{ "$schema": "https://json-schema.org/draft/2020-12/schema", "$id": "https://raw.githubusercontent.com/api-evangelist/mongodb/main/json-schema/mongodb-event-view-for-nds-group-schema.json", "title": "EventViewForNdsGroup", "x-generated": "2026-10-03", "x-method": "derived", "x-generator": "derive-json-schema.py", "x-source": "openapi/mongodb-events-api-openapi.yml#/components/schemas/EventViewForNdsGroup", "oneOf": [ { "$ref": "#/$defs/DefaultEventViewForNdsGroup" }, { "$ref": "#/$defs/AlertAudit" }, { "$ref": "#/$defs/AlertConfigAudit" }, { "$ref": "#/$defs/ApiUserEventViewForNdsGroup" }, { "$ref": "#/$defs/ServiceAccountGroupEvents" }, { "$ref": "#/$defs/AutomationConfigEventView" }, { "$ref": "#/$defs/AppServiceEventView" }, { "$ref": "#/$defs/BillingEventViewForNdsGroup" }, { "$ref": "#/$defs/ClusterEventViewForNdsGroup" }, { "$ref": "#/$defs/DataExplorerAccessedEventView" }, { "$ref": "#/$defs/DataExplorerEvent" }, { "$ref": "#/$defs/FTSIndexAuditView" }, { "$ref": "#/$defs/HostEventViewForNdsGroup" }, { "$ref": "#/$defs/HostMetricEvent" }, { "$ref": "#/$defs/NDSAuditViewForNdsGroup" }, { "$ref": "#/$defs/NDSAutoScalingAuditViewForNdsGroup" }, { "$ref": "#/$defs/NDSServerlessInstanceAuditView" }, { "$ref": "#/$defs/NDSTenantEndpointAuditView" }, { "$ref": "#/$defs/ForNdsGroup" }, { "$ref": "#/$defs/SearchDeploymentAuditView" }, { "$ref": "#/$defs/TeamEventViewForNdsGroup" }, { "$ref": "#/$defs/UserEventViewForNdsGroup" }, { "$ref": "#/$defs/ResourceEventViewForNdsGroup" }, { "$ref": "#/$defs/StreamsEventViewForNdsGroup" }, { "$ref": "#/$defs/StreamProcessorEventViewForNdsGroup" }, { "$ref": "#/$defs/ChartsAudit" }, { "$ref": "#/$defs/AtlasResourcePolicyAuditForNdsGroup" } ], "type": "object", "$defs": { "AlertAudit": { "description": "Alert audit indicates acknowledgement status of an alert.", "properties": { "alertId": { "description": "Unique 24-hexadecimal digit string that identifies the alert associated with the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "apiKeyId": { "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "created": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "eventTypeName": { "$ref": "#/$defs/AlertAuditTypeView" }, "groupId": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "isGlobalAdmin": { "description": "Flag that indicates whether a MongoDB employee triggered the specified event.", "readOnly": true, "type": "boolean" }, "links": { "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.", "items": { "$ref": "#/$defs/Link" }, "readOnly": true, "type": "array" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "publicKey": { "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.", "readOnly": true, "type": "string" }, "raw": { "$ref": "#/$defs/raw" }, "remoteAddress": { "description": "IPv4 or IPv6 address from which the user triggered this event.", "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$", "readOnly": true, "type": "string" }, "userId": { "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "username": { "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.", "format": "email", "readOnly": true, "type": "string" } }, "required": [ "created", "eventTypeName", "id" ], "title": "Alert Audits", "type": "object" }, "AlertAuditTypeView": { "description": "Unique identifier of event type.", "enum": [ "ALERT_ACKNOWLEDGED_AUDIT", "ALERT_UNACKNOWLEDGED_AUDIT" ], "title": "Alert Audit Types", "type": "string" }, "AlertConfigAudit": { "description": "Alert configuration audit indicates any activities around alert settings.", "properties": { "alertConfigId": { "description": "Unique 24-hexadecimal digit string that identifies the alert configuration associated with the `alertId`.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "apiKeyId": { "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "created": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "eventTypeName": { "$ref": "#/$defs/AlertConfigAuditTypeView" }, "groupId": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "isGlobalAdmin": { "description": "Flag that indicates whether a MongoDB employee triggered the specified event.", "readOnly": true, "type": "boolean" }, "links": { "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.", "items": { "$ref": "#/$defs/Link" }, "readOnly": true, "type": "array" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "publicKey": { "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.", "readOnly": true, "type": "string" }, "raw": { "$ref": "#/$defs/raw" }, "remoteAddress": { "description": "IPv4 or IPv6 address from which the user triggered this event.", "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$", "readOnly": true, "type": "string" }, "userId": { "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "username": { "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.", "format": "email", "readOnly": true, "type": "string" } }, "required": [ "created", "eventTypeName", "id" ], "title": "Alert Config Audits", "type": "object" }, "AlertConfigAuditTypeView": { "description": "Unique identifier of event type.", "enum": [ "ALERT_CONFIG_DISABLED_AUDIT", "ALERT_CONFIG_ENABLED_AUDIT", "ALERT_CONFIG_ADDED_AUDIT", "ALERT_CONFIG_DELETED_AUDIT", "ALERT_CONFIG_CHANGED_AUDIT" ], "title": "Alert Audit Types", "type": "string" }, "ApiUserEventTypeViewForNdsGroup": { "description": "Unique identifier of event type.", "enum": [ "API_KEY_CREATED", "API_KEY_DELETED", "API_KEY_ACCESS_LIST_ENTRY_ADDED", "API_KEY_ACCESS_LIST_ENTRY_DELETED", "API_KEY_ROLES_CHANGED", "API_KEY_DESCRIPTION_CHANGED", "API_KEY_ADDED_TO_GROUP", "API_KEY_REMOVED_FROM_GROUP", "API_KEY_UI_IP_ACCESS_LIST_INHERITANCE_ENABLED", "API_KEY_UI_IP_ACCESS_LIST_INHERITANCE_DISABLED" ], "title": "API User Event Types", "type": "string" }, "ApiUserEventViewForNdsGroup": { "description": "API User event identifies different activities around user API keys.", "properties": { "apiKeyId": { "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "created": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "eventTypeName": { "$ref": "#/$defs/ApiUserEventTypeViewForNdsGroup" }, "groupId": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "isGlobalAdmin": { "description": "Flag that indicates whether a MongoDB employee triggered the specified event.", "readOnly": true, "type": "boolean" }, "links": { "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.", "items": { "$ref": "#/$defs/Link" }, "readOnly": true, "type": "array" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "publicKey": { "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.", "readOnly": true, "type": "string" }, "raw": { "$ref": "#/$defs/raw" }, "remoteAddress": { "description": "IPv4 or IPv6 address from which the user triggered this event.", "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$", "readOnly": true, "type": "string" }, "targetPublicKey": { "description": "Public part of the API key that this event targets.", "readOnly": true, "type": "string" }, "userId": { "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "username": { "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.", "format": "email", "readOnly": true, "type": "string" }, "whitelistEntry": { "description": "Entry in the list of source host addresses that the API key accepts and this event targets.", "readOnly": true, "type": "string" } }, "required": [ "created", "eventTypeName", "id" ], "title": "API User Events", "type": "object" }, "AppServiceEventTypeView": { "description": "Unique identifier of event type.", "enum": [ "URL_CONFIRMATION", "SUCCESSFUL_DEPLOY", "DEPLOYMENT_FAILURE", "DEPLOYMENT_MODEL_CHANGE_SUCCESS", "DEPLOYMENT_MODEL_CHANGE_FAILURE", "REQUEST_RATE_LIMIT", "LOG_FORWARDER_FAILURE", "INSIDE_REALM_METRIC_THRESHOLD", "OUTSIDE_REALM_METRIC_THRESHOLD", "SYNC_FAILURE", "TRIGGER_FAILURE", "TRIGGER_AUTO_RESUMED" ], "title": "App Services Event Types", "type": "string" }, "AppServiceEventView": { "description": "App Services event identifies different activities about a BAAS application.", "properties": { "created": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "eventTypeName": { "$ref": "#/$defs/AppServiceEventTypeView" }, "groupId": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "links": { "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.", "items": { "$ref": "#/$defs/Link" }, "readOnly": true, "type": "array" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "raw": { "$ref": "#/$defs/raw" } }, "required": [ "created", "eventTypeName", "id" ], "title": "App Services Events", "type": "object" }, "AtlasResourcePolicyAuditForNdsGroup": { "description": "Atlas resource policy audits indicate organization level changes to resource policies.", "properties": { "apiKeyId": { "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "created": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "eventTypeName": { "description": "Unique identifier of event type.", "enum": [ "RESOURCE_POLICY_VIOLATED" ], "title": "Atlas Resource Policy Audit Types", "type": "string" }, "groupId": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "isGlobalAdmin": { "description": "Flag that indicates whether a MongoDB employee triggered the specified event.", "readOnly": true, "type": "boolean" }, "links": { "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.", "items": { "$ref": "#/$defs/Link" }, "readOnly": true, "type": "array" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "publicKey": { "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.", "readOnly": true, "type": "string" }, "raw": { "$ref": "#/$defs/raw" }, "remoteAddress": { "description": "IPv4 or IPv6 address from which the user triggered this event.", "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$", "readOnly": true, "type": "string" }, "resourcePolicyId": { "description": "Unique 24-hexadecimal character string that identifies the resource policy.