{ "$schema": "https://json-schema.org/draft/2020-12/schema", "$id": "https://raw.githubusercontent.com/api-evangelist/mongodb/main/json-schema/mongodb-event-view-for-org-schema.json", "title": "EventViewForOrg", "x-generated": "2026-10-03", "x-method": "derived", "x-generator": "derive-json-schema.py", "x-source": "openapi/mongodb-events-api-openapi.yml#/components/schemas/EventViewForOrg", "oneOf": [ { "$ref": "#/$defs/DefaultEventViewForOrg" }, { "$ref": "#/$defs/AlertAudit" }, { "$ref": "#/$defs/AlertConfigAudit" }, { "$ref": "#/$defs/ApiUserEventViewForOrg" }, { "$ref": "#/$defs/ServiceAccountOrgEvents" }, { "$ref": "#/$defs/BillingEventViewForOrg" }, { "$ref": "#/$defs/NDSAuditViewForOrg" }, { "$ref": "#/$defs/OrgEventViewForOrg" }, { "$ref": "#/$defs/TeamEvent" }, { "$ref": "#/$defs/UserEventViewForOrg" }, { "$ref": "#/$defs/ResourceEventViewForOrg" }, { "$ref": "#/$defs/AtlasResourcePolicyAuditForOrg" } ], "type": "object", "$defs": { "AlertAudit": { "description": "Alert audit indicates acknowledgement status of an alert.", "properties": { "alertId": { "description": "Unique 24-hexadecimal digit string that identifies the alert associated with the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "apiKeyId": { "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "created": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "eventTypeName": { "$ref": "#/$defs/AlertAuditTypeView" }, "groupId": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "isGlobalAdmin": { "description": "Flag that indicates whether a MongoDB employee triggered the specified event.", "readOnly": true, "type": "boolean" }, "links": { "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.", "items": { "$ref": "#/$defs/Link" }, "readOnly": true, "type": "array" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "publicKey": { "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.", "readOnly": true, "type": "string" }, "raw": { "$ref": "#/$defs/raw" }, "remoteAddress": { "description": "IPv4 or IPv6 address from which the user triggered this event.", "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$", "readOnly": true, "type": "string" }, "userId": { "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "username": { "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.", "format": "email", "readOnly": true, "type": "string" } }, "required": [ "created", "eventTypeName", "id" ], "title": "Alert Audits", "type": "object" }, "AlertAuditTypeView": { "description": "Unique identifier of event type.", "enum": [ "ALERT_ACKNOWLEDGED_AUDIT", "ALERT_UNACKNOWLEDGED_AUDIT" ], "title": "Alert Audit Types", "type": "string" }, "AlertConfigAudit": { "description": "Alert configuration audit indicates any activities around alert settings.", "properties": { "alertConfigId": { "description": "Unique 24-hexadecimal digit string that identifies the alert configuration associated with the `alertId`.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "apiKeyId": { "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "created": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "eventTypeName": { "$ref": "#/$defs/AlertConfigAuditTypeView" }, "groupId": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "isGlobalAdmin": { "description": "Flag that indicates whether a MongoDB employee triggered the specified event.", "readOnly": true, "type": "boolean" }, "links": { "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.", "items": { "$ref": "#/$defs/Link" }, "readOnly": true, "type": "array" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "publicKey": { "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.", "readOnly": true, "type": "string" }, "raw": { "$ref": "#/$defs/raw" }, "remoteAddress": { "description": "IPv4 or IPv6 address from which the user triggered this event.", "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$", "readOnly": true, "type": "string" }, "userId": { "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "username": { "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.", "format": "email", "readOnly": true, "type": "string" } }, "required": [ "created", "eventTypeName", "id" ], "title": "Alert