Meet Hardware GoogleWorkspace-meet_hardware

63 operations, identified by eventName in the audit log.

eventName	Description
any	Source-only rules that filter on applicationName 'meet_hardware' without specifying an eventName attribute here.
EVENT_ADD_ON_CAMERA_ATTACHED	Add-on camera connected
EVENT_ADD_ON_CAMERA_DETACHED	Add-on camera disconnected
EVENT_BOARDCAM_PRESENT_ENDED	Stopped presenting from a whiteboard camera
EVENT_BOARDCAM_PRESENT_STARTED	Started presenting from a whiteboard camera
EVENT_BROWSER_UPDATE	Device received browser update
EVENT_BYOD_ENTERED	Connected to a user device
EVENT_BYOD_EXITED	Disconnected from a user device
EVENT_CAMERA_ATTACHED	Camera connected
EVENT_CAMERA_DETACHED	Camera disconnected
EVENT_CLIENT_APP_UPDATE	Device received client application update
EVENT_DEFAULT_CAMERA_SET	Default camera configured
EVENT_DEFAULT_CAMERA_UNSET	Default camera removed
EVENT_DEFAULT_MICROPHONE_SET	Default microphone configured
EVENT_DEFAULT_MICROPHONE_UNSET	Default microphone removed
EVENT_DEFAULT_SPEAKER_SET	Default speaker configured
EVENT_DEFAULT_SPEAKER_UNSET	Default speaker removed
EVENT_DEFAULT_VIDEO_CAPTURE_CONTENT_CAMERA_SET	Default whiteboard camera set
EVENT_DEFAULT_VIDEO_CAPTURE_CONTENT_CAMERA_UNSET	Default whiteboard camera removed
EVENT_DEVICE_FOUND	Device connected to network
EVENT_DEVICE_MISSING	Device disconnected from network
EVENT_DISPLAY_ATTACHED	Display connected
EVENT_DISPLAY_DETACHED	Display disconnected
EVENT_FEEDBACK_FILED	User submitted feedback from the device
EVENT_FRONTEND_LOAD_AUTH_FAILURE_ERROR	Authentication error during application load
EVENT_FRONTEND_LOAD_BAD_STATUS_CODE_4XX_ERROR	Client-side error (4xx) during load
EVENT_FRONTEND_LOAD_BAD_STATUS_CODE_5XX_ERROR	Server-side error (5xx) during load
EVENT_FRONTEND_LOAD_FIRMWARE_UPDATE_ENDED	Firmware update completed
EVENT_FRONTEND_LOAD_NETWORK_INTERRUPTED_ERROR	Network connection interrupted
EVENT_FRONTEND_LOAD_SHIM_FRAMEWORK_ERROR	Shim framework error loading application
EVENT_FRONTEND_LOAD_SUCCESS	Frontend application loaded successfully
EVENT_FRONTEND_LOAD_TIMEOUT_ERROR	Application load timeout
EVENT_FRONTEND_LOAD_TRANSPORT_FAILURE_ERROR	Network handshake failure
EVENT_FRONTEND_LOAD_WAITING_FOR_NETWORK	Waiting for network connection
EVENT_FRONTEND_LOAD_WAIT_FOR_DEVICE_FIRMWARE_UPDATE	Loading firmware update
EVENT_FRONTEND_LOAD_WEBVIEW_ERROR	WebView exited or crashed
EVENT_FRONTEND_LOAD_WEBVIEW_EXIT_ERROR	WebView component exited unexpectedly
EVENT_HANDHELD_CONTROLLER_ATTACHED	Handheld controller connected
EVENT_HANDHELD_CONTROLLER_DETACHED	Handheld controller disconnected
EVENT_LOCAL_PRESENT_ENDED	Stopped presenting content from a connected user device
EVENT_LOCAL_PRESENT_STARTED	Started presenting content from a connected user device
EVENT_MEET_CALL_DISCONNECTED	Device left a Google Meet call
EVENT_MEET_CALL_JOINED	Device joined a Google Meet call
EVENT_MIC_ATTACHED	Microphone connected
EVENT_MIC_DETACHED	Microphone disconnected
EVENT_OS_UPDATE	Device received operating system update
EVENT_RESTART_APP	Meet application restarted
EVENT_RESTART_MACHINE	Device rebooted
EVENT_RESTART_UNKNOWN	Device restarted for unknown reason
EVENT_SLEEP_SCREEN_ENTERED	Entered power saving mode
EVENT_SLEEP_SCREEN_EXITED	Exited power saving mode
EVENT_SPEAKER_ATTACHED	Speaker connected
EVENT_SPEAKER_DETACHED	Speaker disconnected
EVENT_TEAMS_CALL_DISCONNECTED	Device left a Teams call
EVENT_TEAMS_CALL_JOINED	Device joined a Teams call
EVENT_TOUCH_CONTROLLER_ATTACHED	Touchscreen controller connected
EVENT_TOUCH_CONTROLLER_DETACHED	Touchscreen controller disconnected
EVENT_VIDEO_CAPTURE_CONTENT_CAMERA_ATTACHED	Whiteboard camera connected
EVENT_VIDEO_CAPTURE_CONTENT_CAMERA_DETACHED	Whiteboard camera disconnected
EVENT_WEBEX_CALL_DISCONNECTED	Device left a Webex call
EVENT_WEBEX_CALL_JOINED	Device joined a Webex call
EVENT_ZOOM_CALL_DISCONNECTED	Device left a Zoom call
EVENT_ZOOM_CALL_JOINED	Device joined a Zoom call

