# Audit Log Streaming

Workato can store the job history of all your recipes as well as login and user activity to an Amazon S3 bucket or any REST endpoint. Any log service provider (such as Sumo Logic (opens new window), Datadog (opens new window)) may be used. When enabled, we will create a JSON file for each event. The file size varies from 1 kB to 1 MB based on the details that are present in the logs.

This is an add-on feature. Please view our Pricing page or speak with your account representative to enable audit log streaming in your account.

# How to set up

Click on the Audit log streaming tab in your Account Settings and use the toggle button to enable audit log streaming.

Enable audit log streaming

You will then be able to select the type of events that must be included in your audit log stream. You may stream the following information by selecting one or more options. If you choose to stream your job history, you will have the additional option to include your recipe step details in your audit log stream.

Select data to stream

# Audit stream destination

You may choose one of the following options as your audit stream destination.

1

# Amazon S3 bucket

Select an Amazon S3 connection that has a region and bucket set up. The connection should have read/write access to the bucket.

2

# Azure Blob storage

Select an Azure Blob connection that has containers set up. The connection should have read/write access to the containers. Read here (opens new window) to change role access of the Integration System User (ISU) in your Azure Active Directory. Additional fees (opens new window) are charged by Azure for each 10,000 logs streamed to Azure Blob.

3

# Azure Monitor

Select an Azure Monitor connection that is tied to a log analytics workspace on your Azure tenant. Head over to the connection docs to learn more.

4

# Cloud based logging service

Any log service provider (such as Sumo Logic, Datadog, Splunk) may be used. Learn more about configuring an HTTP based log collection using Sumo logic (opens new window) or Datadog (opens new window).

5

# Requires authentication

If the log service provider requires authentication to send HTTP requests then enable the REQUIRES AUTHENTICATION toggle. Requires authentication

6

# HTTP authentication

Select the authentication type in the HTTP connection. Provide authentication details based on the authentication type selected. Select HTTP authentication type

7

# HTTP connection

Link an HTTP connection by creating or linking to an existing HTTP connection. Authentication information must be provided in the HTTP connection. Link an HTTP connection

8

# HTTP URL

Enter the HTTP URL from the cloud based logging service provider. Workato audit log streaming will POST the audit log events in real-time to this URL. Enter an HTTP URL

# Customize log message

Workato lets you customize the audit log message before it is streamed to your choice of security and event management applications like S3, Splunk, Datadog and more. Often times, you may need to send it in a certain format or customize the event message to suit your needs. For example, you may need to include source application (for example, Workato), environment metadata (like staging or production) so that the event log are automatically processed in the destination application.

In the Account Settings > Audit log streaming > Customize log message you can create the custom log message using JSON format. Along with your custom fields, define the JSON structure with a placeholder for the Workato audit log that gets replaced with the actual log message before the event is streamed.

Let's see it in action by way of an example. In here, we are sending the source, environment and service fields so that the message gets automatically routed and stored in the right bucket in Datadog.

The {{log_message}} is the placeholder that Workato uses to substitute the actual audit log event message in JSON format.

{
  "source": "workato",
  "environment": "staging",
  "hostname": "workato_cloud",
  "service": "emp_onboarding",
  "logEntries": {{log_message}}
}

Ensure you define a valid JSON. If the JSON is invalid or does not contain the {{log_message}} placeholder, then Workato will send the default log message without any customization.

The log message looks like following in the Datadog log explorer.

# Custom audit log message fields

Custom audit log message fields

# Custom recipe started activity audit log message

Custom audit log message for recipe started event

# Custom job history audit log message

Custom audit log message for a successfully completed job

# JSON file details

Workato creates a JSON file for each event. The file path and name format are as follows:

Item Description
path user_id/jobs/recipe_id/YYYYMMDD/formatted_job_id/

formatted_job_id is the job id expanded in to a 21 digit number(left padded with 0s) and split in to 3 character fragments separated by /.

