# incident.io: API reference Audit logs ## Audit logs - [Introduction](https://docs.incident.io/api-reference/audit-logs.md): Track configuration and permission changes across your incident.io account. ### Entry payloads #### Activity log - [Scrubbed v1](https://docs.incident.io/api-reference/activity-log/scrubbed-v1.md): This entry is created whenever an activity log entry is permanently erased #### Alert - [Scrubbed v1](https://docs.incident.io/api-reference/alert/scrubbed-v1.md): This entry is created whenever sensitive data is permanently erased from an alert, its events, and linked escalations. #### Alert chat message template - [Created v1](https://docs.incident.io/api-reference/alert-chat-message-template/created-v1.md): This entry is created whenever an alert chat message template is created - [Deleted v1](https://docs.incident.io/api-reference/alert-chat-message-template/deleted-v1.md): This entry is created whenever an alert chat message template is deleted - [Updated v1](https://docs.incident.io/api-reference/alert-chat-message-template/updated-v1.md): This entry is created whenever an alert chat message template is updated #### Alert priority - [Created v1](https://docs.incident.io/api-reference/alert-priority/created-v1.md): This entry is created whenever an alert priority is created - [Deleted v1](https://docs.incident.io/api-reference/alert-priority/deleted-v1.md): This entry is created whenever an alert priority is deleted - [Set as default v1](https://docs.incident.io/api-reference/alert-priority/set-as-default-v1.md): This entry is created whenever an alert priority is set as the default - [Updated v1](https://docs.incident.io/api-reference/alert-priority/updated-v1.md): This entry is created whenever an alert priority is updated #### Alert route - [Created v1](https://docs.incident.io/api-reference/alert-route/created-v1.md): This entry is created whenever an alert route is created - [Deleted v1](https://docs.incident.io/api-reference/alert-route/deleted-v1.md): This entry is created whenever an alert route is deleted - [Updated v1](https://docs.incident.io/api-reference/alert-route/updated-v1.md): This entry is created whenever an alert route is updated #### Alert schema - [Updated v1](https://docs.incident.io/api-reference/alert-schema/updated-v1.md): This entry is created whenever alert attributes are updated #### Alert source config - [Created v1](https://docs.incident.io/api-reference/alert-source-config/created-v1.md): This entry is created whenever an alert source is created - [Deleted v1](https://docs.incident.io/api-reference/alert-source-config/deleted-v1.md): This entry is created whenever an alert source is deleted - [Updated v1](https://docs.incident.io/api-reference/alert-source-config/updated-v1.md): This entry is created whenever an alert source is updated #### Announcement post template - [Created v1](https://docs.incident.io/api-reference/announcement-post-template/created-v1.md): This entry is created whenever an announcement post template is created - [Created v2](https://docs.incident.io/api-reference/announcement-post-template/created-v2.md): This entry is created whenever an announcement post template is created - [Deleted v1](https://docs.incident.io/api-reference/announcement-post-template/deleted-v1.md): This entry is created whenever an announcement post template is deleted - [Set as default v1](https://docs.incident.io/api-reference/announcement-post-template/set-as-default-v1.md): This entry is created whenever an announcement post template is set as the default - [Updated v1](https://docs.incident.io/api-reference/announcement-post-template/updated-v1.md): This entry is created whenever an announcement post template is updated - [Updated v2](https://docs.incident.io/api-reference/announcement-post-template/updated-v2.md): This entry is created whenever an announcement post template is updated #### Announcement rule - [Created v1](https://docs.incident.io/api-reference/announcement-rule/created-v1.md): This entry is created whenever a announcement rule is created - [Created v2](https://docs.incident.io/api-reference/announcement-rule/created-v2.md): This entry is created whenever a announcement rule is created - [Deleted v1](https://docs.incident.io/api-reference/announcement-rule/deleted-v1.md): This entry is created whenever a announcement rule is deleted - [Updated v1](https://docs.incident.io/api-reference/announcement-rule/updated-v1.md): This entry is created whenever a announcement rule is updated - [Updated v2](https://docs.incident.io/api-reference/announcement-rule/updated-v2.md): This entry is created whenever a announcement rule is updated #### API key - [Created v1](https://docs.incident.io/api-reference/api-key/created-v1.md): This entry is created whenever a api key is created - [Deleted v1](https://docs.incident.io/api-reference/api-key/deleted-v1.md): This entry is created whenever a api key is deleted - [Rotated