---
title: Activity event topic properties
description: Reference for PingIDM activity audit event topic properties, including operation, object, before/after state, changed fields, and status
component: pingidm
version: 7.5
page_id: pingidm:audit-guide:activity-event-prop
canonical_url: https://docs.pingidentity.com/pingidm/8.1/audit-guide/activity-event-prop.html
llms_txt: https://docs.pingidentity.com/pingidm/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
keywords: ["Audit", "Logs", "Activity", "Event", "Properties"]
superseded_by: https://docs.pingidentity.com/pingidm/8.1/audit-guide/activity-event-prop.html
---

# Activity event topic properties

| Event Property    | Description                                                                                                     |
| ----------------- | --------------------------------------------------------------------------------------------------------------- |
| `_id`             | UUID for the message object, such as `"0419d364-1b3d-4e4f-b769-555c3ca098b0"`.                                  |
| `timestamp`       | Time that IDM logged the message, in UTC format; for example, `"2020-05-18T08:48:00.160Z"`.                     |
| `eventName`       | Describes the audit event. Examples include `activity`, `workflow-complete_task`, and `relationship_created`.   |
| `transactionId`   | UUID of the transaction; the same transaction might display for the same event in different audit event topics. |
| `userId`          | User ID.                                                                                                        |
| `trackingId`      | A unique value for the object being tracked.                                                                    |
| `runAs`           | User to run the activity as; may be used in delegated administration.                                           |
| `objectId`        | Object identifier, such as `/managed/user/42f8a60e-2019-4110-a10d-7231c3578e2b`.                                |
| `operation`       | Common REST operation taken on the object; for example, UPDATE, DELETE, or ACTION.                              |
| `before`          | JSON representation of the object prior to the activity.                                                        |
| `after`           | JSON representation of the object after the activity.                                                           |
| `changedFields`   | Fields that were changed, based on [Fields to Watch](audit.html#audit-watched-fields).                          |
| `revision`        | Object revision number.                                                                                         |
| `status`          | Result, such as SUCCESS.                                                                                        |
| `message`         | Human readable text about the action.                                                                           |
| `passwordChanged` | True/False entry on changes to the password.                                                                    |
| `context`         | Flag for self-service logins, such as `SELFSERVICE`.                                                            |
| `provider`        | Name of the self-service provider, usually a social identity provider.                                          |