Connector and MCP call log (event_type = APP_LOG)
| # | Field | Type | Display name | Description |
|---|---|---|---|---|
| 1 | _time | DATE | Time | |
| 2 | user | STRING | Account | e.g. user01@example.com |
| 3 | app_name | STRING | App name | e.g. GitHub, Slack |
| 4 | action | STRING | Action | e.g. search_prs, get_profile |
| 5 | log_type | STRING | Log type | request, response |
| 6 | duration | LONG | Duration | Milliseconds the connector took to answer |
| 7 | error_code | STRING | Error code | e.g. FORBIDDEN, INVALID_ARGUMENT |
| 8 | conversation_id | STRING | Conversation ID | e.g. 00000000-0000-0000-0000-000000000000 |
| 9 | app_id | STRING | App ID | e.g. connector_00000000000000000000000000000000 |
| 10 | app_type | STRING | App type | MCP, SERVICE |
| 11 | connector_name | STRING | Connector name | e.g. GitHub |
| 12 | connector_id | STRING | Connector ID | e.g. connector_00000000000000000000000000000000 |
| 13 | is_sync | BOOL | Synchronous call | |
| 14 | input | MAP | Request | Call arguments |
| 15 | output | LIST | Response | Call result |
| 16 | type | STRING | Event type | e.g. AUDIT_LOG |
| 17 | event_id | STRING | Event ID | e.g. 00000000-0000-0000-0000-000000000000 |
| 18 | user_id | STRING | User ID | e.g. user-A1b2C3d4E5f6G7h8I9j0K1l2 |
| 19 | actor_type | STRING | Actor type | ACCOUNT_USER, SERVICE_ACCOUNT |
| 20 | principal_id | STRING | Workspace ID | e.g. 00000000-0000-0000-0000-000000000000 |
| 21 | principal_type | STRING | Workspace type | CHATGPT_WORKSPACE |
| 22 | file_id | STRING | Log file ID | e.g. eclf_0000000000000000000000000000000000 |
| 23 | extra | MAP | Unmapped fields | Fields the API added that this schema does not name yet |