# Audit Log Streaming

Workato can store the job history of all your recipes as well as login and user activity to an Amazon S3 bucket or any REST endpoint. Any log service provider (such as Sumo Logic (opens new window), Datadog (opens new window)) may be used. When enabled, we will create a JSON file for each event. The file size varies from 1 kB to 1 MB based on the details that are present in the logs.

This is an add-on feature. Please view our Pricing page or speak with your account representative to enable audit log streaming in your account.

# How to set up

Navigate to Account settings > Debug (opens new window) and use the toggle button in the Audit log streaming section to enable audit log streaming.

Enable audit log streaming

You will then be able to select the type of events that must be included in your audit log stream. You may stream the following information by selecting one or more options. If you choose to stream your job history, you will have the additional option to include your recipe step details in your audit log stream.

Select data to stream

# Audit stream destination

# Destination

You can choose one of the following options as your audit stream destination.

# Amazon S3 bucket

Select an Amazon S3 connection that has a region and bucket set up. The connection should have read/write access to the bucket.

# Azure Blob storage

Select an Azure Blob connection that has containers set up. The connection should have read/write access to the containers. Read here (opens new window) to change role access of the Integration System User (ISU) in your Azure Active Directory. Additional fees (opens new window) are charged by Azure for each 10,000 logs streamed to Azure Blob.

# Azure Monitor

Select an Azure Monitor connection that is tied to a log analytics workspace on your Azure tenant. Head over to the connection docs to learn more.

# Cloud based logging service

Any log service provider (such as Sumo Logic, Datadog, Splunk) may be used. Learn more about configuring an HTTP based log collection using Sumo logic (opens new window) or Datadog (opens new window).

# Authenticating destination

Depending on the choice of destination, you may have to provide a set of different authentication credentials.

# Requires authentication

If the log service provider requires authentication to send HTTP requests then enable the REQUIRES AUTHENTICATION toggle. Requires authentication

# HTTP authentication

Select the authentication type in the HTTP connection. Provide authentication details based on the authentication type selected. Select HTTP authentication type

# HTTP connection

Link an HTTP connection by creating or linking to an existing HTTP connection. Authentication information must be provided in the HTTP connection. Link an HTTP connection

# HTTP URL

Enter the HTTP URL from the cloud based logging service provider. Workato audit log streaming will POST the audit log events in real-time to this URL.

Enter an HTTP URL

# Customize log message

Workato lets you customize the audit log message before it is streamed to your choice of security and event management applications like S3, Splunk, Datadog and more. Often times, you may need to send it in a certain format or customize the event message to suit your needs. For example, you may need to include source application (for example, Workato), environment metadata (like staging or production) so that the event log are automatically processed in the destination application.

In the Account Settings > Debug tab, you can create the custom log message using JSON format in the Audit log streaming > Customize log message section. Along with your custom fields, define the JSON structure with a placeholder for the Workato audit log that gets replaced with the actual log message before the event is streamed.

Let's see it in action by way of an example. In here, we are sending the source, environment and service fields so that the message gets automatically routed and stored in the right bucket in Datadog.

The {{{log_message}}} is the placeholder that Workato uses to substitute the actual audit log event message in JSON format.

{
  "source": "workato",
  "environment": "staging",
  "hostname": "workato_cloud",
  "service": "emp_onboarding",
  "logEntries": {{{log_message}}}
}

Ensure you define a valid JSON. If the JSON is invalid or does not contain the {{{log_message}}} placeholder, then Workato will send the default log message without any customization.

The log message looks like following in the Datadog log explorer.

# Custom audit log message fields

Custom audit log message fields

# Custom recipe started activity audit log message

Custom audit log message for recipe started event

# Custom job history audit log message

Custom audit log message for a successfully completed job

# JSON file details

Workato creates a JSON file for each event. The file path and name format are as follows:

Item Description
path user_id/jobs/recipe_id/YYYYMMDD/job_id/

Eg: 1234/jobs/456/20220614/j-KGAKfhsz-GYoLeD/
name user_id-recipe_id-job_id-YYYYMMDDHHMMSS-status.json

Eg: 1234-456-j-KGAKfhsz-GYoLeD-20220614-succeeded.json

Example file name: 1234/jobs/456/20220614/j-KGAKfhsz-GYoLeD/1234-456-j-KGAKfhsz-GYoLeD-20220614-succeeded.json