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "userId": { "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "username": { "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.", "format": "email", "readOnly": true, "type": "string" }, "violatedPolicies": { "description": "String representation of the violated resource policy ids.", "items": { "type": "string" }, "type": "array" }, "violationAction": { "description": "Resource policy action taken by the user and evaluated against the currently active policies.", "readOnly": true, "type": "string" } }, "required": [ "created", "eventTypeName", "id" ], "title": "Atlas Resource Policy Audits For Atlas Group", "type": "object" }, "AutomationConfigEventTypeView": { "description": "Unique identifier of event type.", "enum": [ "AUTOMATION_CONFIG_PUBLISHED_AUDIT" ], "title": "Automation Config Event Types", "type": "string" }, "AutomationConfigEventView": { "description": "Automation configuration event identifies that deployment configuration is published.", "properties": { "apiKeyId": { "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "created": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "eventTypeName": { "$ref": "#/$defs/AutomationConfigEventTypeView" }, "groupId": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "isGlobalAdmin": { "description": "Flag that indicates whether a MongoDB employee triggered the specified event.", "readOnly": true, "type": "boolean" }, "links": { "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.", "items": { "$ref": "#/$defs/Link" }, "readOnly": true, "type": "array" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "publicKey": { "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.", "readOnly": true, "type": "string" }, "raw": { "$ref": "#/$defs/raw" }, "remoteAddress": { "description": "IPv4 or IPv6 address from which the user triggered this event.", "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$", "readOnly": true, "type": "string" }, "userId": { "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "username": { "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.", "format": "email", "readOnly": true, "type": "string" } }, "required": [ "created", "eventTypeName", "id" ], "title": "Automation Config Events", "type": "object" }, "BillingEventTypeViewForNdsGroup": { "description": "Unique identifier of event type.", "enum": [ "CREDIT_CARD_CURRENT", "CREDIT_CARD_ABOUT_TO_EXPIRE", "PENDING_INVOICE_UNDER_THRESHOLD", "PENDING_INVOICE_OVER_THRESHOLD", "DAILY_BILL_UNDER_THRESHOLD", "DAILY_BILL_OVER_THRESHOLD", "DAILY_BILLING_CHANGE_NORMAL", "DAILY_BILLING_CHANGE_OVER_THRESHOLD", "WEEKLY_BILLING_CHANGE_NORMAL", "WEEKLY_BILLING_CHANGE_OVER_THRESHOLD", "MONTHLY_BILLING_CHANGE_NORMAL", "MONTHLY_BILLING_CHANGE_OVER_THRESHOLD" ], "title": "Billing Event Types", "type": "string" }, "BillingEventViewForNdsGroup": { "description": "Billing event identifies different activities related to billing, payment or financial status change of an organization.", "properties": { "apiKeyId": { "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "created": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "eventTypeName": { "$ref": "#/$defs/BillingEventTypeViewForNdsGroup" }, "groupId": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "invoiceId": { "description": "Unique 24-hexadecimal digit string that identifies of the invoice associated with the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "isGlobalAdmin": { "description": "Flag that indicates whether a MongoDB employee triggered the specified event.", "readOnly": true, "type": "boolean" }, "links": { "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.", "items": { "$ref": "#/$defs/Link" }, "readOnly": true, "type": "array" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "paymentId": { "description": "Unique 24-hexadecimal digit string that identifies the invoice payment associated with this event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "publicKey": { "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.", "readOnly": true, "type": "string" }, "raw": { "$ref": "#/$defs/raw" }, "remoteAddress": { "description": "IPv4 or IPv6 address from which the user triggered this event.", "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$", "readOnly": true, "type": "string" }, "userId": { "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "username": { "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.", "format": "email", "readOnly": true, "type": "string" } }, "required": [ "created", "eventTypeName", "id" ], "title": "Billing Events", "type": "object" }, "ChartsAudit": { "description": "Audit events related to Atlas Charts.", "properties": { "apiKeyId": { "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "created": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "eventTypeName": { "$ref": "#/$defs/ChartsAuditTypeView" }, "groupId": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "isGlobalAdmin": { "description": "Flag that indicates whether a MongoDB employee triggered the specified event.", "readOnly": true, "type": "boolean" }, "links": { "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.", "items": { "$ref": "#/$defs/Link" }, "readOnly": true, "type": "array" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "publicKey": { "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.", "readOnly": true, "type": "string" }, "raw": { "$ref": "#/$defs/raw" }, "remoteAddress": { "description": "IPv4 or IPv6 address from which the user triggered this event.", "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$", "readOnly": true, "type": "string" }, "userId": { "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "username": { "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.", "format": "email", "readOnly": true, "type": "string" } }, "required": [ "created", "eventTypeName", "id" ], "type": "object" }, "ChartsAuditTypeView": { "description": "Unique identifier of event type.", "enum": [ "CHARTS_API_SUCCESS", "CHARTS_API_FAILURE" ], "title": "Charts Api Call Audit Types", "type": "string" }, "ClusterEventTypeViewForNdsGroup": { "description": "Unique identifier of event type.", "enum": [ "CLUSTER_MONGOS_IS_PRESENT", "CLUSTER_MONGOS_IS_MISSING" ], "title": "Cluster Event Types", "type": "string" }, "ClusterEventViewForNdsGroup": { "description": "Cluster event identifies different activities about cluster of mongod hosts.", "properties": { "created": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "eventTypeName": { "$ref": "#/$defs/ClusterEventTypeViewForNdsGroup" }, "groupId": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "links": { "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.", "items": { "$ref": "#/$defs/Link" }, "readOnly": true, "type": "array" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "raw": { "$ref": "#/$defs/raw" }, "shardName": { "description": "Human-readable label of the shard associated with the event.", "readOnly": true, "type": "string" } }, "required": [ "created", "eventTypeName", "id" ], "title": "Cluster Events", "type": "object" }, "DataExplorerAccessedEventTypeView": { "description": "Unique identifier of event type.", "enum": [ "DATA_EXPLORER", "DATA_EXPLORER_CRUD_ATTEMPT", "DATA_EXPLORER_CRUD_ERROR", "DATA_EXPLORER_CRUD" ], "title": "Data Explorer Accessed Event Types", "type": "string" }, "DataExplorerAccessedEventView": { "description": "Data Explorer accessed event tracks different data operations via Data Explorer interactions.", "properties": { "apiKeyId": { "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "collection": { "description": "Human-readable label of the collection on which the event occurred. The resource returns this parameter when the `eventTypeName` includes `DATA_EXPLORER`.", "readOnly": true, "type": "string" }, "created": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "database": { "description": "Human-readable label of the database on which this incident occurred. The resource returns this parameter when `\"eventTypeName\" : \"DATA_EXPLORER\"` or `\"eventTypeName\" : \"DATA_EXPLORER_CRUD\"`.", "readOnly": true, "type": "string" }, "eventTypeName": { "$ref": "#/$defs/DataExplorerAccessedEventTypeView" }, "groupId": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "isGlobalAdmin": { "description": "Flag that indicates whether a MongoDB employee triggered the specified event.", "readOnly": true, "type": "boolean" }, "links": { "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.", "items": { "$ref": "#/$defs/Link" }, "readOnly": true, "type": "array" }, "opType": { "description": "Action that the database attempted to execute when the event triggered. The