Documentation Index Fetch the complete documentation index at: https://zite.com/llms.txt
Use this file to discover all available pages before exploring further.
This page lists every event type captured by Zite audit logs. Each event includes a timestamp , actor , outcome , and an event-specific payload with additional details.
Events marked with a shield icon are considered security-critical — actions that could affect account security or data integrity.
Database tables
Event Description db.table.createA new table was created in a database. db.table.renameA table was renamed. Payload includes the old and new names. db.table.updateA table’s settings were updated. Payload includes the full set of changes. db.table.reorderTables were reordered within a database. db.table.deleteA table was soft-deleted. db.table.restoreA previously deleted table was restored. db.table.duplicateA table was duplicated. Payload includes the source table ID.
Database fields
Event Description db.field.createA new field (column) was added to a table. Payload includes the field type. db.field.renameA field was renamed. Payload includes the old and new names. db.field.typeChangeA field’s type was converted (e.g., text → number). Payload includes the old and new types. db.field.updateA field’s settings were updated. Payload includes the full set of changes. db.field.reorderFields were reordered within a table. db.field.deleteA field was soft-deleted. db.field.restoreA previously deleted field was restored. db.field.undoTypeConversionA field type conversion was undone, restoring the original type.
Database views
Event Description db.view.createA new view was created in a table. db.view.updateA view’s configuration was updated. db.view.deleteA view was deleted. db.view.updateSettingsA view’s display settings (column widths, sort order, etc.) were changed.
Databases
Event Description db.base.createA new database was created. db.base.deleteA database and all its data were deleted. db.base.copyA database was duplicated. Payload includes the source database ID. db.base.importDatabase metadata was imported. db.base.migrateToIsolatedA database was migrated to isolated architecture. db.organization.deleteAllBasesAll databases in the organization were deleted.
Imports
Event Description import.airtableAn Airtable base was imported. Payload includes the Airtable base ID. import.csvA CSV file was imported. Payload includes the table and record counts.
Authentication
Event Description auth.login.successUser logged in successfully. Payload includes the login method (password, google, microsoft, sso). auth.login.failureLogin attempt failed. Payload includes the attempted email and failure reason. auth.logoutUser logged out. auth.impersonateA super-user logged in as another user. Payload includes the target user.
Passwords & MFA
Event Description auth.password.resetRequestA password reset email was requested. auth.password.resetCompleteA password was successfully reset via the reset link. auth.password.selfChangeA user changed their own password from settings. auth.password.adminChangeAn admin changed another user’s password. auth.mfa.enableMFA was enabled for a user account. auth.mfa.disableMFA was disabled for a user account.
Sessions & SSO
Event Description auth.sso.deprovisionA user was deprovisioned via SSO. auth.session.deleteAllAll sessions were invalidated for a user.
API keys
Event Description api.key.enableAPI access was enabled for the organization. api.key.regenerateThe organization’s API key was regenerated.
Developer apps (OAuth)
Event Description developer.app.createA new OAuth application was created. developer.app.deleteAn OAuth application was deleted. developer.app.resetSecretAn OAuth application’s client secret was regenerated.
User management
Event Description user.inviteA user was invited to the organization. Payload includes the email and role. user.invite.resendAn invitation email was resent. user.invite.revokeA pending invitation was revoked. user.disableA user account was disabled. user.roleChangeA user’s role was changed. Payload includes the new role. user.accessChangeA user’s workspace or resource access was updated.
Organization
Event Description org.requireMfaThe organization-wide MFA requirement was toggled. org.changeNameThe organization’s name was changed. org.deleteThe organization was deleted.
Groups
Event Description group.createA new user group was created. group.renameA group was renamed. Payload includes the old and new names. group.deleteA group was deleted. group.membersChangeMembers were added or removed from a group. group.accessChangeA group’s workspace or resource access was updated.
Event payload
Every event includes a JSON payload in the detail view with event-specific data. Common payload fields include:
Field Description target.typeThe type of resource affected (e.g., table, field, user) target.idThe ID of the affected resource target.nameThe display name of the affected resource at the time of the event basePublicIdThe database ID (for database events) emailThe email address involved (for auth and invite events) from / toThe old and new values (for rename and role change events) fieldTypeThe field type (for field creation events) countThe number of items affected (for bulk operations) changesThe full set of changes applied (for update events)