# JSON file content - sample data

Job history - Success
{
  "id": "j-AEcaNzd9-dGQ4Bf",
  "master_job_id": "j-AEcaNXb8-KWAmEL",
  "recipe_id": 3026581,
  "calling_job_id": "j-AEcaNXWz-Yhzrct",
  "calling_recipe_id": 3026585,
  "title": "Recipe function by Workato: new call for function: Calling job ID=j-AEcaNXWz-Yhzrct, Calling recipe ID=3026585, and ID=2d02d10dj28",
  "status": "succeeded",
  "is_repeat": true,
  "is_test": false,
  "started_at": "2022-10-19T22:30:46-07:00",
  "completed_at": "2022-10-19T22:30:46-07:00",
  "repeat_count": 1,
  "action_count": 2,
  "parent_id": "j-AEcaNXb8-KWAmEL",
  "flow_id": 3026581,
  "error_type": null,
  "is_poll_error": false,
  "account_id": 33359,
  "account_name": "Gabriel Sim",
  "environment_type": "dev",
  "environment_id": 33359,
  "error": null,
  "context": {
    "user_id": 33359,
    "user_name": "Gabriel Sim",
    "user_email": "gabriel.sim@workato.com",
    "recipe_id": 3026581,
    "recipe_url": "https://app.workato.com/recipes/3026581",
    "recipe_name": "Update customer contact details",
    "recipe_path": "Home/Functions",
    "job_id": "j-AEcaNzd9-dGQ4Bf",
    "master_job_id": "j-AEcaNXb8-KWAmEL",
    "calling_recipe_id": 3026585,
    "calling_job_id": "j-AEcaNXWz-Yhzrct",
    "is_repeat": true,
    "is_test": false,
    "repeat_count": 1,
    "job_url": "https://app.workato.com/recipes/3026581/job/j-AEcaNXb8-KWAmEL?child_job_id=j-AEcaNzd9-dGQ4Bf",
    "job_created_at": "2022-10-19T22:30:46.084655-07:00",
    "repeated_job": true,
    "parent_job_id": "j-AEcaNXb8-KWAmEL",
    "user_external_id": null
  },
  "report": {},
  "lines": [{
    "recipe_line_number": 0,
    "adapter_name": "workato_recipe_function",
    "adapter_operation": "execute",
    "input": {
      "parameters_schema_json": "[{\"name\":\"id\",\"type\":\"string\",\"optional\":false,\"control_type\":\"text\",\"label\":\"ID\"},{\"name\":\"name\",\"type\":\"string\",\"optional\":false,\"control_type\":\"text\",\"label\":\"Name\"}]"
    },
    "output": {
      "context": {
        "calling_job_id": "j-AEcaNXWz-Yhzrct",
        "calling_recipe_id": 3026585
      },
      "parameters": {
        "id": "2d02d10dj28",
        "name": "John Doe"
      }
    },
    "mask_data": false,
    "line_stat": {
      "total": 0.00043684104457497597,
      "details": [{
        "name": "map_input",
        "count": 1,
        "average": 3.4561380743980408e-06,
        "total": 3.4561380743980408e-06,
        "min": 3.4561380743980408e-06,
        "max": 3.4561380743980408e-06
      }, {
        "name": "normalize_input",
        "count": 1,
        "average": 2.6102876290678978e-05,
        "total": 2.6102876290678978e-05,
        "min": 2.6102876290678978e-05,
        "max": 2.6102876290678978e-05
      }, {
        "name": "summarize_output_report",
        "count": 1,
        "average": 0.00013904995284974575,
        "total": 0.00013904995284974575,
        "min": 0.00013904995284974575,
        "max": 0.00013904995284974575
      }, {
        "name": "event_title",
        "count": 1,
        "average": 0.00023522903211414814,
        "total": 0.00023522903211414814,
        "min": 0.00023522903211414814,
        "max": 0.00023522903211414814
      }, {
        "name": "summarize_input_report",
        "count": 1,
        "average": 3.300304524600506e-05,
        "total": 3.300304524600506e-05,
        "min": 3.300304524600506e-05,
        "max": 3.300304524600506e-05
      }]
    }
  }, {
    "recipe_line_number": 1,
    "adapter_name": "logger",
    "adapter_operation": "log_message",
    "input": {
      "user_logs_enabled": "false",
      "message": "2d02d10dj28\nJohn Doe"
    },
    "output": {
      "message": "2d02d10dj28\nJohn Doe"
    },
    "mask_data": false,
    "line_stat": {
      "total": 0.0006231747101992369,
      "details": [{
        "name": "map_input",
        "count": 1,
        "average": 6.73769973218441e-05,
        "total": 6.73769973218441e-05,
        "min": 6.73769973218441e-05,
        "max": 6.73769973218441e-05
      }, {
        "name": "normalize_input",
        "count": 2,
        "average": 2.1075480617582798e-05,