response returns this parameter when `eventTypeName\" : \"DATA_EXPLORER\"`.", "readOnly": true, "type": "string" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "publicKey": { "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.", "readOnly": true, "type": "string" }, "raw": { "$ref": "#/$defs/raw" }, "remoteAddress": { "description": "IPv4 or IPv6 address from which the user triggered this event.", "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$", "readOnly": true, "type": "string" }, "userId": { "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "username": { "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.", "format": "email", "readOnly": true, "type": "string" } }, "required": [ "created", "eventTypeName", "id" ], "title": "Data Explorer Accessed Events", "type": "object" }, "DataExplorerEvent": { "description": "Data Explorer event tracks different Data Explorer operations.", "properties": { "apiKeyId": { "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "created": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "eventTypeName": { "$ref": "#/$defs/DataExplorerEventTypeView" }, "groupId": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "isGlobalAdmin": { "description": "Flag that indicates whether a MongoDB employee triggered the specified event.", "readOnly": true, "type": "boolean" }, "links": { "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.", "items": { "$ref": "#/$defs/Link" }, "readOnly": true, "type": "array" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "publicKey": { "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.", "readOnly": true, "type": "string" }, "raw": { "$ref": "#/$defs/raw" }, "remoteAddress": { "description": "IPv4 or IPv6 address from which the user triggered this event.", "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$", "readOnly": true, "type": "string" }, "sessionId": { "description": "Unique 24-hexadecimal digit string that identifies the Data Explorer session associated with the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "userId": { "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "username": { "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.", "format": "email", "readOnly": true, "type": "string" } }, "required": [ "created", "eventTypeName", "id" ], "title": "Data Explorer Events", "type": "object" }, "DataExplorerEventTypeView": { "description": "Unique identifier of event type.", "enum": [ "DATA_EXPLORER_SESSION_CREATED" ], "title": "Data Explorer Event Types", "type": "string" }, "DefaultEventViewForNdsGroup": { "description": "Other events which don't have extra details beside of basic one.", "properties": { "apiKeyId": { "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "created": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "eventTypeName": { "description": "Unique identifier of event type.", "oneOf": [ { "enum": [ "AUTO_INDEXING_ENABLED", "AUTO_INDEXING_DISABLED", "AUTO_INDEXING_INDEX_BUILD_SUBMITTED", "AUTO_INDEXING_SLOW_INDEX_BUILD", "AUTO_INDEXING_STALLED_INDEX_BUILD", "AUTO_INDEXING_FAILED_INDEX_BUILD", "AUTO_INDEXING_COMPLETED_INDEX_BUILD", "AUTO_INDEXING_STARTED_INDEX_BUILD" ], "title": "Auto Indexing Event Types", "type": "string" }, { "enum": [ "PEER_CREATED", "PEER_DELETED", "PEER_UPDATED" ], "title": "AWS Peer Vpc Audit Types", "type": "string" }, { "enum": [ "AZURE_PEER_CREATED", "AZURE_PEER_UPDATED", "AZURE_PEER_ACTIVE", "AZURE_PEER_DELETED" ], "title": "Azure Peer Network Audit Types", "type": "string" }, { "enum": [ "CLUSTER_CONNECTION_GET_DATABASES", "CLUSTER_CONNECTION_GET_DATABASE_COLLECTIONS", "CLUSTER_CONNECTION_GET_DATABASE_NAMESPACES", "CLUSTER_CONNECTION_GET_NAMESPACES_WITH_UUID", "CLUSTER_CONNECTION_GET_AGGREGATED_VIEW_INFOS", "CLUSTER_CONNECTION_AGGREGATE", "CLUSTER_CONNECTION_CREATE_COLLECTION", "CLUSTER_CONNECTION_SAMPLE_COLLECTION_FIELD_NAMES", "CLUSTER_CONNECTION_SAMPLE_COLLECTION_FIELD_NAMES_AND_TYPES", "CLUSTER_CONNECTION_FIND_DOCUMENTS", "CLUSTER_CONNECTION_GET_NAMESPACES_AND_PROJECT_SQL_SCHEMA_DATA" ], "title": "Cluster Connection Audit Types", "type": "string" }, { "enum": [ "CPS_SNAPSHOT_STARTED", "CPS_SNAPSHOT_SUCCESSFUL", "CPS_SNAPSHOT_FAILED", "CPS_CONCURRENT_SNAPSHOT_FAILED_WILL_RETRY", "CPS_SNAPSHOT_FALLBACK_SUCCESSFUL", "CPS_SNAPSHOT_BEHIND", "CPS_COPY_SNAPSHOT_STARTED", "CPS_COPY_SNAPSHOT_FAILED", "CPS_COPY_SNAPSHOT_FAILED_WILL_RETRY", "CPS_COPY_SNAPSHOT_SUCCESSFUL", "CPS_PREV_SNAPSHOT_OLD", "CPS_SNAPSHOT_FALLBACK_FAILED", "CPS_RESTORE_SUCCESSFUL", "CPS_EXPORT_SUCCESSFUL", "CPS_RESTORE_FAILED", "CPS_EXPORT_FAILED", "CPS_COLLECTION_RESTORE_SUCCESSFUL", "CPS_COLLECTION_RESTORE_FAILED", "CPS_COLLECTION_RESTORE_PARTIAL_SUCCESS", "CPS_COLLECTION_RESTORE_CANCELED", "CPS_AUTO_EXPORT_FAILED", "CPS_SNAPSHOT_DOWNLOAD_REQUEST_FAILED", "CPS_OPLOG_BEHIND", "CPS_OPLOG_CAUGHT_UP" ], "title": "Cps Backup Event Types", "type": "string" }, { "enum": [ "CPS_DATA_PROTECTION_ENABLE_REQUESTED", "CPS_DATA_PROTECTION_ENABLED", "CPS_DATA_PROTECTION_UPDATE_REQUESTED", "CPS_DATA_PROTECTION_UPDATED", "CPS_DATA_PROTECTION_DISABLE_REQUESTED", "CPS_DATA_PROTECTION_DISABLED", "CPS_DATA_PROTECTION_APPROVED_FOR_DISABLEMENT" ], "title": "CPS Backup Compliance Policy Event Types", "type": "string" }, { "enum": [ "CPS_RESTORE_REQUESTED_AUDIT", "CPS_SNAPSHOT_SCHEDULE_UPDATED_AUDIT", "CPS_SNAPSHOT_FASTER_RESTORES_START_AUDIT", "CPS_SNAPSHOT_FASTER_RESTORES_SUCCESS_AUDIT", "CPS_SNAPSHOT_FASTER_RESTORES_FAILED_AUDIT", "CPS_SNAPSHOT_DELETED_AUDIT", "CPS_SNAPSHOT_RETENTION_MODIFIED_AUDIT", "CPS_SNAPSHOT_IN_PROGRESS_AUDIT", "CPS_SNAPSHOT_COMPLETED_AUDIT", "CPS_ON_DEMAND_SNAPSHOT_REQUESTED", "CPS_OPLOG_CAUGHT_UP_AUDIT", "CPS_OPLOG_BEHIND_AUDIT" ], "title": "Disk Backup Event Types", "type": "string" }, { "enum": [ "AWS_ENCRYPTION_KEY_ROTATED", "AWS_ENCRYPTION_KEY_NEEDS_ROTATION", "AZURE_ENCRYPTION_KEY_ROTATED", "AZURE_ENCRYPTION_KEY_NEEDS_ROTATION", "GCP_ENCRYPTION_KEY_ROTATED", "GCP_ENCRYPTION_KEY_NEEDS_ROTATION", "AWS_ENCRYPTION_KEY_VALID", "AWS_ENCRYPTION_KEY_INVALID", "AZURE_ENCRYPTION_KEY_VALID", "AZURE_ENCRYPTION_KEY_INVALID", "GCP_ENCRYPTION_KEY_VALID", "GCP_ENCRYPTION_KEY_INVALID" ], "title": "Encryption Event Types", "type": "string" }, { "enum": [ "BUCKET_CREATED_AUDIT", "BUCKET_DELETED_AUDIT" ], "title": "Export Bucket Audit Types", "type": "string" }, { "enum": [ "GCP_PEER_CREATED", "GCP_PEER_DELETED", "GCP_PEER_UPDATED", "GCP_PEER_ACTIVE", "GCP_PEER_INACTIVE" ], "title": "GCP Peer Vpc Audit Types", "type": "string" }, { "enum": [ "DATA_EXPLORER_ENABLED", "DATA_EXPLORER_DISABLED", "CREDIT_CARD_ADDED", "CREDIT_CARD_UPDATED", "GROUP_DELETED", "GROUP_CREATED", "GROUP_MOVED", "GROUP_TEMPORARILY_ACTIVATED", "GROUP_ACTIVATED", "GROUP_LOCKED", "GROUP_SUSPENDED", "GROUP_FLUSHED", "GROUP_NAME_CHANGED", "GROUP_CHARTS_ACTIVATION_REQUESTED", "GROUP_CHARTS_ACTIVATED", "GROUP_CHARTS_UPGRADED", "GROUP_CHARTS_RESET", "GROUP_DEFAULT_ALERTS_SETTINGS_CHANGED" ], "title": "Group Audit Types", "type": "string" }, { "enum": [ "PAID_IN_FULL", "DELINQUENT", "ALL_USERS_HAVE_MULTI_FACTOR_AUTH", "USERS_WITHOUT_MULTI_FACTOR_AUTH", "ENCRYPTION_AT_REST_KMS_NETWORK_ACCESS_DENIED", "ENCRYPTION_AT_REST_KMS_NETWORK_ACCESS_RESTORED", "ENCRYPTION_AT_REST_CONFIG_NO_LONGER_VALID", "ENCRYPTION_AT_REST_CONFIG_IS_VALID", "GROUP_SERVICE_ACCOUNT_SECRETS_NO_LONGER_EXPIRING", "GROUP_SERVICE_ACCOUNT_SECRETS_EXPIRING", "GROUP_SERVICE_ACCOUNT_SECRETS_NO_LONGER_EXPIRED", "GROUP_SERVICE_ACCOUNT_SECRETS_EXPIRED", "ACTIVE_LEGACY_TLS_CONNECTIONS", "NO_ACTIVE_LEGACY_TLS_CONNECTIONS" ], "title": "Group Event Types", "type": "string" }, { "enum": [ "INTEGRATION_CONFIGURED", "INTEGRATION_REMOVED" ], "title": "Group Integration Event Types", "type": "string" }, { "enum": [ "ROLLING_INDEX_FAILED_INDEX_BUILD", "ROLLING_INDEX_SUCCESS_INDEX_BUILD", "INDEX_FAILED_INDEX_BUILD", "INDEX_SUCCESS_INDEX_BUILD" ], "title": "Index Build Audit Types", "type": "string" }, { "enum": [ "DB_CHECK_UPDATED", "CLUSTER_SAMPLED_FOR_DB_CHECK", "DB_CHECK_SCHEDULED_FOR_CLUSTER", "DB_CHECK_DEFERRED_FOR_CLUSTER", "CLUSTER_OPTED_OUT_OF_DB_CHECK" ], "title": "DB Check Audit Types", "type": "string" }, { "enum": [ "CLUSTER_SAMPLED_FOR_DATA_VALIDATION", "DATA_VALIDATION_SUBMITTED_FOR_CLUSTER", "CLUSTER_OPTED_OUT_OF_DATA_VALIDATION", "REPLICA_SET_SAMPLED_FOR_INTER_NODE_DATA_VALIDATION", "REPLICA_SET_OPTED_OUT_OF_INTER_NODE_DATA_VALIDATION", "INTER_NODE_DATA_VALIDATION_SUBMITTED_FOR_REPLICA_SET" ], "title": "Data Validation Audit Types", "type": "string" }, { "enum": [ "MAINTENANCE_IN_ADVANCED", "MAINTENANCE_AUTO_DEFERRED", "MAINTENANCE_STARTED", "MAINTENANCE_COMPLETED", "MAINTENANCE_NO_LONGER_NEEDED" ], "title": "Maintenance Window Audit Types", "type": "string" }, { "enum": [ "SERVERLESS_AUTO_SCALING_INITIATED", "SERVERLESS_VERTICAL_SCALING_INITIATED", "SERVERLESS_HORIZONTAL_SCALING_INITIATED", "SERVERLESS_MTM_DRAIN_REQUESTED", "SERVERLESS_MTM_DRAIN_INITIATED", "SERVERLESS_MTM_DRAIN_COMPLETED", "SERVERLESS_MTM_DRAIN_STOPPED" ], "title": "Serverless Auto Scaling Audit Types", "type": "string" }, { "enum": [ "TENANT_ENDPOINT_SERVICE_DEPLOYMENT_CREATED", "TENANT_ENDPOINT_SERVICE_CREATED", "TENANT_ENDPOINT_SERVICE_AVAILABLE", "TENANT_ENDPOINT_SERVICE_DEPLOYMENT_DELETE_REQUESTED", "TENANT_ENDPOINT_SERVICE_DELETED", "TENANT_ENDPOINT_SERVICE_DEPLOYMENT_DELETED", "TENANT_ENDPOINT_SERVICE_DEPLOYMENT_NUM_DESIRED_ENDPOINT_SERVICES_INCREASED" ], "title": "Tenant