Activity Log Event Type Reference
The following tables describe the Activity Log event types and attributes.
add_delete_user_to_group
The add_delete_user_to_group
event is logged when a user is added or removed from a group.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
eventTime | string | Timestamp of when the event occurred |
groupId | integer | The integer ID of the group |
groupLuid | string | The string LUID of the group |
groupOperation | string | Group operation, either add or delete user to a group |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
isError | bool | Indicates if the audit scenario was completed successfully or failed with an error |
serviceName | string | Name of service that emitted the event (e.g., vizportal, vizqlserver, sitesaml (outside monolith)) |
siteLuid | string | LUID of the Tableau site where the event took place |
traceUuid | string | Auto-generated UUID identical across all the events in a batch, such as multiple permissions changed by a single user action |
userId | integer | The integer ID of the user |
userLuid | string | The string LUID of the user |
content_owner_change
The content_owner_change
event is logged when the content owner changes.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
contentId | integer | The integer ID of the content that had the owner changed |
contentLuid | string | The LUID of the content that had the owner changed |
contentName | string | The name of the content that had the owner changed |
contentType | string | The type of content, such as datasource, workbook, or view |
eventTime | string | Timestamp of when the event occurred |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
isError | boolean | Indicates if the audit scenario was completed successfully or failed with an error |
newOwnerId | integer | The integer ID of the new content owner |
newOwnerLuid | string | The string LUID of the new content owner |
oldOwnerId | integer | The integer ID of the old content owner |
oldOwnerLuid | string | The string LUID of the old content owner |
serviceName | string | Name of service that emitted the event (e.g., vizportal, vizqlserver, sitesaml (outside monolith)) |
siteLuid | string | LUID of the Tableau site where the event took place |
traceUuid | string | Auto-generated UUID identical across all the events in a batch, such as multiple permissions changed by a single user action |
create_delete_group
The create_delete_group
event is logged when a group is created or deleted.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
eventTime | string | Timestamp of when the event occurred |
groupDomain | string | The domain of the group, such as local |
groupId | integer | The integer ID of the group |
groupLuid | string | The string LUID of the group |
groupName | string | The name of the group that had its permissions changed |
groupOperation | string | Group operation, either create or delete |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
isError | boolean | Indicates if the audit scenario was completed successfully or failed with an error |
serviceName | string | Name of service that emitted the event (e.g., vizportal, vizqlserver, sitesaml (outside monolith)) |
siteLuid | string | LUID of the Tableau site where the event took place |
traceUuid | string | Auto-generated UUID identical across all the events in a batch, such as multiple permissions changed by a single user action |
create_permissions
The create_permissions
event is logged when a new explicit permission rule is created.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
authorizableType | string | The type of content that had its permissions changed, such as a project or workbook |
capabilityId | integer | The ID of the capability. A capability is the ability to perform actions on content, such as view, filter, download, or delete |
capabilityValue | string | The description of the capability |
contentId | integer | The ID of the content that had the permissions updated |
contentLuid | string | The LUID of the content |
contentName | string | The name of the content that had the permissions updated |
eventTime | string | Timestamp of when the event occurred |
granteeId | integer | The ID of the grantee |
granteeLuid | string | The LUID of the grantee |
granteeType | string | The type of grantee, either user or group |
granteeValue | string | The updated permissions value, such as 'user allow' or 'group allow' |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
isError | boolean | Indicates if the audit scenario was completed successfully or failed with an error |
serviceName | string | Name of service that emitted the event (e.g., vizportal, vizqlserver, sitesaml (outside monolith)) |
siteLuid | string | LUID of the Tableau site where the event took place |
traceUuid | string | Auto-generated UUID identical across all the events in a batch, such as multiple permissions changed by a single user action |
delete_all_permissions
The delete_all_permissions
event is logged when all explicit permission rules for content are deleted, typically when content is deleted.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
authorizableType | string | The type of content that had its permissions changed, such as a project or workbook |
contentId | integer | The ID of the content that had the permissions updated |
contentLuid | string | The LUID of the content |
contentName | string | The name of the content that had the permissions updated |
eventTime | string | Timestamp of when the event occurred |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
isError | boolean | Indicates if the audit scenario was completed successfully or failed with an error |
serviceName | string | Name of service that emitted the event (e.g., vizportal, vizqlserver, sitesaml (outside monolith)) |
siteLuid | string | LUID of the Tableau site where the event took place |
traceUuid | string | Auto-generated UUID identical across all the events in a batch, such as multiple permissions changed by a single user action |
delete_permissions_grantee
The delete_permissions_grantee
event is logged when all explicit permission rules for a user are deleted, typically when the user is deleted.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
eventTime | string | Timestamp of when the event occurred |
granteeId | integer | The ID of the grantee |
granteeLuid | string | The LUID of the grantee |
granteeType | string | The type of grantee, either user or group |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
isError | boolean | Indicates if the audit scenario was completed successfully or failed with an error |
serviceName | string | Name of service that emitted the event (e.g., vizportal, vizqlserver, sitesaml (outside monolith)) |
siteLuid | string | LUID of the Tableau site where the event took place |
traceUuid | string | Auto-generated UUID identical across all the events in a batch, such as multiple permissions changed by a single user action |
delete_permissions
The delete_permissions
event is logged when an explicit permission rule is deleted on content.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
authorizableType | string | The type of content that had its permissions changed, such as a project or workbook |
capabilityId | integer | The ID of the capability. A capability is the ability to perform actions on content, such as view, filter, download, or delete |
capabilityValue | string | The description of the capability |
contentId | integer | The ID of the content that had the permissions updated |
contentLuid | string | The LUID of the content |
