Actions Included in the Security Log (Studio)
About Actions Included in the Security Log
This page has a list of events that can be monitored using the security log. For each event, we’ll tell you the information you can expect to see in the User, Object, and Target columns of the log.
Alerts
Action | Description |
AlertDisableEvent | A user disabled a new verbatim or scorecard alert. (The alert will appear in the Object column). |
AlertEnableEvent | A user enabled a new verbatim or scorecard alert. (The alert will appear in the Object column). |
Attributes and Models
Action | Description |
DefaultDisplayEditEvent | A user updated reporting defaults for an attribute or a model. The Object column specifies object type and name:
|
Books
Action | Description |
BookCreateEvent | A user created a book containing dashboards listed in the Target column. (The book will be named in the Object column). |
BookDeleteEvent | A user deleted a book. (The book will be named in the Object column). |
BookDuplicateEvent | A user made a duplicate book (Target) from a source book (Object). |
BookEditEvent | A user modified a book (Object) by doing one of the following (as specified in the Target column):
If tabs are added and removed within a single edit session, 2 separate BookEditEvent actions are logged. |
BookHideEvent | A user marked a book (Object) as hidden. |
BookMoveEvent | A user moved a book (Object) to a folder (Target). |
BookRateEvent | A user rated a book (Object). |
BookRenameEvent | A user renamed a book from Object to Target. This event is only logged when you rename a book from the homepage of Studio, under Explore Dashboards & Books. |
BookRevokeUserEvent | A user has stopped sharing a book (Object) with another user (Target). |
BookShareEditGroupEvent | A user shared a book (Object) with a group (Target) and gave its members permission to edit it. If the user shares with multiple groups, a new event is created for each group/target. |
BookShareEditUserEvent | A user has shared a book (Object) with another user (Target) and given the user permission to edit the book. |
BookShareViewGroupEvent | A user shared a book (Object) with a group (Target) on a read-only condition. If the user shares with multiple groups, a new event is created for each group/target. |
BookShareViewUserEvent | A user has shared a book (Object) with another user (Target) on a read-only condition. |
BookShowEvent | A user marked a hidden book (Object) as visible. |
BookViewEvent | A user opened a book (Object). For each tab a user navigates to, a separate DashboardViewEvent action is logged. The Object is the name of the dashboard and Target is the name of the book.
|
Dashboards
Action | Description |
DashboardChangeOwnerEvent | A user transferred ownership of a dashboard (Object) to another user (Target). |
DashboardCommentCreateEvent | A user left a comment on a dashboard (Target). The internal ID of the comment appears in the Object column. |
DashboardCommentDeleteEvent | A user deleted a comment from a dashboard (Target). The internal ID of the comment appears in the Object column. |
DashboardCommentLikeEvent | A user liked a comment on a dashboard (Target). The internal ID of the comment appears in the Object column. |
DashboardCommentUnlikeEvent | A user unliked a comment on a dashboard (Target). The internal ID of the comment appears in the Object column. |
DashboardCreateEvent | A user created a dashboard (Object). The Details column contains the method of dashboard creation:
|
DashboardDeleteEvent | A user deleted a dashboard (Object). |
DashboardDuplicateEvent | A user made a duplicate dashboard (Target). The Object column will show the name of the original dashboard. |
DashboardEditCancelEvent | A user canceled edits they made to a dashboard (Object). |
DashboardEditEvent | A user modified a dashboard (Object). The API Call column specifies the nature of changes. |
DashboardExcelExportEvent | A user exported data from all of the dashboard’s (Object) widgets to Microsoft Excel. |
DashboardFolderCreateEvent | A user created a dashboard folder (Object). |
DashboardFolderDeleteEvent | A user deleted a dashboard folder (Object). |
DashboardFolderRenameEvent | A user renamed a dashboard folder from Object to Target. |
DashboardFromDocumentEvent | A user created a dashboard (Object) by sharing feedback in the document explorer. |
DashboardHideEvent | A user marked a dashboard (Object) as hidden. |
DashboardMoveEvent | A user moved a dashboard (Object) to a folder (Target). |
DashboardPdfExportEvent | A user exported a dashboard (Object) to PDF. |
DashboardPublishEvent | A user published the content of a source dashboard (Object) to a target dashboard (Target). |
DashboardRateEvent | A user rated a dashboard (Object). |
DashboardRenameEvent | A user renamed a dashboard from Object to Target. This event is only logged when you rename a book from the homepage of Studio, under Explore Dashboards & Books. |
DashboardRestoreVersionEvent | A user restored a version of a dashboard (Object). The widget count is displayed in the Target field. |
DashboardRevokeUserEvent | A user has stopped sharing a dashboard (Object) with another user (Target). |
DashboardSaveAsEvent | A user saved a dashboard version as a new dashboard (Object). |
DashboardShareEditGroupEvent | A user shared a dashboard (Object) with a group (Target) and gave its members permission to edit it.
