Audit event types

Tier: Premium, Ultimate Offering: GitLab.com, Self-managed, GitLab Dedicated

Audit event types are used to filter streamed audit events:

Every audit event is associated with an event type. Audit event types can allow audit events to be:

  • Saved to the database. Available in the Premium and Ultimate tier. You can retrieve audit events associated with these types by using the audit events dashboard or the audit events API.
  • Streamed to external destinations. Available in the Ultimate tier. You can stream audit events associated with these types to external destinations if a destination is set.

Some audit event types don’t allow saving audit events to the database. Other audit event types don’t allow streaming audit events to external destinations.

An audit event type’s scope limits the availability of the audit event type to either:

Available audit event types

Audit event types belong to the following product categories.

Ai framework

Name Description Saved to database Streamed Introduced in Scope
duo_features_enabled_updated GitLab Duo Features enabled setting on group or project changed Yes Yes GitLab 16.10 Group, Project

Audit events

Name Description Saved to database Streamed Introduced in Scope
amazon_s3_configuration_created Triggered when Amazon S3 configuration for audit events streaming is created. Yes Yes GitLab 16.5 Group
amazon_s3_configuration_deleted Triggered when Amazon S3 configuration for audit events streaming is deleted. Yes Yes GitLab 16.5 Group
amazon_s3_configuration_updated Triggered when Amazon S3 configuration for audit events streaming is updated. Yes Yes GitLab 16.5 Group
audit_events_streaming_headers_create Triggered when a streaming header for audit events is created. Yes Yes GitLab 15.3 Group
audit_events_streaming_headers_destroy Triggered when a streaming header for audit events is deleted. Yes Yes GitLab 15.3 Group
audit_events_streaming_instance_headers_create Triggered when a streaming header for instance level external audit event destination is created. Yes Yes GitLab 16.3 Instance
audit_events_streaming_instance_headers_destroy Triggered when a streaming header for instance level external audit event destination is deleted. Yes Yes GitLab 16.3 Instance
audit_events_streaming_instance_headers_update Triggered when a streaming header for instance level external audit event destination is updated. Yes Yes GitLab 16.3 Instance
create_event_streaming_destination Event triggered when an external audit event destination is created Yes Yes GitLab 14.6 Group
create_http_namespace_filter Event triggered when a namespace filter for an external audit event destination for a top-level group is created Yes Yes GitLab 16.6 Group
create_instance_event_streaming_destination Event triggered when an external audit event destination for an instance is created Yes Yes GitLab 16.2 Instance
created_group_audit_event_streaming_destination Triggered when an external audit event destination for a top-level group is created Yes Yes GitLab 16.11 Group
created_group_namespace_filter Triggered when a namespace filter for an external audit event destination for a top-level group is created Yes Yes GitLab 17.0 Group
created_instance_audit_event_streaming_destination Triggered when an external audit event destination for an instance is created Yes Yes GitLab 16.11 Instance
created_instance_namespace_filter Triggered when a namespace filter for an external audit event destination for an instance is created Yes Yes GitLab 17.2 Instance
delete_http_namespace_filter Triggered when a namespace filter for an external audit event destination for a top-level group is deleted Yes Yes GitLab 16.7 Group
deleted_group_audit_event_streaming_destination Triggered when an external audit event destination for a top-level group is deleted Yes Yes GitLab 16.11 Group
deleted_group_namespace_filter Triggered when a namespace filter for an external audit event destination for a top-level group is deleted Yes Yes GitLab 17.0 Group
deleted_instance_audit_event_streaming_destination Triggered when an external audit event destination for a GitLab instance is deleted Yes Yes GitLab 16.11 Instance
deleted_instance_namespace_filter Triggered when a namespace filter for an external audit event destination for a GitLab instance is deleted Yes Yes GitLab 17.2 Instance
destroy_event_streaming_destination Triggered when an external audit event destination is deleted Yes Yes GitLab 14.6 Group
destroy_instance_event_streaming_destination Triggered when an instance level external audit event destination is deleted Yes Yes GitLab 16.2 Instance
event_type_filters_created Triggered when a new audit events streaming event type filter is created Yes Yes GitLab 15.10 Group
event_type_filters_deleted Triggered when an audit events streaming event type filter is deleted Yes Yes GitLab 15.10 Group
google_cloud_logging_configuration_created Triggered when Google Cloud Logging configuration is created Yes Yes GitLab 16.1 Group
google_cloud_logging_configuration_deleted Triggered when Google Cloud Logging configuration is deleted Yes Yes GitLab 16.1 Group
google_cloud_logging_configuration_updated Triggered when Google Cloud Logging configuration is updated Yes Yes GitLab 16.1 Group
instance_amazon_s3_configuration_created Triggered when instance Amazon S3 configuration for audit events streaming is created Yes Yes GitLab 16.7 Instance
instance_amazon_s3_configuration_deleted Triggered when instance-level Amazon S3 configuration for audit events streaming is deleted Yes Yes GitLab 16.7 Instance
instance_amazon_s3_configuration_updated Triggered when instance-level Amazon S3 configuration for audit events streaming is updated Yes Yes GitLab 16.7 Instance
instance_google_cloud_logging_configuration_created Triggered when instance-level Google Cloud Logging configuration is created Yes Yes GitLab 16.4 Instance
instance_google_cloud_logging_configuration_deleted Triggered when instance-level Google Cloud Logging configuration is deleted Yes Yes GitLab 16.5 Instance
instance_google_cloud_logging_configuration_updated Triggered when instance-level Google Cloud Logging configuration is updated Yes Yes GitLab 16.5 Instance
update_event_streaming_destination Event triggered when an external audit event destination is updated Yes Yes GitLab 14.6 Group
update_instance_event_streaming_destination Event triggered when an instance level external audit event destination is updated Yes Yes GitLab 16.2 Instance
updated_group_audit_event_streaming_destination Event triggered when an external audit event destination for a top-level group is updated. Yes Yes GitLab 16.11 Group
updated_instance_audit_event_streaming_destination Event triggered when an external audit event destination for a GitLab instance is updated. Yes Yes GitLab 16.11 Instance