contentName | string | The name of the content that had the permissions updated |
eventTime | string | Timestamp of when the event occurred |
granteeId | integer | The ID of the grantee |
granteeLuid | string | The LUID of the grantee |
granteeType | string | The type of grantee, either user or group |
granteeValue | string | The updated permissions value, such as 'user allow' or 'group allow' |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
isError | boolean | Indicates if the audit scenario was completed successfully or failed with an error |
serviceName | string | Name of service that emitted the event (e.g., vizportal, vizqlserver, sitesaml (outside monolith)) |
siteLuid | string | LUID of the Tableau site where the event took place |
traceUuid | string | Auto-generated UUID identical across all the events in a batch, such as multiple permissions changed by a single user action |
display_sheet_tabs
The display_sheet_tabs
event is logged when the "Tabbed Views" value is updated on a workbook.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
displayTabs | boolean | Indicates whether tabs are displayed or not |
eventTime | string | Timestamp of when the event occurred |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
isError | boolean | Indicates if the audit scenario was completed successfully or failed with an error |
serviceName | string | Name of service that emitted the event (e.g., vizportal, vizqlserver, sitesaml (outside monolith)) |
siteLuid | string | LUID of the Tableau site where the event took place |
traceUuid | string | Auto-generated UUID identical across all the events in a batch, such as multiple permissions changed by a single user action |
workbookId | integer | The ID of the workbook |
hist_access_datasource
The hist_access_datasource
event is logged when a user accessed the data source.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
certificationNote | string | Reason for the certification status of the data source |
datasourceLuid | string | The LUID of the data source |
description | string | The description of the published data source |
eventTime | string | Timestamp of when the event occurred |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
isCertified | bool | Indicates whether the data source is certified |
name | string | Name of the data source |
ownerLuid | string | User LUID of the data source owner |
ownerName | string | The name of the data source owner |
projectLuid | string | LUID of the project containing the data source |
projectName | string | Name of the project where the data source was published |
remoteQueryAgentName | string | Name of the remote query agent used by the data source |
repositoryUrl | string | Uniquely identifies a view in the URL. Typically contains workbook or view name but may not be apparent when non-ASCII characters are included. |
revision | string | The revision number of the data source. Starts with 1.0 and increments by 0.1 each time a new version is published. |
siteLuid | string | LUID of the Tableau site where the event took place |
size | integer | The size of the data source in bytes |
usingRemoteQueryAgent | bool | Indicates whether the data source uses remote query agent |
hist_access_datasource_remotely
The hist_access_datasource_remotely
event is logged when a user accessed the data sources from a remote client, such as Tableau Desktop, REST API, etc.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
certificationNote | string | Reason for the certification status of the data source |
datasourceLuid | string | The LUID of the data source |
description | string | The description of the published data source |
eventTime | string | Timestamp of when the event occurred |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
isCertified | bool | Indicates whether the data source is certified |
name | string | Name of the data source |
ownerLuid | string | User LUID of the data source owner |
ownerName | string | The name of the data source owner |
projectLuid | string | LUID of the project containing the data source |
projectName | string | Name of the project where the data source was published |
remoteQueryAgentName | string | Name of the remote query agent used by the data source |
repositoryUrl | string | Uniquely identifies a view in the URL. Typically contains workbook or view name but may not be apparent when non-ASCII characters are included. |
revision | string | The revision number of the data source. Starts with 1.0 and increments by 0.1 each time a new version is published. |
siteLuid | string | LUID of the Tableau site where the event took place |
size | integer | The size of the data source in bytes |
usingRemoteQueryAgent | bool | Indicates whether the data source uses remote query agent |
hist_access_view
The hist_access_view
event is logged when a user accessed a view.
Attribute Name | Type | Description |
---|---|---|
actorExternalId | string | The external ID for the acting user. This is an opaque identifier dependent on the actor type, but could, for example, be a user email. |
actorUserId | integer | User ID of the user who initiated the event |
caption | string | The descriptive phrase constructed for the worksheet based on the workbook definition |
description | string | A description of the view |
eventTime | string | Timestamp of when the event occurred |
fields | string | A list of fields extracted from the workbook .twb file |
firstPublishedAt | string | Timestamp of when the view was first published. The value won't change when republishing the workbook containing the view. |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
index | integer | Each view has an index that is unique among views belonging to that workbook. |
name | string | The name of the view |
ownerLuid | string | User LUID of the view owner |
ownerName | string | The name of the view owner |
repositoryUrl | string | Uniquely identifies a view in the URL. Typically contains workbook or view name but may not be apparent when non-ASCII characters are included. |
revision | string | The revision number of the view. Starts with 1.0 and increments by 0.1 each time a new version is published. |
sheetId | string | The ID of the worksheet |
sheetType | string | The type of worksheet. Either a story, dashboard, or view. |
siteLuid | string | LUID of the Tableau site where the event took place |
title | string | The worksheet title from the workbook .twb file |
viewLuid | string | The LUID of the view |
workbookLuid | string | The LUID of the workbook containing the view |
workbookName | string | Name of the workbook containing the view |
hist_append_to_datasource_extract
The hist_append_to_datasource_extract
event is logged when data is added to a data extract.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
certificationNote | string | Reason for the certification status of the data source |
datasourceLuid | string | The LUID of the data source |
description | string | The description of the published data source |
eventTime | string | Timestamp of when the event occurred |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
isCertified | bool | Indicates whether the data source is certified |
name | string | Name of the data source |
ownerLuid | string | User LUID of the data source owner |
ownerName | string | The name of the data source owner |
projectLuid | string | LUID of the project containing the data source |
projectName | string | Name of the project where the data source was published |
remoteQueryAgentName | string | Name of the remote query agent used by the data source |
