Yandex Cloud
Search
Contact UsTry it for free
  • Customer Stories
  • Documentation
  • Blog
  • All Services
  • System Status
  • Marketplace
    • Featured
    • Infrastructure & Network
    • Data Platform
    • AI for business
    • Security
    • DevOps tools
    • Serverless
    • Monitoring & Resources
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Start testing with double trial credits
    • Cloud credits to scale your IT product
    • Gateway to Russia
    • Cloud for Startups
    • Center for Technologies and Society
    • Yandex Cloud Partner program
    • Price calculator
    • Pricing plans
  • Customer Stories
  • Documentation
  • Blog
© 2026 Direct Cursus Technology L.L.C.
Yandex Audit Trails
  • Getting started
  • Access management
  • Pricing policy
  • Terraform reference
  • Monitoring metrics
  • Management event reference
  • Data event reference
      • ApplyUpdatePrivateCloudConnection
      • BatchCreateServer
      • CreateImage
      • CreatePrivateCloudConnection
      • CreatePrivateSubnet
      • CreatePublicPrefixPool
      • CreatePublicSubnet
      • CreateServer
      • CreateVRF
      • DeleteImage
      • DeletePrivateCloudConnection
      • DeletePrivateSubnet
      • DeletePublicPrefixPool
      • DeletePublicSubnet
      • DeleteServer
      • DeleteVRF
      • ExternalFlow
      • PowerOffServer
      • PowerOnServer
      • RebootServer
      • RegisterServerBackupAgent
      • ReinstallServer
      • StartServerProlongation
      • StopServerProlongation
      • UpdateImage
      • UpdatePrivateCloudConnection
      • UpdatePrivateSubnet
      • UpdatePublicPrefixPool
      • UpdatePublicSubnet
      • UpdateServer
      • UpdateVRF
  • Release notes

In this article:

  • Event JSON schema
  • Field description
  • ResourceMetadata
  • Resource
  • AggregatedFlowEventDetails
  1. Audit log reference
  2. BareMetal
  3. ExternalFlow

BareMetal Audit Trails Events: ExternalFlow

Written by
Yandex Cloud
Updated at April 15, 2026
  • Event JSON schema
  • Field description
  • ResourceMetadata
  • Resource
  • AggregatedFlowEventDetails

Event JSON schemaEvent JSON schema

{
  "eventId": "string",
  "eventSource": "string",
  "eventType": "string",
  "eventTime": "string",
  "resourceMetadata": {
    "path": [
      {
        "resourceType": "string",
        "resourceId": "string",
        // Includes only one of the fields `resourceName`
        "resourceName": "string"
        // end of the list of possible fields
      }
    ]
  },
  "eventStatus": "string",
  "details": {
    "vers": "string",
    "proto": "string",
    "srcAddr": "string",
    "dstAddr": "string",
    "direction": "string",
    "srcPort": "string",
    "dstPort": "string",
    "aggStart": "string",
    "aggEnd": "string",
    "packets": "string",
    "bytes": "string",
    "tcpFlags": "string",
    "subnetId": "string",
    "folderId": "string"
  }
}

Field descriptionField description

Field

Description

eventId

string

eventSource

string

eventType

string

eventTime

string (date-time)

String in RFC3339 text format. The range of possible values is from
0001-01-01T00:00:00Z to 9999-12-31T23:59:59.999999999Z, i.e. from 0 to 9 digits for fractions of a second.

To work with values in this field, use the APIs described in the
Protocol Buffers reference.
In some languages, built-in datetime utilities do not support nanosecond precision (9 digits).

resourceMetadata

ResourceMetadata

eventStatus

enum (SynchronousEventStatus)

  • ERROR
  • DONE

details

AggregatedFlowEventDetails

ResourceMetadataResourceMetadata

Field

Description

path[]

Resource

ResourceResource

Field

Description

resourceType

string

resourceId

string

resourceName

string

Includes only one of the fields resourceName.

AggregatedFlowEventDetailsAggregatedFlowEventDetails

Field

Description

vers

string (int64)

proto

string (int64)

srcAddr

string

dstAddr

string

direction

string

srcPort

string (int64)

dstPort

string (int64)

aggStart

string (date-time)

String in RFC3339 text format. The range of possible values is from
0001-01-01T00:00:00Z to 9999-12-31T23:59:59.999999999Z, i.e. from 0 to 9 digits for fractions of a second.

To work with values in this field, use the APIs described in the
Protocol Buffers reference.
In some languages, built-in datetime utilities do not support nanosecond precision (9 digits).

aggEnd

string (date-time)

String in RFC3339 text format. The range of possible values is from
0001-01-01T00:00:00Z to 9999-12-31T23:59:59.999999999Z, i.e. from 0 to 9 digits for fractions of a second.

To work with values in this field, use the APIs described in the
Protocol Buffers reference.
In some languages, built-in datetime utilities do not support nanosecond precision (9 digits).

packets

string (int64)

bytes

string (int64)

tcpFlags

string

subnetId

string

folderId

string

Was the article helpful?

Previous
DeleteVRF
Next
PowerOffServer
© 2026 Direct Cursus Technology L.L.C.