Chat Audit Activity Events

This document lists the events and parameters for various types of Chat Audit activity events. You can retrieve these events by calling Activities.list() with applicationName=chat.

User Action

Events of this type are returned with type=user_action.

Add Room Member

Event details

Event name add_room_member

Parameters

`actor`	`string` Actor.
`actor_type`	`string` Description of the actor type. Possible values: `ADMIN` Actor type is an admin. `NON_ADMIN` Actor type is a non-admin.
`room_id`	`string` Room Id.
`target_users`	`string` Target Users.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/chat?eventName=add_room_member&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} added a room member.

Attachment Download

Event details

Event name attachment_download

Parameters

`actor`	`string` Actor.
`attachment_hash`	`string` Attachment Hash.
`attachment_name`	`string` Attachment Name.
`attachment_url`	`string` Attachment Url.
`room_id`	`string` Room Id.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/chat?eventName=attachment_download&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} downloaded an attachment.

Attachment Upload

Event details

Event name attachment_upload

Parameters

`actor`	`string` Actor.
`attachment_hash`	`string` Attachment Hash.
`attachment_name`	`string` Attachment Name.
`dlp_scan_status`	`string` Description of the status of a data loss prevention (DLP) scan of a message or attachment. Possible values: `DLP_NOT_APPLICABLE` Data loss prevention did not scan the message or attachment because it is not applicable. `DLP_PARTIALLY_SCANNED` Data loss prevention partially scanned the message or attachment but some rules failed. `DLP_SCAN_FAILED` Data loss prevention failed to scan the message or attachment. `DLP_SCANNED` Data loss prevention successfully scanned the message or attachment. `DLP_SCANNED_AND_WARNED` Data loss prevention successfully scanned the message or attachment and warned the sender of a potential content violation.
`room_id`	`string` Room Id.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/chat?eventName=attachment_upload&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} uploaded an attachment.

Block Room

Event details

Event name block_room

Parameters

actor

string

Actor.

room_id

string

Room Id.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/chat?eventName=block_room&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} blocked a room.

Block User

Event details

Event name block_user

Parameters

actor

string

Actor.

room_id

string

Room Id.

target_users

string

Target Users.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/chat?eventName=block_user&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} blocked a user.

Direct Message Started

Event details

Event name direct_message_started

Parameters

actor

string

Actor.

dlp_scan_status

string

Description of the status of a data loss prevention (DLP) scan of a message or attachment. Possible values:

DLP_NOT_APPLICABLE
Data loss prevention did not scan the message or attachment because it is not applicable.
DLP_PARTIALLY_SCANNED
Data loss prevention partially scanned the message or attachment but some rules failed.
DLP_SCAN_FAILED
Data loss prevention failed to scan the message or attachment.
DLP_SCANNED
Data loss prevention successfully scanned the message or attachment.
DLP_SCANNED_AND_WARNED
Data loss prevention successfully scanned the message or attachment and warned the sender of a potential content violation.

room_id

string

Room Id.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/chat?eventName=direct_message_started&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} started a direct message.

Emoji Created

Event details

Event name emoji_created

Parameters

actor

string

Actor.

emoji_shortcode

string

Emoji Shortcode.

filename

string

Filename.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/chat?eventName=emoji_created&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} created an emoji.

Emoji Deleted

Event details

Event name emoji_deleted

Parameters

actor

string

Actor.

emoji_shortcode

string

Emoji Shortcode.

filename

string

Filename.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/chat?eventName=emoji_deleted&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} deleted an emoji.

Invite Accept

Event details

Event name invite_accept

Parameters

actor

string

Actor.

room_id

string

Room Id.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/chat?eventName=invite_accept&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} accepted an invitation to join a room.

Invite Decline

Event details

Event name invite_decline

Parameters

actor

string

Actor.

room_id

string

Room Id.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/chat?eventName=invite_decline&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} declined an invitation to join a room.

Invite Send

Event details

Event name invite_send

Parameters

actor

string

Actor.

room_id

string

Room Id.

target_users

string

Target Users.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/chat?eventName=invite_send&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} sent an invite.

Message Edited

Event details

Event name message_edited

Parameters

`actor`	`string` Actor.
`attachment_hash`	`string` Attachment Hash.
`attachment_name`	`string` Attachment Name.
`dlp_scan_status`	`string` Description of the status of a data loss prevention (DLP) scan of a message or attachment. Possible values: `DLP_NOT_APPLICABLE` Data loss prevention did not scan the message or attachment because it is not applicable. `DLP_PARTIALLY_SCANNED` Data loss prevention partially scanned the message or attachment but some rules failed. `DLP_SCAN_FAILED` Data loss prevention failed to scan the message or attachment. `DLP_SCANNED` Data loss prevention successfully scanned the message or attachment. `DLP_SCANNED_AND_WARNED` Data loss prevention successfully scanned the message or attachment and warned the sender of a potential content violation.
`message_id`	`string` Message Id.
`room_id`	`string` Room Id.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/chat?eventName=message_edited&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} edited a message.

Message Posted

Event details

Event name message_posted

Parameters

`actor`	`string` Actor.
`attachment_hash`	`string` Attachment Hash.
`attachment_name`	`string` Attachment Name.
`dlp_scan_status`	`string` Description of the status of a data loss prevention (DLP) scan of a message or attachment. Possible values: `DLP_NOT_APPLICABLE` Data loss prevention did not scan the message or attachment because it is not applicable. `DLP_PARTIALLY_SCANNED` Data loss prevention partially scanned the message or attachment but some rules failed. `DLP_SCAN_FAILED` Data loss prevention failed to scan the message or attachment. `DLP_SCANNED` Data loss prevention successfully scanned the message or attachment. `DLP_SCANNED_AND_WARNED` Data loss prevention successfully scanned the message or attachment and warned the sender of a potential content violation.
`message_id`	`string` Message Id.
`room_id`	`string` Room Id.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/chat?eventName=message_posted&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} posted a message.

Message Reported

Event details

Event name message_reported

Parameters

`actor`	`string` Actor.
`message_id`	`string` Message Id.
`report_type`	`string` Description of the report type for a report made in a Space. Possible values: `CONFIDENTIAL_INFORMATION` Report type for a message reported in a space is confidential information. `DISCRIMINATION` Report type for a message reported in a space is discrimination. `EXPLICIT_CONTENT` Report type for a message reported in a space is explicit content. `HARASSMENT` Report type for a message reported in a space is harassment. `OTHER` Report type for a message reported in a space is other. `SENSITIVE_INFORMATION` `SPAM` Report type for a message reported in a space is spam. `VIOLATION_UNSPECIFIED`
`room_id`	`string` Room Id.
`target_users`	`string` Target Users.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/chat?eventName=message_reported&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} reported a message.

Remove Room Member

Event details

Event name remove_room_member

Parameters

`actor`	`string` Actor.
`actor_type`	`string` Description of the actor type. Possible values: `ADMIN` Actor type is an admin. `NON_ADMIN` Actor type is a non-admin.
`room_id`	`string` Room Id.
`target_users`	`string` Target Users.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/chat?eventName=remove_room_member&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} removed a room member.

Room Created

Event details

Event name room_created

Parameters

actor

string

Actor.

room_id

string

Room Id.

Sample request

GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/chat?eventName=room_created&maxResults=10&access_token=YOUR_ACCESS_TOKEN

Admin Console message format

{actor} created a room.