v1](https://docs.incident.io/api-reference/api-key/rotated-v1.md): This entry is created whenever an api key is rotated - [Updated v1](https://docs.incident.io/api-reference/api-key/updated-v1.md): This entry is created whenever a api key is updated #### Catalog entry attribute - [Updated v1](https://docs.incident.io/api-reference/catalog-entry-attribute/updated-v1.md): This entry is created whenever a restricted catalog entry attribute is updated - [Updated v2](https://docs.incident.io/api-reference/catalog-entry-attribute/updated-v2.md): This entry is created whenever a restricted catalog entry attribute is updated #### Catalog type - [Created v1](https://docs.incident.io/api-reference/catalog-type/created-v1.md): This entry is created whenever a catalog type is created - [Deleted v1](https://docs.incident.io/api-reference/catalog-type/deleted-v1.md): This entry is created whenever a catalog type is deleted - [Updated v1](https://docs.incident.io/api-reference/catalog-type/updated-v1.md): This entry is created whenever a catalog type is updated #### Connector config - [Created v1](https://docs.incident.io/api-reference/connector-config/created-v1.md): This entry is created whenever a connector config is created - [Token generated v1](https://docs.incident.io/api-reference/connector-config/token-generated-v1.md): This entry is created whenever a connector config token is regenerated - [Updated v1](https://docs.incident.io/api-reference/connector-config/updated-v1.md): This entry is created whenever a connector config is updated #### Custom field - [Created v1](https://docs.incident.io/api-reference/custom-field/created-v1.md): This entry is created whenever a custom field is created - [Deleted v1](https://docs.incident.io/api-reference/custom-field/deleted-v1.md): This entry is created whenever a custom field is deleted - [Updated v1](https://docs.incident.io/api-reference/custom-field/updated-v1.md): This entry is created whenever a custom field is updated #### Debrief invite rule - [Created v1](https://docs.incident.io/api-reference/debrief-invite-rule/created-v1.md): This entry is created whenever a debrief invite rule is created - [Deleted v1](https://docs.incident.io/api-reference/debrief-invite-rule/deleted-v1.md): This entry is created whenever a debrief invite rule is deleted - [Updated v1](https://docs.incident.io/api-reference/debrief-invite-rule/updated-v1.md): This entry is created whenever a debrief invite rule is updated #### Email otp login setting - [Updated v1](https://docs.incident.io/api-reference/email-otp-login-setting/updated-v1.md): This entry is created whenever the email OTP login setting is toggled for an organisation #### Escalation - [Scrubbed v1](https://docs.incident.io/api-reference/escalation/scrubbed-v1.md): This entry is created whenever sensitive data is permanently erased from an escalation. #### Escalation path - [Created v1](https://docs.incident.io/api-reference/escalation-path/created-v1.md): This entry is created whenever an escalation path is created - [Deleted v1](https://docs.incident.io/api-reference/escalation-path/deleted-v1.md): This entry is created whenever an escalation path is deleted - [Updated v1](https://docs.incident.io/api-reference/escalation-path/updated-v1.md): This entry is created whenever an escalation path is updated #### Escalation path template - [Created v1](https://docs.incident.io/api-reference/escalation-path-template/created-v1.md): This entry is created whenever an escalation path template is created - [Deleted v1](https://docs.incident.io/api-reference/escalation-path-template/deleted-v1.md): This entry is created whenever an escalation path template is deleted - [Updated v1](https://docs.incident.io/api-reference/escalation-path-template/updated-v1.md): This entry is created whenever an escalation path template is updated #### Extension connector - [Called v1](https://docs.incident.io/api-reference/extension-connector/called-v1.md): This entry is created for every call an agent makes to a tool on a connector, whether the tool reads from the connected system or changes it - [Called v2](https://docs.incident.io/api-reference/extension-connector/called-v2.md): This entry is created for every call an agent makes to a tool on a connector, whether the tool reads from the connected system or changes it - [Called v3](https://docs.incident.io/api-reference/extension-connector/called-v3.md): This entry is created for every call an agent makes to a tool on a connector, whether the tool reads from the connected system or changes it, and for every call the connector's access policy refused #### Extension plugin - [Created v1](https://docs.incident.io/api-reference/extension-plugin/created-v1.md): This entry is created whenever an extension plugin is added from a repository - [Deleted v1](https://docs.incident.io/api-reference/extension-plugin/deleted-v1.md): This entry is created whenever an extension plugin is removed - [Updated v1](https://docs.incident.io/api-reference/extension-plugin/updated-v1.md): This