Build artifacts

Name Description Saved to database Streamed Introduced in Scope
job_artifact_downloaded Triggered when a user downloads a job artifact from a project No Yes GitLab 16.8 Project

Code review

Name Description Saved to database Streamed Introduced in Scope
delete_merge_request Triggered when a merge request is successfully deleted No Yes GitLab 15.4 Project

Code review workflow

Name Description Saved to database Streamed Introduced in Scope
merge_request_approval_operation Triggered when a merge request is approved No Yes GitLab 15.3 Project
merge_request_closed_by_project_bot Triggered when a merge request is closed using a project access token Yes Yes GitLab 16.1 Project
merge_request_created_by_project_bot Triggered when a merge request is created using a project access token Yes Yes GitLab 16.1 Project
merge_request_invalid_approver_rules Triggered for an invalid rule when merge request is approved Yes Yes GitLab 15.5 Project
merge_request_merged_by_project_bot Triggered when a merge request is merged using a project access token Yes Yes GitLab 16.1 Project
merge_request_reopened_by_project_bot Triggered when a merge request is reopened using a project access token Yes Yes GitLab 16.1 Project
project_merge_requests_template_updated Triggered when an merge request template for a project is updated Yes Yes GitLab 15.0 Project
project_remove_source_branch_after_merge_updated Triggered when a project has its setting to remove branches after merges updated Yes Yes GitLab 14.10 Project
project_reset_approvals_on_push_updated Triggered when a project has its setting on whether approvals are reset on a push is updated Yes Yes GitLab 14.2 Project
selective_code_owner_removals_updated Event triggered when selective code owner removal is updated Yes Yes GitLab 17.0 Project

Code suggestions

Name Description Saved to database Streamed Introduced in Scope
project_suggestion_commit_message_updated Triggered when a project has its suggested commit message updated Yes Yes GitLab 14.10 Project

Compliance management

Name Description Saved to database Streamed Introduced in Scope
add_gpg_key Triggered when a GPG key is added. Yes Yes GitLab 15.9 User
allow_author_approval_updated Triggered when ‘Prevent approval by author’ setting is updated. Yes Yes GitLab 15.6 Group
allow_committer_approval_updated Triggered when ‘Prevent approvals by users who add commits’ setting is updated. Yes Yes GitLab 15.6 Group
allow_overrides_to_approver_list_per_merge_request_updated Triggered when ‘Prevent editing approval rules in projects and merge requests’ setting is updated. Yes Yes GitLab 15.6 Group
audit_events_streaming_headers_update Triggered when a streaming header for audit events is updated. Yes Yes GitLab 15.3 Group
compliance_framework_added Triggered when a compliance framework is applied to a project Yes Yes GitLab 17.2 Project
compliance_framework_deleted Triggered when a compliance framework is removed from a project Yes Yes GitLab 14.1 Project
compliance_framework_id_updated Triggered when a compliance framework is updated for a project Yes Yes GitLab 15.7 Project
compliance_framework_removed Triggered when a compliance framework is removed from a project Yes Yes GitLab 17.2 Project
create_compliance_framework Triggered on when a compliance framework is successfully created Yes Yes GitLab 14.6 Group
create_status_check Triggered when an external status check is created Yes Yes GitLab 15.9 Project
delete_status_check Triggered when an external status check is deleted Yes Yes GitLab 15.9 Project
destroy_compliance_framework Triggered when a compliance framework is successfully deleted Yes Yes GitLab 14.6 Group
email_created Triggered when an email is created Yes Yes GitLab 15.11 User
email_destroyed Triggered when an email is destroyed Yes Yes GitLab 15.11 User
external_status_check_name_updated Triggered when the name of an external status check is updated Yes Yes GitLab 15.7 Project
external_status_check_url_updated Triggered when the URL that is used for external status checks for a pipeline is updated Yes Yes GitLab 15.0 Project
group_deletion_marked Triggered when a group is marked for deletion Yes Yes GitLab 15.11 Group
group_destroyed Triggered when a group is destroyed Yes Yes GitLab 15.11 Group
group_restored Triggered when a group is restored Yes Yes GitLab 15.11 Group
group_saml_provider_create Triggered when a group SAML provider is created Yes Yes GitLab 15.9 Group
group_saml_provider_update Triggered when a group SAML provider is updated Yes Yes GitLab 15.9 Group
inactive_project_scheduled_for_deletion Triggered when an inactive project is scheduled for deletion Yes Yes GitLab 16.4 Project
member_created Triggered when a membership is created Yes Yes GitLab 15.9 Group, Project
member_destroyed Triggered when a membership is destroyed Yes Yes GitLab 15.9 Group, Project
member_updated Triggered when a membership is updated Yes Yes GitLab 15.9 Group, Project
merge_request_create Triggered when a merge request is created No Yes GitLab 15.9 Project
merge_request_merged When a merge request is merged Yes Yes GitLab 17.5 Project
omniauth_login_failed Triggered when an OmniAuth login fails Yes Yes GitLab 16.3 User
password_reset_requested Triggered when a user requests a password reset using a registered email address Yes No GitLab 15.11 User
personal_access_token_created Triggered when a user creates a personal access token Yes Yes GitLab 15.9 User
personal_access_token_revoked Triggered when a personal access token is revoked Yes Yes GitLab 15.9 User
project_archived Triggered when a project is archived Yes Yes GitLab 15.11 Project
project_deletion_marked Triggered when a project is marked for deletion Yes Yes GitLab 15.11 Project
project_destroyed Triggered when a project is destroyed Yes Yes GitLab 15.11 Group
project_export_file_download_started Triggered when a download of a project export file is started Yes Yes GitLab 15.11 Project
project_group_link_created Triggered when a group is invited to a project Yes Yes GitLab 15.9 Group
project_group_link_deleted Triggered when a project group link is deleted Yes Yes GitLab 15.9 Group
project_group_link_updated Triggered when a project group link is updated Yes Yes GitLab 15.9 Project
project_imported Triggered when a project is imported Yes Yes GitLab 15.11 Group
project_restored Triggered when a project is restored Yes Yes GitLab 15.11 Project
project_topics_updated Triggered when a project’s topics assignments are changed Yes Yes GitLab 17.4 Project
project_unarchived Triggered when a project is unarchived Yes Yes GitLab 15.11 Project
protected_branch_allow_force_push_updated Triggered when a protected branch has its ability to allow force pushes is updated Yes Yes GitLab 14.3 Project
public_repository_download_operation Triggered when a Git repository for a public project is downloaded No Yes GitLab 17.0 Project
registration_created Event triggered when a user registers for instance access Yes Yes GitLab 16.3 User
release_created Event triggered when a release is created Yes Yes GitLab 15.9 Project
release_deleted_audit_event Event triggered when a release is deleted Yes Yes GitLab 15.9 Project
release_milestones_updated Event triggered when a release’s associated milestones are updated Yes Yes GitLab 15.9 Project
release_updated Event triggered when a release is updated Yes Yes GitLab 15.9 Project
remove_gpg_key Event triggered when a GPG Key is destroyed Yes Yes GitLab 15.9 User
repository_download_operation Event triggered when a Git repository for a private or internal project is downloaded Yes Yes GitLab 15.9 Project
require_password_to_approve_updated Event triggered on updating require user password for approvals from group merge request setting Yes Yes GitLab 15.6 Group
retain_approvals_on_push_updated Event triggered on updating require new approvals when new commits are added to an MR from group merge request setting Yes Yes GitLab 15.6 Group
saml_group_links_created Event triggered when a SAML Group Link is created Yes Yes GitLab 15.9 Group
saml_group_links_removed Event triggered when a SAML Group Link is destroyed Yes Yes GitLab 15.9 Group
smartcard_authentication_created Event triggered when a user authenticates with smartcard Yes Yes GitLab 16.0 User
update_approval_rules Event triggered on updating a merge approval rule Yes Yes GitLab 15.2 Project
update_compliance_framework Triggered when a compliance framework is updated Yes Yes GitLab 14.6 Group
update_status_check Event triggered when an external status check is updated Yes Yes GitLab 15.9 Project