Endpoint Service Deployment Audit Types", "type": "string" }, { "enum": [ "NDS_X509_USER_AUTHENTICATION_CUSTOMER_CA_EXPIRATION_RESOLVED", "NDS_X509_USER_AUTHENTICATION_CUSTOMER_CA_EXPIRATION_CHECK", "NDS_X509_USER_AUTHENTICATION_CUSTOMER_CRL_EXPIRATION_RESOLVED", "NDS_X509_USER_AUTHENTICATION_CUSTOMER_CRL_EXPIRATION_CHECK", "NDS_X509_USER_AUTHENTICATION_MANAGED_USER_CERTS_EXPIRATION_RESOLVED", "NDS_X509_USER_AUTHENTICATION_MANAGED_USER_CERTS_EXPIRATION_CHECK" ], "title": "x509 User Auth Event Types", "type": "string" }, { "enum": [ "ONLINE_ARCHIVE_INSUFFICIENT_INDEXES_CHECK", "ONLINE_ARCHIVE_INSUFFICIENT_INDEXES_RESOLVED", "ONLINE_ARCHIVE_UP_TO_DATE", "ONLINE_ARCHIVE_DATA_EXPIRATION_RESOLVED", "ONLINE_ARCHIVE_MAX_CONSECUTIVE_OFFLOAD_WINDOWS_CHECK" ], "title": "Online Archive Event Types", "type": "string" }, { "enum": [ "CROSS_REGION_SUPPORTED_REGION_MODIFIED", "ENDPOINT_SERVICE_CREATED", "ENDPOINT_SERVICE_DELETED", "INTERFACE_ENDPOINT_CREATED", "INTERFACE_ENDPOINT_DELETED", "INTERFACE_ENDPOINT_PATCHED", "INTERFACE_ENDPOINT_RETRIED" ], "title": "Private Link Audit Types", "type": "string" }, { "enum": [ "PROACTIVE_OPERATION_EVENT_LOGGED" ], "title": "Proactive Operation Event Types", "type": "string" }, { "enum": [ "SEARCH_DEPLOYMENT_CREATED", "SEARCH_DEPLOYMENT_UPDATED", "SEARCH_DEPLOYMENT_DELETED" ], "title": "Search Deployment Audit Types", "type": "string" }, { "enum": [ "SERVERLESS_DEPLOYMENT_CREATED", "SERVERLESS_DEPLOYMENT_DELETED", "SERVERLESS_DEPLOYMENT_UPDATED", "SERVERLESS_DEPLOYMENT_INSTANCE_REPLACED", "SERVERLESS_DEPLOYMENT_INSTANCE_REBOOTED", "SERVERLESS_DEPLOYMENT_ENDPOINT_SERVICE_LINKED", "SERVERLESS_DEPLOYMENT_ENDPOINT_SERVICE_UNLINKED", "SERVERLESS_DEPLOYMENT_ENVOY_INSTANCE_UIS_KEYS_ROTATED" ], "title": "Serverless Deployment Audit Types", "type": "string" }, { "enum": [ "INSIDE_SERVERLESS_METRIC_THRESHOLD", "OUTSIDE_SERVERLESS_METRIC_THRESHOLD" ], "title": "Serverless Event Types", "type": "string" }, { "enum": [ "INSIDE_FLEX_METRIC_THRESHOLD", "OUTSIDE_FLEX_METRIC_THRESHOLD" ], "title": "Flex Metric Event Types", "type": "string" }, { "enum": [ "SETUP_SERVERLESS_INITIATED" ], "title": "Setup Serverless Audit Types", "type": "string" }, { "enum": [ "MAX_PROCESSOR_COUNT_REACHED" ], "title": "Streams Event Types", "type": "string" }, { "enum": [ "STREAM_PROCESSOR_STATE_IS_FAILED", "INSIDE_STREAM_PROCESSOR_METRIC_THRESHOLD", "OUTSIDE_STREAM_PROCESSOR_METRIC_THRESHOLD" ], "title": "Stream Processor Event Types", "type": "string" }, { "enum": [ "CASE_CREATED" ], "title": "Support Case Event Types", "type": "string" }, { "enum": [ "SUPPORT_EMAILS_SENT_SUCCESSFULLY", "SUPPORT_EMAILS_SENT_FAILURE" ], "title": "Support Event Types", "type": "string" }, { "enum": [ "TENANT_SNAPSHOT_STARTED_AUDIT", "TENANT_SNAPSHOT_COMPLETED_AUDIT", "TENANT_SNAPSHOT_DELETED_AUDIT", "TENANT_RESTORE_REQUESTED_AUDIT", "TENANT_RESTORE_COMPLETED_AUDIT", "TENANT_SNAPSHOT_DOWNLOAD_REQUESTED_AUDIT" ], "title": "Tenant Backup Event Types", "type": "string" }, { "enum": [ "CLUSTER_FCV_FIXED", "CLUSTER_FCV_UNFIXED", "CLUSTER_FCV_EXPIRATION_DATE_UPDATED", "CLUSTER_FCV_DOWNGRADED", "CLUSTER_BINARY_VERSION_DOWNGRADED", "CLUSTER_BINARY_VERSION_UPGRADED", "CLUSTER_OS_FIXED", "CLUSTER_OS_UNFIXED" ], "title": "Version Audit Types", "type": "string" }, { "enum": [ "EMPLOYEE_DOWNLOADED_CLUSTER_LOGS" ], "title": "Access Event Types", "type": "string" }, { "enum": [ "QUERY_SHAPE_BLOCKED", "QUERY_SHAPE_UNBLOCKED" ], "title": "Query Shape Event Types", "type": "string" }, { "enum": [ "SHARD_KEY_ANALYSIS_STARTED", "SHARD_KEY_ANALYSIS_FINISHED", "QUERY_SAMPLING_STARTED", "QUERY_SAMPLING_STOPPED" ], "title": "Shard Key Advisor Event Types", "type": "string" }, { "enum": [ "MONGOTUNE_INFO", "MONGOTUNE_ALERT" ], "title": "Mongotune Event Types", "type": "string" }, { "enum": [ "AI_MODELS_API_KEY_CREATED", "AI_MODELS_API_KEY_DELETED" ], "title": "Ai Models Event Types", "type": "string" } ], "type": "object" }, "groupId": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "isGlobalAdmin": { "description": "Flag that indicates whether a MongoDB employee triggered the specified event.", "readOnly": true, "type": "boolean" }, "links": { "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.", "items": { "$ref": "#/$defs/Link" }, "readOnly": true, "type": "array" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "publicKey": { "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.", "readOnly": true, "type": "string" }, "raw": { "$ref": "#/$defs/raw" }, "remoteAddress": { "description": "IPv4 or IPv6 address from which the user triggered this event.", "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$", "readOnly": true, "type": "string" }, "userId": { "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "username": { "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.", "format": "email", "readOnly": true, "type": "string" } }, "required": [ "created", "eventTypeName", "id" ], "title": "Any Other Events", "type": "object" }, "FTSIndexAuditTypeView": { "description": "Unique identifier of event type.", "enum": [ "FTS_INDEX_DELETION_FAILED", "FTS_INDEX_BUILD_COMPLETE", "FTS_INDEX_BUILD_FAILED", "FTS_INDEX_CREATED", "FTS_INDEX_UPDATED", "FTS_INDEX_DELETED", "FTS_INDEX_CLEANED_UP", "FTS_INDEX_STALE", "FTS_INDEXES_RESTORED", "FTS_INDEXES_RESTORE_FAILED", "FTS_INDEXES_SYNONYM_MAPPING_INVALID" ], "title": "FTS Index Audit Types", "type": "string" }, "FTSIndexAuditView": { "description": "FTS index audit indicates any activities about search index.", "properties": { "apiKeyId": { "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "created": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "eventTypeName": { "$ref": "#/$defs/FTSIndexAuditTypeView" }, "groupId": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "isGlobalAdmin": { "description": "Flag that indicates whether a MongoDB employee triggered the specified event.", "readOnly": true, "type": "boolean" }, "links": { "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.", "items": { "$ref": "#/$defs/Link" }, "readOnly": true, "type": "array" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "publicKey": { "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.", "readOnly": true, "type": "string" }, "raw": { "$ref": "#/$defs/raw" }, "remoteAddress": { "description": "IPv4 or IPv6 address from which the user triggered this event.", "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$", "readOnly": true, "type": "string" }, "userId": { "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "username": { "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.", "format": "email", "readOnly": true, "type": "string" } }, "required": [ "created", "eventTypeName", "id" ], "title": "FTS Index Audits", "type": "object" }, "ForNdsGroup": { "description": "Replica Set Event identifies different activities about replica set of mongod instances.", "properties": { "created": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "eventTypeName": { "$ref": "#/$defs/ReplicaSetEventTypeViewForNdsGroup" }, "groupId": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "links": { "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.", "items": { "$ref": "#/$defs/Link" }, "readOnly": true, "type": "array" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "port": { "description": "IANA port on which the MongoDB process listens for requests.", "format": "int32", "readOnly": true, "type": "integer" }, "raw": { "$ref": "#/$defs/raw" }, "replicaSetName": { "description": "Human-readable label of the replica set associated with the event.", "readOnly": true, "type": "string" }, "shardName": { "description": "Human-readable label of the shard associated with the event.", "readOnly": true, "type": "string" } }, "required": [ "created", "eventTypeName", "id" ], "title": "ReplicaSet Events", "type": "object" }, "HostEventTypeViewForNdsGroup": { "description": "Unique identifier of event type.", "enum": [ "ATTEMPT_KILLOP_AUDIT", "ATTEMPT_KILLSESSION_AUDIT", "HOST_UP", "HOST_DOWN", "HOST_HAS_INDEX_SUGGESTIONS", "HOST_MONGOT_RECOVERED_OOM", "HOST_MONGOT_CRASHING_OOM", "HOST_MONGOT_RESUME_REPLICATION", "HOST_MONGOT_STOP_REPLICATION", "HOST_MONGOT_UNPAUSE_INITIAL_SYNC", "HOST_MONGOT_PAUSE_INITIAL_SYNC", "HOST_MONGOT_SUFFICIENT_DISK_SPACE", "HOST_MONGOT_APPROACHING_STOP_REPLICATION", "HOST_MONGOT_RESTARTED", "HOST_SEARCH_NODE_UNBLOCKED", "HOST_SEARCH_NODE_INDEX_FAILED", "HOST_EXTERNAL_LOG_SINK_EXPORT_DOWN", "HOST_EXTERNAL_LOG_SINK_EXPORT_RESUMED", "HOST_ENOUGH_DISK_SPACE", "HOST_NOT_ENOUGH_DISK_SPACE", "SSH_KEY_NDS_HOST_ACCESS_REQUESTED", "SSH_KEY_NDS_HOST_ACCESS_REFRESHED", "SSH_KEY_NDS_HOST_ACCESS_ATTEMPT", "SSH_KEY_NDS_HOST_ACCESS_GRANTED", "SSH_KEY_NDS_HOST_ACCESS_LEVEL_CHANGED", "ALERT_HOST_SSH_SESSION_STARTED", "HOST_SSH_SESSION_ENDED", "HOST_X509_CERTIFICATE_CERTIFICATE_GENERATED_FOR_SUPPORT_ACCESS", "PUSH_BASED_LOG_EXPORT_RESUMED", "PUSH_BASED_LOG_EXPORT_STOPPED", "PUSH_BASED_LOG_EXPORT_DROPPED_LOG", "HOST_VERSION_BEHIND", "VERSION_BEHIND", "HOST_EXPOSED", "HOST_SSL_CERTIFICATE_STALE", "HOST_SECURITY_CHECKUP_NOT_MET", "PROFILER_CONFIGURED_TOO_WIDELY" ], "title": "Host Event Types", "type": "string" }, "HostEventViewForNdsGroup": { "description": "Host