Eg: Job id 100 is formatted as 000/000/000/000/000/000/100
name user_id-recipe_id-job_id-YYYYMMDDHHMMSS-status.json

status is the job completion status: succeeded or failed

Eg: 5234-234-100-20180521000000-succeeded.json

Eg: 5234/jobs/234/20180521/000/000/000/000/000/000/100/5234-234-100-20180521000000-succeeded.json

# JSON file content - Job history and step details sample data

Job history - Success
{
  "completed_at": "2020-06-29T11:59:52-07:00",
  "is_poll_error": false,
  "flow_id": 1207865,
  "context": {
    "recipe_path": "Home/Audit Log Streaming",
    "user_email": "lisa.williams@workato.com",
    "recipe_id": 1207865,
    "job_created_at": "2020-06-29T11:59:52.004449-07:00",
    "user_id": 90125,
    "user_name": "Lisa Williams",
    "job_id": 2162900673,
    "recipe_name": "New/updated row in a sheet in Google Sheets will log message to output",
    "repeated_job": false,
    "job_url": "https://www.workato.com/recipes/1207865/job/2162900673",
    "recipe_url": "https://www.workato.com/recipes/1207865"
  },
  "started_at": "2020-06-29T11:59:52-07:00",
  "id": 2162900673,
  "action_count": 1,
  "lines": [
    {
      "output": {
        "columns": {
          "col_1": "3"
        },
        "name": "Test Trigger",
        "spreadsheet_id": "1mc_2nMclW3xEn5DvyUSPaNhR-FqioGWtaVDnXxYhvAw",
        "row": 4,
        "id": "4",
        "sheet_name": "Sheet1",
        "updated": false
      },
      "input": {
        "watchfield": "1",
        "spreadsheet": "1mc_2nMclW3xEn5DvyUSPaNhR-FqioGWtaVDnXxYhvAw",
        "sheet": "Sheet1"
      },
      "adapter_name": "google_sheets",
      "recipe_line_number": 0,
      "adapter_operation": "updated_spreadsheet_row_v4",
      "mask_data": false
    },
    {
      "output": {
        "message": "Current count is 3"
      },
      "input": {
        "message": "Current count is 3"
      },
      "adapter_name": "logger",
      "recipe_line_number": 1,
      "adapter_operation": "log_message",
      "mask_data": false
    }
  ],
  "status": "succeeded",
  "title": "Google Sheets: new/updated row in sheet in my drive: Spreadsheet ID=1mc_2nMclW3xEn5DvyUSPaNhR-FqioGWtaVDnXxYhvAw, Spreadsheet name=Test Trigger, and Sheet name=Sheet1"
}
Job history - Failure
{
  "completed_at": "2020-06-29T12:12:29-07:00",
  "is_poll_error": false,
  "flow_id": 29220,
  "error_type": "Exception",
  "context": {
    "recipe_path": "Home",
    "user_email": "david.smith@workato.com",
    "recipe_id": 29220,
    "job_created_at": "2020-06-29T12:12:28.733533-07:00",
    "user_id": 4805,
    "user_name": "David Smith",
    "job_id": 2200127784,
    "recipe_name": "Update incident in ServiceNow",
    "repeated_job": false,
    "job_url": "https://www.workato.com/recipes/29220/job/2200127784",
    "recipe_url": "https://www.workato.com/recipes/29220"
  },
  "started_at": "2020-06-29T12:12:28-07:00",
  "id": 2200127784,
  "action_count": 1,
  "error": "{\"message\":\"404 Not Found\",\"inner_message\":\"#\\u003cRestClient::NotFound: 404 Not Found\\u003e\"}",
  "lines": [
    {
      "output": {
        "time": "2020-06-29T12:12:27.765777-07:00"
      },
      "input": {
        "interval": "60"
      },
      "adapter_name": "clock",
      "recipe_line_number": 0,
      "adapter_operation": "timer",
      "mask_data": false
    },
    {
      "input": {
        "sys_id": "107813476",
        "row": {
          "caller_id": "0878",
          "category": "245"
        },
        "table": "incident~Incident"
      },
      "adapter_name": "service_now",
      "recipe_line_number": 1,
      "adapter_operation": "update_object",
      "error": "404 Not Found",
      "mask_data": false
    }
  ],
  "status": "failed",
  "title": "Scheduler by Workato: new scheduled event: Start time=2020-06-29T12:12:27.765777-07:00"
}