repositoryUrl | string | Uniquely identifies a view in the URL. Typically contains workbook or view name but may not be apparent when non-ASCII characters are included. |
revision | string | The revision number of the data source. Starts with 1.0 and increments by 0.1 each time a new version is published. |
siteLuid | string | LUID of the Tableau site where the event took place |
size | integer | The size of the data source in bytes |
usingRemoteQueryAgent | bool | Indicates whether the data source uses remote query agent |
hist_change_datasource_ownership
The hist_change_datasource_ownership
event is logged when changing the data source owner.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
certificationNote | string | Reason for the certification status of the data source |
datasourceLuid | string | The LUID of the data source |
description | string | The description of the published data source |
eventTime | string | Timestamp of when the event occurred |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
isCertified | bool | Indicates whether the data source is certified |
name | string | Name of the data source |
newOwnerLuid | string | The LUID of the new data source owner |
newOwnerName | string | The name of the new data source owner |
oldOwnerLuid | string | The LUID of the previous data source owner |
oldOwnerName | string | The name of the previous data source owner |
ownerLuid | string | User LUID of the data source owner |
ownerName | string | The name of the data source owner |
projectLuid | string | LUID of the project containing the data source |
projectName | string | Name of the project where the data source was published |
remoteQueryAgentName | string | Name of the remote query agent used by the data source |
repositoryUrl | string | Uniquely identifies a view in the URL. Typically contains workbook or view name but may not be apparent when non-ASCII characters are included. |
revision | string | The revision number of the data source. Starts with 1.0 and increments by 0.1 each time a new version is published. |
siteLuid | string | LUID of the Tableau site where the event took place |
size | integer | The size of the data source in bytes |
usingRemoteQueryAgent | bool | Indicates whether the data source uses remote query agent |
hist_change_flow_ownership
The hist_change_flow_ownership
event is logged when changing the flow owner.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
contentVersion | string | The version of the flow file. Increments by 1 on each publish. |
description | string | The description of the flow |
eventTime | string | Timestamp of when the event occurred |
flowLuid | string | The unique ID of the flow |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
name | string | The name of the flow |
newOwnerLuid | string | The LUID of the new flow owner |
newOwnerName | string | The name of the new flow owner |
oldOwnerLuid | string | The LUID of the previous flow owner |
oldOwnerName | string | The name of previous flow owner |
siteLuid | string | LUID of the Tableau site where the event took place |
size | integer | The size of the flow in bytes |
hist_create_datasource_trigger
The hist_create_datasource_trigger
event specifies what caused the data source to be created.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
certificationNote | string | Reason for the certification status of the data source |
datasourceLuid | string | The LUID of the data source |
description | string | The description of the published data source |
eventTime | string | Timestamp of when the event occurred |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
isCertified | bool | Indicates whether the data source is certified |
name | string | Name of the data source |
ownerLuid | string | User LUID of the data source owner |
ownerName | string | The name of the data source owner |
projectLuid | string | LUID of the project containing the data source |
projectName | string | Name of the project where the data source was published |
remoteQueryAgentName | string | Name of the remote query agent used by the data source |
repositoryUrl | string | Uniquely identifies a view in the URL. Typically contains workbook or view name but may not be apparent when non-ASCII characters are included. |
revision | string | The revision number of the data source. Starts with 1.0 and increments by 0.1 each time a new version is published. |
siteLuid | string | LUID of the Tableau site where the event took place |
size | integer | The size of the data source in bytes |
usingRemoteQueryAgent | bool | Indicates whether the data source uses remote query agent |
hist_create_flow_trigger
The hist_create_flow_trigger
event specifies what caused the flow to be created.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
contentVersion | string | The version of the flow file. Increments by 1 on each publish. |
description | string | The description of the flow |
eventTime | string | Timestamp of when the event occurred |
flowLuid | string | The unique ID of the flow |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
name | string | The name of the flow |
siteLuid | string | LUID of the Tableau site where the event took place |
size | integer | The size of the flow in bytes |
hist_delete_datasource
The hist_delete_datasource
event is logged when deleting a data source.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
certificationNote | string | Reason for the certification status of the data source |
datasourceLuid | string | The LUID of the data source |
description | string | The description of the published data source |
eventTime | string | Timestamp of when the event occurred |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
isCertified | bool | Indicates whether the data source is certified |
name | string | Name of the data source |
ownerLuid | string | User LUID of the data source owner |
ownerName | string | The name of the data source owner |
projectLuid | string | LUID of the project containing the data source |
projectName | string | Name of the project where the data source was published |
remoteQueryAgentName | string | Name of the remote query agent used by the data source |
repositoryUrl | string | Uniquely identifies a view in the URL. Typically contains workbook or view name but may not be apparent when non-ASCII characters are included. |
revision | string | The revision number of the data source. Starts with 1.0 and increments by 0.1 each time a new version is published. |
siteLuid | string | LUID of the Tableau site where the event took place |
size | integer | The size of the data source in bytes |
usingRemoteQueryAgent | bool | Indicates whether the data source uses remote query agent |
hist_delete_datasource_trigger
The hist_delete_datasource_trigger
event specifies what caused the data source to be deleted.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
certificationNote | string | Reason for the certification status of the data source |
datasourceLuid | string | The LUID of the data source |
description | string | The description of the published data source |
eventTime | string | Timestamp of when the event occurred |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
isCertified | bool | Indicates whether the data source is certified |
name | string | Name of the data source |
ownerLuid | string | User LUID of the data source owner |
ownerName | string | The name of the data source owner |
projectLuid | string | LUID of the project containing the data source |
projectName | string | Name of the project where the data source was published |
