Data event reference
Written by
Updated at September 12, 2025
- Yandex Application Load Balancer
- Yandex Certificate Manager
- Yandex Cloud Desktop
- Yandex Cloud DNS
- Yandex Compute Cloud
- Yandex Foundation Models
- Yandex Identity Hub
- Yandex Identity and Access Management
- Yandex Key Management Service
- Yandex Lockbox
- Yandex Managed Service for ClickHouse®
- Yandex Managed Service for Kubernetes
- Yandex StoreDoc
- Yandex Managed Service for MySQL®
- Yandex Managed Service for PostgreSQL
- Yandex Managed Service for Valkey™
- Yandex Object Storage
- Yandex Security Deck
- Yandex SpeechKit
- Yandex SpeechSense
- Yandex Smart Web Security
- Yandex Translate
- Yandex Vision OCR
- Yandex Wiki
- Yandex WebSQL
The value of the event_type field in a data event audit log is determined by the event source service.
The general value format is as follows:
yandex.cloud.audit.<service_name>.<event_name>
On this page, you will find events for the following services:
- Yandex Application Load Balancer
- Yandex Certificate Manager
- Yandex Cloud Desktop
- Yandex Cloud DNS
- Yandex Compute Cloud
- Yandex Foundation Models
- Yandex Identity Hub
- Yandex Identity and Access Management
- Yandex Key Management Service
- Yandex Lockbox
- Yandex Managed Service for ClickHouse®
- Yandex Managed Service for Kubernetes
- Yandex StoreDoc
- Yandex Managed Service for MySQL®
- Yandex Managed Service for PostgreSQL
- Yandex Managed Service for Valkey™
- Yandex Object Storage
- Yandex Security Deck
- Yandex SpeechKit
- Yandex SpeechSense
- Yandex Smart Web Security
- Yandex Translate
- Yandex Vision OCR
- Yandex Wiki
- Yandex WebSQL
Yandex Application Load Balancer
Service name: apploadbalancer.
| Event name | Description |
|---|---|
LoadbalancerHTTPAccessLog |
HTTP request logging |
LoadbalancerTCPAccessLog |
TCP request logging |
Yandex Certificate Manager
Service name: certificatemanager.
| Event name | Description |
|---|---|
GetCertificateContent |
Getting the contents of an SSL certificate |
GetExCertificateContent |
Getting the contents of an expired SSL certificate |
Yandex Cloud Desktop
Service name: clouddesktop.
| Event name | Description |
|---|---|
GenerateDesktopRDPFile |
Generating an RDP file for a desktop connection |
ResetDesktopPassword |
Resetting desktop password |
Yandex Cloud DNS
Service name: dns.
| Event name | Description |
|---|---|
ProcessDnsQuery |
Execution result of a DNS query from a Cloud DNS client |
Yandex Compute Cloud
Service name: compute.
| Event name | Description |
|---|---|
serialssh.ConnectSerialPort |
Connecting to an instance serial port |
MigrateInstance |
VM live migration * |
* The audit log collects events only for VMs with a maintenance policy configured.
Yandex Foundation Models
Service name: ai.foundationmodels.
| Event name | Description |
|---|---|
CancelBatchInference |
Stopping a model in batch mode |
DeleteBatchInference |
Deleting a processing result in batch mode |
GetTextProcessingResult |
Request for the generation result |
StartBatchInference |
Running a model in batch mode |
TextProcessing |
Generation request |
Yandex Identity Hub
Service name: organizationmanager.
| Event name | Description |
|---|---|
idp.AuthenticateByPassword |
Password authentication. |
Yandex Identity and Access Management
Service name: iam.
| Event name | Description |
|---|---|
CreateIamToken |
Creating an IAM token |
RevokeIamToken |
Revoking an IAM token |
credential.CreateRefreshTokenForSubject |
Creating a refresh token for a user |
credential.RevokeRefreshTokenForSubject |
Revoking a refresh token from a user |
oslogin.CheckSshPolicy |
Checking permissions to connect via SSH with OS Login access |
oslogin.GenerateSshCertificate |
Generating an SSH certificate for OS Login access |
Yandex Key Management Service
Service name: kms.
| Event name | Description |
|---|---|
Decrypt |
Decrypting ciphertext with a key |
Encrypt |
Encrypting a text string with a key |
GenerateDataKey |
Generating a high-entropy key for Envelope Encryption |
ReEncrypt |
Decrypting ciphertext with a previous-version key and re-encrypting the decrypted text with a new version of the same key |
Yandex Lockbox
Service name: lockbox.