# JSON file content - Login and user activity

User login
{
  "resource": {
    "email_confirmed_at": "2019-11-24 14:29:30 -0800",
    "name": "John Smith",
    "id": 4848,
    "type": "User",
    "email": "john.smith@workato.com"
  },
  "details": {
    "request": {
      "ip_address": "60.160.90.91",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.113 Safari/537.36"
    },
    "activity": "sso_login",
    "sso_provider": "google"
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "event": "user_login",
  "user": {
    "name": "John Smith",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "timestamp": "2020-05-02 02:39:22 UTC"
}
User logout
{
  "resource": {
    "email_confirmed_at": "2019-11-24 14:29:30 -0800",
    "name": "John Smith",
    "id": 4848,
    "type": "User",
    "email": "john.smith@workato.com"
  },
  "details": {
    "request": {
      "ip_address": "60.160.90.91",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.113 Safari/537.36"
    },
    "activity": "user_logout"
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "event": "user_logout",
  "user": {
    "name": "John Smith",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "timestamp": "2020-05-02 02:39:10 UTC"
}
Manifest updated
{
  "resource": {
    "name": "Document reading",
    "id": 911,
    "type": "ExportManifest"
  },
  "details": {
    "request": {
      "ip_address": "60.160.90.91",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.113 Safari/537.36"
    }
  },
  "team": {
    "name": "Workato eam",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "event": "manifest_updated",
  "user": {
    "name": "John Smith",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "timestamp": "2020-05-02 02:51:46 UTC"
}
Package exported
{
  "resource": {
    "file_name": "vision-ai-license-and-registration_john-smith.zip",
    "id": 1076,
    "type": "Package",
    "folder_id": 5223,
    "folder_path": "Home/Vision AI - License and Registration"
  },
  "team": {
    "name": "Workato Team",
    "id": 4805,
    "email": "john.smith@workato.com"
  },
  "event": "package_exported",
  "user": {
    "name": "John Smith",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "timestamp": "2020-05-02 02:52:17 UTC"
}
Package imported
{
  "resource": {
    "file_name": "griddynamics_demo.zip",
    "id": 1077,
    "type": "Package",
    "folder_id": 6593,
    "folder_path": "Home/HR"
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "event": "package_imported",
  "user": {
    "name": "John Smith",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "timestamp": "2020-05-02 02:53:33 UTC"
}
Recipe created
{
  "resource": {
    "name": "Candidate in Progress on JIRA will advance on GreenHouse",
    "id": 33167,
    "type": "Flow"
  },
  "team": {
    "name": "Workato team",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "event": "recipe_created",
  "user": {
    "name": "John Smith",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "timestamp": "2020-05-02 02:53:32 UTC"
}
Recipe updated
{
  "resource": {
    "name": "Trigger on a specified interval will send request via HTTP",
    "id": 32896,
    "type": "Flow"
  },
  "details": {
    "request": {
      "ip_address": "60.160.90.91",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.113 Safari/537.36"
    }
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "event": "recipe_updated",
  "user": {
    "name": "john.smith",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "timestamp": "2020-05-04 18:26:28 UTC"
}
Recipe deleted
{
  "resource": {
    "parent_id": 32896,
    "name": "Send opportunity sync request via HTTP",
    "id": 33179,
    "type": "Flow"
  },
  "details": {
    "request": {
      "ip_address": "60.160.90.91",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.113 Safari/537.36"
    }
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "event": "recipe_deleted",
  "user": {
    "name": "John Smith",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "timestamp": "2020-05-04 18:39:15 UTC"
}
Recipe cloned
{
  "resource": {
    "name": "Trigger on a specified interval will send request via HTTP",
    "id": 32896,
    "type": "Flow"
  },
  "details": {
    "request": {
      "ip_address": "60.160.90.91",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.113 Safari/537.36"
    }
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "event": "recipe_copied",
  "user": {
    "name": "John Smith",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "timestamp": "2020-05-04 18:32:43 UTC"
