System Log events for the Citrix Cloud platform
This article describes the event data that System Log captures for the Citrix Cloud platform. For more information about System Log event data, see System Log Events Reference.
To learn more about System Log, see System Log.
Azure AD tenants
| Event Message | Event Type | Target Type | Actor Type | Actor ID | Current object fields recorded before event | Updated object fields recorded after event |
|---|---|---|---|---|---|---|
| Azure AD tenant connected | platform/identityprovider/azuread/connect | service | administrator | Yes | No | |
| Azure AD tenant disconnected | platform/identityprovider/azuread/disconnect | service | administrator | Yes | No | |
| Azure AD auth domain name changed | platform/identityprovider/azuread/authdomain/updatename | cws | CustomerID | No | No | |
| Azure AD auth domain name change failed | platform/identityprovider/azuread/authdomain/updatenamefailed | cws | CustomerID | No | No |
Citrix Cloud administrators and secure clients
| Event Message | Event Type | Target Type | Actor Type | Current object fields recorded before event | Updated object fields recorded after event |
|---|---|---|---|---|---|
| Administrator created | platform/administrator/create | administrator | system | No | Yes |
| Administrator invitation sent | platform/administrator/invite | administrator | administrator | No | Yes |
| Administrator roles or permissions updated | platform/administrator/update | administrator | administrator | Yes | Yes |
| Administrator deleted | platform/administrator/delete | administrator | administrator | No | Yes |
| Secure client created | platform/clientadministrator/create | service | system | No | Yes |
| Secure client deleted | platform/clientadministrator/delete | service | administrator | Yes | No |
| Administrator Group created | platform/administratorgroup/create | administratorgroup | No | Yes | |
| Administrator Group roles or permissions updated | platform/administratorgroup/update | administratorgroup | Yes | Yes | |
| Administrator Group deleted | platform/administratorgroup/delete | administratorgroup | administrator | Yes | No |
Device reset for Active Directory plus token
| Event Message | Event Type | Target Type | Actor Type | Current object fields recorded before event | Updated object fields recorded after event |
|---|---|---|---|---|---|
| Subscriber device token reset completed | platform/authenticationdevice/delete | subscriber | administrator | No | Yes |
Domain management
| Event Message | Event Type | Target Type | Actor Type | Current object fields recorded before event | Updated object fields recorded after event |
|---|---|---|---|---|---|
| Domain removed | platform/domain/remove | service | administrator | No | No |
Network locations
| Event Message | Event Type | Target ID | Actor ID | Current object fields recorded before event | Updated object fields recorded after event |
|---|---|---|---|---|---|
| Network location created | sdwan/networklocation/create | The ID of the network location that was created | The name of the administrator who added the network location | No | Yes |
| Network location updated | sdwan/networklocation/edit | The ID of the network location that was modified | The name of the administrator who modified the network location | Yes | Yes |
| Network location deleted | sdwan/networklocation/delete | The ID of the network location that was deleted | The name of the administrator who deleted the network location | Yes | No |
Resource locations
| Event Message | Event Type | Target ID | Actor ID | Current object fields recorded before event | Updated object fields recorded after event |
|---|---|---|---|---|---|
| Resource Location created | platform/resourcelocation/create | The name of the resource location that was created | The name of the administrator who created the resource location | Yes | Yes |
| Resource Location updated | platform/resourcelocation/update | The name of the resource location that was modified | The name of the administrator who modified the resource location | Yes | Yes |
| Resource Location deleted | platform/resourcelocation/delete | The name of the resource location that was deleted | The name of the administrator who deleted the resource location | Yes | Yes |
System Log events for the Citrix Cloud platform
Copied!
Failed!