Config Audits", "type": "object" }, "AlertConfigAuditTypeView": { "description": "Unique identifier of event type.", "enum": [ "ALERT_CONFIG_DISABLED_AUDIT", "ALERT_CONFIG_ENABLED_AUDIT", "ALERT_CONFIG_ADDED_AUDIT", "ALERT_CONFIG_DELETED_AUDIT", "ALERT_CONFIG_CHANGED_AUDIT" ], "title": "Alert Audit Types", "type": "string" }, "ApiUserEventTypeViewForOrg": { "description": "Unique identifier of event type.", "enum": [ "API_KEY_CREATED", "API_KEY_DELETED", "API_KEY_ACCESS_LIST_ENTRY_ADDED", "API_KEY_ACCESS_LIST_ENTRY_DELETED", "API_KEY_ROLES_CHANGED", "API_KEY_DESCRIPTION_CHANGED", "API_KEY_ADDED_TO_GROUP", "API_KEY_REMOVED_FROM_GROUP", "API_KEY_UI_IP_ACCESS_LIST_INHERITANCE_ENABLED", "API_KEY_UI_IP_ACCESS_LIST_INHERITANCE_DISABLED" ], "title": "API User Event Types", "type": "string" }, "ApiUserEventViewForOrg": { "description": "API User event identifies different activities around user API keys.", "properties": { "apiKeyId": { "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "created": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "eventTypeName": { "$ref": "#/$defs/ApiUserEventTypeViewForOrg" }, "groupId": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "isGlobalAdmin": { "description": "Flag that indicates whether a MongoDB employee triggered the specified event.", "readOnly": true, "type": "boolean" }, "links": { "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.", "items": { "$ref": "#/$defs/Link" }, "readOnly": true, "type": "array" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "publicKey": { "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.", "readOnly": true, "type": "string" }, "raw": { "$ref": "#/$defs/raw" }, "remoteAddress": { "description": "IPv4 or IPv6 address from which the user triggered this event.", "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$", "readOnly": true, "type": "string" }, "targetPublicKey": { "description": "Public part of the API key that this event targets.", "readOnly": true, "type": "string" }, "userId": { "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "username": { "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.", "format": "email", "readOnly": true, "type": "string" }, "whitelistEntry": { "description": "Entry in the list of source host addresses that the API key accepts and this event targets.", "readOnly": true, "type": "string" } }, "required": [ "created", "eventTypeName", "id" ], "title": "API User Events", "type": "object" }, "AtlasResourcePolicyAuditForOrg": { "description": "Atlas resource policy audits indicate organization level changes to resource policies.", "properties": { "apiKeyId": { "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "created": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "eventTypeName": { "description": "Unique identifier of event type.", "enum": [ "RESOURCE_POLICY_CREATED", "RESOURCE_POLICY_MODIFIED", "RESOURCE_POLICY_DELETED", "RESOURCE_POLICY_VIOLATED" ], "title": "Atlas Resource Policy Audit Types", "type": "string" }, "groupId": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "isGlobalAdmin": { "description": "Flag that indicates whether a MongoDB employee triggered the specified event.", "readOnly": true, "type": "boolean" }, "links": { "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.", "items": { "$ref": "#/$defs/Link" }, "readOnly": true, "type": "array" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "publicKey": { "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.", "readOnly": true, "type": "string" }, "raw": { "$ref": "#/$defs/raw" }, "remoteAddress": { "description": "IPv4 or IPv6 address from which the user triggered this event.", "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$", "readOnly": true, "type": "string" }, "resourcePolicyId": { "description": "Unique 24-hexadecimal character string that identifies the resource policy.