        "total": 4.2150961235165596e-05,
        "min": 1.0683899745345116e-05,
        "max": 3.146706148982048e-05
      }, {
        "name": "trim_input",
        "count": 1,
        "average": 2.4744775146245956e-05,
        "total": 2.4744775146245956e-05,
        "min": 2.4744775146245956e-05,
        "max": 2.4744775146245956e-05
      }, {
        "name": "input_with_indifferent_access",
        "count": 1,
        "average": 8.066883310675621e-06,
        "total": 8.066883310675621e-06,
        "min": 8.066883310675621e-06,
        "max": 8.066883310675621e-06
      }, {
        "name": "render_input",
        "count": 1,
        "average": 5.113217048346996e-05,
        "total": 5.113217048346996e-05,
        "min": 5.113217048346996e-05,
        "max": 5.113217048346996e-05
      }, {
        "name": "input_flattened",
        "count": 1,
        "average": 2.0849984139204025e-06,
        "total": 2.0849984139204025e-06,
        "min": 2.0849984139204025e-06,
        "max": 2.0849984139204025e-06
      }, {
        "name": "execute",
        "count": 1,
        "average": 0.00036507495678961277,
        "total": 0.00036507495678961277,
        "min": 0.00036507495678961277,
        "max": 0.00036507495678961277
      }, {
        "name": "parse_output",
        "count": 1,
        "average": 2.2870954126119614e-05,
        "total": 2.2870954126119614e-05,
        "min": 2.2870954126119614e-05,
        "max": 2.2870954126119614e-05
      }, {
        "name": "normalize_output",
        "count": 1,
        "average": 8.760020136833191e-06,
        "total": 8.760020136833191e-06,
        "min": 8.760020136833191e-06,
        "max": 8.760020136833191e-06
      }, {
        "name": "summarize_input_report",
        "count": 1,
        "average": 1.499708741903305e-05,
        "total": 1.499708741903305e-05,
        "min": 1.499708741903305e-05,
        "max": 1.499708741903305e-05
      }, {
        "name": "summarize_output_report",
        "count": 1,
        "average": 1.5914905816316605e-05,
        "total": 1.5914905816316605e-05,
        "min": 1.5914905816316605e-05,
        "max": 1.5914905816316605e-05
      }]
    }
  }, {
    "recipe_line_number": 2,
    "adapter_name": "workato_recipe_function",
    "adapter_operation": "return_result",
    "input": {
      "result": null
    },
    "output": {},
    "mask_data": false,
    "line_stat": {
      "total": 0.00041800527833402157,
      "details": [{
        "name": "map_input",
        "count": 1,
        "average": 1.4118850231170654e-06,
        "total": 1.4118850231170654e-06,
        "min": 1.4118850231170654e-06,
        "max": 1.4118850231170654e-06
      }, {
        "name": "normalize_input",
        "count": 2,
        "average": 1.2210803106427193e-06,
        "total": 2.4421606212854385e-06,
        "min": 7.431954145431519e-07,
        "max": 1.6989652067422867e-06
      }, {
        "name": "trim_input",
        "count": 1,
        "average": 3.2829120755195618e-06,
        "total": 3.2829120755195618e-06,
        "min": 3.2829120755195618e-06,
        "max": 3.2829120755195618e-06
      }, {
        "name": "input_with_indifferent_access",
        "count": 1,
        "average": 3.4710392355918884e-06,
        "total": 3.4710392355918884e-06,
        "min": 3.4710392355918884e-06,
        "max": 3.4710392355918884e-06
      }, {
        "name": "render_input",
        "count": 1,
        "average": 5.241017788648605e-06,
        "total": 5.241017788648605e-06,
        "min": 5.241017788648605e-06,
        "max": 5.241017788648605e-06
      }, {
        "name": "input_flattened",
        "count": 1,
        "average": 1.1560041457414627e-06,
        "total": 1.1560041457414627e-06,
        "min": 1.1560041457414627e-06,
        "max": 1.1560041457414627e-06
      }, {
        "name": "execute",
        "count": 1,
        "average": 0.0003324940335005522,
        "total": 0.0003324940335005522,
        "min": 0.0003324940335005522,
        "max": 0.0003324940335005522
      }, {
        "name": "parse_output",
        "count": 1,
        "average": 5.090143531560898e-06,