Container registry

Name Description Saved to database Streamed Introduced in Scope
container_repository_created Triggered when a container repository is first pushed to the registry Yes Yes GitLab 17.5 Project
container_repository_deleted Triggered when a project’s container registry is deleted Yes Yes GitLab 17.2 Project
container_repository_deletion_marked Triggered when a project’s container repository is marked for deletion Yes Yes GitLab 17.2 Project
container_repository_tags_deleted Triggered when a project’s container repository tag is deleted Yes Yes GitLab 17.2 Project

Continuous delivery

Name Description Saved to database Streamed Introduced in Scope
deploy_key_added Triggered when a deploy key is added Yes Yes GitLab 15.3 Project
deploy_key_removed Triggered when a deploy key is removed Yes Yes GitLab 15.3 Project
deploy_token_created Triggered when a deploy token is created Yes Yes GitLab 15.1 Project
deploy_token_creation_failed Triggered when a deploy token fails to create Yes Yes GitLab 15.1 Project
deploy_token_destroyed Triggered when a deploy token is destroyed Yes Yes GitLab 15.1 Project
deploy_token_revoked Triggered when a project deploy token is revoked Yes Yes GitLab 15.1 Project
deployment_approved Triggered when a deployment is approved Yes Yes GitLab 17.1 Project
deployment_rejected Triggered when a deployment is rejected Yes Yes GitLab 17.1 Project
deployment_started Triggered when a deployment to a protected environment is started Yes Yes GitLab 17.2 Project
group_deploy_token_created Triggered when a group deploy token is created Yes Yes GitLab 15.3 Group
group_deploy_token_creation_failed Triggered when creating a group deploy token failed Yes Yes GitLab 15.3 Group
group_deploy_token_destroyed Triggered when a group deploy token is destroyed Yes Yes GitLab 15.3 Group
group_deploy_token_revoked Triggered when a group deploy token is revoked Yes Yes GitLab 15.3 Group

Continuous integration

Name Description Saved to database Streamed Introduced in Scope
allow_merge_on_skipped_pipeline_updated Triggered when ‘Skipped pipelines are considered successful’ setting is updated. Yes Yes GitLab 14.10 Project
ci_group_variable_created Triggered when a CI/CD variable is created for a group Yes Yes GitLab 15.2 Group
ci_group_variable_deleted Triggered when a CI/CD variable is deleted for a group Yes Yes GitLab 15.2 Group
ci_group_variable_updated Triggered when a CI/CD variable is updated for a group Yes Yes GitLab 15.2 Group
ci_instance_variable_created Triggered when a CI/CD variable is created for an instance Yes Yes GitLab 16.5 Instance
ci_instance_variable_deleted Triggered when a CI/CD variable is deleted for an instance Yes Yes GitLab 16.5 Instance
ci_instance_variable_updated Triggered when a CI/CD variable is updated for an instance Yes Yes GitLab 16.5 Instance
ci_variable_created Triggered when a CI/CD variable is created for a project Yes Yes GitLab 15.2 Project
ci_variable_deleted Triggered when a CI/CD variable is deleted for a project Yes Yes GitLab 15.2 Project
ci_variable_updated Triggered when a CI/CD variable is updated for a project Yes Yes GitLab 15.2 Project
destroy_pipeline Triggered when a pipeline is deleted Yes Yes GitLab 16.6 Project

