Связаться с намиПопробовать бесплатно

Audit Trails Events: CreateTrail

Статья создана
Обновлена 24 декабря 2025 г.

Event JSON schema

{
  "eventId": "string",
  "eventSource": "string",
  "eventType": "string",
  "eventTime": "string",
  "authentication": {
    "authenticated": "boolean",
    "subjectType": "string",
    "subjectId": "string",
    "subjectName": "string",
    "federationId": "string",
    "federationName": "string",
    "federationType": "string",
    "tokenInfo": {
      "maskedIamToken": "string",
      "iamTokenId": "string",
      "impersonatorId": "string",
      "impersonatorType": "string",
      "impersonatorName": "string",
      "impersonatorFederationId": "string",
      "impersonatorFederationName": "string",
      "impersonatorFederationType": "string"
    }
  },
  "authorization": {
    "authorized": "boolean"
  },
  "resourceMetadata": {
    "path": [
      {
        "resourceType": "string",
        "resourceId": "string",
        "resourceName": "string"
      }
    ]
  },
  "requestMetadata": {
    "remoteAddress": "string",
    "userAgent": "string",
    "requestId": "string",
    "remotePort": "string"
  },
  "eventStatus": "string",
  "error": {
    "code": "integer",
    "message": "string",
    "details": [
      "object"
    ]
  },
  "details": {
    "trailId": "string",
    "trailName": "string",
    "destination": {
      // Includes only one of the fields `objectStorage`, `cloudLogging`, `dataStream`, `eventrouter`
      "objectStorage": {
        "bucketId": "string",
        "objectPrefix": "string"
      },
      "cloudLogging": {
        // Includes only one of the fields `logGroupId`, `folderId`
        "logGroupId": "string",
        "folderId": "string"
        // end of the list of possible fields
      },
      "dataStream": {
        "databaseId": "string",
        "streamName": "string",
        "codec": "string"
      },
      "eventrouter": {
        "eventrouterConnectorId": "string"
      }
      // end of the list of possible fields
    },
    "serviceAccountId": "string",
    "status": "string",
    "pathFilter": {
      "root": {
        // Includes only one of the fields `anyFilter`, `someFilter`
        "anyFilter": {
          "resource": {
            "id": "string",
            "type": "string"
          }
        },
        "someFilter": {
          "resource": {
            "id": "string",
            "type": "string"
          },
          "filters": [
            "object"
          ]
        }
        // end of the list of possible fields
      }
    },
    "eventFilter": {
      "dataplaneFilters": [
        {
          "service": "string"
        }
      ]
    },
    "filteringPolicy": {
      "managementEventsFilter": {
        "resourceScopes": [
          {
            "id": "string",
            "type": "string"
          }
        ]
      },
      "dataEventsFilters": [
        {
          "service": "string",
          // Includes only one of the fields `includedEvents`, `excludedEvents`
          "includedEvents": {
            "eventTypes": [
              "string"
            ]
          },
          "excludedEvents": {
            "eventTypes": [
              "string"
            ]
          },
          // end of the list of possible fields
          "resourceScopes": [
            {
              "id": "string",
              "type": "string"
            }
          ]
        }
      ]
    },
    "description": "string",
    "labels": "object"
  },
  "requestParameters": "object",
  "response": "object"
}

Field description

Field

Description

eventId

string

eventSource

string

eventType

string

eventTime

string (date-time)

String in RFC3339 text format. The range of possible values is from
0001-01-01T00:00:00Z to 9999-12-31T23:59:59.999999999Z, i.e. from 0 to 9 digits for fractions of a second.

To work with values in this field, use the APIs described in the
Protocol Buffers reference.
In some languages, built-in datetime utilities do not support nanosecond precision (9 digits).

authentication

IamAuthentication

authorization

Authorization

resourceMetadata

ResourceMetadata

requestMetadata

RequestMetadata

eventStatus

enum (EventStatus)

  • STARTED
  • ERROR
  • DONE
  • CANCELLED
  • RUNNING

error

Status

The error result of the operation in case of failure or cancellation.

details

EventDetails

requestParameters

object

response

object

IamAuthentication

Field

Description

authenticated

boolean

subjectType

enum (IamSubjectType)

  • YANDEX_PASSPORT_USER_ACCOUNT
  • SERVICE_ACCOUNT
  • FEDERATED_USER_ACCOUNT
  • SSH_USER
  • KUBERNETES_USER

subjectId

string

subjectName

string

federationId

string

federationName

string

federationType

enum (FederationType)