entry is created whenever an extension plugin is switched on or off, renamed, moved to another repository location, or has its skill selection changed #### Follow up category - [Created v1](https://docs.incident.io/api-reference/follow-up-category/created-v1.md): This entry is created whenever a follow up category is created - [Deleted v1](https://docs.incident.io/api-reference/follow-up-category/deleted-v1.md): This entry is created whenever a follow up category is deleted - [Updated v1](https://docs.incident.io/api-reference/follow-up-category/updated-v1.md): This entry is created whenever a follow up category is updated #### Follow up priority - [Created v1](https://docs.incident.io/api-reference/follow-up-priority/created-v1.md): This entry is created whenever a follow up priority is created - [Deleted v1](https://docs.incident.io/api-reference/follow-up-priority/deleted-v1.md): This entry is created whenever a follow up priority is deleted - [Updated v1](https://docs.incident.io/api-reference/follow-up-priority/updated-v1.md): This entry is created whenever a follow up priority is updated #### Glossary entry - [Created v1](https://docs.incident.io/api-reference/glossary-entry/created-v1.md): This entry is created whenever a glossary entry is created - [Deleted v1](https://docs.incident.io/api-reference/glossary-entry/deleted-v1.md): This entry is created whenever a glossary entry is deleted - [Updated v1](https://docs.incident.io/api-reference/glossary-entry/updated-v1.md): This entry is created whenever a glossary entry is updated #### Holiday user feed - [Created v1](https://docs.incident.io/api-reference/holiday-user-feed/created-v1.md): This entry is created whenever a holiday user feed is created - [Deleted v1](https://docs.incident.io/api-reference/holiday-user-feed/deleted-v1.md): This entry is created whenever a holiday user feed is deleted - [Updated v1](https://docs.incident.io/api-reference/holiday-user-feed/updated-v1.md): This entry is created whenever a holiday user feed is updated #### Hris time off policy - [Updated v1](https://docs.incident.io/api-reference/hris-time-off-policy/updated-v1.md): This entry is created whenever the visibility of a HRIS time-off policy is updated #### Incident - [Scrubbed v1](https://docs.incident.io/api-reference/incident/scrubbed-v1.md): This entry is created whenever sensitive data is permanently erased from an incident and its streams. #### Incident call setting - [Updated v1](https://docs.incident.io/api-reference/incident-call-setting/updated-v1.md): This entry is created whenever an organisation's incident call settings are updated #### Incident call transcription session - [Deleted v1](https://docs.incident.io/api-reference/incident-call-transcription-session/deleted-v1.md): This entry is created whenever a calls notes (transcription session) are deleted #### Incident duration metric - [Created v1](https://docs.incident.io/api-reference/incident-duration-metric/created-v1.md): This entry is created whenever a incident duration metric is created - [Deleted v1](https://docs.incident.io/api-reference/incident-duration-metric/deleted-v1.md): This entry is created whenever a incident duration metric is deleted - [Updated v1](https://docs.incident.io/api-reference/incident-duration-metric/updated-v1.md): This entry is created whenever a incident duration metric is updated #### Incident role - [Created v1](https://docs.incident.io/api-reference/incident-role/created-v1.md): This entry is created whenever a incident role is created - [Deleted v1](https://docs.incident.io/api-reference/incident-role/deleted-v1.md): This entry is created whenever a incident role is deleted - [Updated v1](https://docs.incident.io/api-reference/incident-role/updated-v1.md): This entry is created whenever a incident role is updated #### Incident status - [Created v1](https://docs.incident.io/api-reference/incident-status/created-v1.md): This entry is created whenever a incident status is created - [Deleted v1](https://docs.incident.io/api-reference/incident-status/deleted-v1.md): This entry is created whenever a incident status is deleted - [Updated v1](https://docs.incident.io/api-reference/incident-status/updated-v1.md): This entry is created whenever a incident status is updated #### Incident template - [Created v1](https://docs.incident.io/api-reference/incident-template/created-v1.md): This entry is created whenever an incident template is created - [Deleted v1](https://docs.incident.io/api-reference/incident-template/deleted-v1.md): This entry is created whenever an incident template is deleted - [Set as default v1](https://docs.incident.io/api-reference/incident-template/set-as-default-v1.md): This entry is created whenever an incident template is set as the default - [Updated v1](https://docs.incident.io/api-reference/incident-template/updated-v1.md): This entry is created whenever an incident template is updated #### Incident timestamp - [Created v1](https://docs.incident.io/api-reference/incident-timestamp/created-v1.md): This entry is created whenever a incident timestamp is created - [Deleted v1](https://docs.incident.io/api-reference/incident-timestamp/deleted-v1.md): This entry is created whenever a incident timestamp is deleted - [Updated v1](https://docs.incident.io/api-reference/incident-timestamp/updated-v1.md): This entry is created whenever a incident timestamp is updated #### Incident timestamp set by rule - [Created v1](https://docs.incident.io/api-reference/incident-timestamp-set-by-rule/created-v1.md): This entry is created whenever an incident timestamp set by rule is created - [Deleted v1](https://docs.incident.io/api-reference/incident-timestamp-set-by-rule/deleted-v1.md): This entry is created whenever an incident timestamp set by rule is deleted - [Updated v1](https://docs.incident.io/api-reference/incident-timestamp-set-by-rule/updated-v1.md): This entry is created whenever an incident timestamp set by rule is updated #### Incident type - [Created v1](https://docs.incident.io/api-reference/incident-type/created-v1.md): This entry is created whenever a incident type is created - [Created v2](https://docs.incident.io/api-reference/incident-type/created-v2.md): This entry is created whenever an incident type is created - [Deleted v1](https://docs.incident.io/api-reference/incident-type/deleted-v1.md): This entry is created whenever a incident type is deleted - [Updated v1](https://docs.incident.io/api-reference/incident-type/updated-v1.md): This entry is created whenever a incident type is updated - [Updated v2](https://docs.incident.io/api-reference/incident-type/updated-v2.md): This entry is created whenever an incident type is updated #### Integration - [Installed v1](https://docs.incident.io/api-reference/integration/installed-v1.md): This entry is created whenever an integration is installed - [Uninstalled v1](https://docs.incident.io/api-reference/integration/uninstalled-v1.md): This entry is created whenever an integration is uninstalled #### Internal status page - [Created v1](https://docs.incident.io/api-reference/internal-status-page/created-v1.md): This entry is created whenever an internal status page is created - [Deleted v1](https://docs.incident.io/api-reference/internal-status-page/deleted-v1.md): This entry is created whenever an internal status page is deleted - [Updated v1](https://docs.incident.io/api-reference/internal-status-page/updated-v1.md): This entry is created whenever an internal status page has its configuration updated #### Investigation trigger - [Created v1](https://docs.incident.io/api-reference/investigation-trigger/created-v1.md): This entry is created whenever an investigation trigger is created - [Deleted v1](https://docs.incident.io/api-reference/investigation-trigger/deleted-v1.md): This entry is created whenever an investigation trigger is deleted - [Updated v1](https://docs.incident.io/api-reference/investigation-trigger/updated-v1.md): This entry is created whenever an investigation trigger is updated #### IP allowlist - [Updated v1](https://docs.incident.io/api-reference/ip-allowlist/updated-v1.md): This entry is created whenever an IP allowlist is updated #### Maintenance window - [Created v1](https://docs.incident.io/api-reference/maintenance-window/created-v1.md): This entry is created whenever a maintenance window is created - [Deleted v1](https://docs.incident.io/api-reference/maintenance-window/deleted-v1.md): This entry is created whenever a maintenance window is deleted - [Updated v1](https://docs.incident.io/api-reference/maintenance-window/updated-v1.md): This entry is created whenever a maintenance window is updated #### Microsoft entra tenant - [Linked v1](https://docs.incident.io/api-reference/microsoft-entra-tenant/linked-v1.md): This entry is created when a Microsoft Entra tenant is linked to the organisation #### Mobile intune enabled setting - [Updated v1](https://docs.incident.io/api-reference/mobile-intune-enabled-setting/updated-v1.md): This entry is created whenever the Intune setting is toggled for an organisation #### Nudge - [Created v1](https://docs.incident.io/api-reference/nudge/created-v1.md): This entry is created whenever a nudge is created - [Deleted v1](https://docs.incident.io/api-reference/nudge/deleted-v1.md): This entry is created whenever a nudge is deleted - [Updated v1](https://docs.incident.io/api-reference/nudge/updated-v1.md): This entry is created whenever a nudge is updated #### On call notification method - [Created v1](https://docs.incident.io/api-reference/on-call-notification-method/created-v1.md): This entry is created whenever an on-call notification method is created by an actor that isn't the owning user - [Created v2](https://docs.incident.io/api-reference/on-call-notification-method/created-v2.md): This entry is created whenever an on-call notification method is created by an actor that isn't the owning user - [Destroyed