Separate events are logged for each dashboard/group combination. If the dashboard owner selected Notify via email, an EmailDashboardSharedEvent is also logged. |
DashboardShareEditUserEvent | A user shared a dashboard (Object) with another user (Target) and gave them permission to edit it.
Separate events are logged for each dashboard/user combination. If the dashboard owner selected Notify via email, an EmailDashboardSharedEvent is also logged. |
DashboardShareViewGroupEvent | A user shared a dashboard (Object) with a group (Target) on a read-only condition. Separate events are logged for each dashboard/group combination. If the dashboard owner selected Notify via email, an EmailDashboardSharedEvent is also logged. |
DashboardShareViewPublicEvent | A user shared a dashboard (Object) with a public group. |
DashboardShareViewUserEvent | A user shared a dashboard (Object) with another user (Target) on a read-only condition. Separate events are logged for each dashboard/user combination.
If the dashboard owner selected Notify via email, an EmailDashboardSharedEvent is also logged. |
DashboardShowEvent | A user marked a hidden dashboard (Object) as visible. |
DashboardViewEvent | A user viewed a dashboard (Object). If a dashboard is viewed from inside a book, the name of the book is provided in the Target field. |
DashboardRevokeGroupEvent | A user revoked access to a dashboard (Object) from a group (Target). |
DashboardRevokeUserEvent | A user revoked access to a dashboard (Object) from a user (Target). |
DocumentExplorerExportEvent | A user exported data from the document explorer (Object) on a dashboard (Target) to Microsoft Excel. |
EmailDashboardSharedEvent | An email notification was sent to the user (Target) after sharing a dashboard. |
EmailRequestShareEvent | An email request to access a dashboard via the link in the Dashboard Sharing report was sent to the dashboard owner (User).
A request to access the dashboard using the link in the dashboard sharing report was sent to the dashboard owner (User). |
Feedback
Action | Description |
LinkCreateEvent | A user copied a link to a document. The link ID is shown in the Object column. |
LinkViewEvent | A user viewed a document using a link. The link ID is shown in the Object column. |
TranslateEvent | A user translated feedback using the Quick translate option in the document explorer or feedback widget. The Object column contains the number of characters translated, and the Target column contains the translation provider. |
Filters
Action | Description |
FilterAllowReshareEvent | A filter owner (User) allowed other editors to share a filter (Object). |
FilterChangeOwnerEvent | A user transferred ownership of a filter (Object). The initial owner and the new owner are provided in the Target field as “[Initial Owner] –> [New Owner].” When several filters are transferred at once or when a user is removed, a separate event is logged for each filter. |
FilterCreateEvent | A user created a filter (Object). |
FilterDeleteEvent | A user deleted a filter (Object). |
FilterDuplicateEvent | A user made a duplicate filter (Target). The original filter will be listed in the Object column. |
FilterFolderCreateEvent | A user created a filter folder (Object). |
FilterFolderDeleteEvent | A user deleted a filter folder (Object). |
FilterFolderRenameEvent | A user renamed a filter folder from Object to Target. |
FilterHideEvent | A user marked a filter (Object) as hidden. |
FilterMoveEvent | A user moved a filter (Object) to a folder (Target). |
FilterPreventReshareEvent | A filter owner (User) prevented other editors from sharing a filter (Object). |
FilterRenameEvent | A user renamed a filter from Object to Target. |
FilterRevokeGroupEvent | A user has stopped sharing a filter (Object) with a group (Target). A separate event is logged for each group removed. |
FilterRevokePublicEvent | A user stopped sharing a filter (Object) with a public group. |
FilterRevokeUserEvent | A user has stopped sharing a filter (Object) with another user (Target). A separate event is logged for each user removed. |
FilterShareEditGroupEvent | A user shared a filter (Object) with a group (Target) and gave its members permission to edit it. Separate events are logged for each filter/group combination. |
FilterShareEditUserEvent | A user shared a filter (Object) with another user (Target) and gave them permission to edit it. Separate events are logged for each filter/user combination. |