remoteQueryAgentName | string | Name of the remote query agent used by the data source |
repositoryUrl | string | Uniquely identifies a view in the URL. Typically contains workbook or view name but may not be apparent when non-ASCII characters are included. |
revision | string | The revision number of the data source. Starts with 1.0 and increments by 0.1 each time a new version is published. |
siteLuid | string | LUID of the Tableau site where the event took place |
size | integer | The size of the data source in bytes |
usingRemoteQueryAgent | bool | Indicates whether the data source uses remote query agent |
hist_delete_flow
The hist_delete_flow
event is logged when a flow is deleted.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
contentVersion | string | The version of the flow file. Increments by 1 on each publish. |
description | string | The description of the flow |
eventTime | string | Timestamp of when the event occurred |
flowLuid | string | The unique ID of the flow |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
name | string | The name of the flow |
siteLuid | string | LUID of the Tableau site where the event took place |
size | integer | The size of the flow in bytes |
hist_delete_flow_trigger
The hist_delete_flow_trigger
event specifies what caused the flow to be deleted.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
contentVersion | string | The version of the flow file. Increments by 1 on each publish. |
description | string | The description of the flow |
eventTime | string | Timestamp of when the event occurred |
flowLuid | string | The unique ID of the flow |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
name | string | The name of the flow |
siteLuid | string | LUID of the Tableau site where the event took place |
size | integer | The size of the flow in bytes |
hist_delete_system_user
The hist_delete_system_user
event is logged when a system user is deleted.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
string | Email of the user | |
eventTime | string | Timestamp of when the event occurred |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
licensingRoleName | string | The name of the licensing role held by the user at the time of the associated event |
name | string | Name of the user |
siteAdminLevel | integer | Indicates whether the user is a site admin. The value 5 = site admin and 0 = not a site admin. |
siteLuid | string | LUID of the Tableau site where the event took place |
siteRoleId | integer | Site role ID of the user. The value 0 = SiteAdministrator, 1 = SupportUser, 2 = Publisher, 3 = Interactor, 4 = ViewerWithPublish, 5 = Viewer, 6 = UnlicensedWithPublish, 7 = Guest, 8 = Unlicensed, and 9 = BasicUser. |
userLuid | string | The unique identifier of the user |
hist_delete_view
The hist_delete_view
event is logged when a view is deleted from the site.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
caption | string | The descriptive phrase constructed for the worksheet based on the workbook definition |
description | string | A description of the view |
eventTime | string | Timestamp of when the event occurred |
fields | string | A list of fields extracted from the workbook .twb file |
firstPublishedAt | string | Timestamp of when the view was first published. The value won't change when republishing the workbook containing the view. |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
index | integer | Each view has an index that is unique among views belonging to that workbook. |
name | string | The name of the view |
ownerLuid | string | User LUID of the view owner |
ownerName | string | The name of the view owner |
repositoryUrl | string | Uniquely identifies a view in the URL. Typically contains workbook or view name but may not be apparent when non-ASCII characters are included. |
revision | string | The revision number of the view. Starts with 1.0 and increments by 0.1 each time a new version is published. |
sheetId | string | The ID of the worksheet |
sheetType | string | The type of worksheet. Either a story, dashboard, or view. |
siteLuid | string | LUID of the Tableau site where the event took place |
title | string | The worksheet title from the workbook .twb file |
viewLuid | string | The LUID of the view |
workbookLuid | string | The LUID of the workbook containing the view |
workbookName | string | Name of the workbook containing the view |
hist_download_datasource
The hist_download_datasource
event is logged when a data source is downloaded from the site.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
certificationNote | string | Reason for the certification status of the data source |
datasourceLuid | string | The LUID of the data source |
description | string | The description of the published data source |
eventTime | string | Timestamp of when the event occurred |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
isCertified | bool | Indicates whether the data source is certified |
name | string | Name of the data source |
ownerLuid | string | User LUID of the data source owner |
ownerName | string | The name of the data source owner |
projectLuid | string | LUID of the project containing the data source |
projectName | string | Name of the project where the data source was published |
remoteQueryAgentName | string | Name of the remote query agent used by the data source |
repositoryUrl | string | Uniquely identifies a view in the URL. Typically contains workbook or view name but may not be apparent when non-ASCII characters are included. |
revision | string | The revision number of the data source. Starts with 1.0 and increments by 0.1 each time a new version is published. |
siteLuid | string | LUID of the Tableau site where the event took place |
size | integer | The size of the data source in bytes |
usingRemoteQueryAgent | bool | Indicates whether the data source uses remote query agent |
hist_download_flow
The hist_download_flow
event is logged when a flow is downloaded from the site.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
contentVersion | string | The version of the flow file. Increments by 1 on each publish. |
description | string | The description of the flow |
eventTime | string | Timestamp of when the event occurred |
flowLuid | string | The unique ID of the flow |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
name | string | The name of the flow |
siteLuid | string | LUID of the Tableau site where the event took place |
size | integer | The size of the flow in bytes |
hist_issue_refresh_token
The hist_issue_refresh_token
event is logged when a refresh token or personal access token (PAT) is issued.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
eventTime | string | Timestamp of when the event occurred |
refreshTokenGuid | string | The unique ID of the refresh token or PAT |
siteLuid | string | LUID of the Tableau site where the event took place |
hist_login
The hist_login
event is logged when a user signed in to the site.
Attribute Name | Type | Description |
---|---|---|
actorExternalId | string | The external ID for the acting user. This is an opaque identifier dependent on the actor type, but could, for example, be a user email. |
actorUserId | integer | User ID of the user who initiated the event |
eventTime | string | Timestamp of when the event occurred |
groupNames | string | The list of group names assigned to the ephemeral user during login |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
siteLuid | string | LUID of the Tableau site where the event took place |
hist_login_with_pat
The hist_login_with_pat
event is logged when a user signed in with a personal access token (PAT).