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "userId": { "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "username": { "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.", "format": "email", "readOnly": true, "type": "string" } }, "required": [ "created", "eventTypeName", "id" ], "title": "Atlas Resource Policy Audits", "type": "object" }, "BillingEventTypeViewForOrg": { "description": "Unique identifier of event type.", "enum": [ "AWS_PAYMENT_PAID", "CHARGE_SUCCEEDED", "CHARGE_FAILED", "CHARGE_PROCESSING", "CHARGE_PENDING_REVERSAL", "BRAINTREE_CHARGE_FAILED", "INVOICE_CLOSED", "CHECK_PAYMENT_RECEIVED", "WIRE_TRANSFER_PAYMENT_RECEIVED", "DISCOUNT_APPLIED", "CREDIT_ISSUED", "CREDIT_PULLED_FWD", "CREDIT_END_DATE_MODIFIED", "PROMO_CODE_APPLIED", "PAYMENT_FORGIVEN", "REFUND_ISSUED", "ACCOUNT_DOWNGRADED", "ACCOUNT_UPGRADED", "ACCOUNT_MODIFIED", "SUPPORT_PLAN_ACTIVATED", "SUPPORT_PLAN_CANCELLED", "SUPPORT_PLAN_CANCELLATION_SCHEDULED", "INITIATE_SALESFORCE_SERVICE_CLOUD_SYNC", "INVOICE_ADDRESS_CHANGED", "INVOICE_ADDRESS_ADDED", "PREPAID_PLAN_ACTIVATED", "ELASTIC_INVOICING_MODE_ACTIVATED", "ELASTIC_INVOICING_MODE_DEACTIVATED", "TERMINATE_PAID_SERVICES", "BILLING_EMAIL_ADDRESS_ADDED", "BILLING_EMAIL_ADDRESS_CHANGED", "BILLING_EMAIL_ADDRESS_REMOVED", "AWS_BILLING_ACCOUNT_CREDIT_ISSUED", "GCP_BILLING_ACCOUNT_CREDIT_ISSUED", "CREDIT_SFOLID_MODIFIED", "PREPAID_PLAN_MODIFIED", "AWS_USAGE_REPORTED", "AZURE_USAGE_REPORTED", "GCP_USAGE_REPORTED", "VERCEL_USAGE_REPORTED", "BECAME_PAYING_ORG", "BECAME_LINKED_ORG", "NEW_LINKED_ORG", "UNLINKED_ORG", "ORG_LINKED_TO_PAYING_ORG", "ORG_UNLINKED_FROM_PAYING_ORG", "ORG_UNLINK_REQUESTED", "ORG_UNLINK_CANCELLED", "PAYMENT_UPDATED_THROUGH_API", "AZURE_BILLING_ACCOUNT_CREDIT_ISSUED", "CREDIT_START_DATE_MODIFIED", "CREDIT_ELASTIC_INVOICING_MODIFIED", "CREDIT_TYPE_MODIFIED", "CREDIT_AMOUNT_CENTS_MODIFIED", "CREDIT_AMOUNT_REMAINING_CENTS_MODIFIED", "CREDIT_TOTAL_BILLED_CENTS_MODIFIED", "CREDIT_AWS_CUSTOMER_ID_MODIFIED", "CREDIT_AWS_PRODUCT_CODE_MODIFIED", "CREDIT_GCP_MARKETPLACE_ENTITLEMENT_ID_MODIFIED", "CREDIT_AZURE_SUBSCRIPTION_ID_MODIFIED", "CREDIT_AZURE_PRIVATE_PLAN_ID_MODIFIED", "TARGETED_REBILL_EXECUTED", "LEGACY_REBILL_EXECUTED", "EVERGREEN_DEAL_CANCELLED", "GRACE_PERIOD_ACTIVATED", "GRACE_PERIOD_NO_LONGER_IN_EFFECT", "PENDING_DEAL_ACTIVATION_ADDED", "PENDING_DEAL_ACTIVATION_CANCELED", "PENDING_DEAL_APPLIED", "PENDING_DEAL_ACTIVATION_FAILED", "EVERGREEN_PRIORITY_MODIFIED", "CROSS_ORG_OPERATION_TICKET_TRACKING", "ADMIN_OVERRIDE_PAYMENT_METHOD_DELETED", "ADMIN_OVERRIDE_PAYMENT_METHOD_EXPIRED", "PAYMENT_METHOD_FLAGGED", "PAYMENT_METHOD_UNFLAGGED", "MARKETPLACE_REFUND_ISSUED", "PAYMENT_DUE_DATE_EXTENDED" ], "title": "Billing Event Types", "type": "string" }, "BillingEventViewForOrg": { "description": "Billing event identifies different activities related to billing, payment or financial status change of an organization.", "properties": { "apiKeyId": { "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "created": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "eventTypeName": { "$ref": "#/$defs/BillingEventTypeViewForOrg" }, "groupId": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "invoiceId": { "description": "Unique 24-hexadecimal digit string that identifies of the invoice associated with the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "isGlobalAdmin": { "description": "Flag that indicates whether a MongoDB employee triggered the specified event.", "readOnly": true, "type": "boolean" }, "links": { "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.", "items": { "$ref": "#/$defs/Link" }, "readOnly": true, "type": "array" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "paymentId": { "description": "Unique 24-hexadecimal digit string that identifies the invoice payment associated with this event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "publicKey": { "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.", "readOnly": true, "type": "string" }, "raw": { "$ref": "#/$defs/raw" }, "remoteAddress": { "description": "IPv4 or IPv6 address from which the user triggered this event.", "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$", "readOnly": true, "type": "string" }, "userId": { "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "username": { "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.", "format": "email", "readOnly": true, "type": "string" } }, "required": [ "created", "eventTypeName", "id" ], "title": "Billing