Rules Audit Activity Events

This document lists the events and parameters for various types of Rules Audit activity events. These events can be retrieved by calling Activities.list() with applicationName=rules.

Rule Match Type

Audit event type which inidicates rule matching events. Events of this type are returned with type=rule_match_type.

Rule Match

Audit event indicating rule match event.

Event details
Event name rule_match
Parameters
actions

string

List of actions taken. Possible values:

  • AccountWipeMobileDevice
    Account wipe mobile device action name.
  • ApproveMobileDevice
    Approve mobile device action name.
  • BlockMobileDevice
    Block mobile device action name.
  • FlagDocument
    Action which indicates that the item was flagged.
  • SendNotification
    Action which indicates that notification was sent.
  • UnflagDocument
    Action which indicates that the item was unflagged.
application

string

Name of the application to which the flagged item belongs. Possible values:

  • drive
    Application name for Google Drive.
  • mobile
    Device Management app.
drive_team_drive_id

string

Team Drive Id to which the drive item belongs, if applicable.

has_content_match

boolean

Whether the resource has content which matches the criteria in the rule. Possible values:

  • false
    Boolean whose value is false.
  • true
    Boolean whose value is true.
matched_templates

string

List of content detector templates that matched.

mobile_device_type

string

Type of device on which rule was applied.

mobile_ios_vendor_id

string

iOS Vendor Id of device on which rule was applied, if applicable.

resource_id

string

Identifier of the resource which matched the rule.

resource_name

string

Name of the resource which matched the rule.

resource_owner_email

string

Email address of the owner of the resource.

rule_id

integer

Unique identifier for a rule. Rules are created by admins in G Suite.

rule_name

string

Name of the rule.

rule_update_time_usec

integer

Update time (microseconds since epoch) indicating the version of rule which is used.

Sample request
GET https://www.googleapis.com/admin/reports/v1/activity/users/all/applications/rules?eventName=rule_match&maxResults=10&access_token=YOUR_ACCESS_TOKEN
Admin Console message format
Rule matched

Send feedback about...

Reports API
Reports API
Need help? Visit our support page.