PingOne

DaVinci administrative audit events in PingOne (early access)

PingOne DaVinci administrative audit events are integrated into the PingOne centralized audit schema. DaVinci events appear alongside standard PingOne events in Monitoring > Audit and are subject to the same retention, retrieval, filtering, and webhook streaming capabilities. Learn more in Audit.

Accessing DaVinci audit events

DaVinci audit events are visible in Monitoring > Audit. They appear alongside standard PingOne events and can be filtered to show only DaVinci-related activity.

Learn more about running audit reports in Audit.

Retention and retrieval

Use the following retention windows to determine whether your audit data is available immediately or requires a retrieval request:

Data age Availability

Up to 14 days

Available immediately in the PingOne admin console and through the API

Older than 14 days

Request retrieval from the Audit page. A prompt is displayed before results are shown.

Filtering DaVinci events

Use the available filters to narrow audit results by DaVinci resource type, event type, or a specific resource ID.

Filter by resource type

In the Filter Type panel, select Resource Type. A DaVinci subsection is available with the following filters:

Filter value Covers

DaVinci Flows

Flow events and flow version events

DaVinci Connectors

Connector instance events

DaVinci Variables

Variable events

DaVinci Applications

Application events

DaVinci Flow Policies

Flow policy events

DaVinci UI Templates

UI template events

Filter by event type

Select Event Type in the filter panel. All granular DaVinci event types are listed and multiple event types can be selected simultaneously.

Filter by resource ID

Enter a flow ID, variable ID, connector instance ID, flow policy ID, application ID, or UI template ID in the Resource ID filter to scope results to a specific DaVinci resource.

DaVinci audit event reference

The following 37 DaVinci administrative events are logged in PingOne.

Rows 12 – 17 share the DAVINCI.FLOW.CUSTOM_JAVASCRIPT.ADDED action type for both flow-level and connector-level events. Differentiate by the resources[].type field: DAVINCI_FLOW for flow events (rows 12 – 15) and DAVINCI_CONNECTOR for connector events (rows 16 – 17). The context (direct creation, clone, or import) is reflected in _embedded.davinciFlow.creationSource.
# Action type (action.type) Event type (action.description) Example description (result.description)

1

DAVINCI.FLOW.CREATED

DaVinci Flow Created

Created DaVinci Flow '{name}'

2

DAVINCI.FLOW.UPDATED

DaVinci Flow Updated

Updated DaVinci Flow '{name}'

3

DAVINCI.FLOW.DELETED

DaVinci Flow Deleted

Deleted DaVinci Flow '{name}'

4

DAVINCI.FLOW.DEPLOYED

DaVinci Flow Deployed

Deployed DaVinci Flow '{name}'

5

DAVINCI.FLOW.CLONED

DaVinci Flow Cloned

Cloned DaVinci Flow 'CLONE-{name}' from '\{source name}'

6

DAVINCI.FLOW.IMPORTED

DaVinci Flow Imported

Imported DaVinci Flow '{name}'

7

DAVINCI.FLOW.ENABLED

DaVinci Flow Enabled

Enabled DaVinci Flow '{name}'

8

DAVINCI.FLOW.DISABLED

DaVinci Flow Disabled

Disabled DaVinci Flow '{name}'

9

DAVINCI.FLOW.DEBUG_LOGGING.ENABLED

DaVinci Flow Debug Logging Enabled

Debug logging enabled for DaVinci Flow '{name}'

10

DAVINCI.FLOW.DEBUG_LOGGING.DISABLED

DaVinci Flow Debug Logging Disabled

Debug logging disabled for DaVinci Flow '{name}'

11

DAVINCI.COMPANY.ENABLE_ANALYTICS_DEBUG_VIEW

DaVinci Company Debug Logging Enabled

Debug logging for Analytics enabled from Company Settings

12

DAVINCI.FLOW.CUSTOM_JAVASCRIPT.ADDED

DaVinci Flow Custom JavaScript Added

Custom JavaScript added during flow creation for DaVinci Flow '{name}'

13

DAVINCI.FLOW.CUSTOM_JAVASCRIPT.ADDED

DaVinci Flow Custom JavaScript Added

Custom JavaScript added during flow cloning for DaVinci Flow '{name}'

14

DAVINCI.FLOW.CUSTOM_JAVASCRIPT.ADDED

DaVinci Flow Custom JavaScript Added

Custom JavaScript added during flow import for DaVinci Flow '{name}'

15

DAVINCI.FLOW.CUSTOM_JAVASCRIPT.UPDATED

DaVinci Flow Custom JavaScript Updated

Custom JavaScript updated in DaVinci Flow '{name}'

16

DAVINCI.FLOW.CUSTOM_JAVASCRIPT.ADDED

DaVinci Connector Custom JavaScript Added

Custom JavaScript added in '\{connector name}' Connector Configurations

17

DAVINCI.FLOW.CUSTOM_JAVASCRIPT.ADDED

DaVinci Connector Custom JavaScript Updated

Custom JavaScript updated in '\{connector name}' Connector Configurations

18

DAVINCI.FLOW.VERSION.REVERTED

DaVinci Flow Version Reverted

Flow version reverted from version {n} to version {m}, new version created: {p} for DaVinci Flow '{name}'