  • GLOBAL_FEDERATION
  • PRIVATE_FEDERATION

tokenInfo

IamTokenInfo

IamTokenInfo

Field

Description

maskedIamToken

string

iamTokenId

string

impersonatorId

string

impersonatorType

enum (IamSubjectType)

  • YANDEX_PASSPORT_USER_ACCOUNT
  • SERVICE_ACCOUNT
  • FEDERATED_USER_ACCOUNT
  • SSH_USER
  • KUBERNETES_USER

impersonatorName

string

impersonatorFederationId

string

impersonatorFederationName

string

impersonatorFederationType

enum (FederationType)

  • GLOBAL_FEDERATION
  • PRIVATE_FEDERATION

Authorization

Field

Description

authorized

boolean

ResourceMetadata

Field

Description

path[]

Resource

Resource

Field

Description

resourceType

string

resourceId

string

resourceName

string

RequestMetadata

Field

Description

remoteAddress

string

userAgent

string

requestId

string

remotePort

string (int64)

Status

The error result of the operation in case of failure or cancellation.

Field

Description

code

integer (int32)

Error code. An enum value of google.rpc.Code.

message

string

An error message.

details[]

object

A list of messages that carry the error details.

EventDetails

Field

Description

trailId

string

trailName

string

destination

Destination

serviceAccountId

string

status

enum (TrailStatus)

  • ACTIVE
  • ERROR
  • DELETED

pathFilter

PathFilter

eventFilter

EventFilter

filteringPolicy

FilteringPolicy

description

string

The maximum string length in characters is 1024.

labels

object (map<string, string>)

No more than 64 per resource. The maximum string length in characters for each value is 63. Each value must match the regular expression [-_0-9a-z]*. The maximum string length in characters for each key is 63. Each key must match the regular expression [a-z][-_0-9a-z]*.

Destination

Field

Description

objectStorage

ObjectStorage

Includes only one of the fields objectStorage, cloudLogging, dataStream, eventrouter.

cloudLogging

CloudLogging

Includes only one of the fields objectStorage, cloudLogging, dataStream, eventrouter.

dataStream

DataStream

Includes only one of the fields objectStorage, cloudLogging, dataStream, eventrouter.

eventrouter

EventRouter

Includes only one of the fields objectStorage, cloudLogging, dataStream, eventrouter.

ObjectStorage

Field

Description

bucketId

string

objectPrefix

string

CloudLogging

Field

Description

logGroupId

string

Includes only one of the fields logGroupId, folderId.

folderId

string

Includes only one of the fields logGroupId, folderId.

DataStream

Field

Description

databaseId

string

streamName

string

codec

enum (Codec)

  • RAW
  • GZIP
  • ZSTD

EventRouter

Field

Description

eventrouterConnectorId

string

PathFilter

Field

Description

root

PathFilterElement

PathFilterElement

Field

Description

anyFilter

PathFilterElementAny

Includes only one of the fields anyFilter, someFilter.

someFilter

PathFilterElementSome

Includes only one of the fields anyFilter, someFilter.

PathFilterElementAny

Field

Description

resource

Resource

Resource

Field

Description

id

string

The maximum string length in characters is 64.

type

string

The maximum string length in characters is 50.

PathFilterElementSome

Field

Description

resource

Resource

filters[]

PathFilterElement

The number of elements must be greater than 0.

EventFilter

Field

Description

dataplaneFilters[]

EventFilterElement

The minimum number of elements is 0.

EventFilterElement

Field

Description

service

string

FilteringPolicy

Field

Description

managementEventsFilter

ManagementEventsFiltering

dataEventsFilters[]

DataEventsFiltering

The number of elements must be less than 128.

ManagementEventsFiltering

Field

Description

resourceScopes[]

Resource

The number of elements must be in the range 1-1024.

DataEventsFiltering

Field

Description

service

string

includedEvents

EventTypes

Includes only one of the fields includedEvents, excludedEvents.

excludedEvents

EventTypes

Includes only one of the fields includedEvents, excludedEvents.

resourceScopes[]

Resource

The number of elements must be in the range 1-1024.

EventTypes

Field

Description

eventTypes[]

string

The number of elements must be in the range 1-1024.
Предыдущая
UpdateVirtualHostRoute
Следующая
DeleteTrail