any: Meet Hardware (any event)

Application: GoogleWorkspace-meet_hardware

Description

Source-only rules that filter on applicationName 'meet_hardware' without specifying an eventName attribute here.

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Reports API: meet_hardware activity events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet_hardware
Reports API activities.list reference https://developers.google.com/workspace/admin/reports/reference/rest/v1/activities/list

EVENT_ADD_ON_CAMERA_ATTACHED: Event Add On Camera Attached

Application: GoogleWorkspace-meet_hardware

Description

Add-on camera connected

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_ADD_ON_CAMERA_DETACHED: Event Add On Camera Detached

Application: GoogleWorkspace-meet_hardware

Description

Add-on camera disconnected

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_BOARDCAM_PRESENT_ENDED: Event Boardcam Present Ended

Application: GoogleWorkspace-meet_hardware

Description

Stopped presenting from a whiteboard camera

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_BOARDCAM_PRESENT_STARTED: Event Boardcam Present Started

Application: GoogleWorkspace-meet_hardware

Description

Started presenting from a whiteboard camera

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_BROWSER_UPDATE: Event Browser Update

Application: GoogleWorkspace-meet_hardware

Description

Device received browser update

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_BYOD_ENTERED: Event Byod Entered

Application: GoogleWorkspace-meet_hardware

Description

Connected to a user device

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_BYOD_EXITED: Event Byod Exited

Application: GoogleWorkspace-meet_hardware

Description

Disconnected from a user device

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_CAMERA_ATTACHED: Event Camera Attached

Application: GoogleWorkspace-meet_hardware

Description

Camera connected

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_CAMERA_DETACHED: Event Camera Detached

Application: GoogleWorkspace-meet_hardware

Description

Camera disconnected

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_CLIENT_APP_UPDATE: Event Client App Update

Application: GoogleWorkspace-meet_hardware

Description

Device received client application update

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_DEFAULT_CAMERA_SET: Event Default Camera Set

Application: GoogleWorkspace-meet_hardware

Description

Default camera configured

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_DEFAULT_CAMERA_UNSET: Event Default Camera Unset

Application: GoogleWorkspace-meet_hardware

Description

Default camera removed

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_DEFAULT_MICROPHONE_SET: Event Default Microphone Set

Application: GoogleWorkspace-meet_hardware

Description

Default microphone configured

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_DEFAULT_MICROPHONE_UNSET: Event Default Microphone Unset

Application: GoogleWorkspace-meet_hardware

Description

Default microphone removed

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_DEFAULT_SPEAKER_SET: Event Default Speaker Set

Application: GoogleWorkspace-meet_hardware

Description

Default speaker configured

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_DEFAULT_SPEAKER_UNSET: Event Default Speaker Unset