FilterSharePublicEvent | A user shared a filter (Object) with a public group. |
FilterShareViewGroupEvent | A user shared a filter (Object) with a group (Target) on a read-only condition. Separate events are logged for each filter/group combination. |
FilterShareViewUserEvent | A user shared a filter (Object) with another user (Target) on a read-only condition. Separate events are logged for each filter/user combination. |
FilterShowEvent | A user marked a hidden filter (Object) as visible. |
FilterUpdateEvent | A user edited a filter (Object). |
Groups
Action | Description |
GroupAlertSubscribeEvent | A group (Object) was subscribed to an alert (Target). |
GroupAlertUnsubscribeEvent | A group (Object) was unsubscribed from an alert (Target). |
GroupCreateEvent | A user created a group (Object). |
GroupEditPropertiesEvent | A user edited group (Object) properties or permissions. The Details column will include one of the following:
|
GroupHideAttributesAndModelsEvent | A user has hidden attributes and/or models from all members of a group (Object). The specific attributes and models will be in the Target column. Separate events are logged for each project. |
GroupMembershipAddEvent | A user added another user to a group (Object).
The Details column explains how group membership was edited:
|
GroupMembershipRemoveEvent | A user removed another user from a group (Object). The Details column explains how group membership was edited:
|
GroupShowAttributesAndModelsEvent | A user has unhidden attributes and/or models (listed in the Target field) from all members of a group (Object). Separate events are logged for each project. |
Home Pages
With Studio, you can create and configure multiple custom landing pages for specific users and groups, each with customizable content.
Action | Description |
HomepageChangeOwnerEvent
|
A user transferred ownership of a home page (Object) to another user (Target). |
HomepageChangeQuickInsightsOwnerEvent | A user transferred ownership of a home page’s (Object) quick insights to another user (Target). |
HomePageCreateEvent | A user created a home page (Object). |
HomePageDeleteEvent
|
A user deleted a home page (Object). |
HomepageRankChange | A user changed the rank of a home page (Objects). |
HomepageRevokeGroupEvent
|
A user revoked a group’s (target) access to a home page (Object). |
HomepageRevokePublicEvent
|
A user revoked all Studio users’ access to a home page (Object). The Target will be set to “Public.” |
HomepageRevokeUserEvent | A user revoked a user’s (Target) access to a home page (Object). |
HomepageSaveEvent | A user saved changes to a home page (Object). |
HomepageShareViewGroupEvent | A user shared a home page (Object) with a group (Target). Separate events are logged for each home page/group combination. |
HomepageShareViewPublicEvent | A user shared a home page (Object) with all Studio users. The Target will be set to “Public.” |
HomepageShareViewUserEvent
|
A user shared a home page (Object) with another user (Target). Separate events are logged for each home page/user combination. |
HomePageViewEvent | A user viewed a home page (Object) either by opening a default home page or by switching to a home page manually. |
QuickSearchSearch | A user searched for a keyword (Target) in the XM Discover search on a home page (Object). |
QuickSearchSelect | A user selected a dashboard or book (Target) from search results on a home page (Object). |
Inbox Templates
Action | Description |
CreateInboxTemplateEvent | A user manually created an inbox template (Object). |
DeleteInboxTemplateEvent | A user deleted an inbox template (Object). |
DisableInboxTemplateEvent | A user disabled an inbox template (Object). |
EditInboxTemplateEvent | A user edited an inbox template (Object). |
EnableInboxTemplateEvent | A user enabled an inbox template (Object). |
Interactions
Action | Description |
MP3DownloadEvent | A user played back or downloaded an MP3 file (Target) of the call recording from a voice interaction (Object). |
TranscriptDownloadEvent | A user downloaded the text file (Target) of an automatic call transcript from a voice interaction (Object). |
SubmitDeleteFeedbackRecord | A user deleted a document (Object). The Details column contains the reason for document deletion (such as GDPR/CCPA compliance or PII data). Separate events are logged for each deleted document. |
Labels
Labels are text tags you can add to dashboards, books, filters, and metrics to make them easier to find.