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
clientId | string | Used for PATs. The client ID is typically the PAT name displayed in the Tableau UI. |
createdAt | string | The timestamp when the PAT was first created in ISO 8601 UTC |
eventTime | string | Timestamp of when the event occurred |
expiresAt | string | The timestamp when the PAT expires in ISO 8601 UTC |
lastUsedAt | string | The timestamp when the PAT was last used in ISO 8601 UTC |
refreshTokenGuid | string | The unique ID of the PAT |
siteLuid | string | LUID of the Tableau site where the event took place |
hist_logout
The hist_logout event
is logged when a user logged out of the site.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
eventTime | string | Timestamp of when the event occurred |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
siteLuid | string | LUID of the Tableau site where the event took place |
hist_move_datasource
The hist_move_datasource
event is logged when a published data source is moved to a new project.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
certificationNote | string | Reason for the certification status of the data source |
datasourceLuid | string | The LUID of the data source |
description | string | The description of the published data source |
destinationProjectLuid | string | The unique ID of the destination project |
destinationProjectName | string | The name of the destination project |
eventTime | string | Timestamp of when the event occurred |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
isCertified | bool | Indicates whether the data source is certified |
name | string | Name of the data source |
ownerLuid | string | User LUID of the data source owner |
ownerName | string | The name of the data source owner |
projectLuid | string | LUID of the project containing the data source |
projectName | string | Name of the project where the data source was published |
remoteQueryAgentName | string | Name of the remote query agent used by the data source |
repositoryUrl | string | Uniquely identifies a view in the URL. Typically contains workbook or view name but may not be apparent when non-ASCII characters are included. |
revision | string | The revision number of the data source. Starts with 1.0 and increments by 0.1 each time a new version is published. |
siteLuid | string | LUID of the Tableau site where the event took place |
size | integer | The size of the data source in bytes |
sourceProjectLuid | string | The unique ID of the source project |
sourceProjectName | string | The name of the source project |
usingRemoteQueryAgent | bool | Indicates whether the data source uses remote query agent |
hist_move_flow
The hist_move_flow
event is logged when a flow is moved to a new project.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
contentVersion | string | The version of the flow file. Increments by 1 on each publish. |
description | string | The description of the flow |
destinationProjectLuid | string | The unique ID of the destination project |
destinationProjectName | string | The name of the destination project |
eventTime | string | Timestamp of when the event occurred |
flowLuid | string | The unique ID of the flow |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
name | string | The name of the flow |
siteLuid | string | LUID of the Tableau site where the event took place |
size | integer | The size of the flow in bytes |
sourceProjectLuid | string | The unique ID of the source project |
sourceProjectName | string | The name of the source project |
hist_publish_datasource
The hist_publish_datasource
event is logged when a data source is published on the site.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
certificationNote | string | Reason for the certification status of the data source |
datasourceLuid | string | The LUID of the data source |
description | string | The description of the published data source |
eventTime | string | Timestamp of when the event occurred |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
isCertified | bool | Indicates whether the data source is certified |
name | string | Name of the data source |
ownerLuid | string | User LUID of the data source owner |
ownerName | string | The name of the data source owner |
projectLuid | string | LUID of the project containing the data source |
projectName | string | Name of the project where the data source was published |
remoteQueryAgentName | string | Name of the remote query agent used by the data source |
repositoryUrl | string | Uniquely identifies a view in the URL. Typically contains workbook or view name but may not be apparent when non-ASCII characters are included. |
revision | string | The revision number of the data source. Starts with 1.0 and increments by 0.1 each time a new version is published. |
siteLuid | string | LUID of the Tableau site where the event took place |
size | integer | The size of the data source in bytes |
usingRemoteQueryAgent | bool | Indicates whether the data source uses remote query agent |
hist_publish_flow
The hist_publish_flow
event is logged when a flow is published on the site.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
contentVersion | string | The version of the flow file. Increments by 1 on each publish. |
description | string | The description of the flow |
eventTime | string | Timestamp of when the event occurred |
flowLuid | string | The unique ID of the flow |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
name | string | The name of the flow |
siteLuid | string | LUID of the Tableau site where the event took place |
size | integer | The size of the flow in bytes |
hist_publish_view
The hist_publish_view
event is logged when a view is published on the site.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
caption | string | The descriptive phrase constructed for the worksheet based on the workbook definition |
description | string | A description of the view |
eventTime | string | Timestamp of when the event occurred |
fields | string | A list of fields extracted from the workbook .twb file |
firstPublishedAt | string | Timestamp of when the view was first published. The value won't change when republishing the workbook containing the view. |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
index | integer | Each view has an index that is unique among views belonging to that workbook. |
name | string | The name of the view |
ownerLuid | string | User LUID of the view owner |
ownerName | string | The name of the view owner |
repositoryUrl | string | Uniquely identifies a view in the URL. Typically contains workbook or view name but may not be apparent when non-ASCII characters are included. |
revision | string | The revision number of the view. Starts with 1.0 and increments by 0.1 each time a new version is published. |
sheetId | string | The ID of the worksheet |
sheetType | string | The type of worksheet. Either a story, dashboard, or view. |
siteLuid | string | LUID of the Tableau site where the event took place |
title | string | The worksheet title from the workbook .twb file |
viewLuid | string | The LUID of the view |
workbookLuid | string | The LUID of the workbook containing the view |
workbookName | string | Name of the workbook containing the view |
hist_redeem_refresh_token
The hist_redeem_refresh_token
event is logged when a refresh token or personal access token (PAT) is redeemed.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
eventTime | string | Timestamp of when the event occurred |
refreshTokenGuid | string | The unique ID of the refresh token or PAT |
siteLuid | string | LUID of the Tableau site where the event took place |
hist_refresh_datasource_extract
The hist_refresh_datasource_extract
event is logged when a data extract is refreshed.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
certificationNote | string | Reason for the certification status of the data source |
datasourceLuid | string | The LUID of the data source |
description | string | The description of the published data source |
eventTime | string | Timestamp of when the event occurred |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
isCertified | bool | Indicates whether the data source is certified |
name | string | Name of the data source |