Application: GoogleWorkspace-meet_hardware

Description

Default speaker removed

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_DEFAULT_VIDEO_CAPTURE_CONTENT_CAMERA_SET: Event Default Video Capture Content Camera Set

Application: GoogleWorkspace-meet_hardware

Description

Default whiteboard camera set

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_DEFAULT_VIDEO_CAPTURE_CONTENT_CAMERA_UNSET: Event Default Video Capture Content Camera Unset

Application: GoogleWorkspace-meet_hardware

Description

Default whiteboard camera removed

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_DEVICE_FOUND: Event Device Found

Application: GoogleWorkspace-meet_hardware

Description

Device connected to network

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_DEVICE_MISSING: Event Device Missing

Application: GoogleWorkspace-meet_hardware

Description

Device disconnected from network

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_DISPLAY_ATTACHED: Event Display Attached

Application: GoogleWorkspace-meet_hardware

Description

Display connected

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_DISPLAY_DETACHED: Event Display Detached

Application: GoogleWorkspace-meet_hardware

Description

Display disconnected

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_FEEDBACK_FILED: Event Feedback Filed

Application: GoogleWorkspace-meet_hardware

Description

User submitted feedback from the device

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_FRONTEND_LOAD_AUTH_FAILURE_ERROR: Event Frontend Load Auth Failure Error

Application: GoogleWorkspace-meet_hardware

Description

Authentication error during application load

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_FRONTEND_LOAD_BAD_STATUS_CODE_4XX_ERROR: Event Frontend Load Bad Status Code 4Xx Error

Application: GoogleWorkspace-meet_hardware

Description

Client-side error (4xx) during load

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_FRONTEND_LOAD_BAD_STATUS_CODE_5XX_ERROR: Event Frontend Load Bad Status Code 5Xx Error

Application: GoogleWorkspace-meet_hardware

Description

Server-side error (5xx) during load

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_FRONTEND_LOAD_FIRMWARE_UPDATE_ENDED: Event Frontend Load Firmware Update Ended

Application: GoogleWorkspace-meet_hardware

Description

Firmware update completed

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_FRONTEND_LOAD_NETWORK_INTERRUPTED_ERROR: Event Frontend Load Network Interrupted Error

Application: GoogleWorkspace-meet_hardware

Description

Network connection interrupted

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_FRONTEND_LOAD_SHIM_FRAMEWORK_ERROR: Event Frontend Load Shim Framework Error

Application: GoogleWorkspace-meet_hardware

Description

Shim framework error loading application

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_FRONTEND_LOAD_SUCCESS: Event Frontend Load Success

Application: GoogleWorkspace-meet_hardware

Description

Frontend application loaded successfully

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_FRONTEND_LOAD_TIMEOUT_ERROR: Event Frontend Load Timeout Error

Application: GoogleWorkspace-meet_hardware

Description

Application load timeout

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_FRONTEND_LOAD_TRANSPORT_FAILURE_ERROR: Event Frontend Load Transport Failure Error

Application: GoogleWorkspace-meet_hardware

Description

Network handshake failure

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_FRONTEND_LOAD_WAITING_FOR_NETWORK: Event Frontend Load Waiting For Network

Application: GoogleWorkspace-meet_hardware

Description

Waiting for network connection

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_FRONTEND_LOAD_WAIT_FOR_DEVICE_FIRMWARE_UPDATE: Event Frontend Load Wait For Device Firmware Update

Application: GoogleWorkspace-meet_hardware

Description

Loading firmware update

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_FRONTEND_LOAD_WEBVIEW_ERROR: Event Frontend Load Webview Error

Application: GoogleWorkspace-meet_hardware

Description

WebView exited or crashed

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_FRONTEND_LOAD_WEBVIEW_EXIT_ERROR: Event Frontend Load Webview Exit Error

Application: GoogleWorkspace-meet_hardware

Description

WebView component exited unexpectedly

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_HANDHELD_CONTROLLER_ATTACHED: Event Handheld Controller Attached

