Data event reference
Written by
Updated at January 20, 2026
- Yandex Application Load Balancer
- Yandex Certificate Manager
- Yandex Cloud Desktop
- Yandex Cloud DNS
- Yandex Compute Cloud
- Yandex Cloud AI Studio
- Yandex Identity Hub
- Yandex Identity and Access Management
- Yandex Key Management Service
- Yandex Lockbox
- Yandex Managed Service for ClickHouse®
- Yandex Managed Service for Kubernetes
- Yandex StoreDoc
- Yandex Managed Service for MySQL®
- Yandex MPP Analytics for PostgreSQL
- Yandex Managed Service for PostgreSQL
- Yandex Managed Service for Valkey™
- Yandex Object Storage
- Yandex Security Deck
- Yandex SpeechKit
- Yandex SpeechSense
- Yandex Smart Web Security
- Yandex Translate
- Yandex Virtual Private Cloud
- Yandex Vision OCR
- Yandex Wiki
- Yandex WebSQL
The value of the event_type field in a data event audit log is determined by the event source service.
The general value format is as follows:
yandex.cloud.audit.<service_name>.<event_name>
You can find the detailed JSON structure of the event record in the audit log reference. The events in it are sorted alphabetically without division into levels and contain all possible fields. In real logs, the field set depends on the parameters of the event and particular object.
On this page, you will find events for the following services:
- Yandex Application Load Balancer
- Yandex Certificate Manager
- Yandex Cloud Desktop
- Yandex Cloud DNS
- Yandex Compute Cloud
- Yandex Cloud AI Studio
- Yandex Identity Hub
- Yandex Identity and Access Management
- Yandex Key Management Service
- Yandex Lockbox
- Yandex Managed Service for ClickHouse®
- Yandex Managed Service for Kubernetes
- Yandex StoreDoc
- Yandex Managed Service for MySQL®
- Yandex Managed Service for PostgreSQL
- Yandex Managed Service for Valkey™
- Yandex Object Storage
- Yandex Security Deck
- Yandex SpeechKit
- Yandex SpeechSense
- Yandex Smart Web Security
- Yandex Translate
- Yandex Virtual Private Cloud
- Yandex Vision OCR
- Yandex Wiki
- Yandex WebSQL
Yandex Application Load Balancer
Service name: apploadbalancer.
| Event name | Description |
|---|---|
LoadbalancerHTTPAccessLog |
HTTP request logging |
LoadbalancerTCPAccessLog |
TCP request logging |
Yandex Certificate Manager
Service name: certificatemanager.
| Event name | Description |
|---|---|
GetCertificateContent |
Getting the contents of an SSL certificate |
GetExCertificateContent |
Getting the contents of an expired SSL certificate |
Yandex Cloud Desktop
Service name: clouddesktop.
| Event name | Description |
|---|---|
GenerateDesktopRDPFile |
Generating an RDP file for a desktop connection |
ResetDesktopPassword |
Resetting desktop password |
Yandex Cloud DNS
Service name: dns.
| Event name | Description |
|---|---|
ProcessDnsQuery |
Execution result of a DNS query from a Cloud DNS client |
Yandex Compute Cloud
Service name: compute.
| Event name | Description |
|---|---|
serialssh.ConnectSerialPort |
Connecting to an instance serial port |
MigrateInstance |
VM live migration * |
* The audit log collects events only for VMs with a maintenance policy configured.
Yandex Cloud AI Studio
Service name: ai.
| Event name | Description |
|---|---|
foundationmodels.CancelBatchInference |
Stopping a model in batch mode |
foundationmodels.DeleteBatchInference |
Deleting a processing result in batch mode |
foundationmodels.GetTextProcessingResult |
Request for the generation result |
foundationmodels.StartBatchInference |
Running a model in batch mode |
foundationmodels.TextProcessing |
Generation request |
Yandex Identity Hub
Service name: organizationmanager.
| Event name | Description |
|---|---|
idp.AuthenticateByPassword |
Password authentication. |
Yandex Identity and Access Management
Service name: iam.
