group can be shared with other group setting is updated | Yes | GitLab 17.4 | Group |
group_two_factor_grace_period_updated | A group’s two factor grace period is updated | Yes | GitLab 15.7 | Group |
group_visibility_level_updated | A group’s visibility level is updated | Yes | GitLab 15.7 | Group |
merge_commit_template_updated | Merge commit template is updated | Yes | GitLab 15.8 | Project |
new_user_signups_cap_updated | Setting Number of users for user cap is updated | Yes | GitLab 17.4 | Group |
prevent_forking_outside_group_updated | Setting for Prevent forking outside current group is changed | Yes | GitLab 17.4 | Group |
prevent_sharing_groups_outside_hierarchy_updated | A group’s setting to Members cannot invite groups outside of group and its subgroup updated | Yes | GitLab 17.4 | Group |
project_cicd_merge_pipelines_enabled_updated | The CI/CD merge pipelines setting for a project is updated | Yes | GitLab 15.8 | Project |
project_cicd_merge_trains_enabled_updated | The CI/CD merge trains settings for a project is updated | Yes | GitLab 15.8 | Project |
project_created | A project is created | Yes | GitLab 16.0 | Project |
project_default_branch_updated | Default branch of a project’s repository is updated | Yes | GitLab 16.0 | Project |
project_description_updated | A project’s description is updated | No | GitLab 16.3 | Project |
project_disable_overriding_approvers_per_merge_request_updated | The disable overriding approvers per MR setting for a project is updated | Yes | GitLab 15.7 | Project |
project_feature_analytics_access_level_updated | A project’s analytics access level setting is updated | Yes | GitLab 15.7 | Project |
project_feature_builds_access_level_updated | A project’s builds access level setting is updated | Yes | GitLab 15.7 | Project |
project_feature_container_registry_access_level_updated | A project’s container registry access level setting is updated | Yes | GitLab 15.7 | Project |
project_feature_environments_access_level_updated | A project’s environments access level setting is updated | Yes | GitLab 15.7 | Project |
project_feature_feature_flags_access_level_updated | A project’s feature flags access level setting is updated | Yes | GitLab 15.7 | Project |
project_feature_forking_access_level_updated | A project’s feature forking access level setting is updated | Yes | GitLab 15.7 | Project |
project_feature_infrastructure_access_level_updated | A project’s infrastructure access level setting is updated | Yes | GitLab 15.7 | Project |
project_feature_issues_access_level_updated | A project’s issues access level setting is updated | Yes | GitLab 15.7 | Project |
project_feature_merge_requests_access_level_updated | A project’s merge request access level setting is updated | Yes | GitLab 15.7 | Project |
project_feature_metrics_dashboard_access_level_updated | A project’s metrics dashboard access level setting is updated | Yes | GitLab 15.7 | Project |
project_feature_monitor_access_level_updated | A project’s monitor access level setting is updated | Yes | GitLab 15.7 | Project |
project_feature_operations_access_level_updated | A project’s operation access level setting is updated | Yes | GitLab 15.7 | Project |
project_feature_package_registry_access_level_updated | A project’s package registry access level setting is updated | Yes | GitLab 15.7 | Project |
project_feature_pages_access_level_updated | A project’s page access level setting is updated | Yes | GitLab 15.7 | Project |
project_feature_releases_access_level_updated | A project’s releases access level setting is updated | Yes | GitLab 15.7 | Project |
project_feature_repository_access_level_updated | A project’s repository access level setting is updated | Yes | GitLab 15.7 | Project |
project_feature_requirements_access_level_updated | A project’s requirements access level setting is updated | Yes | GitLab 15.7 | Project |
project_feature_security_and_compliance_access_level_updated | A project’s security and compliance access level setting is updated | Yes | GitLab 15.7 | Project |
project_feature_snippets_access_level_updated | A project’s snippet access level setting is updated | Yes | GitLab 15.7 | Project |
project_feature_wiki_access_level_updated | A project’s wiki access level setting is updated | Yes | GitLab 15.7 | Project |
project_merge_method_updated | A project’s merge request method is updated | Yes | GitLab 14.10 | Project |
project_merge_requests_author_approval_updated | A project’s MR author approval setting is updated | Yes | GitLab 15.7 | Project |
project_merge_requests_disable_committers_approval_updated | A project’s setting for disabling committers approval on merge requests is updated | Yes | GitLab 15.7 | Project |
project_name_updated | A project has its name updated | Yes | GitLab 10.2 | Project |
project_namespace_updated | A project’s namespace is updated | Yes | GitLab 15.7 | Project |