Events", "type": "object" }, "DefaultEventViewForOrg": { "description": "Other events which don't have extra details beside of basic one.", "properties": { "apiKeyId": { "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "created": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "eventTypeName": { "description": "Unique identifier of event type.", "oneOf": [ { "enum": [ "FEDERATION_SETTINGS_CREATED", "FEDERATION_SETTINGS_DELETED", "FEDERATION_SETTINGS_UPDATED", "IDENTITY_PROVIDER_CREATED", "IDENTITY_PROVIDER_UPDATED", "IDENTITY_PROVIDER_DELETED", "IDENTITY_PROVIDER_ACTIVATED", "OIDC_IDENTITY_PROVIDER_UPDATED", "IDENTITY_PROVIDER_DEACTIVATED", "IDENTITY_PROVIDER_JWKS_REVOKED", "OIDC_IDENTITY_PROVIDER_ENABLED", "OIDC_IDENTITY_PROVIDER_DISABLED", "DOMAINS_ASSOCIATED", "DOMAIN_CREATED", "DOMAIN_DELETED", "DOMAIN_VERIFIED", "ORG_SETTINGS_CONFIGURED", "ORG_SETTINGS_UPDATED", "ORG_SETTINGS_DELETED", "RESTRICT_ORG_MEMBERSHIP_ENABLED", "RESTRICT_ORG_MEMBERSHIP_DISABLED", "ROLE_MAPPING_CREATED", "ROLE_MAPPING_UPDATED", "ROLE_MAPPING_DELETED" ], "title": "Federation Settings Event Types", "type": "string" }, { "enum": [ "GROUP_DELETED", "GROUP_CREATED", "GROUP_MOVED" ], "title": "Group Audit Types", "type": "string" }, { "enum": [ "MLAB_MIGRATION_COMPLETED", "MLAB_MIGRATION_TARGET_CLUSTER_CREATED", "MLAB_MIGRATION_DATABASE_USERS_IMPORTED", "MLAB_MIGRATION_IP_WHITELIST_IMPORTED", "MLAB_MIGRATION_TARGET_CLUSTER_SET", "MLAB_MIGRATION_DATABASE_RENAMED", "MLAB_MIGRATION_LIVE_IMPORT_STARTED", "MLAB_MIGRATION_LIVE_IMPORT_READY_FOR_CUTOVER", "MLAB_MIGRATION_LIVE_IMPORT_CUTOVER_COMPLETE", "MLAB_MIGRATION_LIVE_IMPORT_ERROR", "MLAB_MIGRATION_LIVE_IMPORT_CANCELLED", "MLAB_MIGRATION_DUMP_AND_RESTORE_TEST_STARTED", "MLAB_MIGRATION_DUMP_AND_RESTORE_TEST_SKIPPED", "MLAB_MIGRATION_DUMP_AND_RESTORE_STARTED", "MLAB_MIGRATION_SUPPORT_PLAN_SELECTED", "MLAB_MIGRATION_SUPPORT_PLAN_OPTED_OUT" ], "title": "Mlab Migration Audit Types", "type": "string" }, { "enum": [ "AWS_SELF_SERVE_ACCOUNT_LINKED", "AWS_SELF_SERVE_ACCOUNT_LINK_PENDING", "AWS_SELF_SERVE_ACCOUNT_CANCELLED", "AWS_SELF_SERVE_ACCOUNT_LINK_FAILED", "GCP_SELF_SERVE_ACCOUNT_LINK_PENDING", "GCP_SELF_SERVE_ACCOUNT_LINK_FAILED", "AZURE_SELF_SERVE_ACCOUNT_LINKED", "AZURE_SELF_SERVE_ACCOUNT_LINK_PENDING", "AZURE_SELF_SERVE_ACCOUNT_CANCELLED", "AZURE_SELF_SERVE_ACCOUNT_LINK_FAILED", "GCP_SELF_SERVE_ACCOUNT_LINKED", "GCP_SELF_SERVE_ACCOUNT_CANCELLED", "VERCEL_SELF_SERVE_ACCOUNT_LINKED", "VERCEL_SELF_SERVE_ACCOUNT_LINK_PENDING", "VERCEL_SELF_SERVE_ACCOUNT_CANCELLED", "VERCEL_SELF_SERVE_ACCOUNT_LINK_FAILED", "VERCEL_INVOICE_CREATED", "VERCEL_INVOICE_NOT_PAID", "VERCEL_INVOICE_OVERDUE", "VERCEL_INVOICE_PAID", "VERCEL_INVOICE_REFUNDED" ], "title": "Partner Event Types", "type": "string" }, { "enum": [ "SUPPORT_EMAILS_SENT_SUCCESSFULLY", "SUPPORT_EMAILS_SENT_FAILURE" ], "title": "Support Event Types", "type": "string" }, { "enum": [ "AI_MODELS_USAGE_TIER_UPDATED" ], "title": "Ai Models Event Types", "type": "string" } ], "type": "object" }, "groupId": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "isGlobalAdmin": { "description": "Flag that indicates whether a MongoDB employee triggered the specified event.", "readOnly": true, "type": "boolean" }, "links": { "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.", "items": { "$ref": "#/$defs/Link" }, "readOnly": true, "type": "array" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "publicKey": { "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.", "readOnly": true, "type": "string" }, "raw": { "$ref": "#/$defs/raw" }, "remoteAddress": { "description": "IPv4 or IPv6 address from which the user triggered this event.", "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$", "readOnly": true, "type": "string" }, "userId": { "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "username": { "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.", "format": "email", "readOnly": true, "type": "string" } }, "required": [ "created", "eventTypeName", "id" ], "title": "Any Other Events", "type": "object" }, "Link": { "properties": { "href": { "description": "Uniform Resource Locator (URL) that points another API resource to which this