ownerLuid | string | User LUID of the data source owner |
ownerName | string | The name of the data source owner |
projectLuid | string | LUID of the project containing the data source |
projectName | string | Name of the project where the data source was published |
remoteQueryAgentName | string | Name of the remote query agent used by the data source |
repositoryUrl | string | Uniquely identifies a view in the URL. Typically contains workbook or view name but may not be apparent when non-ASCII characters are included. |
revision | string | The revision number of the data source. Starts with 1.0 and increments by 0.1 each time a new version is published. |
siteLuid | string | LUID of the Tableau site where the event took place |
size | integer | The size of the data source in bytes |
taskLuid | string | The LUID of the associated task |
usingRemoteQueryAgent | bool | Indicates whether the data source uses remote query agent |
hist_rename_datasource
The hist_rename_datasource
event is logged when a data source is renamed.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
certificationNote | string | Reason for the certification status of the data source |
datasourceLuid | string | The LUID of the data source |
description | string | The description of the published data source |
eventTime | string | Timestamp of when the event occurred |
formerName | string | The former name of the data source |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
isCertified | bool | Indicates whether the data source is certified |
name | string | Name of the data source |
ownerLuid | string | User LUID of the data source owner |
ownerName | string | The name of the data source owner |
projectLuid | string | LUID of the project containing the data source |
projectName | string | Name of the project where the data source was published |
remoteQueryAgentName | string | Name of the remote query agent used by the data source |
repositoryUrl | string | Uniquely identifies a view in the URL. Typically contains workbook or view name but may not be apparent when non-ASCII characters are included. |
revision | string | The revision number of the data source. Starts with 1.0 and increments by 0.1 each time a new version is published. |
siteLuid | string | LUID of the Tableau site where the event took place |
size | integer | The size of the data source in bytes |
usingRemoteQueryAgent | bool | Indicates whether the data source uses remote query agent |
hist_rename_flow
The hist_rename_flow
event is logged when a flow is renamed.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
contentVersion | string | The version of the flow file. Increments by 1 on each publish. |
description | string | The description of the flow |
eventTime | string | Timestamp of when the event occurred |
flowLuid | string | The unique ID of the flow |
formerName | string | The former name of the flow |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
name | string | The name of the flow |
siteLuid | string | LUID of the Tableau site where the event took place |
size | integer | The size of the flow in bytes |
hist_replace_datasource_extract
The hist_replace_datasource_extract
event is logged when a data extract is replaced.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
certificationNote | string | Reason for the certification status of the data source |
datasourceLuid | string | The LUID of the data source |
description | string | The description of the published data source |
eventTime | string | Timestamp of when the event occurred |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
isCertified | bool | Indicates whether the data source is certified |
name | string | Name of the data source |
ownerLuid | string | User LUID of the data source owner |
ownerName | string | The name of the data source owner |
projectLuid | string | LUID of the project containing the data source |
projectName | string | Name of the project where the data source was published |
remoteQueryAgentName | string | Name of the remote query agent used by the data source |
repositoryUrl | string | Uniquely identifies a view in the URL. Typically contains workbook or view name but may not be apparent when non-ASCII characters are included. |
revision | string | The revision number of the data source. Starts with 1.0 and increments by 0.1 each time a new version is published. |
siteLuid | string | LUID of the Tableau site where the event took place |
size | integer | The size of the data source in bytes |
usingRemoteQueryAgent | bool | Indicates whether the data source uses remote query agent |
hist_revoke_refresh_token
The hist_revoke_refresh_token
event is logged when a refresh token or personal access token (PAT) is revoked.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
eventTime | string | Timestamp of when the event occurred |
refreshTokenGuid | string | The unique ID of the refresh token or PAT |
siteLuid | string | LUID of the Tableau site where the event took place |
hist_run_flow
The hist_run_flow
event is logged when a flow is run manually.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
contentVersion | string | The version of the flow file. Increments by 1 on each publish. |
description | string | The description of the flow |
eventTime | string | Timestamp of when the event occurred |
flowLuid | string | The unique ID of the flow |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
name | string | The name of the flow |
siteLuid | string | LUID of the Tableau site where the event took place |
size | integer | The size of the flow in bytes |
hist_run_flow_scheduled
The hist_run_flow_scheduled
event is logged when a flow is run from a schedule.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
contentVersion | string | The version of the flow file. Increments by 1 on each publish. |
description | string | The description of the flow |
eventTime | string | Timestamp of when the event occurred |
flowLuid | string | The unique ID of the flow |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
name | string | The name of the flow |
siteLuid | string | LUID of the Tableau site where the event took place |
size | integer | The size of the flow in bytes |
taskLuid | string | The luid of the associated task |
hist_save_flow
The hist_save_flow
event is logged when a flow is saved.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
contentVersion | string | The version of the flow file. Increments by 1 on each publish. |
description | string | The description of the flow |
eventTime | string | Timestamp of when the event occurred |
flowLuid | string | The unique ID of the flow |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
name | string | The name of the flow |
siteLuid | string | LUID of the Tableau site where the event took place |
size | integer | The size of the flow in bytes |
hist_send_data_driven_alert_email
The hist_send_data_driven_alert_email
event is logged when a data-driven alert email or notification is sent successfully.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
caption | string | The descriptive phrase constructed for the worksheet based on the workbook definition |
description | string | A description of the view |
eventTime | string | Timestamp of when the event occurred |
fields | string | A list of fields extracted from the workbook .twb file |
firstPublishedAt | string | Timestamp of when the view was first published. The value won't change when republishing the workbook containing the view. |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
index | integer | Each view has an index that is unique among views belonging to that workbook. |
name | string | The name of the view |
ownerLuid | string | User LUID of the view owner |
ownerName | string | The name of the view owner |
repositoryUrl | string | Uniquely identifies a view in the URL. Typically contains workbook or view name but may not be apparent when non-ASCII characters are included. |
revision | string | The revision number of the view. Starts with 1.0 and increments by 0.1 each time a new version is published. |
sheetId | string | The ID of the worksheet |
sheetType | string | The type of worksheet. Either a story, dashboard, or view. |
siteLuid | string | LUID of the Tableau site where the event took place |
