Okta System Log

Search the Okta rules.

Namespace prefixes

NamespaceDescriptionEvent typesSamplesRules
AccessIdentity Governance access requests, conditions, and approvalsIdentity Governance access requests, conditions, and approvals2250
AccountOrg account lifecycle and provisioning-template changesOrg account lifecycle and provisioning-template changes1500
AnalyticsReporting exports and product feedbackReporting exports and product feedback400
AppApplication sign-on, assignment, and access-request activityApplication sign-on, assignment, and access-request activity231364
ApplicationApplication object configuration and integration administrationApplication object configuration and integration administration943710
CertificationIdentity Governance access-certification campaignsIdentity Governance access-certification campaigns910
CoreCore platform internals (expression language, concurrency limits)Core platform internals (expression language, concurrency limits)311
CredentialCredential enrollment and revocationCredential enrollment and revocation200
DeviceDevice registration, assurance policy, and desktop MFADevice registration, assurance policy, and desktop MFA4021
DirectoryDirectory integration and AD/LDAP profile syncDirectory integration and AD/LDAP profile sync1040
Event HookEvent hook lifecycle and deliveryEvent hook lifecycle and delivery750
GroupGroup lifecycle and application/membership assignmentGroup lifecycle and application/membership assignment17101
IAMCustom admin roles and resource-set bindingsCustom admin roles and resource-set bindings18103
Inline HookInline hook lifecycle and executionInline hook lifecycle and execution850
IntegrationAPI-service integration authorizationAPI-service integration authorization200
Master ApplicationMaster (HR-source) application user membershipMaster (HR-source) application user membership100
MIMMobile Identity Management commandsMobile Identity Management commands1700
Network ZoneNetwork zone rule changesNetwork zone rule changes101
Oauth2OAuth2 authorization servers, claims, and scopesOAuth2 authorization servers, claims, and scopes11100
OrgOrg-level configuration signalsOrg-level configuration signals100
PAMPrivileged Access Management: AD connections, secrets, sessionsPrivileged Access Management: AD connections, secrets, sessions15300
PersonalPersonal (end-user) app settings and migrationPersonal (end-user) app settings and migration200
PKIPKI certificate authorities and certificate bindingPKI certificate authorities and certificate binding1510
PluginBrowser plugin download and statusBrowser plugin download and status200
PolicyAuthentication and access policy evaluation and enforcementAuthentication and access policy evaluation and enforcement24158
Resource ServersCustom API authorization serversCustom API authorization servers2900
Scheduled ActionScheduled user actions (deferred suspension)Scheduled user actions (deferred suspension)400
SecurityThreat protection, attack detection, and authenticator securityThreat protection, attack detection, and authenticator security39103
Self ServiceSelf-service feature enablementSelf-service feature enablement200
SupportOkta Support org access and changesOkta Support org access and changes210
SystemOrg agents, connectors, and platform administrationOrg agents, connectors, and platform administration2345422
TaskBackground task lifecycleBackground task lifecycle500
UserUser account lifecycle, sessions, MFA, and authenticationUser account lifecycle, sessions, MFA, and authentication823640
WorkflowsOkta Workflows automation runs and connectionsOkta Workflows automation runs and connections4810
Workload PrincipalWorkload and AI-agent service principals and credentialsWorkload and AI-agent service principals and credentials1800
ZoneNetwork zone lifecycle and allow/block listsNetwork zone lifecycle and allow/block lists764

References