Chat Audit Activity Events

This document lists the events and parameters for various types of Chat Audit activity events. You can retrieve these events by calling Activities.list() with applicationName=chat.

User Action

Events of this type are returned with type=user_action.

Add Room Member

Event details
Event name	add_room_member
Parameters	actor string Actor. actor_type string Description of the actor type. Possible values: ADMIN Actor type is an admin. NON_ADMIN Actor type is a non-admin. room_id string Room Id. target_users string Target Users.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/chat?eventName=add_room_member&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} added a room member.

Attachment Download

Event details
Event name	attachment_download
Parameters	actor string Actor. attachment_hash string Attachment Hash. attachment_name string Attachment Name. attachment_url string Attachment Url. room_id string Room Id.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/chat?eventName=attachment_download&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} downloaded an attachment.

Attachment Upload

Event details
Event name	attachment_upload
Parameters	actor string Actor. attachment_hash string Attachment Hash. attachment_name string Attachment Name. dlp_scan_status string Description of the status of a data loss prevention (DLP) scan of a message or attachment. Possible values: DLP_NOT_APPLICABLE Data loss prevention did not scan the message or attachment because it is not applicable. DLP_PARTIALLY_SCANNED Data loss prevention partially scanned the message or attachment but some rules failed. DLP_SCAN_FAILED Data loss prevention failed to scan the message or attachment. DLP_SCANNED Data loss prevention successfully scanned the message or attachment. DLP_SCANNED_AND_WARNED Data loss prevention successfully scanned the message or attachment and warned the sender of a potential content violation. room_id string Room Id.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/chat?eventName=attachment_upload&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} uploaded an attachment.

Block Room

Event details
Event name	block_room
Parameters	actor string Actor. room_id string Room Id.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/chat?eventName=block_room&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} blocked a room.

Block User

Event details
Event name	block_user
Parameters	actor string Actor. room_id string Room Id. target_users string Target Users.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/chat?eventName=block_user&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} blocked a user.

Direct Message Started

Event details
Event name	direct_message_started
Parameters	actor string Actor. dlp_scan_status string Description of the status of a data loss prevention (DLP) scan of a message or attachment. Possible values: DLP_NOT_APPLICABLE Data loss prevention did not scan the message or attachment because it is not applicable. DLP_PARTIALLY_SCANNED Data loss prevention partially scanned the message or attachment but some rules failed. DLP_SCAN_FAILED Data loss prevention failed to scan the message or attachment. DLP_SCANNED Data loss prevention successfully scanned the message or attachment. DLP_SCANNED_AND_WARNED Data loss prevention successfully scanned the message or attachment and warned the sender of a potential content violation. room_id string Room Id.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/chat?eventName=direct_message_started&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} started a direct message.

Emoji Created

Event details
Event name	emoji_created
Parameters	actor string Actor. emoji_shortcode string Emoji Shortcode. filename string Filename.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/chat?eventName=emoji_created&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} created an emoji.

Emoji Deleted

Event details
Event name	emoji_deleted
Parameters	actor string Actor. emoji_shortcode string Emoji Shortcode. filename string Filename.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/chat?eventName=emoji_deleted&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} deleted an emoji.

Invite Accept

Event details
Event name	invite_accept
Parameters	actor string Actor. room_id string Room Id.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/chat?eventName=invite_accept&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} accepted an invitation to join a room.

Invite Decline

Event details
Event name	invite_decline
Parameters	actor string Actor. room_id string Room Id.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/chat?eventName=invite_decline&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} declined an invitation to join a room.

Invite Send

Event details
Event name	invite_send
Parameters	actor string Actor. room_id string Room Id. target_users string Target Users.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/chat?eventName=invite_send&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} sent an invite.

Message Edited

Event details
Event name	message_edited
Parameters	actor string Actor. attachment_hash string Attachment Hash. attachment_name string Attachment Name. dlp_scan_status string Description of the status of a data loss prevention (DLP) scan of a message or attachment. Possible values: DLP_NOT_APPLICABLE Data loss prevention did not scan the message or attachment because it is not applicable. DLP_PARTIALLY_SCANNED Data loss prevention partially scanned the message or attachment but some rules failed. DLP_SCAN_FAILED Data loss prevention failed to scan the message or attachment. DLP_SCANNED Data loss prevention successfully scanned the message or attachment. DLP_SCANNED_AND_WARNED Data loss prevention successfully scanned the message or attachment and warned the sender of a potential content violation. message_id string Message Id. room_id string Room Id.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/chat?eventName=message_edited&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} edited a message.

Message Posted

Event details
Event name	message_posted
Parameters	actor string Actor. attachment_hash string Attachment Hash. attachment_name string Attachment Name. dlp_scan_status string Description of the status of a data loss prevention (DLP) scan of a message or attachment. Possible values: DLP_NOT_APPLICABLE Data loss prevention did not scan the message or attachment because it is not applicable. DLP_PARTIALLY_SCANNED Data loss prevention partially scanned the message or attachment but some rules failed. DLP_SCAN_FAILED Data loss prevention failed to scan the message or attachment. DLP_SCANNED Data loss prevention successfully scanned the message or attachment. DLP_SCANNED_AND_WARNED Data loss prevention successfully scanned the message or attachment and warned the sender of a potential content violation. message_id string Message Id. room_id string Room Id.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/chat?eventName=message_posted&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} posted a message.

Message Reported

Event details
Event name	message_reported
Parameters	actor string Actor. message_id string Message Id. report_type string Description of the report type for a report made in a Space. Possible values: CONFIDENTIAL_INFORMATION Report type for a message reported in a space is confidential information. DISCRIMINATION Report type for a message reported in a space is discrimination. EXPLICIT_CONTENT Report type for a message reported in a space is explicit content. HARASSMENT Report type for a message reported in a space is harassment. OTHER Report type for a message reported in a space is other. SENSITIVE_INFORMATION SPAM Report type for a message reported in a space is spam. VIOLATION_UNSPECIFIED room_id string Room Id. target_users string Target Users.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/chat?eventName=message_reported&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} reported a message.

Remove Room Member

Event details
Event name	remove_room_member
Parameters	actor string Actor. actor_type string Description of the actor type. Possible values: ADMIN Actor type is an admin. NON_ADMIN Actor type is a non-admin. room_id string Room Id. target_users string Target Users.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/chat?eventName=remove_room_member&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} removed a room member.

Room Created

Event details
Event name	room_created
Parameters	actor string Actor. room_id string Room Id.
Sample request	GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/chat?eventName=room_created&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format	{actor} created a room.