        "total": 5.090143531560898e-06,
        "min": 5.090143531560898e-06,
        "max": 5.090143531560898e-06
      }, {
        "name": "normalize_output",
        "count": 1,
        "average": 8.961651474237442e-07,
        "total": 8.961651474237442e-07,
        "min": 8.961651474237442e-07,
        "max": 8.961651474237442e-07
      }, {
        "name": "summarize_input_report",
        "count": 1,
        "average": 6.251991726458073e-05,
        "total": 6.251991726458073e-05,
        "min": 6.251991726458073e-05,
        "max": 6.251991726458073e-05
      }]
    }
  }]
}
Job history - Failure
{
  "id": "j-AEcaQsxm-Ec4PRe",
  "master_job_id": "j-AEcaNXb8-KWAmEL",
  "recipe_id": 3026581,
  "calling_job_id": "j-AEcaNXWz-Yhzrct",
  "calling_recipe_id": 3026585,
  "title": "Recipe function by Workato: new call for function: Calling job ID=j-AEcaNXWz-Yhzrct, Calling recipe ID=3026585, and ID=2d02d10dj28",
  "status": "failed",
  "is_repeat": true,
  "is_test": false,
  "started_at": "2022-10-19T22:33:29-07:00",
  "completed_at": "2022-10-19T22:33:29-07:00",
  "repeat_count": 2,
  "action_count": 0,
  "parent_id": "j-AEcaNzd9-dGQ4Bf",
  "flow_id": 3026581,
  "error_type": "Bad data sent to API server",
  "is_poll_error": false,
  "account_id": 33359,
  "account_name": "Gabriel Sim",
  "environment_type": "dev",
  "environment_id": 33359,
  "error": "{\"error_id\":\"7859dd09-bf6d-4d47-a55b-e84049cdafe2\",\"error_type\":\"Bad data sent to API server\",\"error_at\":\"2022-10-19T22:33:29.643-07:00\",\"adapter\":\"salesforce\",\"action\":\"create_custom_object\",\"line_number\":2,\"message\":\"Invalid Salesforce ID value(s) for: AccountId\",\"inner_message\":null}",
  "context": {
    "user_id": 33359,
    "user_name": "Gabriel Sim",
    "user_email": "gabriel.sim@workato.com",
    "recipe_id": 3026581,
    "recipe_url": "https://app.workato.com/recipes/3026581",
    "recipe_name": "Update customer contact details",
    "recipe_path": "Home/Functions",
    "job_id": "j-AEcaQsxm-Ec4PRe",
    "master_job_id": "j-AEcaNXb8-KWAmEL",
    "calling_recipe_id": 3026585,
    "calling_job_id": "j-AEcaNXWz-Yhzrct",
    "is_repeat": true,
    "is_test": false,
    "repeat_count": 2,
    "job_url": "https://app.workato.com/recipes/3026581/job/j-AEcaNzd9-dGQ4Bf?child_job_id=j-AEcaQsxm-Ec4PRe",
    "job_created_at": "2022-10-19T22:33:29.354481-07:00",
    "repeated_job": true,
    "parent_job_id": "j-AEcaNzd9-dGQ4Bf",
    "user_external_id": null
  },
  "report": {},
  "lines": [{
    "recipe_line_number": 0,
    "adapter_name": "workato_recipe_function",
    "adapter_operation": "execute",
    "input": {
      "parameters_schema_json": "[{\"name\":\"id\",\"type\":\"string\",\"optional\":false,\"control_type\":\"text\",\"label\":\"ID\"},{\"name\":\"name\",\"type\":\"string\",\"optional\":false,\"control_type\":\"text\",\"label\":\"Name\"}]"
    },
    "output": {
      "context": {
        "calling_job_id": "j-AEcaNXWz-Yhzrct",
        "calling_recipe_id": 3026585
      },
      "parameters": {
        "id": "2d02d10dj28",
        "name": "John Doe"
      }
    },
    "mask_data": false,
    "line_stat": {
      "total": 0.00029799481853842735,
      "details": [{
        "name": "map_input",
        "count": 1,
        "average": 3.3209798857569695e-06,
        "total": 3.3209798857569695e-06,
        "min": 3.3209798857569695e-06,
        "max": 3.3209798857569695e-06
      }, {
        "name": "normalize_input",
        "count": 1,
        "average": 1.7269980162382126e-05,
        "total": 1.7269980162382126e-05,
        "min": 1.7269980162382126e-05,
        "max": 1.7269980162382126e-05
      }, {
        "name": "summarize_output_report",
        "count": 1,
        "average": 0.00010947103146463633,
        "total": 0.00010947103146463633,
        "min": 0.00010947103146463633,
        "max": 0.00010947103146463633
      }, {
        "name": "event_title",
        "count": 1,
        "average": 0.00014947890304028988,
        "total": 0.00014947890304028988,
        "min": 0.00014947890304028988,
        "max": 0.00014947890304028988
      }, {
        "name": "summarize_input_report",