| Event name | Description |
|---|---|
CreateIamToken |
Creating an IAM token |
RevokeIamToken |
Revoking an IAM token |
credential.ApplicationLoginEvent |
User logon to the application |
credential.CreateRefreshTokenForSubject |
Creating a refresh token for a user |
credential.RevokeRefreshTokenForSubject |
Revoking a refresh token from a user |
credential.RevokeSsoSession |
Terminating a SSO session |
mfa.VerifyUserCredential |
Confirming user credentials when verifying additional MFA factors |
oslogin.CheckSshPolicy |
Checking permissions to connect via SSH with OS Login access |
oslogin.GenerateSshCertificate |
Generating an SSH certificate for OS Login access |
Yandex Key Management Service
Service name: kms.
| Event name | Description |
|---|---|
Decrypt |
Decrypting ciphertext with a key |
Encrypt |
Encrypting a text string with a key |
GenerateDataKey |
Generating a high-entropy key for Envelope Encryption |
ReEncrypt |
Decrypting ciphertext with a previous-version key and re-encrypting the decrypted text with a new version of the same key |
Yandex Lockbox
Service name: lockbox.
| Event name | Description |
|---|---|
GetPayload |
Accessing the contents of a secret |
GetPayloadEx |
Accessing the contents of a secret by folder or name |
Yandex Managed Service for ClickHouse®
Service name: mdb.clickhouse.
| Event name | Description |
|---|---|
CreateDatabase |
Creating a database |
CreateFormatSchema |
Creating a data format schema |
CreateMlModel |
Creating a machine learning model |
CreateUser |
Creating a database user |
DeleteDatabase |
Deleting a database |
DeleteFormatSchema |
Deleting a data format schema |
DeleteMlModel |
Deleting a machine learning model |
DeleteUser |
Deleting a database user |
GetDatabase |
Getting database info |
GetUser |
Getting user info |
GrantUserPermission |
Assigning privileges to a database user |
ListDatabases |
Getting a list of databases |
ListUsers |
Getting a list of users |
RevokeUserPermission |
Revoking a database user's privileges |
SetClusterExtensions |
Installing cluster extensions |
UpdateFormatSchema |
Editing a data schema format |
UpdateMlModel |
Editing a machine learning model |
UpdateUser |
Editing a database user |
Yandex Managed Service for Kubernetes
Service name: k8s.
| Event name | Description |
|---|---|
apiserver.ApiServerApprove |
Confirming a request |
apiserver.ApiServerBind |
Linking a role |
apiserver.ApiServerCreate |
Creating a resource |
apiserver.ApiServerDelete |
Deleting a resource |
apiserver.ApiServerDeleteCollection |
Deleting a resource collection |
apiserver.ApiServerEscalate |
Escalating privileges |
apiserver.ApiServerGet |
Getting information about a resource |
apiserver.ApiServerHead |
Getting resource metadata |
apiserver.ApiServerImpersonate |
Impersonation |
apiserver.ApiServerList |
Getting information about a resource collection |
apiserver.ApiServerNonstandardVerb |
The event is generated if the Managed Service for Kubernetes audit log contains a non-standard value in the verb field |
apiserver.ApiServerOptions |
Configuring a resource |
apiserver.ApiServerPatch |
Changing a resource |
apiserver.ApiServerPost |
Creating a resource |
apiserver.ApiServerPut |
Updating a resource |
apiserver.ApiServerUpdate |
Updating a query |
apiserver.ApiServerWatch |
Tracking resources |
Yandex StoreDoc
Service name: mdb.mongodb.
| Event name | Description |
|---|---|
CreateDatabase |
Creating a database |
CreateUser |
Creating a database user |
DeleteDatabase |
Deleting a database |
DeleteUser |
Deleting a database user |
GetDatabase |
Getting database info |
GetUser |
Getting user info |
GrantUserPermission |
Assigning privileges to a database user |
ListDatabases |
Getting a list of databases |
ListUsers |
Getting a list of users |
RevokeUserPermission |
Revoking a database user's privileges |
UpdateDatabase |
Updating a database |
UpdateUser |
Editing a database user |
Yandex Managed Service for MySQL®
Service name: mdb.mysql.