title | string | The worksheet title from the workbook .twb file |
viewLuid | string | The LUID of the view |
workbookLuid | string | The LUID of the workbook containing the view |
workbookName | string | Name of the workbook containing the view |
hist_send_failing_data_alert_email
The hist_send_failing_data_alert_email
event is logged when a data-driven alert email or notification fails.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
caption | string | The descriptive phrase constructed for the worksheet based on the workbook definition |
description | string | A description of the view |
eventTime | string | Timestamp of when the event occurred |
fields | string | A list of fields extracted from the workbook .twb file |
firstPublishedAt | string | Timestamp of when the view was first published. The value won't change when republishing the workbook containing the view. |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
index | integer | Each view has an index that is unique among views belonging to that workbook. |
name | string | The name of the view |
ownerLuid | string | User LUID of the view owner |
ownerName | string | The name of the view owner |
repositoryUrl | string | Uniquely identifies a view in the URL. Typically contains workbook or view name but may not be apparent when non-ASCII characters are included. |
revision | string | The revision number of the view. Starts with 1.0 and increments by 0.1 each time a new version is published. |
sheetId | string | The ID of the worksheet |
sheetType | string | The type of worksheet. Either a story, dashboard, or view. |
siteLuid | string | LUID of the Tableau site where the event took place |
title | string | The worksheet title from the workbook .twb file |
viewLuid | string | The LUID of the view |
workbookLuid | string | The LUID of the workbook containing the view |
workbookName | string | Name of the workbook containing the view |
hist_send_subscription_email_for_view
The hist_send_subscription_email_for_view event
is logged when a subscription email is sent successfully.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
caption | string | The descriptive phrase constructed for the worksheet based on the workbook definition |
description | string | A description of the view |
eventTime | string | Timestamp of when the event occurred |
fields | string | A list of fields extracted from the workbook .twb file |
firstPublishedAt | string | Timestamp of when the view was first published. The value won't change when republishing the workbook containing the view. |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
index | integer | Each view has an index that is unique among views belonging to that workbook. |
name | string | The name of the view |
ownerLuid | string | User LUID of the view owner |
ownerName | string | The name of the view owner |
repositoryUrl | string | Uniquely identifies a view in the URL. Typically contains workbook or view name but may not be apparent when non-ASCII characters are included. |
revision | string | The revision number of the view. Starts with 1.0 and increments by 0.1 each time a new version is published. |
scheduleLuid | string | The uuid for schedules used in REST API |
scheduleName | string | The name of the schedule |
sheetId | string | The ID of the worksheet |
sheetType | string | The type of worksheet. Either a story, dashboard, or view. |
siteLuid | string | LUID of the Tableau site where the event took place |
title | string | The worksheet title from the workbook .twb file |
viewLuid | string | The LUID of the view |
workbookLuid | string | The LUID of the workbook containing the view |
workbookName | string | Name of the workbook containing the view |
hist_send_suspended_data_alert_email
The hist_send_suspended_data_alert_email
event is logged when a data-driven alert is suspended.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
caption | string | The descriptive phrase constructed for the worksheet based on the workbook definition |
description | string | A description of the view |
eventTime | string | Timestamp of when the event occurred |
fields | string | A list of fields extracted from the workbook .twb file |
firstPublishedAt | string | Timestamp of when the view was first published. The value won't change when republishing the workbook containing the view. |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
index | integer | Each view has an index that is unique among views belonging to that workbook. |
name | string | The name of the view |
ownerLuid | string | User LUID of the view owner |
ownerName | string | The name of the view owner |
repositoryUrl | string | Uniquely identifies a view in the URL. Typically contains workbook or view name but may not be apparent when non-ASCII characters are included. |
revision | string | The revision number of the view. Starts with 1.0 and increments by 0.1 each time a new version is published. |
sheetId | string | The ID of the worksheet |
sheetType | string | The type of worksheet. Either a story, dashboard, or view. |
siteLuid | string | LUID of the Tableau site where the event took place |
title | string | The worksheet title from the workbook .twb file |
viewLuid | string | The LUID of the view |
workbookLuid | string | The LUID of the workbook containing the view |
workbookName | string | Name of the workbook containing the view |
hist_update_datasource
The hist_update_datasource
event is logged when a data source is updated.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
certificationNote | string | Reason for the certification status of the data source |
datasourceLuid | string | The LUID of the data source |
description | string | The description of the published data source |
eventTime | string | Timestamp of when the event occurred |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
isCertified | bool | Indicates whether the data source is certified |
name | string | Name of the data source |
ownerLuid | string | User LUID of the data source owner |
ownerName | string | The name of the data source owner |
projectLuid | string | LUID of the project containing the data source |
projectName | string | Name of the project where the data source was published |
remoteQueryAgentName | string | Name of the remote query agent used by the data source |
repositoryUrl | string | Uniquely identifies a view in the URL. Typically contains workbook or view name but may not be apparent when non-ASCII characters are included. |
revision | string | The revision number of the data source. Starts with 1.0 and increments by 0.1 each time a new version is published. |
siteLuid | string | LUID of the Tableau site where the event took place |
size | integer | The size of the data source in bytes |
usingRemoteQueryAgent | bool | Indicates whether the data source uses remote query agent |
hist_update_datasource_trigger
The hist_update_datasource_trigger
event specifies what caused the data source to be updated.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
certificationNote | string | Reason for the certification status of the data source |
datasourceLuid | string | The LUID of the data source |
description | string | The description of the published data source |
eventTime | string | Timestamp of when the event occurred |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
isCertified | bool | Indicates whether the data source is certified |
name | string | Name of the data source |
ownerLuid | string | User LUID of the data source owner |
ownerName | string | The name of the data source owner |
projectLuid | string | LUID of the project containing the data source |
projectName | string | Name of the project where the data source was published |
remoteQueryAgentName | string | Name of the remote query agent used by the data source |
repositoryUrl | string | Uniquely identifies a view in the URL. Typically contains workbook or view name but may not be apparent when non-ASCII characters are included. |
revision | string | The revision number of the data source. Starts with 1.0 and increments by 0.1 each time a new version is published. |
siteLuid | string | LUID of the Tableau site where the event took place |
size | integer | The size of the data source in bytes |