| Event name | Description |
|---|---|
GetPayload |
Accessing the contents of a secret |
GetPayloadEx |
Accessing the contents of a secret by folder or name |
Yandex Managed Service for ClickHouse®
Service name: mdb.clickhouse.
| Event name | Description |
|---|---|
CreateDatabase |
Creating a database |
CreateFormatSchema |
Creating a data format schema |
CreateMlModel |
Creating a machine learning model |
CreateUser |
Creating a database user |
DeleteDatabase |
Deleting a database |
DeleteFormatSchema |
Deleting a data format schema |
DeleteMlModel |
Deleting a machine learning model |
DeleteUser |
Deleting a database user |
GrantUserPermission |
Assigning privileges to a database user |
RevokeUserPermission |
Revoking a database user's privileges |
SetClusterExtensions |
Installing cluster extensions |
UpdateFormatSchema |
Editing a data schema format |
UpdateMlModel |
Editing a machine learning model |
UpdateUser |
Editing a database user |
Yandex Managed Service for Kubernetes
Service name: k8s.
| Event name | Description |
|---|---|
apiserver.ApiServerApprove |
Confirming a request |
apiserver.ApiServerBind |
Linking a role |
apiserver.ApiServerCreate |
Creating a resource |
apiserver.ApiServerDelete |
Deleting a resource |
apiserver.ApiServerDeleteCollection |
Deleting a resource collection |
apiserver.ApiServerEscalate |
Escalating privileges |
apiserver.ApiServerGet |
Getting information about a resource |
apiserver.ApiServerHead |
Getting resource metadata |
apiserver.ApiServerImpersonate |
Impersonation |
apiserver.ApiServerList |
Getting information about a resource collection |
apiserver.ApiServerNonstandardVerb |
The event is generated if the Managed Service for Kubernetes audit log contains a non-standard value in the verb field |
apiserver.ApiServerOptions |
Configuring a resource |
apiserver.ApiServerPatch |
Changing a resource |
apiserver.ApiServerPost |
Creating a resource |
apiserver.ApiServerPut |
Updating a resource |
apiserver.ApiServerUpdate |
Updating a query |
apiserver.ApiServerWatch |
Tracking resources |
Yandex StoreDoc
Service name: mdb.mongodb.
| Event name | Description |
|---|---|
CreateDatabase |
Creating a database |
CreateUser |
Creating a database user |
DeleteDatabase |
Deleting a database |
DeleteUser |
Deleting a database user |
GrantUserPermission |
Assigning privileges to a database user |
RevokeUserPermission |
Revoking a database user's privileges |
UpdateDatabase |
Updating a database |
UpdateUser |
Editing a database user |
Yandex Managed Service for MySQL®
Service name: mdb.mysql.
| Event name | Description |
|---|---|
CreateDatabase |
Creating a database |
CreateUser |
Creating a database user |
DatabaseUserSQLRequest |
User SQL query to a database |
DeleteDatabase |
Deleting a database |
DeleteUser |
Deleting a database user |
GrantUserPermission |
Assigning privileges to a database user |
RevokeUserPermission |
Revoking a database user's privileges |
UpdateUser |
Editing a database user |
Yandex Managed Service for PostgreSQL
Service name: mdb.postgresql.
| Event name | Description |
|---|---|
CreateDatabase |
Creating a database |
CreateUser |
Creating a database user |
DatabaseUserLogin |
Connecting a user to a database |
DatabaseUserLogout |
Disconnecting a user from a database |
DatabaseUserSQLRequest |
User SQL query to a database1 |
DeleteDatabase |
Deleting a database |
DeleteUser |
Deleting a database user |
GrantUserPermission |
Assigning privileges to a database user |
RevokeUserPermission |
Revoking a database user's privileges |
UpdateDatabase |
Updating a database |
UpdateUser |
Editing a database user |
1 Requires additional setup on the Managed Service for PostgreSQL side. For more information, see Using pgaudit in Managed Service for PostgreSQL.