Deployment management

Name Description Saved to database Streamed Introduced in Scope
cluster_agent_create_failed Triggered when a user attempts to create a cluster agent but it failed Yes Yes GitLab 17.3 Project
cluster_agent_created Triggered when a user creates a cluster agent Yes Yes GitLab 17.3 Project
cluster_agent_delete_failed Triggered when a user attempts to delete a cluster agent but it failed Yes Yes GitLab 17.3 Project
cluster_agent_deleted Triggered when a user deletes a cluster agent Yes Yes GitLab 17.3 Project
cluster_agent_token_created Triggered when a user creates a cluster agent token Yes Yes GitLab 15.10 Project
cluster_agent_token_revoked Triggered when a user revokes a cluster agent token Yes Yes GitLab 15.10 Project

Dynamic application security testing

Name Description Saved to database Streamed Introduced in Scope
dast_profile_create Triggered when a dynamic application security testing profile is created Yes Yes GitLab 14.1 Project
dast_profile_destroy Triggered when a dynamic application security profile is removed Yes Yes GitLab 14.1 Project
dast_profile_schedule_create Triggered when a dynamic application security testing profile schedule is created Yes Yes GitLab 14.3 Project
dast_profile_schedule_update Triggered when a dynamic application security testing profile schedule is updated Yes Yes GitLab 14.3 Project
dast_profile_update Triggered when a dynamic application security profile is updated Yes Yes GitLab 14.1 Project
dast_scanner_profile_create Triggered when a dynamic application security testing scanner profile is created Yes Yes GitLab 14.0 Project
dast_scanner_profile_destroy Triggered when a dynamic application security testing scanner profile is removed Yes Yes GitLab 14.0 Project
dast_scanner_profile_update Triggered when a dynamic application security testing scanner profile is updated Yes Yes GitLab 14.0 Project
dast_site_profile_create Triggered when a dynamic application security testing site profile is created Yes Yes GitLab 14.0 Project
dast_site_profile_destroy Triggered when a dynamic application security testing site profile is removed Yes Yes GitLab 14.0 Project
dast_site_profile_update Triggered when a dynamic application security testing site profile is updated Yes Yes GitLab 14.0 Project

Environment management

Name Description Saved to database Streamed Introduced in Scope
environment_protected Triggered when a protected environment is created Yes Yes GitLab 15.8 Group, Project
environment_unprotected Triggered when a protected environment is unprotected Yes Yes GitLab 15.8 Group, Project
protected_environment_approval_rule_added Triggered when an approval rule is added to a protected environment Yes Yes GitLab 16.5 Group, Project
protected_environment_approval_rule_deleted Triggered when an approval rule is removed from a protected environment Yes Yes GitLab 16.5 Project, Group
protected_environment_approval_rule_updated Triggered when an approval rule of a protected environment is updated Yes Yes GitLab 16.5 Project, Group
protected_environment_deploy_access_level_added Triggered when a deploy access level is added to a protected environment Yes Yes GitLab 16.5 Group, Project
protected_environment_deploy_access_level_deleted Triggered when a deploy access level is removed from a protected environment Yes Yes GitLab 16.5 Group, Project
protected_environment_deploy_access_level_updated Triggered when a deploy access level of a protected environment is updated Yes Yes GitLab 16.5 Project
protected_environment_updated Triggered when a protected environment is updated Yes Yes GitLab 16.5 Group, Project

Feature flags

Name Description Saved to database Streamed Introduced in Scope
feature_flag_created Triggered when a feature flag is created. Yes Yes GitLab 15.10 Project
feature_flag_deleted Triggered when a feature flag is deleted. Yes Yes GitLab 15.10 Project
feature_flag_updated Triggered when a feature flag is updated. Yes Yes GitLab 15.10 Project

Fleet visibility

Name Description Saved to database Streamed Introduced in Scope
ci_runner_usage_export Triggered when a runner usage report is generated Yes Yes GitLab 16.8 Instance

Fuzz testing

Name Description Saved to database Streamed Introduced in Scope
coverage_fuzzing_corpus_create Event triggered on a corpus action is added Yes Yes GitLab 14.5 Project