| Event name | Description |
|---|---|
CreateDatabase |
Creating a database |
CreateUser |
Creating a database user |
DatabaseUserSQLRequest |
User SQL query to a database |
DeleteDatabase |
Deleting a database |
DeleteUser |
Deleting a database user |
GetDatabase |
Getting database info |
GetUser |
Getting user info |
GrantUserPermission |
Assigning privileges to a database user |
ListDatabases |
Getting a list of databases |
ListUsers |
Getting a list of users |
RevokeUserPermission |
Revoking a database user's privileges |
UpdateUser |
Editing a database user |
Yandex MPP Analytics for PostgreSQL
Service name: mdb.greenplum.
| Event name | Description |
|---|---|
CreateHBARule |
Creating a user authentication rule |
CreatePXFDatasource |
Creating a connection to an external table |
CreateResourceGroup |
Creating a resource group |
CreateUser |
Creating a database user |
DeleteHBARule |
Deleting a user authentication rule |
DeletePXFDatasource |
Deleting an external table connection |
DeleteResourceGroup |
Deleting a resource group |
DeleteUser |
Deleting a database user |
ListPXFDatasources |
Getting a list of connections to an external table |
ListUsers |
Getting a list of database users |
UpdateHBARule |
Updating a user authentication rule |
UpdatePXFDatasource |
Updating an external table connection |
UpdateResourceGroup |
Updating a resource group |
UpdateUser |
Editing a database user |
Yandex Managed Service for PostgreSQL
Service name: mdb.postgresql.
| Event name | Description |
|---|---|
CreateDatabase |
Creating a database |
CreateUser |
Creating a database user |
DatabaseUserLogin |
Connecting a user to a database |
DatabaseUserLogout |
Disconnecting a user from a database |
DatabaseUserSQLRequest |
User SQL query to a database1 |
DeleteDatabase |
Deleting a database |
DeleteUser |
Deleting a database user |
GetDatabase |
Getting information about a database |
GetUser |
Getting database user information |
GrantUserPermission |
Assigning privileges to a database user |
ListDatabases |
Getting a list of databases |
ListUsers |
Getting a list of database users |
RevokeUserPermission |
Revoking a database user's privileges |
UpdateDatabase |
Updating a database |
UpdateUser |
Editing a database user |
1 Requires additional setup on the Managed Service for PostgreSQL side. For more information, see Using pgaudit in Managed Service for PostgreSQL.
Yandex Managed Service for Valkey™
Service name: mdb.redis.
| Event name | Description |
|---|---|
CreateUser |
Creating a user in a cluster |
DatabaseConnectionClose |
Closing a database connection |
DatabaseConnectionOpen |
Opening a database connection |
DatabaseUserLogin |
Database user log in |
DeleteUser |
Deleting a user from a cluster |
UpdateUser |
Updating a user in a cluster |
Yandex Object Storage
Service name: storage.
| Event name | Description |
|---|---|
ObjectAclUpdate |
Updating an object's ACL in a bucket |
ObjectCreate |
Creating an object in a bucket |
ObjectDelete |
Deleting an object from a bucket |
ObjectTagsDelete |
Deleting bucket object tags |
ObjectTagsUpdate |
Updating bucket object tags |
ObjectUpdate |
Updating an object in a bucket |
PresignURLCreate |
Creating a signed link |
Yandex Security Deck
Service name: securitydeck.
Access Transparency module
Module name: securitydeck.accesstransparency.
| Event name | Description |
|---|---|
ComputeNodeAccess |
Connecting the Access Transparency module to the Yandex Data Processing subcluster |
MDBClusterAccess |
Connecting the Access Transparency module to a database cluster |
Alerts module
Module name: securitydeck.alerts.
| Event name | Description |
|---|---|
CreateAlert |
Creating an alert |
Kubernetes® Security Posture Management (KSPM)
Module name: securitydeck.kspm.
| Event name | Description |
|---|---|
TriggerAdmissionControl |
Triggering of KSPM when checking newly created and updated resources |
TriggerRuntimeControl |
Triggering of KSPM when monitoring workload security |
Yandex SpeechKit
Service name: ai.speechkit.
| Event name | Description |
|---|---|
stt.GetRecognition |
Request for asynchronous speech recognition results |
stt.RecognizeSpeechAsync |
Request for asynchronous speech recognition |
stt.RecognizeSpeechStream |
Streaming speech recognition request |
tts.UtteranceSynthesis |
Request for speech synthesis |
Yandex SpeechSense
Service name: speechsense.