}
Recipe renamed
{
  "resource_changes": {
    "name": {
      "old_value": "Send request via HTTP"
    }
  },
  "resource": {
    "parent_id": 32896,
    "name": "Send opportunity sync request via HTTP",
    "id": 33179,
    "type": "Flow"
  },
  "details": {
    "request": {
      "ip_address": "60.160.90.91",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.113 Safari/537.36"
    }
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "event": "recipe_renamed",
  "user": {
    "name": "John Smith",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "timestamp": "2020-05-04 18:33:23 UTC"
}
Recipe started
{
  "resource": {
    "parent_id": 32896,
    "name": "Send opportunity sync request via HTTP",
    "id": 33179,
    "type": "Flow"
  },
  "details": {
    "request": {
      "ip_address": "67.164.97.88",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.113 Safari/537.36"
    },
    "run_once": false
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "event": "recipe_started",
  "user": {
    "name": "John Smith",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "timestamp": "2020-05-04 18:38:46 UTC"
}
Recipe stopped
{
  "resource": {
    "parent_id": 32896,
    "name": "Send opportunity sync request via HTTP",
    "id": 33179,
    "type": "Flow"
  },
  "details": {
    "request": {
      "ip_address": "60.160.90.91",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.113 Safari/537.36"
    },
    "stop_reason": "user",
    "force": false,
    "error": false
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "event": "recipe_stopped",
  "user": {
    "name": "Johm Smith",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "timestamp": "2020-05-04 18:39:06 UTC"
}
Folder created
{
  "resource": {
    "path": "Home/RevOps Salesforce <> Netsuite",
    "name": "RevOps Salesforce <> Netsuite",
    "id": 6847,
    "type": "Folder"
  },
  "details": {
    "request": {
      "ip_address": "60.160.90.91",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.113 Safari/537.36"
    }
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "event": "folder_created",
  "user": {
    "name": "Johm Smith",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "timestamp": "2020-05-04 18:48:08 UTC"
}
Folder deleted
{
  "resource": {
    "path": "RevOps Salesforce <> Netsuite",
    "name": "RevOps Salesforce <> Netsuite",
    "id": 6847,
    "type": "Folder"
  },
  "details": {
    "request": {
      "ip_address": "60.160.90.91",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.113 Safari/537.36"
    }
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "event": "folder_deleted",
  "user": {
    "name": "Johm Smith",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "timestamp": "2020-05-04 18:50:20 UTC"
}
Team - Invited a team member
{
  "resource": {
    "role": "Admin",
    "name": "Alice Jackson",
    "id": 847,
    "type": "MemberInvitation",
    "email": "alice.jackson@workato.com"
  },
  "details": {
    "request": {
      "ip_address": "60.160.90.91",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.113 Safari/537.36"
    }
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "event": "team_invitation_created",
  "user": {
    "name": "Johm Smith",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "timestamp": "2020-05-04 18:53:59 UTC"
}
Team - Member accepted invite
{
  "resource": {
    "role": "Admin",
    "name": "Alice Jackson",
    "id": 847,
    "type": "MemberInvitation",
    "email": "alice.jackson@workato.com"
  },
  "details": {
    "request": {
      "ip_address": "60.160.90.91",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:75.0) Gecko/20100101 Firefox/75.0"
    }
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "event": "team_invitation_accept",
  "user": {
    "name": "Alice Jackson",
    "id": 6464,
    "email": "alice.jackson@workato.com"
  },
  "timestamp": "2020-05-04 20:05:02 UTC"
}
Team - Member deleted
{
  "resource": {
    "role": "Admin",
    "grant_type": "team",
    "member": {
      "email_confirmed_at": "2019-09-11 14:38:19 -0700",
      "name": "Nick Jefferies",
      "id": 4941,
      "type": "User",
      "email": "nick.jefferies@workato.com"
    },
    "id": 1483,
    "type": "ManagedUserGrant"
  },
  "details": {
    "request": {
      "ip_address": "60.160.90.91",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.113 Safari/537.36"
    }
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "event": "team_membership_deleted",