        "count": 1,
        "average": 1.8453923985362053e-05,
        "total": 1.8453923985362053e-05,
        "min": 1.8453923985362053e-05,
        "max": 1.8453923985362053e-05
      }]
    }
  }, {
    "recipe_line_number": 1,
    "adapter_name": "salesforce",
    "adapter_operation": "create_custom_object",
    "input": {
      "sobject_name": "Contact",
      "LastName": "John Doe",
      "AccountId": "2d02d10dj28",
      "FirstName": "John Doe"
    },
    "output": {},
    "error": "Invalid Salesforce ID value(s) for: AccountId",
    "mask_data": false,
    "line_stat": {
      "total": 0.07894168607890606,
      "details": [{
        "name": "map_input",
        "count": 1,
        "average": 8.689402602612972e-05,
        "total": 8.689402602612972e-05,
        "min": 8.689402602612972e-05,
        "max": 8.689402602612972e-05
      }, {
        "name": "normalize_input",
        "count": 2,
        "average": 1.2068485375493765e-05,
        "total": 2.413697075098753e-05,
        "min": 7.361988537013531e-06,
        "max": 1.6774982213974e-05
      }, {
        "name": "trim_input",
        "count": 1,
        "average": 7.869710680097342e-05,
        "total": 7.869710680097342e-05,
        "min": 7.869710680097342e-05,
        "max": 7.869710680097342e-05
      }, {
        "name": "input_with_indifferent_access",
        "count": 1,
        "average": 5.826936103403568e-06,
        "total": 5.826936103403568e-06,
        "min": 5.826936103403568e-06,
        "max": 5.826936103403568e-06
      }, {
        "name": "render_input",
        "count": 1,
        "average": 0.00010894099250435829,
        "total": 0.00010894099250435829,
        "min": 0.00010894099250435829,
        "max": 0.00010894099250435829
      }, {
        "name": "input_flattened",
        "count": 1,
        "average": 1.3289973139762878e-06,
        "total": 1.3289973139762878e-06,
        "min": 1.3289973139762878e-06,
        "max": 1.3289973139762878e-06
      }, {
        "name": "execute",
        "count": 1,
        "average": 0.07858130801469088,
        "total": 0.07858130801469088,
        "min": 0.07858130801469088,
        "max": 0.07858130801469088
      }, {
        "name": "summarize_input_report",
        "count": 1,
        "average": 5.455303471535444e-05,
        "total": 5.455303471535444e-05,
        "min": 5.455303471535444e-05,
        "max": 5.455303471535444e-05
      }]
    }
  }]
}
User login
{
  "resource": {
    "email_confirmed_at": "2019-11-24 14:29:30 -0800",
    "name": "John Smith",
    "id": 4848,
    "type": "User",
    "email": "john.smith@workato.com"
  },
  "details": {
    "request": {
      "ip_address": "60.160.90.91",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.113 Safari/537.36"
    },
    "activity": "sso_login",
    "sso_provider": "google"
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "event": "user_login",
  "user": {
    "name": "John Smith",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "timestamp": "2020-05-02 02:39:22 UTC"
}
User logout
{
  "resource": {
    "email_confirmed_at": "2019-11-24 14:29:30 -0800",
    "name": "John Smith",
    "id": 4848,
    "type": "User",
    "email": "john.smith@workato.com"
  },
  "details": {
    "request": {
      "ip_address": "60.160.90.91",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.113 Safari/537.36"
    },
    "activity": "user_logout"
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "event": "user_logout",
  "user": {
    "name": "John Smith",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "timestamp": "2020-05-02 02:39:10 UTC"
}
Manifest updated
{
  "resource": {
    "name": "Document reading",
    "id": 911,
    "type": "ExportManifest"
  },
  "details": {
    "request": {
      "ip_address": "60.160.90.91",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.113 Safari/537.36"
    }
  },
  "team": {
    "name": "Workato eam",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "event": "manifest_updated",
  "user": {
    "name": "John Smith",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "timestamp": "2020-05-02 02:51:46 UTC"
}