Action | Description |
AddLabelEvent | A user added a label (Target) to an object. The Object column contains the object’s name. The Details column contains the object type (dashboard, book, filter, or metric). |
RemoveLabelEvent | A user removed a label (Target) from an object. The Object column contains the object’s name. The Details column contains the object type (dashboard, book, filter, or metric). |
Master Accounts
Action | Description |
ColorPaletteChangeDefaultEvent | An administrator (User) set a new default palette (Object). |
ColorPaletteCreateEvent | An administrator (User) created a palette (Object). |
ColorPaletteDisableEvent | An administrator (User) disabled a palette (Object). |
ColorPaletteEnableEvent | An administrator (User) enabled a palette (Object). |
ColorPaletteReplaceAndDeleteEvent | An administrator (User) deleted a palette (Object) and replaced it with another palette (Target). |
ColorPaletteReplaceEvent | An administrator (User) replaced one palette (Object) with another palette (Target). |
MasterAccountCreateEvent | An administrator (User) created a master account (Object). |
MasterAccountDisabledEvent | An administrator (User) disabled a master account (Object). |
MasterAccountEnabledEvent | An administrator (User) enabled a master account (Object). |
MasterAccountDetailsUpdatedEvent | An administrator (User) edited a master account (Object) property (Target). |
MasterAccountPropertyChangedEvent | A user edited a master account (Object) property (Target). |
Metrics
Action | Description |
MetricAllowReshareEvent | A metric owner (User) allowed other editors to share a metric (Object). |
MetricChangeOwnerEvent | A user transferred ownership of a metric (Object). The initial owner and the new owner are provided in the Target field as “[Initial Owner] –> [New Owner].” When several metrics are transferred at once or when a user is removed, a separate event is logged for each metric. |
MetricCreateEvent | A user created a metric (Target). |
MetricDeleteEvent | A user deleted a metric (Target). |
MetricDuplicateEvent | A user made a duplicate metric (Target). The original metrics’ name is in the Object column. |
MetricFolderCreateEvent | A user created a metrics folder (Target). |
MetricFolderDeleteEvent | A user deleted a metrics folder (Target). |
MetricFolderRenameEvent | A user renamed a metrics folder from Object to Target. |
MetricHideEvent | A user marked a metric (Object) as hidden. |
MetricMoveEvent | A user moved a metric (Object) to a folder (Target). |
MetricPreventReshareEvent | A metric owner (User) prevented other editors from sharing a metric (Object). |
MetricRenameEvent | A user renamed a metric from Object to Target. |
MetricRevokeGroupEvent | A User stopped sharing a metric (Object) with a group (Target). If access to a metric is revoked from several groups at once, a separate event is logged for each group. |
MetricRevokePublicEvent | A user stopped sharing a metric (Object) with a public group. |
MetricRevokeUserEvent | A user stopped sharing a metric (Object) with another user (Target). If access to a metric is revoked from several users at once, a separate event is logged for each user. |
MetricShareEditGroupEvent | A user shared a metric (Object) with a group (Target) and gave its members permission to edit it. Separate events are logged for each metric/group combination. |
MetricShareEditUserEvent | A user shared a metric (Object) with another user (Target) and gave them permission to edit it. Separate events are logged for each metric/user combination. |
MetricSharePublicEvent | A user shared a metric (Object) with a public group. |
MetricShareViewGroupEvent | A user shared a metric (Object) with a group (Target) on a read-only condition. Separate events are logged for each metric/group combination. |
MetricShareViewUserEvent | A user shared a metric (Object) with another user (Target) on a read-only condition. Separate events are logged for each metric/user combination. |
MetricShowEvent | A user marked a hidden metric (Object) as visible. |
MetricUpdateEvent | A user edited a metric (Target). |
Mobile App Activity
Action | Description |
MobileConfigCreateEvent | A user created an app configuration (Object). This includes duplicating an app configuration. |