response has some relationship. This URL often begins with `https://cloud.mongodb.com/api/atlas`.", "type": "string" }, "rel": { "description": "Uniform Resource Locator (URL) that defines the semantic relationship between this resource and another API resource. This URL often begins with `https://cloud.mongodb.com/api/atlas`.", "type": "string" } }, "type": "object" }, "NDSAuditTypeViewForOrg": { "description": "Unique identifier of event type.", "enum": [ "ORG_LIMIT_UPDATED", "SHADOW_CLUSTER_ORG_OPT_IN", "SHADOW_CLUSTER_ORG_OPT_OUT" ], "title": "Atlas Audit Types", "type": "string" }, "NDSAuditViewForOrg": { "description": "Audit saving information about Atlas cloud provider and other Atlas related details.", "properties": { "apiKeyId": { "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "created": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "dbUserUsername": { "description": "The username of the MongoDB User that was created, deleted, or edited.", "readOnly": true, "type": "string" }, "eventTypeName": { "$ref": "#/$defs/NDSAuditTypeViewForOrg" }, "groupId": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "isGlobalAdmin": { "description": "Flag that indicates whether a MongoDB employee triggered the specified event.", "readOnly": true, "type": "boolean" }, "links": { "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.", "items": { "$ref": "#/$defs/Link" }, "readOnly": true, "type": "array" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "publicKey": { "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.", "readOnly": true, "type": "string" }, "raw": { "$ref": "#/$defs/raw" }, "remoteAddress": { "description": "IPv4 or IPv6 address from which the user triggered this event.", "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$", "readOnly": true, "type": "string" }, "userId": { "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "username": { "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.", "format": "email", "readOnly": true, "type": "string" }, "whitelistEntry": { "description": "Entry in the list of source host addresses that the API key accepts and this event targets.", "readOnly": true, "type": "string" } }, "required": [ "created", "eventTypeName", "id" ], "title": "Atlas Organization Audits", "type": "object" }, "OrgEventTypeViewForOrg": { "description": "Unique identifier of event type.", "enum": [ "ORG_CREATED", "CUSTOM_SESSION_TIMEOUT_MODIFIED", "SECURITY_CONTACT_MODIFIED", "ORG_CREDIT_CARD_ADDED", "ORG_CREDIT_CARD_UPDATED", "ORG_CREDIT_CARD_CURRENT", "ORG_CREDIT_CARD_ABOUT_TO_EXPIRE", "ORG_PAYPAL_LINKED", "ORG_PAYPAL_UPDATED", "ORG_PAYPAL_CANCELLED", "ORG_OVERRIDE_PAYMENT_METHOD_ADDED", "ORG_BANK_ACCOUNT_ADDED", "ORG_BANK_ACCOUNT_UPDATED", "ORG_WALLET_ADDED", "ORG_WALLET_UPDATED", "ORG_ACTIVATED", "ORG_TEMPORARILY_ACTIVATED", "ORG_SUSPENSION_DATE_CHANGED", "ORG_SUSPENDED", "ORG_ADMIN_SUSPENDED", "ORG_ADMIN_LOCKED", "ORG_CLUSTERS_DELETED", "ORG_CLUSTERS_PAUSED", "ORG_LOCKED", "ORG_LOCKED_ACCELERATED", "ORG_UNDER_FINANCIAL_PROTECTION", "ORG_NO_FINANCIAL_PROTECTION", "ORG_RENAMED", "ALL_ORG_USERS_HAVE_MFA", "ORG_USERS_WITHOUT_MFA", "ORG_INVOICE_UNDER_THRESHOLD", "ORG_INVOICE_OVER_THRESHOLD", "ORG_DAILY_BILL_UNDER_THRESHOLD", "ORG_DAILY_BILL_OVER_THRESHOLD", "ORG_DAILY_BILLING_CHANGE_NORMAL", "ORG_DAILY_BILLING_CHANGE_OVER_THRESHOLD", "ORG_WEEKLY_BILLING_CHANGE_NORMAL", "ORG_WEEKLY_BILLING_CHANGE_OVER_THRESHOLD", "ORG_MONTHLY_BILLING_CHANGE_NORMAL", "ORG_MONTHLY_BILLING_CHANGE_OVER_THRESHOLD", "ORG_GROUP_CHARGES_UNDER_THRESHOLD", "ORG_GROUP_CHARGES_OVER_THRESHOLD", "ORG_TWO_FACTOR_AUTH_REQUIRED", "ORG_TWO_FACTOR_AUTH_OPTIONAL", "ORG_PUBLIC_API_ACCESS_LIST_REQUIRED", "ORG_PUBLIC_API_ACCESS_LIST_NOT_REQUIRED", "ORG_EMPLOYEE_ACCESS_RESTRICTED", "ORG_EMPLOYEE_ACCESS_UNRESTRICTED", "ORG_CONNECTED_TO_MLAB", "ORG_DISCONNECTED_FROM_MLAB", "ORG_IDP_CERTIFICATE_CURRENT", "ORG_IDP_CERTIFICATE_ABOUT_TO_EXPIRE", "ORG_CONNECTED_TO_VERCEL", "ORG_DISCONNECTED_TO_VERCEL", "ORG_CONNECTION_UNINSTALLED_FROM_VERCEL", "ORG_UI_IP_ACCESS_LIST_ENABLED", "ORG_UI_IP_ACCESS_LIST_DISABLED", "ORG_EDITED_UI_IP_ACCESS_LIST_ENTRIES", "ORG_SERVICE_ACCOUNT_MAX_SECRET_VALIDITY_EDITED", "ORG_SERVICE_ACCOUNT_SECRETS_EXPIRED", "ORG_SERVICE_ACCOUNT_SECRETS_NO_LONGER_EXPIRED", "ORG_SERVICE_ACCOUNT_SECRETS_EXPIRING", "ORG_SERVICE_ACCOUNT_SECRETS_NO_LONGER_EXPIRING", "ORG_MONGODB_VERSION_EOL_EXTENSION_ACCEPTED", "ORG_MONGODB_VERSION_EOL_EXTENSION_PENDING", "ORG_MONGODB_VERSION_EOL_EXTENSION_CANCELLED", "ORG_BAAS_EOL_EXTENSION_ACCEPTED", "ORG_BAAS_EOL_EXTENSION_PENDING", "ORG_BAAS_EOL_EXTENSION_CANCELED", "GROUP_MOVED_FROM_ORG", "SANDBOX_ENABLED_FOR_ORG", "SANDBOX_DISABLED_FOR_ORG", "SANDBOX_CONFIG_DELETED", "SANDBOX_TEMPLATE_UPDATED", "ORGANIZATION_VOYAGE_SETTINGS_CREATED", "ORGANIZATION_VOYAGE_SETTINGS_DELETED", "PROJECT_CREATED_VIA_ANIS" ], "title": "Org Event Types", "type": "string" }, "OrgEventViewForOrg": { "description": "Organization event identifies different activities and changes in an organization settings.", "properties": { "apiKeyId": { "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "created": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "eventTypeName": { "$ref": "#/$defs/OrgEventTypeViewForOrg" }, "groupId": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "invoiceId": { "description": "Unique 24-hexadecimal digit string that identifies of the invoice associated with the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "isGlobalAdmin": { "description": "Flag that indicates whether a MongoDB employee triggered the specified event.", "readOnly": true, "type": "boolean" }, "links": { "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.", "items": { "$ref": "#/$defs/Link" }, "readOnly": true, "type": "array" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "publicKey": { "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.", "readOnly": true, "type": "string" }, "raw": { "$ref": "#/$defs/raw" }, "remoteAddress": { "description": "IPv4 or IPv6 address from which the user triggered this event.", "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$", "readOnly": true, "type": "string" }, "userId": { "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "username": { "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.", "format": "email", "readOnly": true, "type": "string" } }, "required": [ "created", "eventTypeName", "id" ], "title": "Organization Events", "type": "object" }, "ResourceEventTypeViewForOrg": { "description": "Unique identifier of event type.", "enum": [ "TAGS_MODIFIED", "GROUP_TAGS_MODIFIED" ], "title": "Resource Event Types", "type": "string" }, "ResourceEventViewForOrg": { "description": "Resource event reflects different activities about resources.", "properties": { "apiKeyId": { "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "created": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "eventTypeName": { "$ref": "#/$defs/ResourceEventTypeViewForOrg" }, "groupId": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "isGlobalAdmin": { "description": "Flag that indicates whether a MongoDB employee triggered the specified event.", "readOnly": true, "type": "boolean" }, "links": { "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.", "items": { "$ref": "#/$defs/Link" }, "readOnly": true, "type": "array" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "publicKey": { "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.", "readOnly": true, "type": "string" }, "raw": { "$ref": "#/$defs/raw" }, "remoteAddress": { "description": "IPv4 or IPv6 address from which the user triggered this event.", "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$", "readOnly": true, "type": "string" }, "resourceId": { "description": "Unique 24-hexadecimal digit string that identifies the resource associated with the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "resourceType": { "description": "Unique identifier of resource type.", "type": "string" }, "userId": { "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "username": { "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.", "format": "email", "readOnly": true, "type": "string" } }, "required": [ "created", "eventTypeName", "id", "resourceType" ], "title": "Resource Events", "type": "object" }, "ServiceAccountEventTypeViewForOrg": { "description": "Unique identifier of event