Package exported
{
  "resource": {
    "file_name": "vision-ai-license-and-registration_john-smith.zip",
    "id": 1076,
    "type": "Package",
    "folder_id": 5223,
    "folder_path": "Home/Vision AI - License and Registration"
  },
  "team": {
    "name": "Workato Team",
    "id": 4805,
    "email": "john.smith@workato.com"
  },
  "event": "package_exported",
  "user": {
    "name": "John Smith",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "timestamp": "2020-05-02 02:52:17 UTC"
}
Package imported
{
  "resource": {
    "file_name": "griddynamics_demo.zip",
    "id": 1077,
    "type": "Package",
    "folder_id": 6593,
    "folder_path": "Home/HR"
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "event": "package_imported",
  "user": {
    "name": "John Smith",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "timestamp": "2020-05-02 02:53:33 UTC"
}
Recipe created
{
  "resource": {
    "name": "Candidate in Progress on JIRA will advance on GreenHouse",
    "id": 33167,
    "type": "Flow"
  },
  "team": {
    "name": "Workato team",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "event": "recipe_created",
  "user": {
    "name": "John Smith",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "timestamp": "2020-05-02 02:53:32 UTC"
}
Recipe updated
{
  "resource": {
    "name": "Trigger on a specified interval will send request via HTTP",
    "id": 32896,
    "type": "Flow"
  },
  "details": {
    "request": {
      "ip_address": "60.160.90.91",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.113 Safari/537.36"
    }
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "event": "recipe_updated",
  "user": {
    "name": "john.smith",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "timestamp": "2020-05-04 18:26:28 UTC"
}
Recipe deleted
{
  "resource": {
    "parent_id": 32896,
    "name": "Send opportunity sync request via HTTP",
    "id": 33179,
    "type": "Flow"
  },
  "details": {
    "request": {
      "ip_address": "60.160.90.91",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.113 Safari/537.36"
    }
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "event": "recipe_deleted",
  "user": {
    "name": "John Smith",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "timestamp": "2020-05-04 18:39:15 UTC"
}
Recipe cloned
{
  "resource": {
    "name": "Trigger on a specified interval will send request via HTTP",
    "id": 32896,
    "type": "Flow"
  },
  "details": {
    "request": {
      "ip_address": "60.160.90.91",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.113 Safari/537.36"
    }
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "event": "recipe_copied",
  "user": {
    "name": "John Smith",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "timestamp": "2020-05-04 18:32:43 UTC"
}
Recipe renamed
{
  "resource_changes": {
    "name": {
      "old_value": "Send request via HTTP"
    }
  },
  "resource": {
    "parent_id": 32896,
    "name": "Send opportunity sync request via HTTP",
    "id": 33179,
    "type": "Flow"
  },
  "details": {
    "request": {
      "ip_address": "60.160.90.91",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.113 Safari/537.36"
    }
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "event": "recipe_renamed",
  "user": {
    "name": "John Smith",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "timestamp": "2020-05-04 18:33:23 UTC"
}
Recipe started
{
  "resource": {
    "parent_id": 32896,
    "name": "Send opportunity sync request via HTTP",
    "id": 33179,
    "type": "Flow"
  },
  "details": {
    "request": {
      "ip_address": "67.164.97.88",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.113 Safari/537.36"
    },
    "run_once": false
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "event": "recipe_started",
  "user": {
    "name": "John Smith",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "timestamp": "2020-05-04 18:38:46 UTC"
}
Recipe stopped
{
  "resource": {
    "parent_id": 32896,
    "name": "Send opportunity sync request via HTTP",
    "id": 33179,
    "type": "Flow"
  },
  "details": {
    "request": {