project_only_allow_merge_if_all_discussions_are_resolved_updated | A project’s setting for allowing merge only when all discussions are resolved is updated | Yes | GitLab 15.7 | Project |
project_only_allow_merge_if_pipeline_succeeds_updated | A project’s only allow merge if pipeline succeeds setting is updated | Yes | GitLab 15.7 | Project |
project_packages_enabled_updated | The setting that controls packages for a project is updated | Yes | GitLab 11.5 | Project |
project_path_updated | A project’s path is updated | Yes | GitLab 15.5 | Project |
project_printing_merge_request_link_enabled_updated | The setting for projects for enabling printing merge request link is updated | Yes | GitLab 15.7 | Project |
project_repository_size_limit_updated | The repository size limit of a project is updated | Yes | GitLab 15.7 | Project |
project_require_password_to_approve_updated | A project’s setting for requiring a user’s password for approval of merge request is updated | Yes | GitLab 15.7 | Project |
project_resolve_outdated_diff_discussions_updated | A project’s resolve outdated diff discussions setting is updated | Yes | GitLab 15.7 | Project |
project_security_setting_updated | A project’s security setting is updated | Yes | GitLab 17.0 | Project |
project_visibility_level_updated | A project’s visibility level setting is updated | Yes | GitLab 15.7 | Project |
remove_dormant_members_period_updated | Setting Days of inactivity before removal is updated | Yes | GitLab 17.4 | Group |
remove_dormant_members_updated | Setting Dormant members is updated | Yes | GitLab 17.4 | Group |
resource_access_token_creation_allowed_updated | Setting for Users can create project access tokens and group access tokens in this group is updated | Yes | GitLab 17.4 | Group, Project |
runner_registration_enabled_updated | Setting Runner registration is updated | Yes | GitLab 17.4 | Group |
seat_control_updated | Setting Seat control is updated | Yes | GitLab 17.4 | Group |
service_access_tokens_expiration_enforced_updated | Setting Service account token expiration is updated | Yes | GitLab 17.4 | Group |
show_diff_preview_in_email_updated | Setting Email notification to include diff preview is updated | Yes | GitLab 17.4 | Group, Project |
squash_commit_template_updated | The merge request squash commit template for a project is updated | Yes | GitLab 15.8 | Project |
squash_option_updated | Squash option setting is updated | Yes | GitLab 15.0 | Project |
Importers
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
group_export_created | A group file export is created | Yes | GitLab 17.0 | Group |
project_export_created | A project file export is created | Yes | GitLab 17.0 | Project |
Incident management
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
incident_closed_by_project_bot | An incident is closed using a project access token | Yes | GitLab 16.1 | Project |
incident_created_by_project_bot | An incident is created using a project access token | Yes | GitLab 16.1 | Project |
incident_reopened_by_project_bot | An incident is reopened using a project access token | Yes | GitLab 16.1 | Project |
MLOps
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
project_feature_model_experiments_access_level_updated | A project’s model experiments access level is updated | Yes | GitLab 16.1 | Project |
ml_model_created | ML model is created | Yes | GitLab 17.4 | Project |
ml_model_destroyed | ML model destroyed | Yes | GitLab 17.4 | Project |
ml_model_version_created | ML model version is created | Yes | GitLab 17.4 | Project |
ml_model_version_destroyed | ML model version destroyed | Yes | GitLab 17.4 | Project |
project_feature_model_registry_access_level_updated | Model registry access level was updated | Yes | GitLab 16.7 | Project |
Not categorized
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
experiment_features_enabled_updated | Enabling experiment AI features setting is toggled | Yes | GitLab 16.0 | Group |
Package registry
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
package_registry_package_deleted | A package was deleted from GitLab package registry. Available only when the feature flag package_registry_audit_events is enabled. | Yes | GitLab 17.10 | Project, Group |
package_registry_package_published | A package was published to GitLab package registry. Available only when the feature flag package_registry_audit_events is enabled. | Yes | GitLab 17.9 | Project, Group |
Permissions
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
member_role_created | A custom role is created | Yes | GitLab 16.7 | Group, Instance |
member_role_deleted | A custom role is deleted | Yes | GitLab 16.9 | Group, Instance |
member_role_updated | A custom role is updated | Yes | GitLab 16.9 | Group, Instance |
Portfolio management
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
delete_epic | An epic is successfully deleted | No | GitLab 15.4 | Group |
epic_closed_by_project_bot | An epic is closed by a group access token | Yes | GitLab 16.1 | Group |
epic_created_by_project_bot | An epic is created by a group access token | Yes | GitLab 16.1 | Group |
epic_reopened_by_project_bot | An epic is reopened by a group access token | Yes | GitLab 16.1 | Group |
Product analytics data management
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
product_analytics_settings_update | Product analytics settings are changed | Yes | GitLab 17.1 | Project |
Project
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
project_access_token_created | A project access token is created | Yes | GitLab 15.2 | Project |
project_access_token_creation_failed | Creating a project access token fails | Yes | GitLab 15.2 | Project |
project_access_token_deleted | A project access token is deleted | Yes | GitLab 15.2 | Project |
project_access_token_deletion_failed | Deleting a project access token fails | Yes | GitLab 15.2 | Project |
Quality management
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
test_case_closed_by_project_bot | A test case is closed using a project access token | Yes | GitLab 16.1 | Project |
test_case_created_by_project_bot | A test case is created using a project access token | Yes | GitLab 16.1 | Project |
test_case_reopened_by_project_bot | A test case is reopened using a project access token | Yes | GitLab 16.1 | Project |
Runner
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
ci_runner_assigned_to_project | A runner is assigned to a project | Yes | GitLab 14.9 | Project |
ci_runner_registered | An instance, group, or project runner is registered | Yes | GitLab 14.8 | Instance, Group, Project |
ci_runner_token_reset | A runner’s token is reset | Yes | GitLab 15.0 | Instance, Group, Project |
ci_runner_unassigned_from_project | A runner is unassigned from a project | Yes | GitLab 14.9 | Project |
ci_runner_unregistered | An instance, group, or project runner is unregistered | Yes | GitLab 14.9 | Instance, Group, Project |
set_runner_associated_projects | Associated projects are successfully assigned to a CI/CD runner | Yes | GitLab 15.4 | Project |
Secret detection
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
group_secret_push_protection_updated | Secret push protection is enabled or disabled for a group and its child groups and projects, except those projects specified as excluded | Yes | GitLab 17.7 | Group |
project_security_exclusion_applied | A project security exclusion is applied in one of the security scanners | Yes | GitLab 17.6 | Project |
project_security_exclusion_created | A project security exclusion is created | Yes | GitLab 17.5 | Project |
project_security_exclusion_deleted | A project security exclusion is deleted | Yes | GitLab 17.5 | Project |
project_security_exclusion_updated | A project security exclusion is updated | Yes | GitLab 17.5 | Project |
skip_secret_push_protection | Secret push protection is skipped by the user | Yes | GitLab 16.11 | Project |
Secrets management
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
user_authenticated_using_job_token | A user is authenticated using job token | No | GitLab 17.4 | Project |
Security policy management
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
policy_project_updated | The security policy project is updated for a project | Yes | GitLab 15.6 | Group, Project |
Self-hosted models
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
self_hosted_model_created | A new self-hosted model configuration was added | Yes | GitLab 17.4 | Instance |
self_hosted_model_destroyed | A new self-hosted model configuration was destroyed | Yes | GitLab 17.4 | Instance |
self_hosted_model_feature_changed | A self-hosted model feature had its configuration changed | Yes | GitLab 17.4 | Instance |
self_hosted_model_terms_accepted | Terms for usage of self-hosted models were accepted | Yes | GitLab 17.4 | Instance |
self_hosted_model_updated | A self-hosted model configuration was updated | Yes | GitLab 17.4 | Instance |
Source code management
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
approval_rule_created | A merge request approval rule is created | Yes | GitLab 15.2 | Project |
approval_rule_deleted | A merge request approval rule is deleted | Yes | GitLab 14.9 | Project |
group_push_rules_author_email_regex_updated | A group’s push rules settings is changed for author email regex | Yes | GitLab 15.7 | Group |
group_push_rules_branch_name_regex_updated | A group’s push rules settings is changed for branch name regex | Yes | GitLab 15.7 | Group |
group_push_rules_commit_committer_check_updated | A group’s push rule setting is updated for reject unverified users | Yes | GitLab 15.0 | Group |
group_push_rules_commit_message_negative_regex_updated | A group’s push rules settings is changed for commit message negative regex | Yes | GitLab 15.7 | Group |