type.", "enum": [ "SERVICE_ACCOUNT_CREATED", "SERVICE_ACCOUNT_DELETED", "SERVICE_ACCOUNT_ROLES_CHANGED", "SERVICE_ACCOUNT_DETAILS_CHANGED", "SERVICE_ACCOUNT_ADDED_TO_GROUP", "SERVICE_ACCOUNT_REMOVED_FROM_GROUP", "SERVICE_ACCOUNT_ACCESS_LIST_ENTRY_ADDED", "SERVICE_ACCOUNT_ACCESS_LIST_ENTRY_DELETED", "SERVICE_ACCOUNT_SECRET_ADDED", "SERVICE_ACCOUNT_SECRET_DELETED", "SERVICE_ACCOUNT_UI_IP_ACCESS_LIST_INHERITANCE_ENABLED", "SERVICE_ACCOUNT_UI_IP_ACCESS_LIST_INHERITANCE_DISABLED" ], "title": "Service Account Event Types", "type": "string" }, "ServiceAccountOrgEvents": { "description": "Service Account event identifies different activities around user API keys.", "properties": { "apiKeyId": { "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "created": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "eventTypeName": { "$ref": "#/$defs/ServiceAccountEventTypeViewForOrg" }, "groupId": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "isGlobalAdmin": { "description": "Flag that indicates whether a MongoDB employee triggered the specified event.", "readOnly": true, "type": "boolean" }, "links": { "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.", "items": { "$ref": "#/$defs/Link" }, "readOnly": true, "type": "array" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "publicKey": { "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.", "readOnly": true, "type": "string" }, "raw": { "$ref": "#/$defs/raw" }, "remoteAddress": { "description": "IPv4 or IPv6 address from which the user triggered this event.", "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$", "readOnly": true, "type": "string" }, "userId": { "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "username": { "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.", "format": "email", "readOnly": true, "type": "string" } }, "required": [ "created", "eventTypeName", "id" ], "title": "ServiceAccount Events", "type": "object" }, "TeamEvent": { "description": "Team event identifies different activities around organization teams.", "properties": { "apiKeyId": { "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "created": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "eventTypeName": { "$ref": "#/$defs/TeamEventTypeView" }, "groupId": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "isGlobalAdmin": { "description": "Flag that indicates whether a MongoDB employee triggered the specified event.", "readOnly": true, "type": "boolean" }, "links": { "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.", "items": { "$ref": "#/$defs/Link" }, "readOnly": true, "type": "array" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "publicKey": { "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.", "readOnly": true, "type": "string" }, "raw": { "$ref": "#/$defs/raw" }, "remoteAddress": { "description": "IPv4 or IPv6 address from which the user triggered this event.", "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$", "readOnly": true, "type": "string" }, "teamId": { "description": "Unique 24-hexadecimal digit string that identifies the organization team associated with this event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "userId": { "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "username": { "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.", "format": "email", "readOnly": true, "type": "string" } }, "required": [ "created", "eventTypeName", "id" ], "title": "Team Events", "type": "object" }, "TeamEventTypeView": { "description": "Unique identifier of event type.", "enum": [ "TEAM_CREATED", "TEAM_DELETED", "TEAM_UPDATED", "TEAM_NAME_CHANGED", "TEAM_ADDED_TO_GROUP", "TEAM_REMOVED_FROM_GROUP", "TEAM_ROLES_MODIFIED" ], "title": "Team Event Types", "type": "string" }, "UserEventTypeViewForOrg": { "description": "Unique identifier of event type.", "enum": [ "JOINED_ORG", "JOINED_TEAM", "INVITED_TO_ORG", "ORG_INVITATION_DELETED", "REMOVED_FROM_ORG", "REMOVED_FROM_TEAM", "USER_ROLES_CHANGED_AUDIT", "ORG_FLEX_CONSULTING_PURCHASED", "ORG_FLEX_CONSULTING_PURCHASE_FAILED", "INVITED_TO_TEAM" ], "title": "User Event Types", "type": "string" }, "UserEventViewForOrg": { "description": "User event reflects different