MobileConfigDeleteEvent | A user deleted an app configuration (Object). |
MobileConfigEditEvent | A user modified an app configuration (Object). |
MobileRevokeViewUserEvent | A user has stopped sharing an app configuration (Object) with a user (Target). |
MobileShareViewGroupEvent | A user has shared an app configuration (Object) with a group (Target). |
MobileShareViewUserEvent | A user has shared an app configuration (Object) with another user (Target). |
MobileUserLoginEvent | A user signed into Pulse. |
MobileUserLogoutEvent | A user signed out of Pulse. |
Organization Hierarchy
Action | Description |
OrganizationActivateEvent | A user activated an organization hierarchy (Object). |
OrganizationAddEvent | A user added an organization hierarchy (Object). |
OrganizationCreateVersionEvent | A user created a version (Object) of an organization hierarchy (Target). |
OrganizationDeactivateEvent | A user deactivated an organization hierarchy (Object). |
OrganizationEnrichmentFileUploadEvent | A user uploaded an enrichment file (Object) for an organization hierarchy (Target). |
OrganizationFilterFileUploadEvent | A user uploaded a data filters file (Object) for an organization hierarchy (Target). |
OrganizationGroupDeleteEvent | A group was deleted along with an organization hierarchy (Object). |
OrganizationGroupDeriveEvent | A group was created from an organization hierarchy (Object). |
OrganizationGroupUpdateEvent | A group was updated via an organization hierarchy (Object). |
OrganizationPublishEvent | A user published an organization hierarchy (Object). |
OrganizationRemoveEvent | A user removed an organization hierarchy (Object). |
OrganizationReplaceOriginalEvent | A user replaced an organization hierarchy (Target) with its version (Object). |
OrganizationRepublishEvent | A user republished an organization hierarchy (Object). |
OrganizationStructureFileUploadEvent | A user uploaded a structure file (Object) for an organization hierarchy (Target). |
OrganizationUnpublishEvent | A user unpublished an organization hierarchy (Object). |
OrganizationUserFileUploadEvent | A user uploaded a user mappings file (Object) for an organization hierarchy (Target). |
Rubrics
Action | Description |
RubricActivateEvent | A rubric administrator (User) enabled a rubric (Object). |
RubricCreateEvent | A rubric administrator (User) created a rubric (Object). |
RubricDeactivateEvent | A rubric administrator (User) disabled a rubric (Object). |
RubricDeleteEvent | A rubric administrator (User) deleted a rubric (Object). |
RubricEditEvent | A rubric administrator (User) modified a rubric (Object). |
Users
Action | Description |
AddAccountOwnerEvent | An Account Owner (User) added another Account Owner (Target) to the master account (Object). |
AddInternalUserEvent | An Account Owner (User) added an Internal XM Discover User (Object) to the master account. |
ChangeUserPermissionsEvent | A power user (User) edited the permissions (Target) of another user (Object).
In the Target column, you’ll see the name of the permissions logged. See the Permissions Logged by the ChangeUserPermissionsEvent section.
The Details column contains the method of updating user permissions:
|
EditDataAccessEvent | A power user (User) modified data access for another user (Object). The Target column specifies data access changes:
Separate events are logged for each access level/user combination. |
EmailForceRegistrationEvent | A user invited someone (Target) to join Studio using the Force Registration option. |
EmailPasswordResetEvent | A temporary password was sent to a user (Target) by email following a password reset. |
ExpireIntenalUserEvent | An Internal XM Discover User’s (Object) access to a master account has expired. |
InvalidPasswordEvent | A user tried signing in with a wrong password. |
LinkUserToCPEvent | A user (Object) was linked to a content provider (Target).
If a linked account was created on the content provider side, an additional event EmailCreateCpUserEvent is logged. |
RemoveAccountOwnerEvent | An Account Owner (User) removed another Account Owner (Target) from a master account (Object). |
RemoveUserFromCPEvent | A user (Object) was unlinked from a content provider (Target). |
ResetUserPasswordEvent | An administrator has reset a user’s (Object) password.