usingRemoteQueryAgent | bool | Indicates whether the data source uses remote query agent |
hist_update_flow
The hist_update_flow
event is logged when a flow is updated.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
contentVersion | string | The version of the flow file. Increments by 1 on each publish. |
description | string | The description of the flow |
eventTime | string | Timestamp of when the event occurred |
flowLuid | string | The unique ID of the flow |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
name | string | The name of the flow |
siteLuid | string | LUID of the Tableau site where the event took place |
size | integer | The size of the flow in bytes |
hist_update_flow_trigger
The hist_update_flow_trigger
event specifies what caused the flow to update.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
contentVersion | string | The version of the flow file. Increments by 1 on each publish. |
description | string | The description of the flow |
eventTime | string | Timestamp of when the event occurred |
flowLuid | string | The unique ID of the flow |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
name | string | The name of the flow |
siteLuid | string | LUID of the Tableau site where the event took place |
size | integer | The size of the flow in bytes |
move_content
The move_content
event is logged when content is moved, for example, moving a workbook between projects.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
contentId | integer | The integer ID of the content that had the owner changed |
contentLuid | string | The LUID of the content that had the owner changed |
contentName | string | The name of the content that had the owner changed |
contentType | string | The type of content, such as datasource, workbook, or view |
eventTime | string | Timestamp of when the event occurred |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
isError | boolean | Indicates if the audit scenario was completed successfully or failed with an error |
newContainerLuid | string | The LUID of the new container |
newContainerType | string | The type of new container, such as a project |
oldContainerLuid | string | The string LUID of the old container |
oldContainerType | string | The type of old container, such as project |
serviceName | string | Name of service that emitted the event (e.g., vizportal, vizqlserver, sitesaml (outside monolith)) |
siteLuid | string | LUID of the Tableau site where the event took place |
traceUuid | string | Auto-generated UUID identical across all the events in a batch, such as multiple permissions changed by a single user action |
project_lock_unlock
The project_lock_unlock
event is logged when project permissions are locked or unlocked.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
controllingProjectLuid | string | The LUID of the project that controls permissions for the nested project. |
eventTime | string | Timestamp of when the event occurred |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
isError | boolean | Indicates if the audit scenario was completed successfully or failed with an error |
projectLuid | string | The LUID of the project |
projectOperation | string | Project operation, either lock or unlock |
serviceName | string | Name of service that emitted the event (e.g., vizportal, vizqlserver, sitesaml (outside monolith)) |
siteLuid | string | LUID of the Tableau site where the event took place |
traceUuid | string | Auto-generated UUID identical across all the events in a batch, such as multiple permissions changed by a single user action |
update_permissions
The update_permissions
event is logged when an explicit permission rule is updated for a content item.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
authorizableType | string | The type of content that had its permissions changed, such as a project or workbook |
capabilityId | integer | The ID of the capability. A capability is the ability to perform actions on content, such as view, filter, download, or delete |
capabilityValue | string | The description of the capability |
contentId | integer | The ID of the content that had the permissions updated |
contentLuid | string | The LUID of the content |
contentName | string | The name of the content that had the permissions updated |
eventTime | string | Timestamp of when the event occurred |
granteeId | integer | The ID of the grantee |
granteeLuid | string | The LUID of the grantee |
granteeType | string | The type of grantee, either user or group |
granteeValue | string | The updated permissions value, such as 'user allow' or 'group allow' |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
isError | boolean | Indicates if the audit scenario was completed successfully or failed with an error |
permissionType | string | The permission type, either explicit or unspecified |
serviceName | string | Name of service that emitted the event (e.g., vizportal, vizqlserver, sitesaml (outside monolith)) |
siteLuid | string | LUID of the Tableau site where the event took place |
traceUuid | string | Auto-generated UUID identical across all the events in a batch, such as multiple permissions changed by a single user action |
update_permissions_template
The update_permissions_template
event is logged when a permission template for a project is updated.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
authorizableType | string | The type of content that had its permissions changed, such as a project or workbook |
capabilityId | integer | The ID of the capability. A capability is the ability to perform actions on content, such as view, filter, download, or delete |
capabilityValue | string | The description of the capability |
contentId | integer | The ID of the content that had the permissions updated |
contentLuid | string | The LUID of the content |
contentName | string | The name of the content that had the permissions updated |
eventTime | string | Timestamp of when the event occurred |
granteeId | integer | The ID of the grantee |
granteeLuid | string | The LUID of the grantee |
granteeType | string | The type of grantee, either user or group |
granteeValue | string | The updated permissions value, such as 'user allow' or 'group allow' |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
isError | boolean | Indicates if the audit scenario was completed successfully or failed with an error |
permissionType | string | The permission type, either explicit or unspecified |
serviceName | string | Name of service that emitted the event (e.g., vizportal, vizqlserver, sitesaml (outside monolith)) |
siteLuid | string | LUID of the Tableau site where the event took place |
templateType | string | The type of permission template used to change permissions, such as workbook or data source |
traceUuid | string | Auto-generated UUID identical across all the events in a batch, such as multiple permissions changed by a single user action |
user_create_delete
The user_create_delete
event is logged when a user is created or deleted.
Attribute Name | Type | Description |
---|---|---|
actorUserId | integer | User ID of the user who initiated the event |
eventTime | string | Timestamp of when the event occurred |
forUserName | string | The name of the user whose account was either created, updated or deleted |
impersonatedUserId | integer | The user ID of the user who is impersonated to perform the action that initiated the event; only applies if impersonation occurs |
isError | boolean | Indicates if the audit scenario was completed successfully or failed with an error |
serviceName | string | Name of service that emitted the event (e.g., vizportal, vizqlserver, sitesaml (outside monolith)) |
siteLuid | string | LUID of the Tableau site where the event took place |
siteRole | string | Site role of the user. Determines the maximum level of access a user can have on the site |
targetUserId | integer | The integer ID of the user whose account was either created, updated or deleted |
targetUserLuid | string | The string LUID of the user whose account was either created, updated or deleted |
traceUuid | string | Auto-generated UUID identical across all the events in a batch, such as multiple permissions changed by a single user action |
userOperation | string | The action performed on a user, either create, delete, or site role change |