activities about the atlas user.", "properties": { "apiKeyId": { "description": "Unique 24-hexadecimal digit string that identifies the API Key that triggered the event. If this resource returns this parameter, it doesn't return the `userId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "created": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "eventTypeName": { "$ref": "#/$defs/UserEventTypeViewForOrg" }, "groupId": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred. The `eventId` identifies the specific event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "isGlobalAdmin": { "description": "Flag that indicates whether a MongoDB employee triggered the specified event.", "readOnly": true, "type": "boolean" }, "links": { "description": "List of one or more Uniform Resource Locators (URLs) that point to API sub-resources, related API resources, or both. RFC 5988 outlines these relationships.", "items": { "$ref": "#/$defs/Link" }, "readOnly": true, "type": "array" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "publicKey": { "description": "Public part of the API key that triggered the event. If this resource returns this parameter, it doesn't return the **username** parameter.", "readOnly": true, "type": "string" }, "raw": { "$ref": "#/$defs/raw" }, "remoteAddress": { "description": "IPv4 or IPv6 address from which the user triggered this event.", "pattern": "^((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)(\\.(?!$)|$)){4}|([0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$", "readOnly": true, "type": "string" }, "targetUsername": { "description": "Email address for the console user that this event targets. The resource returns this parameter when `\"eventTypeName\" : \"USER\"`.", "format": "email", "readOnly": true, "type": "string" }, "userId": { "description": "Unique 24-hexadecimal digit string that identifies the console user who triggered the event. If this resource returns this parameter, it doesn't return the `apiKeyId` parameter.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "username": { "description": "Email address for the user who triggered this event. If this resource returns this parameter, it doesn't return the `publicApiKey` parameter.", "format": "email", "readOnly": true, "type": "string" } }, "required": [ "created", "eventTypeName", "id" ], "title": "User Events", "type": "object" }, "raw": { "description": "Additional meta information captured about this event. The response returns this parameter as a JSON object when the query parameter `includeRaw=true`. The list of fields in the raw document may change. Don't rely on raw values for formal monitoring.", "properties": { "_t": { "description": "Unique identifier of event type.", "type": "string" }, "alertConfigId": { "description": "Unique 24-hexadecimal digit string that identifies the alert configuration related to the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "cid": { "description": "Unique 24-hexadecimal digit string that identifies the project in which the event occurred.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "cre": { "description": "Date and time when this event occurred. This parameter expresses its value in the ISO 8601 timestamp format in UTC.", "format": "date-time", "readOnly": true, "type": "string" }, "description": { "description": "Description of the event.", "type": "string" }, "gn": { "description": "Human-readable label that identifies the project.", "maxLength": 64, "minLength": 1, "type": "string" }, "id": { "description": "Unique 24-hexadecimal digit string that identifies the event.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "orgId": { "description": "Unique 24-hexadecimal digit string that identifies the organization to which these events apply.", "pattern": "^([a-f0-9]{24})$", "readOnly": true, "type": "string" }, "orgName": { "description": "Human-readable label that identifies the organization that contains the project.", "maxLength": 64, "minLength": 1, "type": "string" }, "severity": { "description": "Severity of the event.", "enum": [ "INFO", "WARNING", "ERROR", "CRITICAL" ], "type": "string" } }, "readOnly": true, "type": "object" } } }