Yandex Managed Service for Valkey™
Service name: mdb.redis.
| Event name | Description |
|---|---|
CreateUser |
Creating a user in a cluster |
DeleteUser |
Deleting a user from a cluster |
UpdateUser |
Updating a user in a cluster |
Yandex Object Storage
Service name: storage.
| Event name | Description |
|---|---|
ObjectAclUpdate |
Updating an object's ACL in a bucket |
ObjectCreate |
Creating an object in a bucket |
ObjectDelete |
Deleting an object from a bucket |
ObjectTagsDelete |
Deleting bucket object tags |
ObjectTagsUpdate |
Updating bucket object tags |
ObjectUpdate |
Updating an object in a bucket |
PresignURLCreate |
Creating a signed link |
Yandex Security Deck
Access Transparency module
Service name: accesstransparency.
| Event name | Description |
|---|---|
ComputeNodeAccess |
Connecting the Access Transparency module to the Yandex Data Processing subcluster |
MDBClusterAccess |
Connecting the Access Transparency module to a database cluster |
Yandex SpeechKit
Service name: ai.speechkit.
| Event name | Description |
|---|---|
stt.GetRecognition |
Request for asynchronous speech recognition results |
stt.RecognizeSpeechAsync |
Request for asynchronous speech recognition |
stt.RecognizeSpeechStream |
Streaming speech recognition request |
tts.UtteranceSynthesis |
Request for speech synthesis |
Yandex SpeechSense
Service name: speechsense.
| Event name | Description |
|---|---|
CreateTalksReport |
Creating a dialog report |
GetTalk |
Getting a dialog |
GetTalkAudio |
Getting an audio recording of a dialog |
SearchTalks |
Searching for a dialog |
UploadTalkToConnection |
Uploading a dialog to a connection |
Yandex Smart Web Security
Service name: smartwebsecurity.
| Event name | Description |
|---|---|
ArlMatchedRequest |
Triggering a rule from an ARL profile |
SWSMatchedRequest |
Triggering a rule from a security profile |
WafMatchedExclusionRule |
Triggering an exclusion rule from a WAF profile |
WafMatchedRule |
Triggering a rule from a WAF profile |
Yandex Translate
Service name: ai.translate.
| Event name | Description |
|---|---|
TranslateText |
Text translation request |
Yandex Vision OCR
Service name: ai.ocr.
| Event name | Description |
|---|---|
RecognizeText |
Text recognition request |
GetRecognition |
Request for the recognition result |
Yandex Wiki
Service name: wiki.
| Event name | Description |
|---|---|
AccessRequestCreate |
Creating a page access request |
AccessRequestProcess |
Processing a page access request |
AttachmentCreate |
Uploading a file to a page |
AttachmentDelete |
Deleting a file from a page |
AuthorRoleRequestCreate |
Creating a request for adding to page authors |
AuthorRoleRequestProcess |
Processing a request for adding to page authors |
BookmarkCreate |
Adding to favorites |
BookmarkDelete |
Deleting from favorites |
BookmarkTagsCreate |
Creating tags for favorites |
BookmarkTagsDelete |
Deleting tags for favorites |
BookmarkUpdate |
Updating tags for a page in favorites |
ClusterMove |
Moving a page cluster |
CommentCreate |
Creating a comment |
CommentDelete |
Deleting a comment |
CommentUpdate |
Updating a comment |
GridAddColumns |
Adding columns to a dynamic table |
GridAddRows |
Adding rows to a dynamic table |
GridClone |
Creating a dynamic table copy |
GridCreate |
Creating a new dynamic table |
GridDelete |
Deleting a dynamic table |
GridImport |
Importing a dynamic table from a file |
GridMoveColumns |
Moving a dynamic table column |
GridMoveRows |
Moving a dynamic table row |
GridRemoveColumns |
Deleting dynamic table columns |
GridRemoveRows |
Deleting dynamic table rows |
GridRollback |
Undoing changes in a dynamic table |
GridUpdate |
Updating a dynamic table |
GridUpdateCells |
Updating cells in a dynamic table |
GridUpdateColumn |
Updating a dynamic table column |
GridUpdateRow |
Updating a dynamic table row |
InviteActivate |
Activating an invite |
InviteDelete |
Deleting an invite |
InviteReactivate |
Resending an invite |
InviteRemoveAccess |
Revoking access granted via an invite |
InviteRemoveAllAccesses |
Revoking access granted via all invites |
InviteUse |
Using an invite |
PageChangeOrder |
Changing page order |
PageChangeToYFM |
Converting a page to a new editor |
PageClone |
Creating a page copy |
PageCreate |
Creating a page |
PageDelete |
Deleting a page |
PageImport |
Importing a page from a file |
PageRecover |
Recovering a deleted page |
PageUpdate |
Updating a page |
RecoveryTokenDelete |
Deleting a page recovery token |
SubscriberDelete |
Deleting a subscriber |
SubscribersAdd |
Adding subscribers |
SubscriptionAdd |
Adding a subscription |
SubscriptionDelete |
Deleting a subscription |
Yandex WebSQL
Service name: websql.
| Event name | Description |
|---|---|
Execute |
Running a query |
GenerateSql |
Generating a query |
GetDatabaseStructure |
Getting database structure |