event identifies different activities about mongod host.", "properties": { "apiKeyId": { "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "created": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "deskLocation": { "description": "Desk location of MongoDB employee associated with the event.", "readOnly": true, "type": "string" }, "employeeIdentifier": { "description": "Identifier of MongoDB employee associated with the event.", "readOnly": true, "type": "string" }, "eventTypeName": { "$ref": "#/$defs/HostEventTypeViewForNdsGroup" }, "groupId": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "isGlobalAdmin": { "description": "Flag that indicates whether a MongoDB employee triggered the specified event.", "readOnly": true, "type": "boolean" }, "links": { "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.", "items": { "$ref": "#/$defs/Link" }, "readOnly": true, "type": "array" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "port": { "description": "IANA port on which the MongoDB process listens for requests.", "format": "int32", "readOnly": true, "type": "integer" }, "publicKey": { "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.", "readOnly": true, "type": "string" }, "raw": { "$ref": "#/$defs/raw" }, "remoteAddress": { "description": "IPv4 or IPv6 address from which the user triggered this event.", "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$", "readOnly": true, "type": "string" }, "replicaSetName": { "description": "Human-readable label of the replica set associated with the event.", "readOnly": true, "type": "string" }, "shardName": { "description": "Human-readable label of the shard associated with the event.", "readOnly": true, "type": "string" }, "userId": { "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "username": { "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.", "format": "email", "readOnly": true, "type": "string" } }, "required": [ "created", "eventTypeName", "id" ], "title": "Host Events", "type": "object" }, "HostMetricEvent": { "description": "Host Metric Event reflects different measurements and metrics about mongod host.", "properties": { "apiKeyId": { "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "created": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "currentValue": { "$ref": "#/$defs/HostMetricValue" }, "deskLocation": { "description": "Desk location of MongoDB employee associated with the event.", "readOnly": true, "type": "string" }, "employeeIdentifier": { "description": "Identifier of MongoDB employee associated with the event.", "readOnly": true, "type": "string" }, "eventTypeName": { "$ref": "#/$defs/HostMetricEventTypeView" }, "groupId": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "isGlobalAdmin": { "description": "Flag that indicates whether a MongoDB employee triggered the specified event.", "readOnly": true, "type": "boolean" }, "links": { "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.", "items": { "$ref": "#/$defs/Link" }, "readOnly": true, "type": "array" }, "metricName": { "description": "Human-readable label of the metric associated with the `alertId`. This field may change type of `currentValue` field.", "readOnly": true, "type": "string" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "port": { "description": "IANA port on which the MongoDB process listens for requests.", "format": "int32", "readOnly": true, "type": "integer" }, "publicKey": { "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.", "readOnly": true, "type": "string" }, "raw": { "$ref": "#/$defs/raw" }, "remoteAddress": { "description": "IPv4 or IPv6 address from which the user triggered this event.", "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$", "readOnly": true, "type": "string" }, "replicaSetName": { "description": "Human-readable label of the replica set associated with the event.", "readOnly": true, "type": "string" }, "shardName": { "description": "Human-readable label of the shard associated with the event.", "readOnly": true, "type": "string" }, "userId": { "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "username": { "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.", "format": "email", "readOnly": true, "type": "string" } }, "required": [ "created", "eventTypeName", "id" ], "title": "Host Metric Events", "type": "object" }, "HostMetricEventTypeView": { "description": "Unique identifier of event type.", "enum": [ "INSIDE_METRIC_THRESHOLD", "OUTSIDE_METRIC_THRESHOLD" ], "title": "Host Metric Event Types", "type": "string" }, "HostMetricValue": { "description": "Value of the metric that triggered the alert. The resource returns this parameter for alerts of events impacting hosts.", "properties": { "number": { "description": "Amount of the `metricName` recorded at the time of the event. This value triggered the alert.", "format": "double", "readOnly": true, "type": "number" }, "units": { "description": "Element used to express the quantity in `currentValue.number`. This can be an element of time, storage capacity, and the like. This metric triggered the alert.", "enum": [ "bits", "Kbits", "Mbits", "Gbits", "bytes", "KB", "MB", "GB", "TB", "PB", "nsec", "msec", "sec", "min", "hours", "million minutes", "days", "requests", "1000 requests", "tokens", "million tokens", "pixels", "billion pixels", "GB seconds", "GB hours", "GB days", "RPU", "thousand RPU", "million RPU", "WPU", "thousand WPU", "million WPU", "count", "thousand", "million", "billion" ], "readOnly": true, "type": "string" } }, "readOnly": true, "type": "object" }, "Link": { "properties": { "href": { "description": "Uniform Resource Locator (URL) that points another API resource to which this response has some relationship. This URL often begins with `https://cloud.mongodb.com/api/atlas`.", "type": "string" }, "rel": { "description": "Uniform Resource Locator (URL) that defines the semantic relationship between this resource and another API resource. This URL often begins with `https://cloud.mongodb.com/api/atlas`.", "type": "string" } }, "type": "object" }, "NDSAuditTypeViewForNdsGroup": { "description": "Unique identifier of event type.", "enum": [ "CLUSTER_CREATED", "CLUSTER_RESURRECTED", "CLUSTER_READY", "CLUSTER_UPDATE_SUBMITTED", "CLUSTER_PROCESS_ARGS_UPDATE_SUBMITTED", "CLUSTER_MONGOT_PROCESS_ARGS_UPDATE_SUBMITTED", "CLUSTER_SERVER_PARAMETERS_UPDATE_SUBMITTED", "CLUSTER_AUTOMATICALLY_PAUSED", "CLUSTER_UPDATE_STARTED", "CLUSTER_UPDATE_STARTED_INTERNAL", "CLUSTER_UPDATE_COMPLETED", "MATERIAL_CLUSTER_UPDATE_COMPLETED_INTERNAL", "CLUSTER_DELETE_SUBMITTED", "CLUSTER_DELETE_SUBMITTED_INTERNAL", "CLUSTER_DELETED", "CLUSTER_IMPORT_STARTED", "CLUSTER_IMPORT_CANCELLED", "CLUSTER_IMPORT_EXPIRED", "CLUSTER_IMPORT_CUTOVER", "CLUSTER_IMPORT_COMPLETED", "CLUSTER_IMPORT_FAILED", "CLUSTER_IMPORT_RESTART_REQUESTED", "PROJECT_LIVE_IMPORT_OVERRIDES_ADDED", "PROJECT_LIVE_IMPORT_OVERRIDES_UPDATED", "PROJECT_LIVE_IMPORT_OVERRIDES_DELETED", "CLUSTER_OPLOG_RESIZED", "CLUSTER_INSTANCE_RESTARTED", "CLUSTER_INSTANCE_STOP_START", "CLUSTER_INSTANCE_RESYNC_REQUESTED", "CLUSTER_INSTANCE_RESYNC_CLEARED", "CLUSTER_INSTANCE_UPDATE_REQUESTED", "CLUSTER_INSTANCE_REPLACED", "CLUSTER_INSTANCE_REPLACE_CLEARED", "CLUSTER_INSTANCE_SWAPPED", "CLUSTER_INSTANCE_SWAP_CLEARED", "CLUSTER_INSTANCE_VM_RESTART_CLEARED", "CLUSTER_INSTANCE_VM_REBOOT_CLEARED", "CLUSTER_INSTANCE_CONFIG_UPDATED", "CLUSTER_INSTANCE_AGENT_API_KEY_ROTATED", "CLUSTER_INSTANCE_SSL_ROTATED", "CLUSTER_INSTANCE_SSL_ROTATED_PER_CLUSTER", "CLUSTER_INSTANCE_SSL_REVOKED", "RELOAD_SSL_ON_PROCESSES", "RELOAD_SSL_ON_PROCESSES_REQUESTED", "CLUSTER_INSTANCE_ADMIN_BACKUP_SNAPSHOT_REQUESTED", "DATA_LAKE_QUERY_LOGS_DOWNLOADED", "FEDERATED_DATABASE_QUERY_LOGS_DOWNLOADED", "ONLINE_ARCHIVE_QUERY_LOGS_DOWNLOADED", "MONGODB_LOGS_DOWNLOADED", "MONGOSQLD_LOGS_DOWNLOADED", "MONGOT_LOGS_DOWNLOADED", "MONGODB_USER_ADDED", "MONGODB_USER_DELETED", "MONGODB_USER_X509_CERT_CREATED", "MONGODB_USER_X509_CERT_REVOKED", "MONGODB_USER_UPDATED", "MONGODB_ROLE_ADDED", "MONGODB_ROLE_DELETED", "MONGODB_ROLE_UPDATED", "NETWORK_PERMISSION_ENTRY_ADDED", "NETWORK_PERMISSION_ENTRY_REMOVED", "NETWORK_PERMISSION_ENTRY_UPDATED", "PRIVATE_NETWORK_ENDPOINT_ENTRY_ADDED", "PRIVATE_NETWORK_ENDPOINT_ENTRY_REMOVED", "PRIVATE_NETWORK_ENDPOINT_ENTRY_UPDATED", "PLAN_STARTED", "PLAN_COMPLETED", "PLAN_ABANDONED", "PLAN_DECLINED", "PLAN_FAILURE_COUNT_RESET", "PLAN_ASAP_REQUESTED", "INDEPENDENT_SHARD_AUTO_SCALING_AVAILABLE", "INDEPENDENT_SHARD_SCALING_CLUSTER_MIGRATED", "INDEPENDENT_SHARD_SCALING_CLUSTER_ROLLED_BACK", "MOVE_SKIPPED", "STEP_SKIPPED", "PROXY_RESTARTED", "PROXY_PANICKED", "ATLAS_MAINTENANCE_PROTECTED_HOURS_CREATED", "ATLAS_MAINTENANCE_PROTECTED_HOURS_MODIFIED", "ATLAS_MAINTENANCE_PROTECTED_HOURS_REMOVED", "ATLAS_MAINTENANCE_WINDOW_ADDED", "ATLAS_MAINTENANCE_WINDOW_MODIFIED", "ATLAS_MAINTENANCE_WINDOW_REMOVED", "ATLAS_MAINTENANCE_START_ASAP", "ATLAS_MAINTENANCE_SCHEDULED_FOR_NEXT_WINDOW", "ATLAS_MAINTENANCE_DEFERRED", "ATLAS_MAINTENANCE_AUTO_DEFER_ENABLED", "ATLAS_MAINTENANCE_AUTO_DEFER_DISABLED", "ATLAS_MAINTENANCE_RESET_BY_ADMIN", "ATLAS_MAINTENANCE_DEFERRED_BY_ADMIN", "SCHEDULED_MAINTENANCE", "PROJECT_SCHEDULED_MAINTENANCE", "PROJECT_LIMIT_UPDATED", "PROJECT_ENABLE_EXTENDED_STORAGE_SIZES_UPDATED", "OS_MAINTENANCE", "OS_MAINTENANCE_RESTART", "OS_MAINTENANCE_REPLACEMENT", "FREE_UPGRADE_STARTED", "FLEX_UPGRADE_STARTED", "SERVERLESS_UPGRADE_STARTED", "TEST_FAILOVER_REQUESTED", "USER_SECURITY_SETTINGS_UPDATED", "AUDIT_LOG_CONFIGURATION_UPDATED", "STREAMS_AUDIT_LOG_CONFIGURATION_UPDATED", "ENCRYPTION_AT_REST_CONFIGURATION_UPDATED", "ENCRYPTION_AT_REST_CONFIGURATION_VALIDATION_FAILED", "ENCRYPTION_AT_REST_CONFIGURATION_VALIDATION_SUCCEEDED", "ENCRYPTION_AT_REST_KEY_ROTATION_STARTED", "ENCRYPTION_AT_REST_PRIVATE_ENDPOINT_CREATED", "ENCRYPTION_AT_REST_PRIVATE_ENDPOINT_DELETED", "NDS_SET_IMAGE_OVERRIDES", "NDS_SET_CHEF_TARBALL_URI", "RESTRICTED_EMPLOYEE_ACCESS_BYPASS", "REVOKED_EMPLOYEE_ACCESS_BYPASS", "DEVICE_SYNC_DEBUG_ACCESS_GRANTED", "DEVICE_SYNC_DEBUG_ACCESS_REVOKED", "DEVICE_SYNC_DEBUG_X509_CERT_CREATED", "EMPLOYEE_ACCESS_GRANTED", "EMPLOYEE_ACCESS_REVOKED", "QUERY_ENGINE_TENANT_CREATED", "QUERY_ENGINE_TENANT_UPDATED", "QUERY_ENGINE_TENANT_REMOVED", "FEDERATED_DATABASE_CREATED", "FEDERATED_DATABASE_UPDATED", "FEDERATED_DATABASE_REMOVED", "TENANT_SNAPSHOT_FAILED", "TENANT_RESTORE_FAILED", "SAMPLE_DATASET_LOAD_REQUESTED", "CUSTOMER_X509_CRL_UPDATED", "CONTAINER_SUBNETS_UPDATE_REQUESTED", "ONLINE_ARCHIVE_CREATED", "ONLINE_ARCHIVE_DELETED", "ONLINE_ARCHIVE_UPDATED", "ONLINE_ARCHIVE_PAUSE_REQUESTED", "ONLINE_ARCHIVE_PAUSED", "ONLINE_ARCHIVE_ACTIVE", "ONLINE_ARCHIVE_ORPHANED", "ONLINE_ARCHIVE_DATA_EXPIRATION_RULE_ENABLED", "ONLINE_ARCHIVE_DATA_EXPIRATION_RULE_UPDATED", "ONLINE_ARCHIVE_DATA_EXPIRATION_RULE_DISABLED", "ONLINE_ARCHIVE_DELETE_AFTER_DATE_UPDATED", "CLOUD_PROVIDER_ACCESS_AWS_IAM_ROLE_ADDED", "CLOUD_PROVIDER_ACCESS_AWS_IAM_ROLE_DELETED", "CLOUD_PROVIDER_ACCESS_AWS_IAM_ROLE_UPDATED", "CLOUD_PROVIDER_ACCESS_AZURE_SERVICE_PRINCIPAL_ADDED", "CLOUD_PROVIDER_ACCESS_AZURE_SERVICE_PRINCIPAL_DELETED", "CLOUD_PROVIDER_ACCESS_AZURE_SERVICE_PRINCIPAL_UPDATED", "CLOUD_PROVIDER_ACCESS_GCP_SERVICE_ACCOUNT_ADDED", "CLOUD_PROVIDER_ACCESS_GCP_SERVICE_ACCOUNT_DELETED", "CLOUD_PROVIDER_ACCESS_GCP_SERVICE_ACCOUNT_UPDATED", "PENDING_INDEXES_DELETED", "PENDING_INDEXES_CANCELED", "PROCESS_RESTART_REQUESTED", "AUTO_HEALING_ACTION", "AUTO_HEALING_REQUESTED_CRITICAL_INSTANCE_POWER_CYCLE", "AUTO_HEALING_REQUESTED_INSTANCE_REPLACEMENT", "AUTO_HEALING_REQUESTED_NODE_RESYNC", "EXTRA_MAINTENANCE_DEFERRAL_GRANTED", "GROUP_AUTOMATION_CONFIG_PUBLISHED", "CLUSTER_AUTOMATION_CONFIG_PUBLISHED", "SET_ENSURE_CLUSTER_CONNECTIVITY_AFTER_FOR_CLUSTER", "CLUSTER_LINKED_TO_VERCEL", "CLUSTER_UNLINKED_FROM_VERCEL", "INGESTION_PIPELINE_DELETED", "INGESTION_PIPELINE_DESTROYED", "INGESTION_PIPELINE_CREATED", "INGESTION_PIPELINE_UPDATED", "OS_TUNE_FILE_OVERRIDES", "MONITORING_AGENT_OVERRIDES", "MONITORING_AGENT_REBALANCE_FLAG", "MONITORING_AGENT_REBALANCE_TRIGGERED", "CLUSTER_PREFERRED_CPU_ARCHITECTURE_MODIFIED", "CLUSTER_FORCE_PLANNED", "CLUSTER_REGIONAL_OUTAGE_SIMULATION_STARTED", "CLUSTER_REGIONAL_OUTAGE_SIMULATION_FAILED_TO_START", "CLUSTER_REGIONAL_OUTAGE_SIMULATION_END_REQUESTED", "CLUSTER_REGIONAL_OUTAGE_SIMULATION_COMPLETED", "CLUSTER_REGIONAL_OUTAGE_SIMULATION_CANCELLED_CLUSTER_PAUSE", "UIS_PANICKED", "TENANT_UPGRADE_TO_SERVERLESS_SUCCESSFUL", "TENANT_UPGRADE_TO_SERVERLESS_FAILED", "SERVERLESS_UPGRADE_TO_DEDICATED_SUCCESSFUL", "SERVERLESS_UPGRADE_TO_DEDICATED_FAILED", "CLUSTER_FORCE_RECONFIG_REQUESTED", "PROJECT_BYPASSED_MAINTENANCE", "FEATURE_FLAG_MAINTENANCE", "DATA_FEDERATION_QUERY_LIMIT_CONFIGURED", "DATA_FEDERATION_QUERY_LIMIT_DELETED", "DATA_API_SETUP_FOR_VERCEL", "ADMIN_CLUSTER_LOCK_UPDATED", "CLUSTER_ROLLING_RESYNC_STARTED", "CLUSTER_ROLLING_RESYNC_COMPLETED", "CLUSTER_ROLLING_RESYNC_FAILED", "NODE_ROLLING_RESYNC_SCHEDULED", "CLUSTER_ROLLING_RESYNC_CANCELED", "CLUSTER_OS_UPDATED", "CLUSTER_INSTANCE_FAMILY_UPDATED", "PUSH_BASED_LOG_EXPORT_ENABLED", "PUSH_BASED_LOG_EXPORT_CONFIGURATION_UPDATED", "PUSH_BASED_LOG_EXPORT_DISABLED", "LOG_STREAMING_ENABLED", "LOG_STREAMING_CONFIGURATION_UPDATED", "LOG_STREAMING_DISABLED", "DATADOG_LOG_STREAMING_ENABLED", "DATADOG_LOG_STREAMING_CONFIGURATION_UPDATED", "DATADOG_LOG_STREAMING_DISABLED", "SPLUNK_LOG_STREAMING_ENABLED", "SPLUNK_LOG_STREAMING_CONFIGURATION_UPDATED", "SPLUNK_LOG_STREAMING_DISABLED", "S3_LOG_STREAMING_ENABLED", "S3_LOG_STREAMING_CONFIGURATION_UPDATED", "S3_LOG_STREAMING_DISABLED", "AZURE_LOG_STREAMING_ENABLED", "AZURE_LOG_STREAMING_CONFIGURATION_UPDATED", "AZURE_LOG_STREAMING_DISABLED", "GCP_LOG_STREAMING_ENABLED", "GCP_LOG_STREAMING_CONFIGURATION_UPDATED", "GCP_LOG_STREAMING_DISABLED", "OTEL_LOG_STREAMING_ENABLED", "OTEL_LOG_STREAMING_CONFIGURATION_UPDATED", "OTEL_LOG_STREAMING_DISABLED", "OTEL_METRIC_INTEGRATION_ENABLED", "OTEL_METRIC_INTEGRATION_CONFIGURATION_UPDATED", "OTEL_METRIC_INTEGRATION_DISABLED", "AZURE_CLUSTER_PREFERRED_STORAGE_TYPE_UPDATED", "CONTAINER_DELETED", "REGIONALIZED_PRIVATE_ENDPOINT_MODE_ENABLED", "REGIONALIZED_PRIVATE_ENDPOINT_MODE_DISABLED", "STREAM_TENANT_CREATED", "STREAM_TENANT_UPDATED", "STREAM_TENANT_DELETED", "STREAM_TENANT_CONNECTIONS_LISTED", "STREAM_TENANT_CONNECTION_UPDATED", "STREAM_TENANT_CONNECTION_DELETED", "STREAM_TENANT_CONNECTION_CREATED", "STREAM_TENANT_CONNECTION_VIEWED", "STREAM_TENANT_OPERATIONAL_LOGS", "STREAM_TENANT_AUDIT_LOGS", "STREAM_TENANT_AUDIT_LOGS_DELETED", "QUEUED_ADMIN_ACTION_CREATED", "QUEUED_ADMIN_ACTION_COMPLETED", "QUEUED_ADMIN_ACTION_CANCELLED", "ATLAS_SQL_SCHEDULED_UPDATE_CREATED", "ATLAS_SQL_SCHEDULED_UPDATE_MODIFIED", "ATLAS_SQL_SCHEDULED_UPDATE_REMOVED", "CLUSTER_INSTANCE_DISABLED", "CLUSTER_INSTANCE_ENABLED", "CLUSTER_BLOCK_WRITE", "CLUSTER_UNBLOCK_WRITE", "KMIP_KEY_ROTATION_SCHEDULED", "SSL_CERTIFICATE_ISSUED", "PROJECT_SCHEDULED_MAINTENANCE_OUTSIDE_OF_PROTECTED_HOURS", "CLUSTER_CANCELING_SHARD_DRAIN_REQUESTED", "CLUSTER_CANCELING_CONFIG_SERVER_TRANSITION_REQUESTED", "CLUSTER_MIGRATE_BACK_TO_AWS_MANAGED_IP_REQUESTED", "CLUSTER_IP_MIGRATED_FIRST_ROUND", "CLUSTER_IP_MIGRATED_SECOND_ROUND", "CLUSTER_IP_MIGRATED_FINAL_ROUND", "CLUSTER_IP_ROLLED_BACK", "AZ_BALANCING_OVERRIDE_MODIFIED", "FTDC_SETTINGS_UPDATED", "PROXY_PROTOCOL_FOR_PRIVATE_LINK_MODE_UPDATED", "MONGOTUNE_WRITE_BLOCK_POLICY_ELIGIBLE", "MONGOTUNE_WRITE_BLOCK_POLICY_INELIGIBLE", "PREDICTIVE_AUTOSCALING_ENABLED", "PREDICTIVE_AUTOSCALING_DISABLED", "SHADOW_CLUSTER_CREATE_EXPOSURE", "SHADOW_CLUSTER_DELETE_EXPOSURE", "SHADOW_CLUSTER_RECORDING_STATUS_UPDATE", "SHADOW_CLUSTER_REPLAY_STATUS_UPDATE", "NODE_HIDDEN_BY_ADMIN", "NODE_UNHIDDEN_BY_ADMIN", "CLUSTER_CREATED_VIA_ANIS" ], "title": "Atlas Audit Types", "type": "string" }, "NDSAuditViewForNdsGroup": { "description": "Audit saving information about Atlas cloud provider and other Atlas related details.", "properties": { "apiKeyId": { "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "created": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "dbUserUsername": { "description": "The username of the MongoDB User that was created, deleted, or edited.", "readOnly": true, "type": "string" }, "eventTypeName": { "$ref": "#/$defs/NDSAuditTypeViewForNdsGroup" }, "groupId": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "isGlobalAdmin": { "description": "Flag that indicates whether a MongoDB employee triggered the specified event.", "readOnly": true, "type": "boolean" }, "links": { "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.", "items": { "$ref": "#/$defs/Link" }, "readOnly": true, "type": "array" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "publicKey": { "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.", "readOnly": true, "type": "string" }, "raw": { "$ref": "#/$defs/raw" }, "remoteAddress": { "description": "IPv4 or IPv6 address from which the user triggered this event.", "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$", "readOnly": true, "type": "string" }, "userId": { "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "username": { "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.", "format": "email", "readOnly": true, "type": "string" }, "whitelistEntry": { "description": "Entry in the list of source host addresses that the API key accepts and this event targets.", "readOnly": true, "type": "string" } }, "required": [ "created", "eventTypeName", "id" ], "title": "Atlas Project Audits", "type": "object" }, "NDSAutoScalingAuditTypeViewForNdsGroup": { "description": "Unique identifier of event type.", "enum": [ "COMPUTE_AUTO_SCALE_INITIATED", "DISK_AUTO_SCALE_INITIATED", "COMPUTE_AUTO_SCALE_INITIATED_BASE", "COMPUTE_AUTO_SCALE_INITIATED_ANALYTICS", "COMPUTE_AUTO_SCALE_SCALE_DOWN_FAIL_BASE", "COMPUTE_AUTO_SCALE_SCALE_DOWN_FAIL_ANALYTICS", "COMPUTE_AUTO_SCALE_DOWNSCALE_SKIPPED_FALLBACK_BASE", "COMPUTE_AUTO_SCALE_DOWNSCALE_SKIPPED_FALLBACK_ANALYTICS", "COMPUTE_AUTO_SCALE_MAX_INSTANCE_SIZE_FAIL_BASE", "COMPUTE_AUTO_SCALE_MAX_INSTANCE_SIZE_FAIL_ANALYTICS", "COMPUTE_AUTO_SCALE_OPLOG_FAIL_BASE", "COMPUTE_AUTO_SCALE_OPLOG_FAIL_ANALYTICS", "DISK_AUTO_SCALE_MAX_DISK_SIZE_FAIL", "DISK_AUTO_SCALE_OPLOG_FAIL", "PREDICTIVE_COMPUTE_AUTO_SCALE_INITIATED_BASE", "PREDICTIVE_COMPUTE_AUTO_SCALE_MAX_INSTANCE_SIZE_FAIL_BASE", "PREDICTIVE_COMPUTE_AUTO_SCALE_OPLOG_FAIL_BASE", "CLUSTER_AUTO_SHARDING_INITIATED" ], "title": "Auto Scaling Audit Types", "type": "string" }, "NDSAutoScalingAuditViewForNdsGroup": { "description": "Auto scaling audit indicates when Atlas auto-scaling cluster tier up or