@@ -88,36 +88,83 @@ Additionally administrators can view events related to all users.
8888At the moment following events are tracked in the Activity log:
8989
9090* ** Defguard** module
91- * User login
92- * User login failed
93- * User MFA login
94- * User MFA login failed
95- * Recovery code used
96- * User logout
97- * User added
98- * User modified
99- * User removed
100- * MFA disabled
101- * MFA TOTP enabled
102- * MFA TOTP disabled
103- * MFA email enabled
104- * MFA email disabled
105- * MFA security key added
106- * MFA security key removed
107- * Device added
108- * Device modified
109- * Device removed
110- * Network device added
111- * Network device modified
112- * Network device removed
113- * Activity log stream device added
114- * Activity log stream device modified
115- * Activity log stream device removed
116- * ** Client** module
91+ * UserLogin
92+ * UserLoginFailed
93+ * UserLogout
94+ * UserMfaLogin
95+ * UserMfaLoginFailed
96+ * RecoveryCodeUsed
97+ * PasswordChangedByAdmin
98+ * PasswordChanged
99+ * PasswordReset
100+ * MfaDisabled
101+ * UserMfaDisabled
102+ * MfaTotpDisabled
103+ * MfaTotpEnabled
104+ * MfaEmailDisabled
105+ * MfaEmailEnabled
106+ * MfaSecurityKeyAdded
107+ * MfaSecurityKeyRemoved
108+ * UserAdded
109+ * UserRemoved
110+ * UserModified
111+ * UserGroupsModified
112+ * UserDeviceAdded
113+ * UserDeviceRemoved
114+ * UserDeviceModified
115+ * NetworkDeviceAdded
116+ * NetworkDeviceRemoved
117+ * NetworkDeviceModified
118+ * ActivityLogStreamCreated
119+ * ActivityLogStreamModified
120+ * ActivityLogStreamRemoved
121+ * VpnLocationAdded
122+ * VpnLocationRemoved
123+ * VpnLocationModified
124+ * ApiTokenAdded
125+ * ApiTokenRemoved
126+ * ApiTokenRenamed
127+ * OpenIdAppAdded
128+ * OpenIdAppRemoved
129+ * OpenIdAppModified
130+ * OpenIdAppStateChanged
131+ * OpenIdProviderModified
132+ * OpenIdProviderRemoved
133+ * SettingsUpdated
134+ * SettingsUpdatedPartial
135+ * SettingsDefaultBrandingRestored
136+ * GroupsBulkAssigned
137+ * GroupAdded
138+ * GroupModified
139+ * GroupRemoved
140+ * GroupMemberAdded
141+ * GroupMemberRemoved
142+ * GroupMembersModified
143+ * WebHookAdded
144+ * WebHookModified
145+ * WebHookRemoved
146+ * WebHookStateChanged
147+ * AuthenticationKeyAdded
148+ * AuthenticationKeyRemoved
149+ * AuthenticationKeyRenamed
150+ * ClientConfigurationTokenAdded
151+ * UserSnatBindingAdded
152+ * UserSnatBindingRemoved
153+ * UserSnatBindingModified
117154* ** Enrollment** module
155+ * EnrollmentStarted
156+ * EnrollmentDeviceAdded
157+ * EnrollmentCompleted
158+ * PasswordResetRequested
159+ * PasswordResetStarted
160+ * PasswordResetCompleted
161+ * TokenAdded
118162* ** VPN** module
119- * VPN client connected
120- * VPN client disconnected
163+ * ConnectedToMfaLocation
164+ * DisconnectedFromMfaLocation
165+ * MfaFailed
166+ * ConnectedToLocation
167+ * DisconnectedFromLocation
121168
122169## Streaming to external SIEM systems
123170
0 commit comments