      "ip_address": "60.160.90.91",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.113 Safari/537.36"
    },
    "stop_reason": "user",
    "force": false,
    "error": false
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "event": "recipe_stopped",
  "user": {
    "name": "Johm Smith",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "timestamp": "2020-05-04 18:39:06 UTC"
}
Folder created
{
  "resource": {
    "path": "Home/RevOps Salesforce <> Netsuite",
    "name": "RevOps Salesforce <> Netsuite",
    "id": 6847,
    "type": "Folder"
  },
  "details": {
    "request": {
      "ip_address": "60.160.90.91",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.113 Safari/537.36"
    }
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "event": "folder_created",
  "user": {
    "name": "Johm Smith",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "timestamp": "2020-05-04 18:48:08 UTC"
}
Folder deleted
{
  "resource": {
    "path": "RevOps Salesforce <> Netsuite",
    "name": "RevOps Salesforce <> Netsuite",
    "id": 6847,
    "type": "Folder"
  },
  "details": {
    "request": {
      "ip_address": "60.160.90.91",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.113 Safari/537.36"
    }
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "event": "folder_deleted",
  "user": {
    "name": "Johm Smith",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "timestamp": "2020-05-04 18:50:20 UTC"
}
Team - Invited a team member
{
  "resource": {
    "role": "Admin",
    "name": "Alice Jackson",
    "id": 847,
    "type": "MemberInvitation",
    "email": "alice.jackson@workato.com"
  },
  "details": {
    "request": {
      "ip_address": "60.160.90.91",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.113 Safari/537.36"
    }
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "event": "team_invitation_created",
  "user": {
    "name": "Johm Smith",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "timestamp": "2020-05-04 18:53:59 UTC"
}
Team - Member accepted invite
{
  "resource": {
    "role": "Admin",
    "name": "Alice Jackson",
    "id": 847,
    "type": "MemberInvitation",
    "email": "alice.jackson@workato.com"
  },
  "details": {
    "request": {
      "ip_address": "60.160.90.91",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:75.0) Gecko/20100101 Firefox/75.0"
    }
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "event": "team_invitation_accept",
  "user": {
    "name": "Alice Jackson",
    "id": 6464,
    "email": "alice.jackson@workato.com"
  },
  "timestamp": "2020-05-04 20:05:02 UTC"
}
Team - Member deleted
{
  "resource": {
    "role": "Admin",
    "grant_type": "team",
    "member": {
      "email_confirmed_at": "2019-09-11 14:38:19 -0700",
      "name": "Nick Jefferies",
      "id": 4941,
      "type": "User",
      "email": "nick.jefferies@workato.com"
    },
    "id": 1483,
    "type": "ManagedUserGrant"
  },
  "details": {
    "request": {
      "ip_address": "60.160.90.91",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.113 Safari/537.36"
    }
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "event": "team_membership_deleted",
  "user": {
    "name": "John Smith",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "timestamp": "2020-05-04 18:53:16 UTC"
}
Team - Switched into a team
{
  "resource": {
    "email_confirmed_at": "2019-11-24 14:29:30 -0800",
    "name": "John Smith",
    "id": 4848,
    "type": "User",
    "email": "johm.smith@workato.com"
  },
  "details": {
    "request": {
      "ip_address": "60.160.90.91",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:75.0) Gecko/20100101 Firefox/75.0"
    },
    "activity": "switch_team"
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "event": "user_login",
  "user": {
    "name": "Alice Jackson",
    "id": 6464,
    "email": "alice.jackson@workato.com"
  },
  "timestamp": "2020-05-04 20:27:33 UTC"
}
Team - Switched out of a team
{
  "resource": {
    "email_confirmed_at": "2019-11-24 14:29:30 -0800",
    "name": "John Smith",
    "id": 4848,
    "type": "User",
    "email": "john.smith@workato.com"
  },
  "details": {
    "request": {