Groups and projects

Name Description Saved to database Streamed Introduced in Scope
allow_mfa_for_subgroups_updated Triggered when setting for Subgroups can set up their own two-factor authentication rules updated Yes Yes GitLab 17.4 Group
allow_runner_registration_token_updated Triggered when setting Allow members of projects and groups to create runners with runner registration tokens is updated Yes Yes GitLab 16.0 Group, Project
allowed_email_domain_updated Triggered when group setting allowed email domain entry is updated Yes Yes GitLab 17.5 Group
create_ssh_certificate Triggered when an SSH certificate is created Yes Yes GitLab 16.6 Group
default_branch_name_updated Triggered when default branch name for the group repository is changed Yes Yes GitLab 17.4 Group
delete_ssh_certificate Triggered when an SSH certificate is deleted Yes Yes GitLab 16.6 Group
disable_personal_access_tokens_updated Triggered when setting Disable personal access tokens is updated Yes Yes GitLab 17.4 Group
emails_enabled_updated Triggered when setting Enable email notifications is updated Yes Yes GitLab 17.4 Group
enabled_git_access_protocol_updated Triggered when setting Enabled Git access protocols is updated Yes Yes GitLab 17.4 Group
enforce_ssh_certificates_updated Triggered when setting Enforce SSH Certificates is updated Yes Yes GitLab 17.4 Group
group_created Triggered when a group is created Yes Yes GitLab 16.3 Group
group_description_updated Triggered when group description is updated Yes Yes GitLab 17.4 Group
group_lfs_enabled_updated Triggered when LFS enabled for a group is updated Yes Yes GitLab 15.7 Group
group_membership_lock_updated Triggered when membership lock for a group is updated Yes Yes GitLab 15.7 Group
group_mentions_disabled_updated Triggered when a group’s setting to notify group members on group mention is updated Yes Yes GitLab 17.4 Group
group_merge_request_approval_setting_created Triggered when merge request approval settings are added to a group Yes Yes GitLab 15.1 Group
group_name_updated Triggered when a group’s name is updated Yes Yes GitLab 15.7 Group
group_path_updated Triggered when a group’s path is updated Yes Yes GitLab 15.7 Group
group_project_creation_level_updated Triggered when a group’s project creation level is updated Yes Yes GitLab 15.7 Group
group_repository_size_limit_updated Triggered when a group’s repository size limit is updated Yes Yes GitLab 15.7 Group
group_request_access_enabled_updated Triggered when a group’s request access enabled is updated Yes Yes GitLab 15.7 Group
group_require_two_factor_authentication_updated Triggered when a group’s require two factor authentication setting is updated Yes Yes GitLab 15.7 Group
group_share_with_group_link_created Triggered when you invite a group to another group by using the group’s membership page Yes Yes GitLab 15.10 Group
group_share_with_group_link_removed Triggered when you remove a group from another group by using the group’s membership page Yes Yes GitLab 15.10 Group
group_share_with_group_link_updated Triggered when you update a group’s access settings to another group by using the group’s membership page Yes Yes GitLab 15.10 Group
group_shared_runners_minutes_limit_updated Triggered when a group’s shared runners minutes limit is updated Yes Yes GitLab 15.7 Group
group_shared_with_group_lock_updated Triggered when group can be shared with other group setting is updated Yes Yes GitLab 17.4 Group
group_two_factor_grace_period_updated Triggered when a group’s two factor grace period is updated Yes Yes GitLab 15.7 Group
group_visibility_level_updated Triggered when a group’s visibility level is updated Yes Yes GitLab 15.7 Group
merge_commit_template_updated Triggered when merge commit template is updated Yes Yes GitLab 15.8 Project
new_user_signups_cap_updated Triggered when setting Number of users for user cap is updated Yes Yes GitLab 17.4 Group
prevent_forking_outside_group_updated Triggered when setting for Prevent forking outside current group is changed Yes Yes GitLab 17.4 Group
prevent_sharing_groups_outside_hierarchy_updated Triggered when a group’s setting to Members cannot invite groups outside of group and its sugroup updated Yes Yes GitLab 17.4 Group
project_cicd_merge_pipelines_enabled_updated Triggered when the CI/CD merge pipelines setting for a project is updated Yes Yes GitLab 15.8 Project
project_cicd_merge_trains_enabled_updated Triggered when the CI/CD merge trains settings for a project is updated Yes Yes GitLab 15.8 Project
project_created Triggered when a project is created Yes Yes GitLab 16.0 Project
project_default_branch_updated Triggered when default branch of a project’s repository is updated Yes Yes GitLab 16.0 Project
project_description_updated Triggered when a project’s description is updated No Yes GitLab 16.3 Project
project_disable_overriding_approvers_per_merge_request_updated Triggered when the disable overriding approvers per MR setting for a project is updated Yes Yes GitLab 15.7 Project
project_feature_analytics_access_level_updated Triggered when a project’s analytics access level setting is updated Yes Yes GitLab 15.7 Project
project_feature_builds_access_level_updated Triggered when a project’s builds access level setting is updated Yes Yes GitLab 15.7 Project
project_feature_container_registry_access_level_updated Triggered when a project’s container registry access level setting is updated Yes Yes GitLab 15.7 Project
project_feature_environments_access_level_updated Triggered when a project’s environments access level setting is updated Yes Yes GitLab 15.7 Project
project_feature_feature_flags_access_level_updated Triggered when a project’s feature flags access level setting is updated Yes Yes GitLab 15.7 Project
project_feature_forking_access_level_updated Triggered when a project’s feature forking access level setting is updated Yes Yes GitLab 15.7 Project
project_feature_infrastructure_access_level_updated Triggered when a project’s infrastructure access level setting is updated Yes Yes GitLab 15.7 Project
project_feature_issues_access_level_updated Triggered when a project’s issues access level setting is updated Yes Yes GitLab 15.7 Project
project_feature_merge_requests_access_level_updated Triggered when a project’s merge request access level setting is updated Yes Yes GitLab 15.7 Project
project_feature_metrics_dashboard_access_level_updated Triggered when a project’s metrics dashboard access level setting is updated Yes Yes GitLab 15.7 Project
project_feature_monitor_access_level_updated Triggered when a project’s monitor access level setting is updated Yes Yes GitLab 15.7 Project
project_feature_operations_access_level_updated Triggered when a project’s operation access level setting is updated Yes Yes GitLab 15.7 Project
project_feature_package_registry_access_level_updated Triggered when a project’s package registry access level setting is updated Yes Yes GitLab 15.7 Project
project_feature_pages_access_level_updated Triggered when a project’s page access level setting is updated Yes Yes GitLab 15.7 Project
project_feature_releases_access_level_updated Triggered when a project’s releases access level setting is updated Yes Yes GitLab 15.7 Project
project_feature_repository_access_level_updated Triggered when a project’s repository access level setting is updated Yes Yes GitLab 15.7 Project
project_feature_requirements_access_level_updated Triggered when a project’s requirements access level setting is updated Yes Yes GitLab 15.7 Project
project_feature_security_and_compliance_access_level_updated Triggered when a project’s security and compliance access level setting is updated Yes Yes GitLab 15.7 Project
project_feature_snippets_access_level_updated Triggered when a project’s snippet access level setting is updated Yes Yes GitLab 15.7 Project
project_feature_wiki_access_level_updated Triggered when a project’s wiki access level setting is updated Yes Yes GitLab 15.7 Project
project_merge_method_updated Triggered when a project’s merge request method is updated Yes Yes GitLab 14.10 Project
project_merge_requests_author_approval_updated Triggered when a project’s MR author approval setting is updated Yes Yes GitLab 15.7 Project
project_merge_requests_disable_committers_approval_updated Triggered when a project’s setting for disabling committers approval on merge requests is updated Yes Yes GitLab 15.7 Project
project_name_updated Triggered when a project has its name updated Yes Yes GitLab 10.2 Project
project_namespace_updated Triggered when project’s namespace is updated Yes Yes GitLab 15.7 Project
project_only_allow_merge_if_all_discussions_are_resolved_updated Triggered when a project’s setting for allowing merge only when all discussions are resolved is updated Yes Yes GitLab 15.7 Project
project_only_allow_merge_if_pipeline_succeeds_updated Triggered when a project’s only allow merge if pipeline succeeds setting is updated Yes Yes GitLab 15.7 Project
project_packages_enabled_updated Triggered when the setting that controls packages for a project is updated Yes Yes GitLab 11.5 Project
project_path_updated Triggered when a project’s path is updated Yes Yes GitLab 15.5 Project
project_printing_merge_request_link_enabled_updated Triggered when setting for projects for enabling printing merge request link is updated Yes Yes GitLab 15.7 Project
project_repository_size_limit_updated Triggered when the repository size limit of a project is updated Yes Yes GitLab 15.7 Project
project_require_password_to_approve_updated Triggered when a project’s setting for requiring a user’s password for approval of merge request is updated Yes Yes GitLab 15.7 Project
project_resolve_outdated_diff_discussions_updated Triggered when a project’s resolve outdated diff discussions setting is updated Yes Yes GitLab 15.7 Project
project_security_setting_updated Triggered when a project’s security setting is updated Yes Yes GitLab 17.0 Project
project_visibility_level_updated Triggered when a project’s visiblity level setting is updated Yes Yes GitLab 15.7 Project
remove_dormant_members_period_updated Triggered when setting Days of inactivity before removal is updated Yes Yes GitLab 17.4 Group
remove_dormant_members_updated Triggered when setting Dormant members is updated Yes Yes GitLab 17.4 Group
resource_access_token_creation_allowed_updated Triggered when setting for Users can create project access tokens and group access tokens in this group changed Yes Yes GitLab 17.4 Group, Project
runner_registration_enabled_updated Triggered when setting Runner registration is updated Yes Yes GitLab 17.4 Group
seat_control_updated Triggered when setting Seat control is updated Yes Yes GitLab 17.4 Group
service_access_tokens_expiration_enforced_updated Triggered when setting Service account token expiration is updated Yes Yes GitLab 17.4 Group
show_diff_preview_in_email_updated Triggered when setting Email notification to include diff preview is updated Yes Yes GitLab 17.4 Group, Project
squash_commit_template_updated Event triggered on updating the merge request squash commit template for a project Yes Yes GitLab 15.8 Project
squash_option_updated Triggered when squash option setting has been changed. Yes Yes GitLab 15.0 Project