Application: GoogleWorkspace-meet_hardware

Description

Handheld controller connected

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_HANDHELD_CONTROLLER_DETACHED: Event Handheld Controller Detached

Application: GoogleWorkspace-meet_hardware

Description

Handheld controller disconnected

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_LOCAL_PRESENT_ENDED: Event Local Present Ended

Application: GoogleWorkspace-meet_hardware

Description

Stopped presenting content from a connected user device

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_LOCAL_PRESENT_STARTED: Event Local Present Started

Application: GoogleWorkspace-meet_hardware

Description

Started presenting content from a connected user device

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_MEET_CALL_DISCONNECTED: Event Meet Call Disconnected

Application: GoogleWorkspace-meet_hardware

Description

Device left a Google Meet call

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_MEET_CALL_JOINED: Event Meet Call Joined

Application: GoogleWorkspace-meet_hardware

Description

Device joined a Google Meet call

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_MIC_ATTACHED: Event Mic Attached

Application: GoogleWorkspace-meet_hardware

Description

Microphone connected

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_MIC_DETACHED: Event Mic Detached

Application: GoogleWorkspace-meet_hardware

Description

Microphone disconnected

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_OS_UPDATE: Event Os Update

Application: GoogleWorkspace-meet_hardware

Description

Device received operating system update

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_RESTART_APP: Event Restart App

Application: GoogleWorkspace-meet_hardware

Description

Meet application restarted

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_RESTART_MACHINE: Event Restart Machine

Application: GoogleWorkspace-meet_hardware

Description

Device rebooted

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_RESTART_UNKNOWN: Event Restart Unknown

Application: GoogleWorkspace-meet_hardware

Description

Device restarted for unknown reason

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_SLEEP_SCREEN_ENTERED: Event Sleep Screen Entered

Application: GoogleWorkspace-meet_hardware

Description

Entered power saving mode

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_SLEEP_SCREEN_EXITED: Event Sleep Screen Exited

Application: GoogleWorkspace-meet_hardware

Description

Exited power saving mode

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_SPEAKER_ATTACHED: Event Speaker Attached

Application: GoogleWorkspace-meet_hardware

Description

Speaker connected

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_SPEAKER_DETACHED: Event Speaker Detached

Application: GoogleWorkspace-meet_hardware

Description

Speaker disconnected

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_TEAMS_CALL_DISCONNECTED: Event Teams Call Disconnected

Application: GoogleWorkspace-meet_hardware

Description

Device left a Teams call

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_TEAMS_CALL_JOINED: Event Teams Call Joined

Application: GoogleWorkspace-meet_hardware

Description

Device joined a Teams call

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_TOUCH_CONTROLLER_ATTACHED: Event Touch Controller Attached

Application: GoogleWorkspace-meet_hardware

Description

Touchscreen controller connected

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_TOUCH_CONTROLLER_DETACHED: Event Touch Controller Detached

Application: GoogleWorkspace-meet_hardware

Description

Touchscreen controller disconnected

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_VIDEO_CAPTURE_CONTENT_CAMERA_ATTACHED: Event Video Capture Content Camera Attached

Application: GoogleWorkspace-meet_hardware

Description

Whiteboard camera connected

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_VIDEO_CAPTURE_CONTENT_CAMERA_DETACHED: Event Video Capture Content Camera Detached

Application: GoogleWorkspace-meet_hardware

Description

Whiteboard camera disconnected

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_WEBEX_CALL_DISCONNECTED: Event Webex Call Disconnected

Application: GoogleWorkspace-meet_hardware

Description

Device left a Webex call

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_WEBEX_CALL_JOINED: Event Webex Call Joined

Application: GoogleWorkspace-meet_hardware

Description

Device joined a Webex call

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_ZOOM_CALL_DISCONNECTED: Event Zoom Call Disconnected

Application: GoogleWorkspace-meet_hardware

Description

Device left a Zoom call

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

EVENT_ZOOM_CALL_JOINED: Event Zoom Call Joined

Application: GoogleWorkspace-meet_hardware

Description

Device joined a Zoom call

Fields #

Name	Description
`applicationName`	Reports API applicationName value identifying the GWS service (e.g. admin, login, drive).
`eventName`	The specific action within this application.
`actor.email`	Email address of the user or administrator who performed the action.
`actor.profileId`	Unique Google Workspace profile ID of the actor.
`ipAddress`	IP address of the actor at the time of the event.
`parameters`	Array of event-specific key-value parameters documenting affected resources.