The Details column contains the method of resetting a password:
|
SwitchApplicationEvent | A user switched from Studio to another application (Target). |
UserAccountLockedEvent | A user was locked out of XM Discover due to too many incorrect login attempts. |
UserAddToMasterAccountEvent | An administrator (User) added an existing user (Object) to the current master account.
This event is not logged if an Account Owner adds an Internal XM Discover User. |
UserCloseMasterAccountEvent | A user switched from one master account (Target) to another. The new master account is specified in the Target column of a UserOpenMasterAccountEvent. |
UserCreateEvent | A user created another user account (Object) in Studio.
The Details column specifies the way the user was added:
|
UserDashboardEditEndEvent | The status of a dashboard (Target) was changed to View mode. |
UserDashboardEditStartEvent | The status of a dashboard (Target) was changed to Edit mode. |
UserDeleteEvent | A user deleted another user (Object) from a master account. |
UserDisableEvent | An administrator (User) disabled another user (Object). |
UserEditEvent | A user modified properties of another user (Object). |
UserLicenseChangedEvent | A user changed another user’s (Object) license to another type (Target). The Details column explains how the user’s license was updated:
When licenses are updated in bulk, a separate event is logged for each user. |
UserLogInEvent | A user signed into Studio. This event is logged only for the user’s default master account and is always accompanied by a UserOpenMasterAccountEvent. |
UserLogOutEvent | A user signed out of Studio. This event only happens if a user clicks the Sign Out link in the profile menu or if the browser session expires. This event is only logged for the user’s default master account. |
UserOpenMasterAccountEvent | One of 2 things happened:
|
UserPropertyChangedEvent
|
A user account property (Object) was changed to a new value (Target). The Object can be one of the following properties:
|
UserRefreshSessionEvent | A user extended the session in Studio after its expiration.(For example, logged back in when they were prompted.) This action helps to differentiate session extensions from net new sessions (i.e., net new logins). |
ViewAsUserEvent | A power user (User) started a session on behalf of another user (Object). All actions performed on behalf of another user are marked with an asterisk (*) in front of their name in the log.
Enable proxy logins in the Master Account Properties. |
Permissions Logged by the ChangeUserPermissionsEvent
This table lists some of the permissions logged under the ChangeUserPermissionsEvent.
Most permissions will be identified by name, just without spaces. For example, “Change Ownership” becomes “changeOwnership.” However, some permissions are named a little differently, so check out the table below.
Log entry | Permission |
changeOwnership | Change Ownership |
conductSecurityAudit | Conduct Security Audit |
createDashboard | Create Dashboard |
createFilter | Create Filter |
createMetric | Create Metric |
deleteDashboard | Delete Dashboard |
drillInPlace | Drill in Place in View Mode |
drillToFeedbackInView | Drill to Feedback in View Mode |
editDashboard | Edit Dashboard |
exportFeedback | Export Feedback |
exportWidgetData | Export Widget Data |
manageDateFilters | Manage Date Filters |
manageGroups | Manage Groups |
manageProjects | Manage Projects |
manageSettings | Manage Settings |
manageUsers | Manage Users |
shareCreateUser | Create Users through Sharing |
shareEdit | Share Edit (dashboard) |
shareEditFilter | Share Edit Filter |
shareEditMetric | Share Edit Metric |
shareFilter | Share View Filter |
shareMetric | Share View Metric |
shareView | Share View (dashboard) |
Widgets
Action | Description |
EmbedViewEvent | A user viewed a widget from a dashboard (Object) embedded in an external website (Target, if available).
The Details column displays SSO-provided viewer identification for unlicensed views. |
WidgetAddEvent | A user added a widget (Object) to a dashboard (Target). |
WidgetEditEvent | A user changed properties of a widget (Object) on a dashboard (Target). |
WidgetExcelExportEvent | A user exported data from a widget (Object) to Microsoft Excel. The dashboard is listed under the Target. |
WidgetRemoveEvent | A user removed a widget (Object) from a dashboard (Target). |