Data event reference
Written by
Updated at April 17, 2025
- Yandex Certificate Manager
- Yandex Cloud DNS
- Yandex Compute Cloud
- Yandex Identity and Access Management
- Yandex Key Management Service
- Yandex Lockbox
- Yandex Managed Service for ClickHouse®
- Yandex Managed Service for Kubernetes
- Yandex Managed Service for MongoDB
- Yandex Managed Service for MySQL®
- Yandex Managed Service for PostgreSQL
- Yandex Managed Service for Valkey™
- Yandex Object Storage
- Yandex Security Deck
- Yandex SpeechSense
- Yandex Smart Web Security
- Yandex Wiki
- Yandex WebSQL
The value of the event_type field in a data event audit log is determined by the event source service.
The general value format is as follows:
yandex.cloud.audit.<service_name>.<event_name>
On this page, you will find events for the following services:
- Yandex Certificate Manager
- Yandex Cloud DNS
- Yandex Compute Cloud
- Yandex Identity and Access Management
- Yandex Key Management Service
- Yandex Lockbox
- Yandex Managed Service for ClickHouse®
- Yandex Managed Service for Kubernetes
- Yandex Managed Service for MongoDB
- Yandex Managed Service for MySQL®
- Yandex Managed Service for PostgreSQL
- Yandex Managed Service for Valkey™
- Yandex Object Storage
- Yandex Security Deck
- Yandex SpeechSense
- Yandex Smart Web Security
- Yandex Wiki
- Yandex WebSQL
Yandex Certificate Manager
Service name: certificatemanager.
| Event name | Description |
|---|---|
GetCertificateContent |
Getting the contents of an SSL certificate |
Yandex Cloud DNS
Service name: dns.
| Event name | Description |
|---|---|
ProcessDnsQuery |
Execution result of a DNS query from a Cloud DNS client |
Yandex Compute Cloud
Service name: compute.
| Event name | Description |
|---|---|
serialssh.ConnectSerialPort |
Connecting to an instance serial port |
Yandex Identity and Access Management
Service name: iam.
| Event name | Description |
|---|---|
CreateIamToken |
Creating an IAM token |
RevokeIamToken |
Revoking an IAM token |
oslogin.CheckSshPolicy |
Checking permissions to connect via SSH with OS Login access |
oslogin.GenerateSshCertificate |
Generating an SSH certificate for OS Login access |
Yandex Key Management Service
Service name: kms.
| Event name | Description |
|---|---|
Decrypt |
Decrypting ciphertext with a key |
Encrypt |
Encrypting a text string with a key |
GenerateDataKey |
Generating a high-entropy key for Envelope Encryption |
ReEncrypt |
Decrypting ciphertext with a previous-version key and re-encrypting the decrypted text with a new version of the same key |
Yandex Lockbox
Service name: lockbox.
| Event name | Description |
|---|---|
GetPayload |
Accessing the contents of a secret |
GetPayloadEx |
Accessing the contents of a secret by folder or name |
Yandex Managed Service for ClickHouse®
Service name: mdb.clickhouse.
| Event name | Description |
|---|---|
CreateDatabase |
Creating a database |
CreateFormatSchema |
Creating a data format schema |
CreateMlModel |
Creating a machine learning model |
CreateUser |
Creating a database user |
DeleteDatabase |
Deleting a database |
DeleteFormatSchema |
Deleting a data format schema |
DeleteMlModel |
Deleting a machine learning model |
DeleteUser |
Deleting a database user |
GrantUserPermission |
Assigning privileges to a database user |
RevokeUserPermission |
Revoking a database user's privileges |
UpdateFormatSchema |
Editing a data schema format |
UpdateMlModel |
Editing a machine learning model |
UpdateUser |
Editing a database user |
Yandex Managed Service for Kubernetes
Service name: k8s.
| Event name | Description |
|---|---|
apiserver.ApiServerApprove |
Confirming a request |
apiserver.ApiServerBind |
Linking a role |
apiserver.ApiServerCreate |
Creating a resource |
apiserver.ApiServerDelete |
Deleting a resource |
apiserver.ApiServerDeleteCollection |
Deleting a resource collection |
apiserver.ApiServerEscalate |
Escalating privileges |
apiserver.ApiServerGet |
Getting information about a resource |
apiserver.ApiServerHead |
Getting resource metadata |
apiserver.ApiServerImpersonate |
Impersonation |
apiserver.ApiServerList |
Getting information about a resource collection |
apiserver.ApiServerNonstandardVerb |
The event is generated if the Managed Service for Kubernetes audit log contains a non-standard value in the verb field |
apiserver.ApiServerOptions |
Configuring a resource |
apiserver.ApiServerPatch |
Changing a resource |
apiserver.ApiServerPost |
Creating a resource |
apiserver.ApiServerPut |
Updating a resource |
apiserver.ApiServerUpdate |
Updating a query |
apiserver.ApiServerWatch |
Tracking resources |
Yandex Managed Service for MongoDB
Service name: mdb.mongodb.
| Event name | Description |
|---|---|
CreateDatabase |
Creating a database |
CreateUser |
Creating a database user |
DeleteDatabase |
Deleting a database |
DeleteUser |
Deleting a database user |
GrantUserPermission |
Assigning privileges to a database user |
RevokeUserPermission |
Revoking a database user's privileges |
UpdateDatabase |
Updating a database |
UpdateUser |
Editing a database user |
Yandex Managed Service for MySQL®
Service name: mdb.mysql.