v1](https://docs.incident.io/api-reference/on-call-notification-method/destroyed-v1.md): This entry is created whenever an on-call notification method is destroyed by an actor that isn't the owning user - [Destroyed v2](https://docs.incident.io/api-reference/on-call-notification-method/destroyed-v2.md): This entry is created whenever an on-call notification method is destroyed by an actor that isn't the owning user #### On call notification pause - [Created v1](https://docs.incident.io/api-reference/on-call-notification-pause/created-v1.md): This entry is created whenever an on-call notification pause is created - [Created v2](https://docs.incident.io/api-reference/on-call-notification-pause/created-v2.md): This entry is created whenever an on-call notification pause is created - [Deleted v1](https://docs.incident.io/api-reference/on-call-notification-pause/deleted-v1.md): This entry is created whenever an on-call notification pause is deleted - [Deleted v2](https://docs.incident.io/api-reference/on-call-notification-pause/deleted-v2.md): This entry is created whenever an on-call notification pause is deleted - [Resumed v1](https://docs.incident.io/api-reference/on-call-notification-pause/resumed-v1.md): This entry is created whenever an active on-call notification pause is ended early - [Updated v1](https://docs.incident.io/api-reference/on-call-notification-pause/updated-v1.md): This entry is created whenever an on-call notification pause is updated - [Updated v2](https://docs.incident.io/api-reference/on-call-notification-pause/updated-v2.md): This entry is created whenever an on-call notification pause is updated #### On call upsell - [Requested v1](https://docs.incident.io/api-reference/on-call-upsell/requested-v1.md): This entry is created whenever a self-serve on-call seat upsell is submitted. #### Organisation settings - [Updated v1](https://docs.incident.io/api-reference/organisation-settings/updated-v1.md): This entry is created when certain organisation settings are updated #### Policy - [Created v1](https://docs.incident.io/api-reference/policy/created-v1.md): This entry is created whenever a policy is created - [Created v2](https://docs.incident.io/api-reference/policy/created-v2.md): This entry is created whenever a policy is created - [Deleted v1](https://docs.incident.io/api-reference/policy/deleted-v1.md): This entry is created whenever a policy is deleted - [Updated v1](https://docs.incident.io/api-reference/policy/updated-v1.md): This entry is created whenever a policy is updated - [Updated v2](https://docs.incident.io/api-reference/policy/updated-v2.md): This entry is created whenever a policy is updated #### Policy report schedule - [Created v1](https://docs.incident.io/api-reference/policy-report-schedule/created-v1.md): This entry is created whenever a policy report schedule is created - [Deleted v1](https://docs.incident.io/api-reference/policy-report-schedule/deleted-v1.md): This entry is created whenever a policy report schedule is deleted - [Updated v1](https://docs.incident.io/api-reference/policy-report-schedule/updated-v1.md): This entry is created whenever a policy report schedule is updated #### Post incident task - [Created v1](https://docs.incident.io/api-reference/post-incident-task/created-v1.md): This entry is created whenever a post-incident task is created - [Deleted v1](https://docs.incident.io/api-reference/post-incident-task/deleted-v1.md): This entry is created whenever a post-incident task is deleted - [Updated v1](https://docs.incident.io/api-reference/post-incident-task/updated-v1.md): This entry is created whenever a post-incident task is updated #### Postmortem section - [Created v1](https://docs.incident.io/api-reference/postmortem-section/created-v1.md): This entry is created whenever a postmortem template section is created - [Created v2](https://docs.incident.io/api-reference/postmortem-section/created-v2.md): This entry is created whenever a postmortem template section is created - [Deleted v1](https://docs.incident.io/api-reference/postmortem-section/deleted-v1.md): This entry is created whenever a postmortem template section is deleted - [Deleted v2](https://docs.incident.io/api-reference/postmortem-section/deleted-v2.md): This entry is created whenever a postmortem template section is deleted - [Updated v1](https://docs.incident.io/api-reference/postmortem-section/updated-v1.md): This entry is created whenever a postmortem template section is updated - [Updated v2](https://docs.incident.io/api-reference/postmortem-section/updated-v2.md): This entry is created whenever a postmortem template section is updated #### Postmortem template - [Created v1](https://docs.incident.io/api-reference/postmortem-template/created-v1.md): This entry is created whenever a postmortem template is created - [Created v2](https://docs.incident.io/api-reference/postmortem-template/created-v2.md): This entry is created whenever a postmortem template is created - [Deleted