SlackApp
| Action | Sample | Rule |
|---|---|---|
| Enable Slack App | N | N |
| Disable Slack App | N | N |
| Update Slack App | N | N |
slackapp-create: Enable Slack App
#Description
A Slack app was connected to the account.
Fields #
| Name | Description |
|---|---|
uuid | Unique event identifier. |
timestamp | Time the event occurred. |
actor_uuid | Actor identifier. |
actor_details.uuid | Actor identifier. |
actor_details.name | Actor's full name. |
actor_details.email | Actor's email address. |
actor_type | Type of actor. |
actor_account_uuid | 1Password account identifier of the actor. |
account_uuid | 1Password account identifier. |
action | Action performed. |
object_type | Type of affected object. |
object_uuid | Identifier of the affected object. |
object_details.uuid | Affected user identifier, when applicable. |
object_details.name | Affected user's full name, when applicable. |
object_details.email | Affected user's email address, when applicable. |
aux_id | Numeric identifier for related event data. |
aux_uuid | Identifier for related event data. |
aux_details.uuid | Related user identifier, when applicable. |
aux_details.name | Related user's full name, when applicable. |
aux_details.email | Related user's email address, when applicable. |
aux_info | Additional event information. |
session.uuid | Session identifier. |
session.login_time | Time the session started. |
session.device_uuid | Identifier of the session device. |
session.ip | IP address used for the session. |
location.country | Client country inferred from IP address. |
location.region | Client region inferred from IP address. |
location.city | Client city inferred from IP address. |
location.longitude | Client longitude inferred from IP address. |
location.latitude | Client latitude inferred from IP address. |
slackapp-delete: Disable Slack App
#Description
A Slack app was removed from the account.
Fields #
| Name | Description |
|---|---|
uuid | Unique event identifier. |
timestamp | Time the event occurred. |
actor_uuid | Actor identifier. |
actor_details.uuid | Actor identifier. |
actor_details.name | Actor's full name. |
actor_details.email | Actor's email address. |
actor_type | Type of actor. |
actor_account_uuid | 1Password account identifier of the actor. |
account_uuid | 1Password account identifier. |
action | Action performed. |
object_type | Type of affected object. |
object_uuid | Identifier of the affected object. |
object_details.uuid | Affected user identifier, when applicable. |
object_details.name | Affected user's full name, when applicable. |
object_details.email | Affected user's email address, when applicable. |
aux_id | Numeric identifier for related event data. |
aux_uuid | Identifier for related event data. |
aux_details.uuid | Related user identifier, when applicable. |
aux_details.name | Related user's full name, when applicable. |
aux_details.email | Related user's email address, when applicable. |
aux_info | Additional event information. |
session.uuid | Session identifier. |
session.login_time | Time the session started. |
session.device_uuid | Identifier of the session device. |
session.ip | IP address used for the session. |
location.country | Client country inferred from IP address. |
location.region | Client region inferred from IP address. |
location.city | Client city inferred from IP address. |
location.longitude | Client longitude inferred from IP address. |
location.latitude | Client latitude inferred from IP address. |
slackapp-update: Update Slack App
#Description
A connected Slack app was updated.
Fields #
| Name | Description |
|---|---|
uuid | Unique event identifier. |
timestamp | Time the event occurred. |
actor_uuid | Actor identifier. |
actor_details.uuid | Actor identifier. |
actor_details.name | Actor's full name. |
actor_details.email | Actor's email address. |
actor_type | Type of actor. |
actor_account_uuid | 1Password account identifier of the actor. |
account_uuid | 1Password account identifier. |
action | Action performed. |
object_type | Type of affected object. |
object_uuid | Identifier of the affected object. |
object_details.uuid | Affected user identifier, when applicable. |
object_details.name | Affected user's full name, when applicable. |
object_details.email | Affected user's email address, when applicable. |
aux_id | Numeric identifier for related event data. |
aux_uuid | Identifier for related event data. |
aux_details.uuid | Related user identifier, when applicable. |
aux_details.name | Related user's full name, when applicable. |
aux_details.email | Related user's email address, when applicable. |
aux_info | Additional event information. |
session.uuid | Session identifier. |
session.login_time | Time the session started. |
session.device_uuid | Identifier of the session device. |
session.ip | IP address used for the session. |
location.country | Client country inferred from IP address. |
location.region | Client region inferred from IP address. |
location.city | Client city inferred from IP address. |
location.longitude | Client longitude inferred from IP address. |
location.latitude | Client latitude inferred from IP address. |
any: Slack app (catch-all)
#Scope grouping: This repository-authored catalog entry represents a broad attribution scope, not a distinct emitted event or operation. Any sample below is a representative record from that scope; attached rules, if any, are listed separately.
Description
Scope-level aggregate for rules that match any slack app event. Not a distinct 1Password Events API record.
Fields #
| Name | Description |
|---|---|
uuid | Unique event identifier. |
timestamp | Time the event occurred. |
actor_uuid | Actor identifier. |
actor_details.uuid | Actor identifier. |
actor_details.name | Actor's full name. |
actor_details.email | Actor's email address. |
actor_type | Type of actor. |
actor_account_uuid | 1Password account identifier of the actor. |
account_uuid | 1Password account identifier. |
action | Action performed. |
object_type | Type of affected object. |
object_uuid | Identifier of the affected object. |
object_details.uuid | Affected user identifier, when applicable. |
object_details.name | Affected user's full name, when applicable. |
object_details.email | Affected user's email address, when applicable. |
aux_id | Numeric identifier for related event data. |
aux_uuid | Identifier for related event data. |
aux_details.uuid | Related user identifier, when applicable. |
aux_details.name | Related user's full name, when applicable. |
aux_details.email | Related user's email address, when applicable. |
aux_info | Additional event information. |
session.uuid | Session identifier. |
session.login_time | Time the session started. |
session.device_uuid | Identifier of the session device. |
session.ip | IP address used for the session. |
location.country | Client country inferred from IP address. |
location.region | Client region inferred from IP address. |
location.city | Client city inferred from IP address. |
location.longitude | Client longitude inferred from IP address. |
location.latitude | Client latitude inferred from IP address. |