down.", "properties": { "apiKeyId": { "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "created": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "eventTypeName": { "$ref": "#/$defs/NDSAutoScalingAuditTypeViewForNdsGroup" }, "groupId": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "isGlobalAdmin": { "description": "Flag that indicates whether a MongoDB employee triggered the specified event.", "readOnly": true, "type": "boolean" }, "links": { "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.", "items": { "$ref": "#/$defs/Link" }, "readOnly": true, "type": "array" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "publicKey": { "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.", "readOnly": true, "type": "string" }, "raw": { "$ref": "#/$defs/raw" }, "remoteAddress": { "description": "IPv4 or IPv6 address from which the user triggered this event.", "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$", "readOnly": true, "type": "string" }, "userId": { "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "username": { "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.", "format": "email", "readOnly": true, "type": "string" } }, "required": [ "created", "eventTypeName", "id" ], "title": "Auto Scaling Audits", "type": "object" }, "NDSServerlessInstanceAuditTypeView": { "description": "Unique identifier of event type.", "enum": [ "SERVERLESS_INSTANCE_CREATED", "SERVERLESS_INSTANCE_READY", "SERVERLESS_INSTANCE_UPDATE_SUBMITTED", "SERVERLESS_INSTANCE_UPDATE_STARTED", "SERVERLESS_INSTANCE_UPDATE_COMPLETED", "SERVERLESS_INSTANCE_DELETE_SUBMITTED", "SERVERLESS_INSTANCE_DELETED", "SERVERLESS_INSTANCE_UNBLOCKED" ], "title": "Serverless Instance Audit Types", "type": "string" }, "NDSServerlessInstanceAuditView": { "description": "Serverless instance audit identifies any activities around serverless instance.", "properties": { "apiKeyId": { "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "created": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "eventTypeName": { "$ref": "#/$defs/NDSServerlessInstanceAuditTypeView" }, "groupId": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "isGlobalAdmin": { "description": "Flag that indicates whether a MongoDB employee triggered the specified event.", "readOnly": true, "type": "boolean" }, "links": { "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.", "items": { "$ref": "#/$defs/Link" }, "readOnly": true, "type": "array" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "publicKey": { "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.", "readOnly": true, "type": "string" }, "raw": { "$ref": "#/$defs/raw" }, "remoteAddress": { "description": "IPv4 or IPv6 address from which the user triggered this event.", "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$", "readOnly": true, "type": "string" }, "userId": { "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "username": { "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.", "format": "email", "readOnly": true, "type": "string" } }, "required": [ "created", "eventTypeName", "id" ], "title": "Serverless Instance Audits", "type": "object" }, "NDSTenantEndpointAuditTypeView": { "description": "Unique identifier of event type.", "enum": [ "TENANT_ENDPOINT_CREATED", "TENANT_ENDPOINT_RESERVED", "TENANT_ENDPOINT_RESERVATION_FAILED", "TENANT_ENDPOINT_UPDATED", "TENANT_ENDPOINT_INITIATING", "TENANT_ENDPOINT_AVAILABLE", "TENANT_ENDPOINT_FAILED", "TENANT_ENDPOINT_DELETING", "TENANT_ENDPOINT_DELETED", "TENANT_ENDPOINT_EXPIRED" ], "title": "Auto Scaling Audit Types", "type": "string" }, "NDSTenantEndpointAuditView": { "description": "Tenant endpoint audit indicates when Atlas auto-scaling cluster tier up or down.", "properties": { "apiKeyId": { "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "created": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "endpointId": { "description": "Unique 24-hexadecimal digit string that identifies the endpoint associated with this event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "eventTypeName": { "$ref": "#/$defs/NDSTenantEndpointAuditTypeView" }, "groupId": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "isGlobalAdmin": { "description": "Flag that indicates whether a MongoDB employee triggered the specified event.", "readOnly": true, "type": "boolean" }, "links": { "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.", "items": { "$ref": "#/$defs/Link" }, "readOnly": true, "type": "array" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "providerEndpointId": { "description": "Unique identification string that the cloud provider uses to identify the private endpoint.", "readOnly": true, "type": "string" }, "publicKey": { "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.", "readOnly": true, "type": "string" }, "raw": { "$ref": "#/$defs/raw" }, "remoteAddress": { "description": "IPv4 or IPv6 address from which the user triggered this event.", "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$", "readOnly": true, "type": "string" }, "userId": { "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "username": { "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.", "format": "email", "readOnly": true, "type": "string" } }, "required": [ "created", "eventTypeName", "id" ], "title": "Tenant Endpoint Audits", "type": "object" }, "ReplicaSetEventTypeViewForNdsGroup": { "description": "Unique identifier of event type.", "enum": [ "PRIMARY_ELECTED", "REPLICATION_OPLOG_WINDOW_HEALTHY", "REPLICATION_OPLOG_WINDOW_RUNNING_OUT", "ONE_PRIMARY", "NO_PRIMARY", "TOO_MANY_ELECTIONS", "TOO_FEW_HEALTHY_MEMBERS", "TOO_MANY_UNHEALTHY_MEMBERS" ], "title": "ReplicaSet Event Types", "type": "string" }, "ResourceEventTypeView": { "description": "Unique identifier of event type.", "enum": [ "TAGS_MODIFIED", "CLUSTER_TAGS_MODIFIED", "GROUP_TAGS_MODIFIED" ], "title": "Resource Event Types", "type": "string" }, "ResourceEventViewForNdsGroup": { "description": "Resource event reflects different activities about resources.", "properties": { "apiKeyId": { "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "created": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "eventTypeName": { "$ref": "#/$defs/ResourceEventTypeView" }, "groupId": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "isGlobalAdmin": { "description": "Flag that indicates whether a MongoDB employee triggered the specified event.", "readOnly": true, "type": "boolean" }, "links": { "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.", "items": { "$ref": "#/$defs/Link" }, "readOnly": true, "type": "array" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "publicKey": { "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.", "readOnly": true, "type": "string" }, "raw": { "$ref": "#/$defs/raw" }, "remoteAddress": { "description": "IPv4 or IPv6 address from which the user triggered this event.", "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$", "readOnly": true, "type": "string" }, "resourceId": { "description": "Unique 24-hexadecimal digit string that identifies the resource associated with the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "resourceType": { "description": "Unique identifier of resource type.", "type": "string" }, "userId": { "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "username": { "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.", "format": "email", "readOnly": true, "type": "string" } }, "required": [ "created", "eventTypeName", "id", "resourceType" ], "title": "Resource Events", "type": "object" }, "SearchDeploymentAuditTypeView": { "description": "Unique identifier of event type.", "enum": [ "SEARCH_DEPLOYMENT_CREATED", "SEARCH_DEPLOYMENT_UPDATED", "SEARCH_DEPLOYMENT_DELETED" ], "title": "Search Deployment Audit Types", "type": "string" }, "SearchDeploymentAuditView": { "description": "Indicates activities on decoupled search nodes.", "properties": { "apiKeyId": { "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "created": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "eventTypeName": { "$ref": "#/$defs/SearchDeploymentAuditTypeView" }, "groupId": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "isGlobalAdmin": { "description": "Flag that indicates whether a MongoDB employee triggered the specified event.", "readOnly": true, "type": "boolean" }, "links": { "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.", "items": { "$ref": "#/$defs/Link" }, "readOnly": true, "type": "array" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "publicKey": { "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.", "readOnly": true, "type": "string" }, "raw": { "$ref": "#/$defs/raw" }, "remoteAddress": { "description": "IPv4 or IPv6 address from which the user triggered this event.", "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$", "readOnly": true, "type": "string" }, "userId": { "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "username": { "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.", "format": "email", "readOnly": true, "type": "string" } }, "required": [ "created", "eventTypeName", "id" ], "title": "Search Deployment Audits", "type": "object" }, "ServiceAccountEventTypeViewForNdsGroup": { "description": "Unique identifier of event type.", "enum": [ "SERVICE_ACCOUNT_CREATED", "SERVICE_ACCOUNT_DELETED", "SERVICE_ACCOUNT_ROLES_CHANGED", "SERVICE_ACCOUNT_DETAILS_CHANGED", "SERVICE_ACCOUNT_ADDED_TO_GROUP", "SERVICE_ACCOUNT_REMOVED_FROM_GROUP", "SERVICE_ACCOUNT_ACCESS_LIST_ENTRY_ADDED", "SERVICE_ACCOUNT_ACCESS_LIST_ENTRY_DELETED", "SERVICE_ACCOUNT_SECRET_ADDED", "SERVICE_ACCOUNT_SECRET_DELETED", "SERVICE_ACCOUNT_UI_IP_ACCESS_LIST_INHERITANCE_ENABLED", "SERVICE_ACCOUNT_UI_IP_ACCESS_LIST_INHERITANCE_DISABLED" ], "title": "Service Account Event Types", "type": "string" }, "ServiceAccountGroupEvents": { "description": "Service Account event identifies different activities around user API keys.", "properties": { "apiKeyId": { "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "created": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "eventTypeName": { "$ref": "#/$defs/ServiceAccountEventTypeViewForNdsGroup" }, "groupId": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "isGlobalAdmin": { "description": "Flag that indicates whether a MongoDB employee triggered the specified event.", "readOnly": true, "type": "boolean" }, "links": { "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.", "items": { "$ref": "#/$defs/Link" }, "readOnly": true, "type": "array" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "publicKey": { "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.", "readOnly": true, "type": "string" }, "raw": { "$ref": "#/$defs/raw" }, "remoteAddress": { "description": "IPv4 or IPv6 address from which the user triggered this event.", "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$", "readOnly": true, "type": "string" }, "userId": { "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "username": { "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.", "format": "email", "readOnly": true, "type": "string" } }, "required": [ "created", "eventTypeName", "id" ], "title": "ServiceAccount Events", "type": "object" }, "StreamProcessorEventTypeViewForNdsGroup": { "description": "Unique identifier of event type.", "enum": [ "STREAM_PROCESSOR_STATE_IS_FAILED", "INSIDE_STREAM_PROCESSOR_METRIC_THRESHOLD", "OUTSIDE_STREAM_PROCESSOR_METRIC_THRESHOLD" ], "title": "Stream Processor Event Types", "type": "string" }, "StreamProcessorEventViewForNdsGroup": { "description": "Stream Processor event identifies different activities about a stream processor in Atlas Streams.", "properties": { "created": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "eventTypeName": { "$ref": "#/$defs/StreamProcessorEventTypeViewForNdsGroup" }, "groupId": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "instanceName": { "description": "Name of the stream processing workspace associated with the event.", "readOnly": true, "type": "string" }, "links": { "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.", "items": { "$ref": "#/$defs/Link" }, "readOnly": true, "type": "array" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "processorErrorMsg": { "description": "Error message linked to the stream processor associated with the event.", "readOnly": true, "type": "string" }, "processorName": { "description": "Name of the stream processor associated with the event.", "readOnly": true, "type": "string" }, "processorState": { "description": "State of the stream processor associated with the event.", "readOnly": true, "type": "string" }, "raw": { "$ref": "#/$defs/raw" } }, "required": [ "created", "eventTypeName", "id" ], "title": "Stream Processor Events", "type": "object" }, "StreamsEventTypeViewForNdsGroup": { "description": "Unique identifier of event type.", "enum": [ "MAX_PROCESSOR_COUNT_REACHED" ], "title": "Streams Event Types", "type": "string" }, "StreamsEventViewForNdsGroup": { "description": "Streams event identifies different activities about Atlas Streams.", "properties": { "created": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "eventTypeName": { "$ref": "#/$defs/StreamsEventTypeViewForNdsGroup" }, "groupId": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "instanceName": { "description": "Name of the stream processing workspace associated with the event.", "readOnly": true, "type": "string" }, "links": { "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.", "items": { "$ref": "#/$defs/Link" }, "readOnly": true, "type": "array" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "raw": { "$ref": "#/$defs/raw" } }, "required": [ "created", "eventTypeName", "id" ], "title": "Streams Events", "type": "object" }, "TeamEventTypeViewForNdsGroup": { "description": "Unique identifier of event type.", "enum": [ "TEAM_ADDED_TO_GROUP", "TEAM_REMOVED_FROM_GROUP", "TEAM_ROLES_MODIFIED" ], "title": "Team Event Types", "type": "string" }, "TeamEventViewForNdsGroup": { "description": "Team event identifies different activities around organization teams.", "properties": { "apiKeyId": { "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "created": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "eventTypeName": { "$ref": "#/$defs/TeamEventTypeViewForNdsGroup" }, "groupId": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "isGlobalAdmin": { "description": "Flag that indicates whether a MongoDB employee triggered the specified event.", "readOnly": true, "type": "boolean" }, "links": { "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.", "items": { "$ref": "#/$defs/Link" }, "readOnly": true, "type": "array" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "publicKey": { "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.", "readOnly": true, "type": "string" }, "raw": { "$ref": "#/$defs/raw" }, "remoteAddress": { "description": "IPv4 or IPv6 address from which the user triggered this event.", "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$", "readOnly": true, "type": "string" }, "teamId": { "description": "Unique 24-hexadecimal digit string that identifies the organization team associated with this event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "userId": { "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "username": { "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.", "format": "email", "readOnly": true, "type": "string" } }, "required": [ "created", "eventTypeName", "id" ], "title": "Team Events", "type": "object" }, "UserEventTypeViewForNdsGroup": { "description": "Unique identifier of event type.", "enum": [ "JOINED_GROUP", "REMOVED_FROM_GROUP", "INVITED_TO_GROUP", "REQUESTED_TO_JOIN_GROUP", "GROUP_INVITATION_DELETED", "USER_ROLES_CHANGED_AUDIT", "JOIN_GROUP_REQUEST_DENIED_AUDIT", "JOIN_GROUP_REQUEST_APPROVED_AUDIT" ], "title": "User Event Types", "type": "string" }, "UserEventViewForNdsGroup": { "description": "User event reflects different activities about the atlas user.", "properties": { "apiKeyId": { "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "created": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "eventTypeName": { "$ref": "#/$defs/UserEventTypeViewForNdsGroup" }, "groupId": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "isGlobalAdmin": { "description": "Flag that indicates whether a MongoDB employee triggered the specified event.", "readOnly": true, "type": "boolean" }, "links": { "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.", "items": { "$ref": "#/$defs/Link" }, "readOnly": true, "type": "array" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "publicKey": { "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.", "readOnly": true, "type": "string" }, "raw": { "$ref": "#/$defs/raw" }, "remoteAddress": { "description": "IPv4 or IPv6 address from which the user triggered this event.", "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$", "readOnly": true, "type": "string" }, "targetUsername": { "description": "Email address for the console user that this event targets. The resource returns this parameter when `\"eventTypeName\" : \"USER\"`.", "format": "email", "readOnly": true, "type": "string" }, "userId": { "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "username": { "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.", "format": "email", "readOnly": true, "type": "string" } }, "required": [ "created", "eventTypeName", "id" ], "title": "User Events", "type": "object" }, "raw": { "description": "Additional meta information captured about this event. The response returns this parameter as a JSON object when the query parameter `includeRaw=true`. The list of fields in the raw document may change. Don't rely on raw values for formal monitoring.", "properties": { "_t": { "description": "Unique identifier of event type.", "type": "string" }, "alertConfigId": { "description": "Unique 24-hexadecimal digit string that identifies the alert configuration related to the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "cid": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "cre": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "description": { "description": "Description of the event.", "type": "string" }, "gn": { "description": "Human-readable label that identifies the project.", "maxLength": 64, "minLength": 1, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "orgName": { "description": "Human-readable label that identifies the organization that contains the project.", "maxLength": 64, "minLength": 1, "type": "string" }, "severity": { "description": "Severity of the event.", "enum": [ "INFO", "WARNING", "ERROR", "CRITICAL" ], "type": "string" } }, "readOnly": true, "type": "object" } } }