References #

Meet Hardware Activity Events https://developers.google.com/workspace/admin/reports/v1/appendix/activity/meet-hardware

`j` / `k`	Scroll down / up
`d` / `u`	Half-page down / up
`gg` / `G`	Top / bottom
`h` / `l`	History back / forward
`f`	Follow link (`Shift` = new tab)
`/`	Focus search
`?`	Toggle this help
`↑` / `↓`	Navigate search results
`Enter`	Open highlighted result
`Esc`	Close results / dialog

`type:`	`events` / `rules` / `providers`
`vendor:`	`sigma` / `elastic` / `splunk` / `kusto` / `chronicle` (vendor name alone also works: `sigma:`, `kql:`, `secops:`…)
`tactic:`	TA-id, slug, or name: `credential_access`, `TA0006`
`technique:`	technique or sub-technique ID: `T1003`, `T1003.001` (alias `tech:`)
`severity:`	`critical` / `high` / `medium` / `low` / `informational` (alias `sev:`)
`risk_score`	Numeric comparison on the Elastic risk score (0 to 100): `risk_score>50`, `risk_score<=20`, `risk_score=99` (alias `risk`; Elastic rules only)
`stages:`	Rules with exactly N pipeline stages
`correlation:`	`single_event` / `sequence` / `alternatives` / `alternatives_cross_log` / `all_required` / `correlated`
`with:`	Co-occurrence event-id; stacks (`with:4624 with:4769`) to require all, while a comma list in one occurrence (`with:4624,4769`) is an either-or group. Implies multi-event
`like:`	Structural neighbors of a rule slug (equivalents + subsumption stricter / broader): `like:comsvcs_lsass_memory_dump-splunk-sysmon`
`groupby:`	Entity-grouping substring match against `group_by_keys`: `groupby:user`, `groupby:host`
`uses:`	Rules whose predicate tree touches the field (any kind, any value): `uses:CommandLine`
`excludes:`	Rules with top-level `not()` clauses on the field (FP whitelists): `excludes:ParentImage`
`field:` / `value:`	Predicate search; narrows rule cards to those with a matching leaf and drives the indicator tier. Unquoted = substring, wildcards allowed (`value:mimikatz`)
`indicator:`	Shorthand for `field:F value:V`: `indicator:Image=*\powershell.exe`
`kind:`	Filter by predicate kind. Narrows rule cards to those carrying a matching predicate leaf (`vendor:elastic kind:cidr_match`) and drives the indicator tier: `contains` / `starts_with` / `ends_with` / `regex` / `cidr` / `eq` / `in` … (operator aliases `op:`/`match:`)
`has:` / `no:`	`sample`, `field`, `notes`, `refs`, `trace`, `thirdparty`, `rule`, `pattern`, `timewindow`, `threshold`, `newterms`, `sigma`/`elastic`/`splunk`/`kusto`/`chronicle`
`-op:val`	Exclude matches; works on most operators but not `type:`/`like:`/`has:`/`no:` (use `no:<flag>` to exclude a rule flag): `tactic:execution -vendor:splunk`. Standalone `-kind:`/`-field:`/`-value:` drop every rule carrying a matching predicate leaf (`type:rules -kind:is_null`)
`field:"…"` / `value:"…"`	Quoted value = anchored exact match (also allows spaces): `value:"net user"`
`a,b`	Comma = OR inside one operator (`vendor:sigma,elastic`, `severity:high,critical`); repeating a facet merges the same way. `field:`/`value:` never split (literal commas)
`vendors:` / `stage:`	Singular and plural spellings fold to the canonical operator and value: `tactics:` = `tactic:`, `type:event` = `type:events`, `correlation:sequences` = `correlation:sequence`, `has:thresholds` = `has:threshold`
`"quoted phrase"`	Exact-match a multi-word phrase (free text)