Importers

Name Description Saved to database Streamed Introduced in Scope
group_export_created Triggered when a group file export is created Yes Yes GitLab 17.0 Group
project_export_created Triggered when a project file export is created Yes Yes GitLab 17.0 Project

Incident management

Name Description Saved to database Streamed Introduced in Scope
incident_closed_by_project_bot Triggered when an incident is closed using a project access token Yes Yes GitLab 16.1 Project
incident_created_by_project_bot Triggered when an incident is created using a project access token Yes Yes GitLab 16.1 Project
incident_reopened_by_project_bot Triggered when an incident is reopened using a project access token Yes Yes GitLab 16.1 Project

MLOps

Name Description Saved to database Streamed Introduced in Scope
project_feature_model_experiments_access_level_updated Triggered when a project’s model experiments access level is updated Yes Yes GitLab 16.1 Project
ml_model_created ML model is created Yes Yes GitLab 17.4 Project
ml_model_destroyed ML model destroyed Yes Yes GitLab 17.4 Project
ml_model_version_created ML model version is created Yes Yes GitLab 17.4 Project
ml_model_version_destroyed ML model version destroyed Yes Yes GitLab 17.4 Project
project_feature_model_registry_access_level_updated Model registry access level was updated Yes Yes GitLab 16.7 Project

Not categorized

Name Description Saved to database Streamed Introduced in Scope
experiment_features_enabled_updated Triggered when enabling experiment AI features setting is toggled Yes Yes GitLab 16.0 Group

Permissions

Name Description Saved to database Streamed Introduced in Scope
member_role_created Triggered when a custom role is created Yes Yes GitLab 16.7 Group, Instance
member_role_deleted Triggered when a custom role is deleted Yes Yes GitLab 16.9 Group, Instance
member_role_updated Triggered when a custom role is updated Yes Yes GitLab 16.9 Group, Instance

Portfolio management

Name Description Saved to database Streamed Introduced in Scope
delete_epic Triggered when an epic is successfully deleted No Yes GitLab 15.4 Group
epic_closed_by_project_bot Triggered when an epic is closed by a group access token Yes Yes GitLab 16.1 Group
epic_created_by_project_bot Triggered when an epic is created by a group access token Yes Yes GitLab 16.1 Group
epic_reopened_by_project_bot Triggered when an epic is reopened by a group access token Yes Yes GitLab 16.1 Group

Product analytics data management

Name Description Saved to database Streamed Introduced in Scope
product_analytics_settings_update Triggered when product analytics settings are changed Yes Yes GitLab 17.1 Project

Project

Name Description Saved to database Streamed Introduced in Scope
project_access_token_created Triggered when a project access token is created Yes Yes GitLab 15.2 Project
project_access_token_creation_failed Triggered when creating a project access token fails Yes Yes GitLab 15.2 Project
project_access_token_deleted Triggered when a project access token is deleted Yes Yes GitLab 15.2 Project
project_access_token_deletion_failed Triggered when deleting a project access token fails Yes Yes GitLab 15.2 Project

Quality management

Name Description Saved to database Streamed Introduced in Scope
test_case_closed_by_project_bot Triggered when a test case is closed using a project access token Yes Yes GitLab 16.1 Project
test_case_created_by_project_bot Triggered when a test case is created using a project access token Yes Yes GitLab 16.1 Project
test_case_reopened_by_project_bot Triggered when a test case is reopened using a project access token Yes Yes GitLab 16.1 Project