v1](https://docs.incident.io/api-reference/postmortem-template/deleted-v1.md): This entry is created whenever a postmortem template is deleted - [Deleted v2](https://docs.incident.io/api-reference/postmortem-template/deleted-v2.md): This entry is created whenever a postmortem template is deleted - [Updated v1](https://docs.incident.io/api-reference/postmortem-template/updated-v1.md): This entry is created whenever a postmortem template is updated - [Updated v2](https://docs.incident.io/api-reference/postmortem-template/updated-v2.md): This entry is created whenever a postmortem template is updated #### Private alert - [Access attempted v1](https://docs.incident.io/api-reference/private-alert/access-attempted-v1.md): This entry is created whenever someone attempts to access a private alert. #### Private escalation - [Access attempted v1](https://docs.incident.io/api-reference/private-escalation/access-attempted-v1.md): This entry is created whenever someone attempts to access a private escalation. #### Private incident - [Access attempted v1](https://docs.incident.io/api-reference/private-incident/access-attempted-v1.md): This entry is created whenever someone attempts to access a private incident. - [Access attempted v2](https://docs.incident.io/api-reference/private-incident/access-attempted-v2.md): This entry is created whenever someone attempts to access a private incident. - [Access requested v1](https://docs.incident.io/api-reference/private-incident/access-requested-v1.md): This entry is created whenever someone requests access to a private incident. - [Accessed via bot v1](https://docs.incident.io/api-reference/private-incident/accessed-via-bot-v1.md): This entry is created whenever someone accesses a private incident via the incident bot. #### Private incident membership - [Granted v1](https://docs.incident.io/api-reference/private-incident-membership/granted-v1.md): This entry is created whenever someone is granted access to a private incident. If they have the 'manage private incidents' permission, then it'll appear that the system has given them access to the incident. - [Revoked v1](https://docs.incident.io/api-reference/private-incident-membership/revoked-v1.md): This entry is created whenever someone's access to a private incident is revoked. - [Upgraded to direct v1](https://docs.incident.io/api-reference/private-incident-membership/upgraded-to-direct-v1.md): This entry is created whenever someone's team-derived access to a private incident is upgraded to durable direct access, so it survives the covering team's access being revoked. #### Private incident team membership - [Granted v1](https://docs.incident.io/api-reference/private-incident-team-membership/granted-v1.md): This entry is created whenever a team is granted access to a private incident. - [Revoked v1](https://docs.incident.io/api-reference/private-incident-team-membership/revoked-v1.md): This entry is created whenever a team's access to a private incident is revoked. #### Private insights - [Exported v1](https://docs.incident.io/api-reference/private-insights/exported-v1.md): This entry is created whenever someone exports private Insights data. - [Measure queried v1](https://docs.incident.io/api-reference/private-insights/measure-queried-v1.md): This entry is created whenever someone queries a private Insights measure. - [Underlying data queried v1](https://docs.incident.io/api-reference/private-insights/underlying-data-queried-v1.md): This entry is created whenever someone queries private Insights underlying data. #### Qr code mobile login setting - [Updated v1](https://docs.incident.io/api-reference/qr-code-mobile-login-setting/updated-v1.md): This entry is created whenever the QR code mobile login setting is toggled for an organisation #### RBAC role - [Created v1](https://docs.incident.io/api-reference/rbac-role/created-v1.md): This entry is created whenever a rbac role is created - [Deleted v1](https://docs.incident.io/api-reference/rbac-role/deleted-v1.md): This entry is created whenever a rbac role is deleted - [Updated v1](https://docs.incident.io/api-reference/rbac-role/updated-v1.md): This entry is created whenever a rbac role is updated #### Schedule - [Created v1](https://docs.incident.io/api-reference/schedule/created-v1.md): This entry is created whenever a schedule is created - [Deleted v1](https://docs.incident.io/api-reference/schedule/deleted-v1.md): This entry is created whenever a schedule is deleted - [Updated v1](https://docs.incident.io/api-reference/schedule/updated-v1.md): This entry is created whenever a schedule is updated #### Schedule override - [Created v1](https://docs.incident.io/api-reference/schedule-override/created-v1.md): This entry is created whenever a schedule override is created - [Created v2](https://docs.incident.io/api-reference/schedule-override/created-v2.md): This entry is created whenever a schedule override is created - [Deleted v1](https://docs.incident.io/api-reference/schedule-override/deleted-v1.md): This