--- title: DaVinci administrative audit events in PingOne (early access) description: DaVinci administrative audit events are available in the PingOne audit report with unified filtering, retention, and webhook streaming. component: pingone page_id: pingone:early-access-features:ea_p1_davinci_audit_events canonical_url: https://docs.pingidentity.com/pingone/early-access-features/ea_p1_davinci_audit_events.html llms_txt: https://docs.pingidentity.com/pingone/llms.txt docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md revdate: June 26, 2026 section_ids: accessing-davinci-audit-events: Accessing DaVinci audit events retention-and-retrieval: Retention and retrieval filtering-davinci-events: Filtering DaVinci events filter-by-resource-type: Filter by resource type filter-by-event-type: Filter by event type filter-by-resource-id: Filter by resource ID davinci-audit-event-reference: DaVinci audit event reference audit-event-structure: Audit event structure standard-fields: Standard fields davinci-specific-_embedded-fields: DaVinci-specific _embedded fields api-access: API access --- # DaVinci administrative audit events in PingOne (early access) PingOne DaVinci administrative audit events are integrated into the PingOne centralized audit schema. DaVinci events appear alongside standard PingOne events in **Monitoring > Audit** and are subject to the same retention, retrieval, filtering, and webhook streaming capabilities. Learn more in [Audit](../monitoring/p1_reporting.html). ## Accessing DaVinci audit events DaVinci audit events are visible in **Monitoring > Audit**. They appear alongside standard PingOne events and can be filtered to show only DaVinci-related activity. Learn more about running audit reports in [Audit](../monitoring/p1_reporting.html). ### Retention and retrieval Use the following retention windows to determine whether your audit data is available immediately or requires a retrieval request: | Data age | Availability | | ------------------ | ------------------------------------------------------------------------------------------ | | Up to 14 days | Available immediately in the PingOne admin console and through the API | | Older than 14 days | Request retrieval from the **Audit** page. A prompt is displayed before results are shown. | ## Filtering DaVinci events Use the available filters to narrow audit results by DaVinci resource type, event type, or a specific resource ID. ### Filter by resource type In the **Filter Type** panel, select **Resource Type**. A **DaVinci** subsection is available with the following filters: | Filter value | Covers | | ------------------------- | ----------------------------------- | | **DaVinci Flows** | Flow events and flow version events | | **DaVinci Connectors** | Connector instance events | | **DaVinci Variables** | Variable events | | **DaVinci Applications** | Application events | | **DaVinci Flow Policies** | Flow policy events | | **DaVinci UI Templates** | UI template events | ### Filter by event type Select **Event Type** in the filter panel. All granular DaVinci event types are listed and multiple event types can be selected simultaneously. ### Filter by resource ID Enter a flow ID, variable ID, connector instance ID, flow policy ID, application ID, or UI template ID in the **Resource ID** filter to scope results to a specific DaVinci resource. ## DaVinci audit event reference The following 37 DaVinci administrative events are logged in PingOne. | | | | - | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | | Rows 12 – 17 share the `DAVINCI.FLOW.CUSTOM_JAVASCRIPT.ADDED` action type for both flow-level and connector-level events. Differentiate by the `resources[].type` field: `DAVINCI_FLOW` for flow events (rows 12 – 15) and `DAVINCI_CONNECTOR` for connector events (rows 16 – 17). The context (direct creation, clone, or import) is reflected in `_embedded.davinciFlow.creationSource`. | | # | Action type (`action.type`) | Event type (`action.description`) | Example description (`result.description`) | | -- | ------------------------------------------------ | ---------------------------------------------- | --------------------------------------------------------------------------------------------------------- | | 1 | `DAVINCI.FLOW.CREATED` | DaVinci Flow Created | Created DaVinci Flow '{name}' | | 2 | `DAVINCI.FLOW.UPDATED` | DaVinci Flow Updated | Updated DaVinci Flow '{name}' | | 3 | `DAVINCI.FLOW.DELETED` | DaVinci Flow Deleted | Deleted DaVinci Flow '{name}' | | 4 | `DAVINCI.FLOW.DEPLOYED` | DaVinci Flow Deployed | Deployed DaVinci Flow '{name}' | | 5 | `DAVINCI.FLOW.CLONED` | DaVinci Flow Cloned | Cloned DaVinci Flow 'CLONE-{name}' from '\\{source name}' | | 6 | `DAVINCI.FLOW.IMPORTED` | DaVinci Flow Imported | Imported DaVinci Flow '{name}' | | 7 | `DAVINCI.FLOW.ENABLED` | DaVinci Flow Enabled | Enabled DaVinci Flow '{name}' | | 8 | `DAVINCI.FLOW.DISABLED` | DaVinci Flow Disabled | Disabled DaVinci Flow '{name}' | | 9 | `DAVINCI.FLOW.DEBUG_LOGGING.ENABLED` | DaVinci Flow Debug Logging Enabled | Debug logging enabled for DaVinci Flow '{name}' | | 10 | `DAVINCI.FLOW.DEBUG_LOGGING.DISABLED` | DaVinci Flow Debug Logging Disabled | Debug logging disabled for DaVinci Flow '{name}' | | 11 | `DAVINCI.COMPANY.ENABLE_ANALYTICS_DEBUG_VIEW` | DaVinci Company Debug Logging Enabled | Debug logging for Analytics enabled from Company Settings | | 12 | `DAVINCI.FLOW.CUSTOM_JAVASCRIPT.ADDED` | DaVinci Flow Custom JavaScript Added | Custom JavaScript added during flow creation for DaVinci Flow '{name}' | | 13 | `DAVINCI.FLOW.CUSTOM_JAVASCRIPT.ADDED` | DaVinci Flow Custom JavaScript Added | Custom JavaScript added during flow cloning for DaVinci Flow '{name}' | | 14 | `DAVINCI.FLOW.CUSTOM_JAVASCRIPT.ADDED` | DaVinci Flow Custom JavaScript Added | Custom JavaScript added during flow import for DaVinci Flow '{name}' | | 15 | `DAVINCI.FLOW.CUSTOM_JAVASCRIPT.UPDATED` | DaVinci Flow Custom JavaScript Updated | Custom JavaScript updated in DaVinci Flow '{name}' | | 16 | `DAVINCI.FLOW.CUSTOM_JAVASCRIPT.ADDED` | DaVinci Connector Custom JavaScript Added | Custom JavaScript added in '\\{connector name}' Connector Configurations | | 17 | `DAVINCI.FLOW.CUSTOM_JAVASCRIPT.ADDED` | DaVinci Connector Custom JavaScript Updated | Custom JavaScript updated in '\\{connector name}' Connector Configurations | | 18 | `DAVINCI.FLOW.VERSION.REVERTED` | DaVinci Flow Version Reverted | Flow version reverted from version {n} to version {m}, new version created: {p} for DaVinci Flow '{name}' | | 19 | `DAVINCI.FLOW.VERSION.ALIAS.UPDATED` | DaVinci Flow Version Alias Updated | Flow version alias updated for \\{flow name} (version {n}: {alias}) | | 20 | `DAVINCI.FLOW.VERSION.DELETED` | DaVinci Flow Version Deleted | Flow version {n} deleted for DaVinci Flow '{name}' | | 21 | `DAVINCI.FLOW.SESSION.CONFIGURATIONS.ADDED` | DaVinci Flow Session Configurations Added | Session configurations added in DaVinci Flow '{name}' | | 22 | `DAVINCI.FLOW.SESSION.CONFIGURATIONS.OVERRIDDEN` | DaVinci Flow Session Configurations Overridden | Session configurations overridden in DaVinci Flow '{name}' | | 23 | `DAVINCI.CONNECTOR.CREATED` | DaVinci Connector Created | Created DaVinci Connector '{name}' | | 24 | `DAVINCI.CONNECTOR.UPDATED` | DaVinci Connector Updated | Updated DaVinci Connector '{name}' | | 25 | `DAVINCI.CONNECTOR.DELETED` | DaVinci Connector Deleted | Deleted DaVinci Connector '{name}' | | 26 | `DAVINCI.VARIABLE.CREATED` | DaVinci Variable Created | Created DaVinci Variable '{name}' | | 27 | `DAVINCI.VARIABLE.UPDATED` | DaVinci Variable Updated | Updated DaVinci Variable '{name}' | | 28 | `DAVINCI.VARIABLE.DELETED` | DaVinci Variable Deleted | Deleted DaVinci Variable '{name}' | | 29 | `DAVINCI.FLOW_POLICY.CREATED` | DaVinci Flow Policy Created | Created DaVinci Flow Policy '{name}' | | 30 | `DAVINCI.FLOW_POLICY.UPDATED` | DaVinci Flow Policy Updated | Updated DaVinci Flow Policy '{name}' | | 31 | `DAVINCI.FLOW_POLICY.DELETED` | DaVinci Flow Policy Deleted | Deleted DaVinci Flow Policy '{name}' | | 32 | `DAVINCI.APPLICATION.CREATED` | DaVinci Application Created | Created DaVinci Application '{name}' | | 33 | `DAVINCI.APPLICATION.UPDATED` | DaVinci Application Updated | Updated DaVinci Application '{name}' | | 34 | `DAVINCI.APPLICATION.DELETED` | DaVinci Application Deleted | Deleted DaVinci Application '{name}' | | 35 | `DAVINCI.UI_TEMPLATE.CREATED` | DaVinci UI Template Created | Created DaVinci UI Template '{name}' | | 36 | `DAVINCI.UI_TEMPLATE.UPDATED` | DaVinci UI Template Updated | Updated DaVinci UI Template '{name}' | | 37 | `DAVINCI.UI_TEMPLATE.DELETED` | DaVinci UI Template Deleted | Deleted DaVinci UI Template '{name}' | ## Audit event structure DaVinci audit events follow the standard PingOne audit event structure with DaVinci-specific `_embedded` fields. ### Standard fields | Field | Description | | ----------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------- | | `id` | Unique audit event ID | | `recordedAt` | ISO 8601 timestamp when the event was recorded | | `correlationId` | Request correlation ID | | `internalCorrelation.transactionId` | Internal DaVinci transaction ID | | `actors.client.name` | Client application that performed the action (for example, `adminui`) | | `actors.user.name` | User who performed the action (PingOne user email) | | `actors.user.id` | PingOne user ID (UUID) | | `source.ipAddress` | IP address of the request origin | | `source.userAgent` | User-agent string | | `action.type` | Machine-readable event type (for example, `DAVINCI.FLOW.CREATED`) | | `action.description` | Human-readable event type label | | `resources[].type` | Resource type (for example, `DAVINCI_FLOW`, `DAVINCI_CONNECTOR`, `DAVINCI_VARIABLE`, `DAVINCI_APPLICATION`, `DAVINCI_UI_TEMPLATE`) | | `resources[].id` | Resource ID | | `resources[].name` | Resource name | | `result.status` | `SUCCESS` or `FAILURE` | | `result.description` | Human-readable result description | ### DaVinci-specific `_embedded` fields * `_embedded.davinciFlow` The following fields are present on flow events: | Field | Description | | -------------------- | ----------------------------------------------------------------------------------------------------- | | `flowId` | DaVinci internal flow ID | | `flowName` | Human-readable flow name | | `flowStatus` | `ACTIVE`, `DISABLED`, or similar | | `logLevel` | Current log level: `ERROR`, `DEBUG`, or `INFO` | | `flowType` | Trigger type: `DEFAULT`, `PINGONE`, `SCHEDULED`, or similar | | `flowVersion` | Flow version number (present on update, enable, and disable events) | | `modifiedAttributes` | Array of attribute paths changed during an update (for example, `graphData`, `flowSettings.logLevel`) | | `creationSource` | On custom JavaScript add events: `DIRECT`, `CLONE`, or `IMPORT` | | `targetNodeId` | Node IDs containing the custom JavaScript | * `_embedded.davinciFlowVersion` The following fields are present on flow version events: | Field | Description | | --------------------- | ------------------------------------------ | | `flowVersion` | Version number affected | | `revertSourceVersion` | Source version number (revert events only) | | `flowVersionAlias` | Version alias string | | `previousAlias` | Previous alias value before update | * `_embedded.davinciConnector` The following fields are present on connector custom JavaScript events: | Field | Description | | ---------------------- | ------------------------------------------- | | `connectorInstanceId` | Connector instance ID | | `connectorDisplayName` | Display name of the connector instance | | `connectorType` | Connector type (for example, `PingOne MFA`) | | `connectorCategory` | Connector category | * `_embedded.companySettings` The following fields are present on company-level debug logging events: | Field | Description | | -------------------------- | -------------------------------------------- | | `enableAnalyticsDebugView` | `true` when company debug logging is enabled | ## API access DaVinci audit events are accessible through the standard PingOne Activities API: ``` GET /v1/environments/{environmentId}/activities ``` Filter by DaVinci event types using standard PingOne audit filter parameters. For example, `filter=action.type sw "DAVINCI"`. Learn more in [Audit Activities](https://developer.pingidentity.com/pingone-api/platform/audit-activities.html) in the PingOne API documentation.