Runner

Name Description Saved to database Streamed Introduced in Scope
set_runner_associated_projects Event triggered on successful assignment of associated projects to a CI runner Yes Yes GitLab 15.4 User

Secret detection

Name Description Saved to database Streamed Introduced in Scope
project_security_exclusion_created Triggered when a project security exclusion is created Yes Yes GitLab 17.5 Project
project_security_exclusion_deleted Triggered when a project security exclusion is deleted Yes Yes GitLab 17.5 Project
project_security_exclusion_updated Triggered when a project security exclusion is updated Yes Yes GitLab 17.5 Project
skip_secret_push_protection Triggered when secret push protection is skipped by the user Yes Yes GitLab 16.11 Project

Secrets management

Name Description Saved to database Streamed Introduced in Scope
user_authenticated_using_job_token Triggered when a user is authenticated using job token No Yes GitLab 17.4 Project

Security policy management

Name Description Saved to database Streamed Introduced in Scope
policy_project_updated Triggered when the security policy project is updated for a project Yes Yes GitLab 15.6 Group, Project

Self-hosted models

Name Description Saved to database Streamed Introduced in Scope
self_hosted_model_created A new self-hosted model configuration was added Yes Yes GitLab 17.4 Instance
self_hosted_model_destroyed A new self-hosted model configuration was destroyed Yes Yes GitLab 17.4 Instance
self_hosted_model_feature_changed A self-hosted model feature had its configuration changed Yes Yes GitLab 17.4 Instance
self_hosted_model_terms_accepted Terms for usage of self-hosted models were accepted Yes Yes GitLab 17.4 Instance
self_hosted_model_updated A self-hosted model configuration was updated Yes Yes GitLab 17.4 Instance

Source code management

Name Description Saved to database Streamed Introduced in Scope
approval_rule_created Triggered when a merge request approval rule is created. Yes Yes GitLab 15.2 Project
approval_rule_deleted Triggered when a merge request approval rule is deleted. Yes Yes GitLab 14.9 Project
group_push_rules_author_email_regex_updated Triggered when a group’s push rules settings is changed for author email regex Yes Yes GitLab 15.7 Group
group_push_rules_branch_name_regex_updated Triggered when a group’s push rules settings is changed for branch name regex Yes Yes GitLab 15.7 Group
group_push_rules_commit_committer_check_updated Triggered when a group’s push rule setting is updated for reject unverified users Yes Yes GitLab 15.0 Group
group_push_rules_commit_message_negative_regex_updated Triggered when a group’s push rules settings is changed for commit message negative regex Yes Yes GitLab 15.7 Group
group_push_rules_commit_message_regex_updated Triggered when a group’s push rules settings is changed for commit message regex Yes Yes GitLab 15.7 Group
group_push_rules_file_name_regex_updated Triggered when a group’s push rules settings is changed for filename regex Yes Yes GitLab 15.7 Group
group_push_rules_max_file_size_updated Triggered when a group’s push rules settings is changed for max file size Yes Yes GitLab 15.7 Group
group_push_rules_prevent_secrets_updated Triggered when a group’s push rule setting is updated to prevent pushing secret files Yes Yes GitLab 15.0 Group
group_push_rules_reject_deny_delete_tag_updated Triggered when a group’s push rule setting is updated to deny deletion of tags using Git push Yes Yes GitLab 15.0 Group
group_push_rules_reject_member_check_updated Triggered when a group’s push rule setting is updated to check if commit author is a GitLab user Yes Yes GitLab 15.0 Group
group_push_rules_reject_non_dco_commits_updated Triggered when a group’s push rule setting is updated for reject non DCO certified commits Yes Yes GitLab 15.0 Group
group_push_rules_reject_unsigned_commits_updated Triggered when a group push’s rule setting is updated for reject unsigned commits Yes Yes GitLab 15.0 Group
merged_merge_request_deleted Triggered when a merged merge request is deleted No Yes GitLab 16.0 Project
merged_merge_request_deletion_started Triggered when a merged merge request’s deletion is started No Yes GitLab 16.1 Project
project_fork_operation Triggered when a project is forked Yes Yes GitLab 15.2 Project
project_fork_relationship_removed Triggered when a project’s fork relationship is successfully removed Yes Yes GitLab 15.6 Project
project_push_rules_commit_committer_check_updated Triggered when a project’s push rule setting for reject unverified users is updated Yes Yes GitLab 16.5 Project
protected_branch_code_owner_approval_required_updated Triggered when the protected branch code owner approval required setting is updated Yes Yes GitLab 15.8 Project
protected_branch_created Triggered when a protected branch is created Yes Yes GitLab 15.2 Project
protected_branch_removed Triggered when a protected branch is removed Yes Yes GitLab 15.2 Project
protected_branch_updated Triggered when the setting for protected branches is updated Yes Yes GitLab 15.8 Project
repository_git_operation Triggered when authenticated users push, pull, or clone a project using SSH, HTTP(S), or the UI No Yes GitLab 14.9 Project
require_reauthentication_to_approve_updated Logged when the setting for requiring reauthentication for merge requqest approvals is toggled. Yes Yes GitLab 17.1 Group, Project
manually_trigger_housekeeping Triggered when manually triggering housekeeping via API or admin UI Yes Yes GitLab 15.9 Project
project_blobs_removal Triggered when removing blobs via the GraphQL API or project settings UI Yes Yes GitLab 17.0 Project
project_text_replacement Triggered when replacing text via the GraphQL API or project settings UI Yes Yes GitLab 17.1 Project