entry is created whenever a schedule override is deleted - [Deleted v2](https://docs.incident.io/api-reference/schedule-override/deleted-v2.md): This entry is created whenever a schedule override is deleted - [Updated v1](https://docs.incident.io/api-reference/schedule-override/updated-v1.md): This entry is created whenever a schedule override is updated - [Updated v2](https://docs.incident.io/api-reference/schedule-override/updated-v2.md): This entry is created whenever a schedule override is updated #### Schedule sync rule - [Created v1](https://docs.incident.io/api-reference/schedule-sync-rule/created-v1.md): This entry is created whenever a schedule sync rule is created - [Deleted v1](https://docs.incident.io/api-reference/schedule-sync-rule/deleted-v1.md): This entry is created whenever a schedule sync rule is deleted - [Updated v1](https://docs.incident.io/api-reference/schedule-sync-rule/updated-v1.md): This entry is created whenever a schedule sync rule is updated #### Schedule sync target - [Created v1](https://docs.incident.io/api-reference/schedule-sync-target/created-v1.md): This entry is created whenever a schedule sync target is created - [Deleted v1](https://docs.incident.io/api-reference/schedule-sync-target/deleted-v1.md): This entry is created whenever a schedule sync target is deleted - [Updated v1](https://docs.incident.io/api-reference/schedule-sync-target/updated-v1.md): This entry is created whenever a schedule sync target's add_bot_to_group flag is updated #### SCIM group - [Role mappings updated v1](https://docs.incident.io/api-reference/scim-group/role-mappings-updated-v1.md): This entry is created whenever a SCIM group is mapped to a new RBAC role - [Seat mappings updated v1](https://docs.incident.io/api-reference/scim-group/seat-mappings-updated-v1.md): This entry is created whenever a SCIM group is mapped to new seat types #### Secret - [Created v1](https://docs.incident.io/api-reference/secret/created-v1.md): This entry is created whenever a secret is created - [Deleted v1](https://docs.incident.io/api-reference/secret/deleted-v1.md): This entry is created whenever a secret is deleted - [Reference added v1](https://docs.incident.io/api-reference/secret/reference-added-v1.md): This entry is created whenever a secret is referenced by a workflow for the first time - [Reference removed v1](https://docs.incident.io/api-reference/secret/reference-removed-v1.md): This entry is created whenever a secret stops being referenced by a workflow - [Rotated v1](https://docs.incident.io/api-reference/secret/rotated-v1.md): This entry is created whenever a secret's value is rotated - [Updated v1](https://docs.incident.io/api-reference/secret/updated-v1.md): This entry is created whenever a secret's metadata is updated #### Severity - [Created v1](https://docs.incident.io/api-reference/severity/created-v1.md): This entry is created whenever a severity is created - [Deleted v1](https://docs.incident.io/api-reference/severity/deleted-v1.md): This entry is created whenever a severity is deleted - [Updated v1](https://docs.incident.io/api-reference/severity/updated-v1.md): This entry is created whenever a severity is updated #### Status page - [Created v1](https://docs.incident.io/api-reference/status-page/created-v1.md): This entry is created whenever a status page is created - [Deleted v1](https://docs.incident.io/api-reference/status-page/deleted-v1.md): This entry is created whenever a status page is deleted - [Updated v1](https://docs.incident.io/api-reference/status-page/updated-v1.md): This entry is created whenever a status page has its configuration updated #### Status page sub page - [Created v1](https://docs.incident.io/api-reference/status-page-sub-page/created-v1.md): This entry is created whenever a status page sub-page is created - [Deleted v1](https://docs.incident.io/api-reference/status-page-sub-page/deleted-v1.md): This entry is created whenever a status page sub-page is deleted - [Updated v1](https://docs.incident.io/api-reference/status-page-sub-page/updated-v1.md): This entry is created whenever a status page sub-page has its configuration updated #### Status page template - [Created v1](https://docs.incident.io/api-reference/status-page-template/created-v1.md): This entry is created whenever a status page template is created - [Deleted v1](https://docs.incident.io/api-reference/status-page-template/deleted-v1.md): This entry is created whenever a status page template is deleted - [Updated v1](https://docs.incident.io/api-reference/status-page-template/updated-v1.md): This entry is created whenever a status page template is updated #### Team role - [Created v1](https://docs.incident.io/api-reference/team-role/created-v1.md): This entry is created whenever a team role is created - [Deleted v1](https://docs.incident.io/api-reference/team-role/deleted-v1.md): This entry is created whenever a team role is deleted - [Updated