19

DAVINCI.FLOW.VERSION.ALIAS.UPDATED

DaVinci Flow Version Alias Updated

Flow version alias updated for \{flow name} (version {n}: {alias})

20

DAVINCI.FLOW.VERSION.DELETED

DaVinci Flow Version Deleted

Flow version {n} deleted for DaVinci Flow '{name}'

21

DAVINCI.FLOW.SESSION.CONFIGURATIONS.ADDED

DaVinci Flow Session Configurations Added

Session configurations added in DaVinci Flow '{name}'

22

DAVINCI.FLOW.SESSION.CONFIGURATIONS.OVERRIDDEN

DaVinci Flow Session Configurations Overridden

Session configurations overridden in DaVinci Flow '{name}'

23

DAVINCI.CONNECTOR.CREATED

DaVinci Connector Created

Created DaVinci Connector '{name}'

24

DAVINCI.CONNECTOR.UPDATED

DaVinci Connector Updated

Updated DaVinci Connector '{name}'

25

DAVINCI.CONNECTOR.DELETED

DaVinci Connector Deleted

Deleted DaVinci Connector '{name}'

26

DAVINCI.VARIABLE.CREATED

DaVinci Variable Created

Created DaVinci Variable '{name}'

27

DAVINCI.VARIABLE.UPDATED

DaVinci Variable Updated

Updated DaVinci Variable '{name}'

28

DAVINCI.VARIABLE.DELETED

DaVinci Variable Deleted

Deleted DaVinci Variable '{name}'

29

DAVINCI.FLOW_POLICY.CREATED

DaVinci Flow Policy Created

Created DaVinci Flow Policy '{name}'

30

DAVINCI.FLOW_POLICY.UPDATED

DaVinci Flow Policy Updated

Updated DaVinci Flow Policy '{name}'

31

DAVINCI.FLOW_POLICY.DELETED

DaVinci Flow Policy Deleted

Deleted DaVinci Flow Policy '{name}'

32

DAVINCI.APPLICATION.CREATED

DaVinci Application Created

Created DaVinci Application '{name}'

33

DAVINCI.APPLICATION.UPDATED

DaVinci Application Updated

Updated DaVinci Application '{name}'

34

DAVINCI.APPLICATION.DELETED

DaVinci Application Deleted

Deleted DaVinci Application '{name}'

35

DAVINCI.UI_TEMPLATE.CREATED

DaVinci UI Template Created

Created DaVinci UI Template '{name}'

36

DAVINCI.UI_TEMPLATE.UPDATED

DaVinci UI Template Updated

Updated DaVinci UI Template '{name}'

37

DAVINCI.UI_TEMPLATE.DELETED

DaVinci UI Template Deleted

Deleted DaVinci UI Template '{name}'

Audit event structure

DaVinci audit events follow the standard PingOne audit event structure with DaVinci-specific _embedded fields.

Standard fields

Field Description

id

Unique audit event ID

recordedAt

ISO 8601 timestamp when the event was recorded

correlationId

Request correlation ID

internalCorrelation.transactionId

Internal DaVinci transaction ID

actors.client.name

Client application that performed the action (for example, adminui)

actors.user.name

User who performed the action (PingOne user email)

actors.user.id

PingOne user ID (UUID)

source.ipAddress

IP address of the request origin

source.userAgent

User-agent string

action.type

Machine-readable event type (for example, DAVINCI.FLOW.CREATED)

action.description

Human-readable event type label

resources[].type

Resource type (for example, DAVINCI_FLOW, DAVINCI_CONNECTOR, DAVINCI_VARIABLE, DAVINCI_APPLICATION, DAVINCI_UI_TEMPLATE)

resources[].id

Resource ID

resources[].name

Resource name

result.status

SUCCESS or FAILURE

result.description

Human-readable result description

DaVinci-specific _embedded fields

_embedded.davinciFlow

The following fields are present on flow events:

Field Description

flowId

DaVinci internal flow ID

flowName

Human-readable flow name

flowStatus

ACTIVE, DISABLED, or similar

logLevel

Current log level: ERROR, DEBUG, or INFO

flowType

Trigger type: DEFAULT, PINGONE, SCHEDULED, or similar

flowVersion

Flow version number (present on update, enable, and disable events)

modifiedAttributes

Array of attribute paths changed during an update (for example, graphData, flowSettings.logLevel)

creationSource

On custom JavaScript add events: DIRECT, CLONE, or IMPORT

targetNodeId

Node IDs containing the custom JavaScript
_embedded.davinciFlowVersion

The following fields are present on flow version events:

Field Description

flowVersion

Version number affected

revertSourceVersion

Source version number (revert events only)

flowVersionAlias

Version alias string

previousAlias

Previous alias value before update
_embedded.davinciConnector

The following fields are present on connector custom JavaScript events:

Field Description

connectorInstanceId

Connector instance ID

connectorDisplayName

Display name of the connector instance

connectorType

Connector type (for example, PingOne MFA)

connectorCategory

Connector category
_embedded.companySettings

The following fields are present on company-level debug logging events:

Field Description

enableAnalyticsDebugView

true when company debug logging is enabled

API access

DaVinci audit events are accessible through the standard PingOne Activities API:

GET /v1/environments/{environmentId}/activities

Filter by DaVinci event types using standard PingOne audit filter parameters. For example, filter=action.type sw "DAVINCI".

Learn more in Audit Activities in the PingOne API documentation.