| _BilledSize |
|
Double |
| _IsBillable |
|
String |
| AccountState |
Deprecated. Use EventParameters column to find the value of this column instead. Parameter to indicate the account state on the device. |
String |
| ActorApplicationInfoApplicationName |
Name of the application used to perform the action. |
String |
| ActorApplicationInfoImpersonation |
Whether the application was impersonating a user. |
Boolean |
| ActorApplicationInfoOauthClientId |
OAuth client id of the third party application used to perform the action. |
String |
| ActorCallerType |
The type of actor. |
String |
| ActorEmail |
The primary email address of the actor. May be absent if there is no email address associated with the actor. |
String |
| ActorIsCollaboratorAccount |
Deprecated. Use EventParameters column to find the value of this column instead. Indicates whether the actor is a collaborator account. |
Boolean |
| ActorKey |
Only present when callerType is KEY. Can be the consumer_key of the requestor for OAuth 2LO API requests or an identifier for robot accounts. |
String |
| ActorProfileId |
The unique Google Workspace profile ID of the actor. This value might be absent if the actor is not a Google Workspace user, or may be the number 105250506097979753968 which acts as a placeholder ID. |
String |
| ApiKind |
Deprecated. Use EventParameters column to find the value of this column instead. The kind of API request made. |
String |
| ApplicationEdition |
Deprecated. Use EventParameters column to find the value of this column instead. The Google Workspace edition. |
String |
| ApplicationName |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| AppName |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| Billable |
Deprecated. Use EventParameters column to find the value of this column instead. Whether this activity is billable. |
Boolean |
| BrowserVersion |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| CalendarId |
Deprecated. Use EventParameters column to find the value of this column instead. Calendar Id of the relevant calendar in context of this action (for example the calendar that an event is on, or a calendar being subscribed to). Usually takes the form of the user’s email address. |
String |
| ChromeOrgUnitId |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| ClientId |
Deprecated. Use EventParameters column to find the value of this column instead. Client ID to which access has been granted / revoked. |
String |
| ClientType |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| ContentHash |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| ContentName |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| ContentRiskLevel |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| ContentSize |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| ContentTransferMethod |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| ContentType |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| DestinationFolderId |
Deprecated. Use EventParameters column to find the value of this column instead. The unique identifier of the destination folder. |
String |
| DestinationFolderTitle |
Deprecated. Use EventParameters column to find the value of this column instead. The title of the destination folder. |
String |
| DestUserUpn |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| DeviceId |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| DeviceName |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| DevicePlatform |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| DeviceType |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| DeviceUser |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| DocId |
Deprecated. Use EventParameters column to find the value of this column instead. The unique identifier of the document. |
String |
| DocTitle |
Deprecated. Use EventParameters column to find the value of this column instead. The title of the document. |
String |
| DocType |
Deprecated. Use EventParameters column to find the value of this column instead. The type of the document. |
String |
| DstUserUpn |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| DvcGuid |
Deprecated. Use EventParameters column to find the value of this column instead. The unique identifier of the device used. |
String |
| DvcInterfaceGuid |
Deprecated. Use EventParameters column to find the value of this column instead. The unique identifier of the device interface. |
String |
| DvcModelName |
Deprecated. Use EventParameters column to find the value of this column instead. The model name of the device used. |
String |
| DvcModelNumber |
Deprecated. Use EventParameters column to find the value of this column instead. The model number of the device used. |
String |
| DvcType |
Deprecated. Use EventParameters column to find the value of this column instead. The type of the device used. |
String |
| Etag |
ETag of the entry. |
String |
| EventEndTime |
Deprecated. Use EventParameters column to find the value of this column instead. The end time of the event. |
String |
| EventGuest |