  "user": {
    "name": "John Smith",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "timestamp": "2020-05-04 18:53:16 UTC"
}
Team - Switched into a team
{
  "resource": {
    "email_confirmed_at": "2019-11-24 14:29:30 -0800",
    "name": "John Smith",
    "id": 4848,
    "type": "User",
    "email": "johm.smith@workato.com"
  },
  "details": {
    "request": {
      "ip_address": "60.160.90.91",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:75.0) Gecko/20100101 Firefox/75.0"
    },
    "activity": "switch_team"
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "event": "user_login",
  "user": {
    "name": "Alice Jackson",
    "id": 6464,
    "email": "alice.jackson@workato.com"
  },
  "timestamp": "2020-05-04 20:27:33 UTC"
}
Team - Switched out of a team
{
  "resource": {
    "email_confirmed_at": "2019-11-24 14:29:30 -0800",
    "name": "John Smith",
    "id": 4848,
    "type": "User",
    "email": "john.smith@workato.com"
  },
  "details": {
    "request": {
      "ip_address": "60.160.90.91",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:75.0) Gecko/20100101 Firefox/75.0"
    },
    "activity": "switch_team"
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "event": "user_logout",
  "user": {
    "name": "Alice Jackson",
    "id": 6464,
    "email": "alice.jackson@workato.com"
  },
  "timestamp": "2020-05-04 20:28:01 UTC"
}
Connection - Connected
{
  "resource": {
    "provider": "postgresql",
    "authorized": true,
    "name": "My PostgreSQL account",
    "id": 7145,
    "type": "SharedAccount"
  },
  "details": {
    "request": {
      "ip_address": "60.160.90.91",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.113 Safari/537.36"
    }
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "event": "connection_connected",
  "user": {
    "name": "Johm Smith",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "timestamp": "2020-05-04 20:56:35 UTC"
}
Connection - Disconnected
{
  "resource": {
    "provider": "postgresql",
    "authorized": false,
    "name": "My PostgreSQL account",
    "id": 7145,
    "type": "SharedAccount"
  },
  "details": {
    "request": {
      "ip_address": "60.160.90.91",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.113 Safari/537.36"
    }
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "event": "connection_disconnected",
  "user": {
    "name": "Johm Smith",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "timestamp": "2020-05-04 20:56:24 UTC"
}
Connection - Created
{
  "resource": {
    "provider": "asana",
    "authorized": false,
    "name": "My second Asana account",
    "id": 7174,
    "type": "SharedAccount"
  },
  "details": {
    "request": {
      "ip_address": "60.160.90.91",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.113 Safari/537.36"
    }
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "event": "connection_created",
  "user": {
    "name": "Johm Smith",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "timestamp": "2020-05-04 21:59:58 UTC"
}
Connection - Updated
{
  "resource": {
    "provider": "postgresql",
    "authorized": false,
    "name": "My PostgreSQL account",
    "id": 7145,
    "type": "SharedAccount"
  },
  "details": {
    "request": {
      "ip_address": "60.160.90.91",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.113 Safari/537.36"
    }
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "event": "connection_updated",
  "user": {
    "name": "Johm Smith",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "timestamp": "2020-05-04 20:56:32 UTC"
}
Connection - Deleted
{
  "resource": {
    "provider": "greenhouse_connector_4805_1566279565",
    "authorized": false,
    "name": "Carly's Greenhouse Account",
    "id": 6588,
    "type": "SharedAccount"
  },
  "details": {
    "request": {
      "ip_address": "60.160.90.91",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.113 Safari/537.36"
    }
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "event": "connection_deleted",
  "user": {
    "name": "Johm Smith",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "timestamp": "2020-05-04 20:57:21 UTC"
}
Connector - Updated
{
  "resource": {
    "name": "Greenhouse",
    "id": 1884,
    "type": "Adapter"
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "event": "connector_updated",
  "user": {
    "name": "John Smith",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "timestamp": "2020-05-02 02:53:28 UTC"
}
```:::