Yandex Audit Trails event reference

Written by

Updated at June 17, 2025

Management event reference
Data event reference

Audit Trails supports tracking control plane and data plane events for Yandex Compute Cloud.

The general format of the event_type field value is as follows:

yandex.cloud.audit.compute.<event_name>

Management event reference

Event name	Description
`AddInstanceOneToOneNat`	Adding a public IP address for a VM instance
`AttachInstanceDisk`	Connecting a disk to a VM
`AttachInstanceFilesystem`	Connecting a file system to a VM
`AttachInstanceNetworkInterface`	Connecting a network interface
`ChangeDiskStatus`	Changing a non-replicated disk status
`CrashInstance`	Emergency VM shutdown
`CreateDisk`	Creating a disk
`CreateFilesystem`	Creating a file system
`CreateGpuCluster`	Creating a GPU cluster
`CreateHostGroup`	Creating a group of dedicated hosts
`CreateImage`	Creating a disk image
`CreateInstance`	Creating a VM instance
`CreateReservedInstancePool`	Creating a pool of reserved VMs
`CreateSnapshot`	Creating a disk snapshot
`CreateSnapshotSchedule`	Creating a disk snapshot schedule
`DecommissionHost`	Withdrawing a dedicated host for maintenance
`DeleteDisk`	Deleting a disk
`DeleteFilesystem`	Deleting a file system
`DeleteGpuCluster`	Deleting a GPU cluster
`DeleteHostGroup`	Deleting a group of dedicated hosts
`DeleteImage`	Deleting a disk image
`DeleteInstance`	Deleting a VM
`DeleteReservedInstancePool`	Deleting a pool of reserved VMs
`DeleteSnapshot`	Deleting a disk snapshot
`DeleteSnapshotSchedule`	Deleting a disk snapshot schedule
`DetachInstanceDisk`	Detaching a disk from a VM instance
`DetachInstanceFilesystem`	Detaching a file system from a VM instance
`DetachInstanceNetworkInterface`	Disconnecting a network interface
`DisableSnapshotSchedule`	Disabling a disk snapshot schedule
`EnableSnapshotSchedule`	Enabling a disk snapshot schedule
`GuestStopInstance`	Stopping a VM on command from this VM
`PreemptInstance`	Interrupting a VM
`RemoveInstanceOneToOneNat`	Removing a VM's public IP address
`RestartInstance`	Restarting a VM
`StartInstance`	Starting a VM
`StopInstance`	Stopping a VM
`UpdateDisk`	Changing a disk
`UpdateFilesystem`	Modifying a file system
`UpdateGpuCluster`	Updating a GPU cluster
`UpdateHost`	Updating the automatic release date of a dedicated host
`UpdateHostGroup`	Updating a group of dedicated hosts
`UpdateImage`	Updating a disk image
`UpdateInstance`	Updating a VM instance
`UpdateInstanceMetadata`	Updating VM instance metadata
`UpdateInstanceNetworkInterface`	Updating VM network settings
`UpdateReservedInstancePool`	Updating a pool of reserved VMs
`UpdateSnapshot`	Updating a disk snapshot
`UpdateSnapshotSchedule`	Updating disk snapshot schedule parameters
`UpdateSnapshotScheduleDisks`	Updating disk snapshot schedule parameters
`instancegroup`	Managing an instance group
`instancegroup.CreateInstanceGroup`	Creating an instance group
`instancegroup.DeleteInstanceGroup`	Deleting an instance group
`instancegroup.DeleteInstanceGroupInstances`	Removing an instance from a group
`instancegroup.PauseInstanceGroup`	Pausing instance group management processes
`instancegroup.ResumeInstanceGroup`	Resuming instance group management processes
`instancegroup.RollingRestartInstanceGroupInstances`	Restarting instances in a group one by one
`instancegroup.SetInstanceGroupAccessBindings`	Assigning roles to an instance group
`instancegroup.StartInstanceGroup`	Starting an instance group
`instancegroup.StopInstanceGroup`	Stopping an instance group
`instancegroup.StopInstanceGroupInstances`	Stopping an instance from a group
`instancegroup.UpdateInstanceGroup`	Updating an instance group
`instancegroup.UpdateInstanceGroupAccessBindings`	Updating roles for an instance group

Data event reference

Event name	Description
`serialssh.ConnectSerialPort`	Connecting to an instance serial port
`MigrateInstance`	VM live migration ^*

* The audit log collects events only for VMs with a maintenance policy configured.

Yandex Audit Trails event reference

Management event referenceManagement event reference

Data event referenceData event reference

Was the article helpful?

Management event reference

Data event reference