Deprecated. Use EventParameters column to find the value of this column instead. The email address of the event guest. |
String |
| EventId |
Deprecated. Use EventParameters column to find the value of this column instead. The unique identifier of the event. |
String |
| EventMessage |
Deprecated. Use EventParameters column to find the value of this column instead. The name of the event. |
String |
| EventName |
Name of the event. |
String |
| EventOriginalMessage |
Deprecated. Use EventParameters column to find the value of this column instead. An array representing a chain of events, where each element is a sub-event. |
String |
| EventParameters |
JSON of all parameters that is associated with the Event. |
Object |
| EventProduct |
Deprecated. Use EventParameters column to find the value of this column instead. The product associated with the event. |
String |
| EventResourceId |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| EventResourceName |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| EventResponseStatus |
Deprecated. Use EventParameters column to find the value of this column instead.The response status of the event. |
String |
| EventResult |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| EventStartTime |
Deprecated. Use EventParameters column to find the value of this column instead. The start time of the event. |
String |
| EventTitle |
Deprecated. Use EventParameters column to find the value of this column instead. The title of the event. |
String |
| EventType |
Type of event. |
String |
| EventUid |
Deprecated. Use EventParameters column to find the value of this column instead. The unique identifier of the event. |
String |
| EventVendor |
Deprecated. Use EventParameters column to find the value of this column instead. The vendor of the event. |
String |
| GroupDomain |
Deprecated. Use EventParameters column to find the value of this column instead. The organizational unit (OU) name (path). |
String |
| GroupEmail |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| IdApplicationName |
Application name to which the event belongs. |
String |
| IdCustomerId |
The unique identifier for a Google Workspace account. |
String |
| IdTime |
Time of occurrence of the activity. This is in UNIX epoch time in seconds. |
String |
| IdUniqueQualifier |
Unique qualifier if multiple events have the same time. |
String |
| IosVendorId |
Deprecated. Use EventParameters column to find the value of this column instead. The vendor ID for iOS devices. |
String |
| IosVendorUID |
Deprecated. Use EventParameters column to find the value of this column instead. The vendor UID for iOS devices. |
String |
| IsSecondFactor |
Deprecated. Use EventParameters column to find the value of this column instead. Indicates if the event involves a second-factor authentication attempt. |
Boolean |
| IsSuspicious |
Deprecated. Use EventParameters column to find the value of this column instead. Indicates if the event is considered suspicious. |
Boolean |
| Kind |
The type of API resource. For an activity report, the value is audit#activity. |
String |
| LastSyncAuditDate |
Deprecated. Use EventParameters column to find the value of this column instead. The date of the last synchronization audit. |
String |
| LoginChallengeMethod |
Deprecated. Use EventParameters column to find the value of this column instead. The method used for the login challenge. |
String |
| LoginChallengeStatus |
Deprecated. Use EventParameters column to find the value of this column instead. The status of the login challenge. |
String |
| LoginType |
Deprecated. Use EventParameters column to find the value of this column instead. The type of credentials used to attempt login. |
String |
| ModuleName |
Deprecated. Use EventParameters column to find the value of this column instead. The new license for this product name. |
String |
| NetworkInfoRegionCode |
ISO 3166-1 alpha-2 region code of the user doing the action. |
String |
| NetworkInfoSubdivisionCode |
ISO 3166-2 region code (states and provinces) for countries of the user doing the action. |
String |
| NetworkIpAsn |
IP Address of the user doing the action. |
Object |
| NewValue |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| NotificationMessageId |
Deprecated. Use EventParameters column to find the value of this column instead. The notification message Id. |
String |
| NotificationMethod |
Deprecated. Use EventParameters column to find the value of this column instead. The method used for the notification. |
String |
| NotificationType |
Deprecated. Use EventParameters column to find the value of this column instead. The type of notification. |
String |
| OldEventTitle |
Deprecated. Use EventParameters column to find the value of this column instead. If the title of a calendar event has been changed, this is the previous title of the event. |
String |
| OldValue |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| OldVisibility |
Deprecated. Use EventParameters column to find the value of this column instead. Old Visibility of Target File. |
String |
| OrganizerCalendarId |
Deprecated. Use EventParameters column to find the value of this column instead. Calendar Id of this Event’s organizer. |
