Billing
| action | Description | Sample | Rule |
|---|---|---|---|
| billing. | A billing budget was created for a business or organization. Includes details about the budget limit, alerting preferences, and recipients. | N | N |
| billing. | A billing budget was deleted for a business or organization. Includes details about the removed budget and any alerting settings. | N | N |
| billing. | A billing budget was updated for a business or organization. Includes details about the updated limit and alerting settings. | Y | N |
| billing. | The way the account pays for GitHub was changed. | N | N |
| billing. | The billing email address changed. | N | N |
| billing. | A cost center was created for a business or organization. | N | N |
| billing. | A cost center was deleted from a business or organization. | N | N |
| billing. | A resource was added to a cost center for a business or organization. | N | N |
| billing. | A resource was removed from a cost center for a business or organization. | N | N |
| billing. | A cost center was updated for a business or organization. | N | N |
| billing. | N | N | |
| billing. | The premium request paid usage policy for your GitHub account was changed. | N | N |
| billing. | N | N | |
| billing. | N | N |
billing.budget_create
#Description
A billing budget was created for a business or organization. Includes details about the budget limit, alerting preferences, and recipients.
Documented on GitHub's enterprise audit log reference.
billing.budget_delete
#Description
A billing budget was deleted for a business or organization. Includes details about the removed budget and any alerting settings.
Documented on GitHub's enterprise audit log reference.
billing.budget_update
#Description
A billing budget was updated for a business or organization. Includes details about the updated limit and alerting settings.
Documented on GitHub's enterprise audit log reference.Example Audit Log Entry #
{
"@timestamp": 1779942737117,
"_document_id": "U1lOX0RPQ18wMDAwMDAwMDAwMDAwMg==",
"action": "billing.budget_update",
"actor": "user",
"actor_id": 9000002,
"alert_enabled": true,
"budget_limit_type": "PreventFurtherUsage",
"created_at": 1779942737117,
"customer_id": "12345678",
"old_target_amount": 4,
"operation_type": "modify",
"pricing_target_id": "actions",
"pricing_target_type": "ProductPricing",
"request_access_security_header": null,
"request_id": "C76B:12CCC0:29BE72C:2A2E793:6A17C54B",
"status": "success",
"target_amount": 10,
"target_id": "12345678",
"target_type": "CustomerResource",
"user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:151.0) Gecko/20100101 Firefox/151.0"
}
References #
billing.change_billing_type
#Description
The way the account pays for GitHub was changed.
Documented on GitHub's enterprise audit log reference.
billing.change_email
#Description
The billing email address changed.
Documented on GitHub's enterprise audit log reference.
billing.cost_center_create
#Description
A cost center was created for a business or organization.
Documented on GitHub's enterprise audit log reference.
billing.cost_center_delete
#Description
A cost center was deleted from a business or organization.
Documented on GitHub's enterprise audit log reference.
billing.cost_center_resource_added
#Description
A resource was added to a cost center for a business or organization.
Documented on GitHub's enterprise audit log reference.
billing.cost_center_resource_removed
#Description
A resource was removed from a cost center for a business or organization.
Documented on GitHub's enterprise audit log reference.
billing.cost_center_update
#Description
A cost center was updated for a business or organization.
Documented on GitHub's enterprise audit log reference.
billing.lock
#Documented on GitHub's enterprise audit log reference.
billing.overage_policy_updated
#Description
The premium request paid usage policy for your GitHub account was changed.
Documented on GitHub's enterprise audit log reference.
billing.unlock
#Documented on GitHub's enterprise audit log reference.
billing.update_bill_cycle_day
#Documented on GitHub's enterprise audit log reference.