# BlueConic Audit Events API **Canonical:** https://apis.io/apis/blueconic/blueconic-audit-events-api/ **Provider:** BlueConic — https://apis.io/providers/blueconic/ **Base URL:** https://{tenantname}.blueconic.net/rest/v2 **Documentation:** https://support.blueconic.com/en/articles/248008-overview-blueconic-rest-api BlueConic Audit Events API is one of 28 APIs that [BlueConic](https://apis.io/providers/blueconic/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. Tagged areas include Audit Events. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, a getting-started guide, and authentication docs. The Audit Event API allows users to connect BlueConic to a SIEM system. We recommend using this API to periodically receive security-related activities based on a rolling window. The API has a 30-day retention period. The API logs the following audit events: | Object | Events | |:---------------------------|:-----------------------------------------------------------------------------------------------| | BlueConic hostname | Create, Update, Delete | | BlueConic Support Access | Update (for each change) | | Channel | Create, Update, Delete | | Clean up rule | Create, Update, Delete | | Connection | Create, Update, Delete, Manual run, Scheduled run | | Dashboard | Create, Update, Delete | | Dialogue | Create, Update, Delete | | Domain Group | Create, Update, Delete | | Gen AI Setting | Update (for each change) | | Group | Read, Update, Delete | | Group type | Create, Update, Delete | | Ip range | Create, Update, Delete | | Language | Create, Update, Delete | | Lifecycle | Create, Update, Delete | | Merge rule | Create, Update, Delete | | Models | Create, Update, Delete | | Notebook | Create, Update, Delete, Manual run, Scheduled run, Editor run | | OAuth application | Create, Update, Delete | | OAuth token | Create, Update, Delete | | Objective | Create, Update, Delete | | Plugin | Create, Update, Delete | | Privacy setting | Update (for each change) | | Profile | Read, Update, Delete | | Profile property | Create, Update, Delete | | Role | Create, Update, Delete | | Segment | Create, Update, Delete | | Single Sign On Setting | Update (for each change) | | Inactvity Setting | Update (for each change) | | Supported Legislation Zone | Create, Delete, Update | | Timeline Event Rollup | Create, Update, Delete | | Timeline Event Type | Create, Update, Delete | | Tracker | Create, Update, Delete | | User | Login, Login failed, Logout, Create, Update, Delete, Password reset requested, Password change | Only Profile and Group viewed, updated, or deleted by a user from the Profile and Groups tab are logged. The following events are not considered as human actions, and therefore not covered in the Platform Audit Event API: - Connections that import or export profiles. - Profile and group creation (Profiles can only be created by a visitor or an import connection). **Event data** The following event data is available: | Field | Description | Example values | | :--- | :--- |:-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| |date|Datetime in UTC when the event occurred. The date is in the https://www.ietf.org/rfc/rfc3339.txt format.| 2025-04-15T11:24:01.183Z | |username|(BlueConic) Identifier (email address) of the user who did the action.

Value is empty for failed login attempts.| test@blueconic.com | |objectType|Object of the action.| | |objectId|| | |objectName|

Human readable name of the object.

For Profiles, the name is determined by the first value that is not empty:

  1. fullname
  2. email
  3. BlueConic ID (UUID)

For Users, the name is determined by the first value that is not empty:

  1. fullname
  2. email

For groups, the name is the group id.

For PRIVACY_SETTING and SINGLE_SIGN_ON_SETTING, the objectName is the name(s) of the changed setting. E.g. Status, Identity_Provider_Issuer_URL_Entity_ID.

For BLUECONIC_SUPPORT_ACCESS_SETTING the objectName contains the new settings.

|