group_push_rules_commit_message_regex_updated | A group’s push rules settings is changed for commit message regex | Yes | GitLab 15.7 | Group |
group_push_rules_file_name_regex_updated | A group’s push rules settings is changed for filename regex | Yes | GitLab 15.7 | Group |
group_push_rules_max_file_size_updated | A group’s push rules settings is changed for max file size | Yes | GitLab 15.7 | Group |
group_push_rules_prevent_secrets_updated | A group’s push rule setting is updated to prevent pushing secret files | Yes | GitLab 15.0 | Group |
group_push_rules_reject_deny_delete_tag_updated | A group’s push rule setting is updated to deny deletion of tags using Git push | Yes | GitLab 15.0 | Group |
group_push_rules_reject_member_check_updated | A group’s push rule setting is updated to check if commit author is a GitLab user | Yes | GitLab 15.0 | Group |
group_push_rules_reject_non_dco_commits_updated | A group’s push rule setting is updated for reject non DCO certified commits | Yes | GitLab 15.0 | Group |
group_push_rules_reject_unsigned_commits_updated | A group push’s rule setting is updated for reject unsigned commits | Yes | GitLab 15.0 | Group |
merged_merge_request_deleted | A merged merge request is deleted | No | GitLab 16.0 | Project |
merged_merge_request_deletion_started | A merged merge request’s deletion is started | No | GitLab 16.1 | Project |
project_fork_operation | A project is forked | Yes | GitLab 15.2 | Project |
project_fork_relationship_removed | A project’s fork relationship is successfully removed | Yes | GitLab 15.6 | Project |
project_push_rules_commit_committer_check_updated | A project’s push rule setting for reject unverified users is updated | Yes | GitLab 16.5 | Project |
protected_branch_code_owner_approval_required_updated | The protected branch code owner approval required setting is updated | Yes | GitLab 15.8 | Project |
protected_branch_created | A protected branch is created | Yes | GitLab 15.2 | Project |
protected_branch_removed | A protected branch is removed | Yes | GitLab 15.2 | Project |
protected_branch_updated | The setting for protected branches is updated | Yes | GitLab 15.8 | Project |
repository_git_operation | Authenticated users push, pull, or clone a project using SSH, HTTP(S), or the UI | No | GitLab 14.9 | Project |
require_reauthentication_to_approve_updated | The setting for requiring reauthentication for merge request approvals is updated | Yes | GitLab 17.1 | Group, Project |
manually_trigger_housekeeping | Manually triggering housekeeping via API or admin UI | Yes | GitLab 15.9 | Project |
project_blobs_removal | Removing blobs by using the GraphQL API or project settings UI | Yes | GitLab 17.0 | Project |
project_text_replacement | Replacing text by using the GraphQL API or project settings UI | Yes | GitLab 17.1 | Project |
System access
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
application_setting_updated | An application setting is updated | Yes | GitLab 16.3 | Instance |
group_access_token_created | A group access token is created | Yes | GitLab 15.2 | Group |
group_access_token_creation_failed | Creating a group access token failed | Yes | GitLab 15.2 | Group |
group_access_token_deleted | A group access token is deleted | Yes | GitLab 15.2 | Group |
group_access_token_deletion_failed | Deleting a group access token failed | Yes | GitLab 15.2 | Group |
ip_restrictions_changed | Any changes in the IP allowlist | Yes | GitLab 15.0 | Group |
login_failed_with_otp_authentication | Sign-in fails because of an incorrect OTP | Yes | GitLab 16.4 | User |
login_failed_with_standard_authentication | Sign-in to GitLab fails with standard authentication, such as password | Yes | GitLab 16.4 | Instance |
login_failed_with_webauthn_authentication | Sign-in fails when using a WebAuthn device | Yes | GitLab 16.4 | User |
update_mismatched_group_saml_extern_uid | The external UID is changed on a SAML identity | Yes | GitLab 15.7 | User |
user_access_locked | User access to the instance is locked | Yes | GitLab 16.2 | User |
user_access_unlocked | User access to the instance is unlocked | Yes | GitLab 16.2 | User |
user_disable_two_factor | A user disables two factor authentication. Group scope was introduced in GitLab 17.6. | Yes | GitLab 15.1 | User, Group |
user_enable_admin_mode | Admin Mode enabled | Yes | GitLab 15.7 | User |
Team planning
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
comment_by_project_bot | A comment is added to an issue or a merge request when using a project access token | No | GitLab 16.1 | Project |
delete_issue | An issue is successfully deleted | No | GitLab 15.4 | Project |
delete_work_item | A work item is successfully deleted | No | GitLab 15.4 | Project |
issue_closed_by_project_bot | An issue is closed using a project access token | Yes | GitLab 16.1 | Project |