String |
| OrgUnitName |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| OriginatingAppId |
Deprecated. Use EventParameters column to find the value of this column instead. The Google Cloud Project ID of the application that performed the action. |
String |
| OsProperty |
Deprecated. Use EventParameters column to find the value of this column instead. Operating System properties. |
String |
| Owner |
Deprecated. Use EventParameters column to find the value of this column instead. The owner of the resource involved in the event. |
String |
| OwnerDomain |
This is the domain that is affected by the report’s event. For example domain of Admin console or the Drive application’s document owner. |
String |
| OwnerEmail |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| OwnerIsSharedDrive |
Deprecated. Use EventParameters column to find the value of this column instead. Indicates if the owner is a shared drive. |
Boolean |
| OwnerIsTeamDrive |
Deprecated. Use EventParameters column to find the value of this column instead. Indicates if the owner is a team drive. |
Boolean |
| PrimaryEvent |
Deprecated. Use EventParameters column to find the value of this column instead. Indicates if the event is the primary event in a chain of events. |
Boolean |
| ProcessName |
Deprecated. Use EventParameters column to find the value of this column instead. The unique name (ID) of the setting that was changed. |
String |
| ProfileUserName |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| RegisterPrivelege |
Deprecated. Use EventParameters column to find the value of this column instead. Device Policy app’s privilege on the user’s device. |
String |
| Resource_Id |
Deprecated. Use EventParameters column to find the value of this column instead. The unique resource Id of the device. |
String |
| ResourceDetails |
Details of the resource on which the action was performed. |
Object |
| RoleName |
Deprecated. Use EventParameters column to find the value of this column instead. The unique name (ID) of the role assigned to the user. |
String |
| RuleName |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| ScanId |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| Scope |
Deprecated. Use EventParameters column to find the value of this column instead. The scope of the access request. |
String |
| ScopeData |
Deprecated. Use EventParameters column to find the value of this column instead. Additional data related to the scope. |
String |
| SerialNumber |
Deprecated. Use EventParameters column to find the value of this column instead. The serial number of the device. |
String |
| SharedDriveId |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| SourceFolderId |
Deprecated. Use EventParameters column to find the value of this column instead. The ID of the source folder if the document is located in a shared drive. |
String |
| SourceFolderTitle |
Deprecated. Use EventParameters column to find the value of this column instead. The title of the source folder if the document is located in a shared drive. |
String |
| SourceSystem |
|
String |
| SrcIpAddr |
IP address of the user doing the action. |
String |
| TargetCalendarId |
Deprecated. Use EventParameters column to find the value of this column instead. The ID of the calendar targeted by the event. |
String |
| TargetDomain |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| TargetUserDomain |
Deprecated. Use EventParameters column to find the value of this column instead. The domain targeted by the event. |
String |
| TargetUserName |
Deprecated. Use EventParameters column to find the value of this column instead. The user targeted by the event. |
String |
| TeamDriveId |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| TenantId |
Unique identifier of the tenant into which the data connector ingests data. |
String |
| TimeGenerated |
Time that the log was generated. |
DateTime |
| Timestamp |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| TriggerDestination |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| TriggerSource |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| TriggerType |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| Type |
The name of the table |
String |
| Url |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| UserAadid |
Deprecated. Use EventParameters column to find the value of this column instead. This ID helps correlate events and activities to the correct Google Workspace tenant. |
String |
| UserAgent |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| UserAgentOriginal |
Deprecated. Use EventParameters column to find the value of this column instead. The user agent from the request that triggered this action. |
String |
| UserEmail |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| Value |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| VirtualDeviceId |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| Visibility |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |
| VisibilityChange |
Deprecated. Use EventParameters column to find the value of this column instead. |
String |