v1](https://docs.incident.io/api-reference/team-role/updated-v1.md): This entry is created whenever a team role is updated #### Team settings - [Updated v1](https://docs.incident.io/api-reference/team-settings/updated-v1.md): This entry is created whenever team settings are updated #### Telemetry data source - [Access mode changed v1](https://docs.incident.io/api-reference/telemetry-data-source/access-mode-changed-v1.md): This entry is created whenever a telemetry data source's access mode changes, which controls who may query it - [Access policy changed v1](https://docs.incident.io/api-reference/telemetry-data-source/access-policy-changed-v1.md): This entry is created whenever a connector's access policy changes, which decides what each class of tool on it may do on each surface - [Installed v1](https://docs.incident.io/api-reference/telemetry-data-source/installed-v1.md): This entry is created whenever a telemetry data source is connected - [Queried v1](https://docs.incident.io/api-reference/telemetry-data-source/queried-v1.md): This entry is created when a telemetry data source is queried: one entry per session and data source, plus one entry per denied attempt - [Queried v2](https://docs.incident.io/api-reference/telemetry-data-source/queried-v2.md): This entry is created when a telemetry data source is queried: one entry per session and data source, plus one entry per denied attempt - [Requested v1](https://docs.incident.io/api-reference/telemetry-data-source/requested-v1.md): This entry is created for every HTTP request our infrastructure sends to a telemetry data source, whatever made the request - [Tool access changed v1](https://docs.incident.io/api-reference/telemetry-data-source/tool-access-changed-v1.md): This entry is created for each tool whose access changed, whether because the connector's access policy changed or because a decision was pinned on the tool itself - [Tool overrides changed v1](https://docs.incident.io/api-reference/telemetry-data-source/tool-overrides-changed-v1.md): This entry is created whenever the decisions pinned on a single tool change, which override the connector's access policy for that tool - [Uninstalled v1](https://docs.incident.io/api-reference/telemetry-data-source/uninstalled-v1.md): This entry is created whenever a telemetry data source is disconnected - [Write access granted v1](https://docs.incident.io/api-reference/telemetry-data-source/write-access-granted-v1.md): This entry is created whenever tools on a connector are allowed to change the connected system - [Write access revoked v1](https://docs.incident.io/api-reference/telemetry-data-source/write-access-revoked-v1.md): This entry is created whenever tools on a connector lose permission to change the connected system #### Timeline item - [Deleted v1](https://docs.incident.io/api-reference/timeline-item/deleted-v1.md): This entry is created whenever a timeline item is deleted #### Twilio connection - [Created v1](https://docs.incident.io/api-reference/twilio-connection/created-v1.md): This entry is created whenever a Twilio connection is created - [Deleted v1](https://docs.incident.io/api-reference/twilio-connection/deleted-v1.md): This entry is created whenever a Twilio connection is deleted - [Updated v1](https://docs.incident.io/api-reference/twilio-connection/updated-v1.md): This entry is created whenever a Twilio connection is updated #### User - [Created v1](https://docs.incident.io/api-reference/user/created-v1.md): This entry is created whenever a user is created - [Deactivated v1](https://docs.incident.io/api-reference/user/deactivated-v1.md): This entry is created whenever a user is deactivated - [Logged in v1](https://docs.incident.io/api-reference/user/logged-in-v1.md): This entry is created whenever a user successfully logs in - [Reinstated v1](https://docs.incident.io/api-reference/user/reinstated-v1.md): This entry is created when a user is reinstated after being deactivated - [Role memberships updated v1](https://docs.incident.io/api-reference/user/role-memberships-updated-v1.md): This entry is created whenever a user's role memberships are changed. - [Updated v1](https://docs.incident.io/api-reference/user/updated-v1.md): This entry is created whenever a user is updated #### User API key - [Created v1](https://docs.incident.io/api-reference/user-api-key/created-v1.md): This entry is created whenever a user API key is created - [Deleted v1](https://docs.incident.io/api-reference/user-api-key/deleted-v1.md): This entry is created whenever a user API key is deleted #### Workflow - [Created v1](https://docs.incident.io/api-reference/workflow/created-v1.md): This entry is created whenever a workflow is created - [Deleted v1](https://docs.incident.io/api-reference/workflow/deleted-v1.md): This entry is created whenever a workflow is deleted - [Updated v1](https://docs.incident.io/api-reference/workflow/updated-v1.md): This entry is created whenever a workflow is updated ## OpenAPI Specs - [audit-logs](/openapi/audit-logs.json)