issue_created_by_project_bot | An issue is created using a project access token | Yes | GitLab 16.1 | Project |
issue_reopened_by_project_bot | An issue is reopened using a project access token | Yes | GitLab 16.1 | Project |
task_closed_by_project_bot | A task is closed using a project access token | Yes | GitLab 16.1 | Project |
task_created_by_project_bot | A task is created using a project access token | Yes | GitLab 16.1 | Project |
task_reopened_by_project_bot | A task is reopened using a project access token | Yes | GitLab 16.1 | Project |
User management
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
authenticated_with_group_saml | Successfully signing in with SAML authentication | Yes | GitLab 12.10 | Group |
ban_user | A user is banned, unbanned, blocked, or unblocked | Yes | GitLab 15.11 | User |
change_membership_state | A user’s membership is updated | Yes | GitLab 15.1 | Group |
inactive_scim_user_cannot_be_added | A user cannot be added to a group during SAML authentication when their SCIM identity is inactive | Yes | GitLab 17.7 | Group |
password_reset_failed | A password reset fails for a user | No | GitLab 16.4 | User |
unban_user | A user is unbanned | Yes | GitLab 15.11 | User |
unblock_user | A user is banned | Yes | GitLab 15.11 | User |
user_activate | A user is activated | Yes | GitLab 16.1 | User |
user_approved | A user is approved for an instance | Yes | GitLab 15.11 | User |
user_blocked | A user is blocked | Yes | GitLab 15.11 | User |
user_created | A user is created | Yes | GitLab 15.10 | User |
user_deactivate | A user is deactivated | Yes | GitLab 16.0 | User |
user_destroyed | A user is scheduled for removal from the instance. Group and Project scopes were introduced in GitLab 17.5. | Yes | GitLab 15.11 | User, Group, Project |
user_email_changed_and_user_signed_in | User email changed and user signed in | Yes | GitLab 15.8 | User |
user_impersonation | An instance administrator starts or stops impersonating a user | Yes | GitLab 14.8 | User, Group |
user_password_updated | A user password is updated | Yes | GitLab 15.7 | User |
user_provisioned_by_scim | A user is provisioned by SCIM | Yes | GitLab 17.8 | Group |
user_rejected | A user registration is rejected | Yes | GitLab 15.11 | User |
User profile
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
email_confirmation_sent | Users add or change an email address and it must be confirmed | No | GitLab 16.3 | User |
remove_ssh_key | A SSH key is removed | Yes | GitLab 14.1 | User |
user_admin_status_updated | A user is either made an administrator or removed as an administrator | Yes | GitLab 14.1 | User |
user_auditor_status_updated | A user is either made an auditor or removed as an auditor | Yes | GitLab 16.6 | User |
user_email_address_updated | A user updates their email address | Yes | GitLab 10.1 | User |
user_name_updated | A user’s name is updated | Yes | GitLab 17.5 | User |
user_profile_visiblity_updated | User toggles private profile user setting | No | GitLab 16.3 | User |
user_username_updated | A user’s username is updated | Yes | GitLab 15.7 | User |
Verify security
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
secure_ci_job_token_group_added | Group added to CI_JOB_TOKEN scope | Yes | GitLab 17.3 | Project |
secure_ci_job_token_group_removed | Group removed from CI_JOB_TOKEN scope | Yes | GitLab 17.3 | Project |
secure_ci_job_token_inbound_disabled | CI_JOB_TOKEN permissions disabled for inbound | Yes | GitLab 16.0 | Project |
secure_ci_job_token_inbound_enabled | CI_JOB_TOKEN permissions enabled for inbound | Yes | GitLab 16.0 | Project |
secure_ci_job_token_project_added | Project added to inbound CI_JOB_TOKEN scope | Yes | GitLab 16.0 | Project |
secure_ci_job_token_project_removed | Project removed from inbound CI_JOB_TOKEN scope | Yes | GitLab 16.0 | Project |
Webhooks
| Type name | Event triggered when | Saved to database | Introduced in | Scope |
|---|---|---|---|---|
webhook_created | A webhook is created | Yes | GitLab 17.1 | Project, Group, Instance |
webhook_destroyed | A webhook is destroyed | Yes | GitLab 17.0 | Project, Group, Instance |
Docs
Edit this page to fix an error or add an improvement in a merge request.
Create an issue to suggest an improvement to this page.
Product
Create an issue if there's something you don't like about this feature.
Propose functionality by submitting a feature request.
Feature availability and product trials
View pricing to see all GitLab tiers and features, or to upgrade.
Try GitLab for free with access to all features for 30 days.
Get help
If you didn't find what you were looking for, search the docs.
If you want help with something specific and could use community support, post on the GitLab forum.
For problems setting up or using this feature (depending on your GitLab subscription).
Request support