| Event name | Description |
|---|---|
CreateTalksReport |
Creating a dialog report |
GetTalk |
Getting a dialog |
GetTalkAudio |
Getting an audio recording of a dialog |
SearchTalks |
Searching for a dialog |
UploadTalkToConnection |
Uploading a dialog to a connection |
Yandex Smart Web Security
Service name: smartwebsecurity.
| Event name | Description |
|---|---|
ArlMatchedRequest |
Triggering a rule from an ARL profile |
SWSMatchedRequest |
Triggering a rule from a security profile |
WafMatchedExclusionRule |
Triggering an exclusion rule from a WAF profile |
WafMatchedRule |
Triggering a rule from a WAF profile |
Yandex Translate
Service name: ai.translate.
| Event name | Description |
|---|---|
TranslateText |
Text translation request |
Yandex Virtual Private Cloud
Service name: network.
| Event name | Description |
|---|---|
CreateIpfix |
Reserving a fixed IP address |
DeleteIpfix |
Deleting a fixed IP address |
ExternalFlow |
Traffic flow from VPC to external networks |
Yandex Vision OCR
Service name: ai.ocr.
| Event name | Description |
|---|---|
RecognizeText |
Text recognition request |
GetRecognition |
Request for the recognition result |
Yandex Wiki
Service name: wiki.
| Event name | Description |
|---|---|
AccessRequestCreate |
Creating a page access request |
AccessRequestProcess |
Processing a page access request |
AttachmentCreate |
Uploading a file to a page |
AttachmentDelete |
Deleting a file from a page |
AuthorRoleRequestCreate |
Creating a request for adding to page authors |
AuthorRoleRequestProcess |
Processing a request for adding to page authors |
BookmarkCreate |
Adding to favorites |
BookmarkDelete |
Deleting from favorites |
BookmarkTagsCreate |
Creating tags for favorites |
BookmarkTagsDelete |
Deleting tags for favorites |
BookmarkUpdate |
Updating tags for a page in favorites |
ClusterMove |
Moving a page cluster |
CommentCreate |
Creating a comment |
CommentDelete |
Deleting a comment |
CommentUpdate |
Updating a comment |
GridAddColumns |
Adding columns to a dynamic table |
GridAddRows |
Adding rows to a dynamic table |
GridClone |
Creating a dynamic table copy |
GridCreate |
Creating a new dynamic table |
GridDelete |
Deleting a dynamic table |
GridImport |
Importing a dynamic table from a file |
GridMoveColumns |
Moving a dynamic table column |
GridMoveRows |
Moving a dynamic table row |
GridRemoveColumns |
Deleting dynamic table columns |
GridRemoveRows |
Deleting dynamic table rows |
GridRollback |
Undoing changes in a dynamic table |
GridUpdate |
Updating a dynamic table |
GridUpdateCells |
Updating cells in a dynamic table |
GridUpdateColumn |
Updating a dynamic table column |
GridUpdateRow |
Updating a dynamic table row |
InviteActivate |
Activating an invite |
InviteDelete |
Deleting an invite |
InviteReactivate |
Resending an invite |
InviteRemoveAccess |
Revoking access granted via an invite |
InviteRemoveAllAccesses |
Revoking access granted via all invites |
InviteUse |
Using an invite |
PageChangeOrder |
Changing page order |
PageChangeToYFM |
Converting a page to a new editor |
PageClone |
Creating a page copy |
PageCreate |
Creating a page |
PageDelete |
Deleting a page |
PageImport |
Importing a page from a file |
PageRecover |
Recovering a deleted page |
PageUpdate |
Updating a page |
RecoveryTokenDelete |
Deleting a page recovery token |
SubscriberDelete |
Deleting a subscriber |
SubscribersAdd |
Adding subscribers |
SubscriptionAdd |
Adding a subscription |
SubscriptionDelete |
Deleting a subscription |
Yandex WebSQL
Service name: websql.
| Event name | Description |
|---|---|
Execute |
Running a query |
GenerateSql |
Generating a query |
GetDatabaseStructure |
Getting database structure |