System access

Name Description Saved to database Streamed Introduced in Scope
application_setting_updated Triggered when an application setting is updated. Yes Yes GitLab 16.3 Instance
group_access_token_created Triggered when a group access token is created Yes Yes GitLab 15.2 Group
group_access_token_creation_failed Triggered when creating a group access token failed Yes Yes GitLab 15.2 Group
group_access_token_deleted Triggered when a group access token is deleted Yes Yes GitLab 15.2 Group
group_access_token_deletion_failed Triggered when deleting a group access token failed Yes Yes GitLab 15.2 Group
ip_restrictions_changed Event triggered on any changes in the IP allowlist Yes Yes GitLab 15.0 Group
login_failed_with_otp_authentication Triggered when sign-in fails because of an incorrect OTP Yes Yes GitLab 16.4 User
login_failed_with_standard_authentication Triggered when sign-in to GitLab fails with standard authentication, such as password Yes Yes GitLab 16.4 Instance
login_failed_with_webauthn_authentication Triggered when sign-in fails when using a WebAuthn device Yes Yes GitLab 16.4 User
update_mismatched_group_saml_extern_uid Triggered when the external UID is changed on a SAML identity. Yes Yes GitLab 15.7 User
user_access_locked Event triggered when user access to the instance is locked Yes Yes GitLab 16.2 User
user_access_unlocked Event triggered when user access to the instance is unlocked Yes Yes GitLab 16.2 User
user_disable_two_factor Audit event triggered when user disables two factor authentication Yes Yes GitLab 15.1 User
user_enable_admin_mode Event triggered on enabling Admin Mode Yes Yes GitLab 15.7 User

Team planning

Name Description Saved to database Streamed Introduced in Scope
comment_by_project_bot Triggered when a comment is added to an issue or a merge request when using a project access token No Yes GitLab 16.1 Project
delete_issue Triggered when an issue is successfully deleted No Yes GitLab 15.4 Project
delete_work_item Triggered when a work item is successfully deleted No Yes GitLab 15.4 Project
issue_closed_by_project_bot Triggered when an issue is closed using a project access token Yes Yes GitLab 16.1 Project
issue_created_by_project_bot Triggered when an issue is created using a project access token Yes Yes GitLab 16.1 Project
issue_reopened_by_project_bot Triggered when an issue is reopened using a project access token Yes Yes GitLab 16.1 Project
task_closed_by_project_bot Triggered when a task is closed using a project access token Yes Yes GitLab 16.1 Project
task_created_by_project_bot Triggered when a task is created using a project access token Yes Yes GitLab 16.1 Project
task_reopened_by_project_bot Triggered when a task is reopened using a project access token Yes Yes GitLab 16.1 Project

User management

Name Description Saved to database Streamed Introduced in Scope
authenticated_with_group_saml Triggered when successfully signing in with SAML authentication. Yes Yes GitLab 12.10 Group
ban_user Triggered when a user is banned, unbanned, blocked, or unblocked Yes Yes GitLab 15.11 User
change_membership_state Triggered when a user’s membership is updated Yes Yes GitLab 15.1 Group
password_reset_failed Triggered when a password reset fails for a user No Yes GitLab 16.4 User
unban_user Event triggered on user unban action Yes Yes GitLab 15.11 User
unblock_user Event triggered on user unblock action Yes Yes GitLab 15.11 User
user_activate Event triggered on user activate action Yes Yes GitLab 16.1 User
user_approved Event triggered when a user is approved for an instance Yes No GitLab 15.11 User
user_blocked Event triggered when a user is blocked Yes No GitLab 15.11 User
user_created Event triggered when a user is created Yes Yes GitLab 15.10 User
user_deactivate Event triggered on user deactivate action Yes Yes GitLab 16.0 User
user_destroyed Event triggered when a user is scheduled for removal from the instance Yes No GitLab 15.11 User, Group, Project
user_email_changed_and_user_signed_in audit when user emailed changed and user signed in Yes Yes GitLab 15.8 User
user_impersonation Triggered when an instance administrator starts or stops impersonating a user Yes Yes GitLab 14.8 User, Group
user_password_updated audit when user password is updated Yes Yes GitLab 15.7 User
user_rejected Event triggered when a user registration is rejected Yes No GitLab 15.11 User

User profile

Name Description Saved to database Streamed Introduced in Scope
email_confirmation_sent Triggered when users add or change an email address and it must be confirmed No Yes GitLab 16.3 User
remove_ssh_key Audit event triggered when a SSH key is removed Yes Yes GitLab 14.1 User
user_admin_status_updated Adds an audit event when a user is either made an administrator, or removed as an administrator Yes Yes GitLab 14.1 User
user_auditor_status_updated Adds an audit event when a user is either made an auditor, or removed as an auditor Yes Yes GitLab 16.6 User
user_email_address_updated Adds an audit event when a user updates their email address Yes Yes GitLab 10.1 User
user_name_updated Event triggered on updating a user’s name Yes Yes GitLab 17.5 User
user_profile_visiblity_updated Triggered when user toggles private profile user setting No Yes GitLab 16.3 User
user_username_updated Event triggered on updating a user’s username Yes Yes GitLab 15.7 User

Verify security

Name Description Saved to database Streamed Introduced in Scope
secure_ci_job_token_group_added Event triggered when group added to CI_JOB_TOKEN scope Yes Yes GitLab 17.3 Project
secure_ci_job_token_group_removed Event triggered when group removed from CI_JOB_TOKEN scope Yes Yes GitLab 17.3 Project
secure_ci_job_token_inbound_disabled Event triggered when CI_JOB_TOKEN permissions disabled for inbound Yes Yes GitLab 16.0 Project
secure_ci_job_token_inbound_enabled Event triggered when CI_JOB_TOKEN permissions enabled for inbound Yes Yes GitLab 16.0 Project
secure_ci_job_token_project_added Event triggered when project added to inbound CI_JOB_TOKEN scope Yes Yes GitLab 16.0 Project
secure_ci_job_token_project_removed Event triggered when project removed from inbound CI_JOB_TOKEN scope Yes Yes GitLab 16.0 Project

Webhooks

Name Description Saved to database Streamed Introduced in Scope
webhook_created Event triggered when a webhook is created. Yes Yes GitLab 17.1 Project, Group, Instance
webhook_destroyed Event triggered when a webhook is destroyed. Yes Yes GitLab 17.0 Project, Group, Instance