      "ip_address": "60.160.90.91",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:75.0) Gecko/20100101 Firefox/75.0"
    },
    "activity": "switch_team"
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "event": "user_logout",
  "user": {
    "name": "Alice Jackson",
    "id": 6464,
    "email": "alice.jackson@workato.com"
  },
  "timestamp": "2020-05-04 20:28:01 UTC"
}
Connection - Connected
{
  "resource": {
    "provider": "postgresql",
    "authorized": true,
    "name": "My PostgreSQL account",
    "id": 7145,
    "type": "SharedAccount"
  },
  "details": {
    "request": {
      "ip_address": "60.160.90.91",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.113 Safari/537.36"
    }
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "event": "connection_connected",
  "user": {
    "name": "Johm Smith",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "timestamp": "2020-05-04 20:56:35 UTC"
}
Connection - Disconnected
{
  "resource": {
    "provider": "postgresql",
    "authorized": false,
    "name": "My PostgreSQL account",
    "id": 7145,
    "type": "SharedAccount"
  },
  "details": {
    "request": {
      "ip_address": "60.160.90.91",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.113 Safari/537.36"
    }
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "event": "connection_disconnected",
  "user": {
    "name": "Johm Smith",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "timestamp": "2020-05-04 20:56:24 UTC"
}
Connection - Created
{
  "resource": {
    "provider": "asana",
    "authorized": false,
    "name": "My second Asana account",
    "id": 7174,
    "type": "SharedAccount"
  },
  "details": {
    "request": {
      "ip_address": "60.160.90.91",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.113 Safari/537.36"
    }
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "event": "connection_created",
  "user": {
    "name": "Johm Smith",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "timestamp": "2020-05-04 21:59:58 UTC"
}
Connection - Updated
{
  "resource": {
    "provider": "postgresql",
    "authorized": false,
    "name": "My PostgreSQL account",
    "id": 7145,
    "type": "SharedAccount"
  },
  "details": {
    "request": {
      "ip_address": "60.160.90.91",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.113 Safari/537.36"
    }
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "event": "connection_updated",
  "user": {
    "name": "Johm Smith",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "timestamp": "2020-05-04 20:56:32 UTC"
}
Connection - Deleted
{
  "resource": {
    "provider": "greenhouse_connector_4805_1566279565",
    "authorized": false,
    "name": "Carly's Greenhouse Account",
    "id": 6588,
    "type": "SharedAccount"
  },
  "details": {
    "request": {
      "ip_address": "60.160.90.91",
      "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.113 Safari/537.36"
    }
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "event": "connection_deleted",
  "user": {
    "name": "Johm Smith",
    "id": 4848,
    "email": "johm.smith@workato.com"
  },
  "timestamp": "2020-05-04 20:57:21 UTC"
}
Connector - Updated
{
  "resource": {
    "name": "Greenhouse",
    "id": 1884,
    "type": "Adapter"
  },
  "team": {
    "name": "Workato Team",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "event": "connector_updated",
  "user": {
    "name": "John Smith",
    "id": 4848,
    "email": "john.smith@workato.com"
  },
  "timestamp": "2020-05-02 02:53:28 UTC"
}
Project - Deployments
{
  "user_name": "Workato Root",
  "user_environment_id_d": 123456,
  "user_environment_type": "dev",
  "user_account_id": 123456,
  "user_account_name": "Workato Root",
  "team_id_d": 123456,
  "team_email": "acme@example.com",
  "team_name": "ACME",
  "team_environment_id": 123456,
  "team_environment_type": "dev",
  "team_account_id": 123456,
  "team_account_name": "Workato Root",
  "resource_type": "Deployment",
  "resource_id_d": 123456,
  "resource_project_name": "HR projects",
  "resource_target_environment": "Production",
  "resource_performed_by": "Workato Root",
  "timestamp": "2023-01-21 23:31:38 UTC"
}