| Event name | Description |
|---|---|
CreateDatabase |
Creating a database |
CreateUser |
Creating a database user |
DatabaseUserSQLRequest |
User SQL query to a database |
DeleteDatabase |
Deleting a database |
DeleteUser |
Deleting a database user |
GrantUserPermission |
Assigning privileges to a database user |
RevokeUserPermission |
Revoking a database user's privileges |
UpdateUser |
Editing a database user |
Yandex Managed Service for PostgreSQL
Service name: mdb.postgresql.
| Event name | Description |
|---|---|
CreateDatabase |
Creating a database |
CreateUser |
Creating a database user |
DatabaseUserLogin |
Connecting a user to a database |
DatabaseUserLogout |
Disconnecting a user from a database |
DatabaseUserSQLRequest |
User SQL query to a database1 |
DeleteDatabase |
Deleting a database |
DeleteUser |
Deleting a database user |
GrantUserPermission |
Assigning privileges to a database user |
RevokeUserPermission |
Revoking a database user's privileges |
UpdateDatabase |
Updating a database |
UpdateUser |
Editing a database user |
1 Requires additional setup on the Managed Service for PostgreSQL side. For more information, see Using pgaudit in Managed Service for PostgreSQL.
Yandex Managed Service for Valkey™
Service name: mdb.redis.
| Event name | Description |
|---|---|
CreateUser |
Creating a user in a cluster |
DeleteUser |
Deleting a user from a cluster |
UpdateUser |
Updating a user in a cluster |
Yandex Object Storage
Service name: storage.
| Event name | Description |
|---|---|
ObjectAclUpdate |
Updating an object's ACL in a bucket |
ObjectCreate |
Creating an object in a bucket |
ObjectDelete |
Deleting an object from a bucket |
ObjectTagsDelete |
Deleting bucket object tags |
ObjectTagsUpdate |
Updating bucket object tags |
ObjectUpdate |
Updating an object in a bucket |
PresignURLCreate |
Creating a signed link |
Yandex Security Deck
Access Transparency module
Service name: accesstransparency.
| Event name | Description |
|---|---|
ComputeNodeAccess |
Connecting the Access Transparency module to the Yandex Data Processing subcluster |
MDBClusterAccess |
Connecting the Access Transparency module to a database cluster |
Yandex SpeechSense
Service name: speechsense.
| Event name | Description |
|---|---|
CreateTalksReport |
Creating a dialog report |
GetTalk |
Getting a dialog |
GetTalkAudio |
Getting an audio recording of a dialog |
SearchTalks |
Searching for a dialog |
UploadTalkToConnection |
Uploading a dialog to a connection |
Yandex Smart Web Security
Service name: smartwebsecurity.
| Event name | Description |
|---|---|
ArlMatchedRequest |
Triggering a rule from an ARL profile |
WafMatchedExclusionRule |
Triggering an exclusion rule from a WAF profile |
WafMatchedRule |
Triggering a rule from a WAF profile |
Yandex Wiki
Service name: wiki.
| Event name | Description |
|---|---|
AccessRequestCreate |
Creating a page access request |
AccessRequestProcess |
Processing a page access request |
AttachmentCreate |
Uploading a file to a page |
AttachmentDelete |
Deleting a file from a page |
AuthorRoleRequestCreate |
Creating a request for adding to page authors |
AuthorRoleRequestProcess |
Processing a request for adding to page authors |
BookmarkCreate |
Adding to favorites |
BookmarkDelete |
Deleting from favorites |
BookmarkTagsCreate |
Creating tags for favorites |
BookmarkTagsDelete |
Deleting tags for favorites |
BookmarkUpdate |
Updating tags for a page in favorites |
ClusterMove |
Moving a page cluster |
CommentCreate |
Creating a comment |
CommentDelete |
Deleting a comment |
CommentUpdate |
Updating a comment |
GridAddColumns |
Adding columns to a dynamic table |
GridAddRows |
Adding rows to a dynamic table |
GridClone |
Creating a dynamic table copy |
GridCreate |
Creating a new dynamic table |
GridDelete |
Deleting a dynamic table |
GridImport |
Importing a dynamic table from a file |
GridMoveColumns |
Moving a dynamic table column |
GridMoveRows |
Moving a dynamic table row |
GridRemoveColumns |
Deleting dynamic table columns |
GridRemoveRows |
Deleting dynamic table rows |
GridRollback |
Undoing changes in a dynamic table |
GridUpdate |
Updating a dynamic table |
GridUpdateCells |
Updating cells in a dynamic table |
GridUpdateColumn |
Updating a dynamic table column |
GridUpdateRow |
Updating a dynamic table row |
PageChangeOrder |
Changing page order |
PageChangeToYFM |
Converting a page to a new editor |
PageClone |
Creating a page copy |
PageCreate |
Creating a page |
PageDelete |
Deleting a page |
PageImport |
Importing a page from a file |
PageRecover |
Recovering a deleted page |
PageUpdate |
Updating a page |
RecoveryTokenDelete |
Deleting a page recovery token |
SubscriberDelete |
Deleting a subscriber |
SubscribersAdd |
Adding subscribers |
SubscriptionAdd |
Adding a subscription |
SubscriptionDelete |
Deleting a subscription |
Yandex WebSQL
Service name: websql.
| Event name | Description |
|---|---|
Execute |
Running a query |
GenerateSql |
Generating a query |
GetDatabaseStructure |
Getting database structure |