Audit log offers a record of events in your Greenhouse Recruiting environment from the previous 30 days, empowering your security teams to better respond to incidents. The audit log event glossary defines all of the events available in audit log.
You can query for the events listed using event_target_type with Business Intelligence Connector and event_target_types with audit log API. Use the event names exactly as they appear in this article.
Example
Business Intelligence Connector: select * from audit_log where event_target_type = 'Agency Recruiter Invited'
Audit log API: GET https://auditlog.us.greenhouse.io/events?event_target_types=Agency Recruiter InvitedAgencies | |
| Event | Definition |
| Agency Created | An agency was added. |
| Agency Deactivated | An agency was deactivated. |
| Agency Job Edited | A recruiter at an agency was added to or removed from a job. One change can also create Bulk Agency Job Edited and Agency Recruiter Job Added or Removed events. |
| Agency Modified | An agency was edited or reactivated. |
| Agency Recruiter Invited | An agency recruiter was invited. |
| Agency Recruiter Job Added | An agency recruiter was added to a job. |
| Agency Recruiter Job Removed | An agency recruiter was removed from a job. |
| Agency Recruiter Modified | An agency recruiter's details were edited, or the recruiter was reactivated. |
| Recruiter Deactivated | An agency recruiter was deactivated. |
AI features | |
| Event | Definition |
| AI Feature Toggled | An AI feature was turned on or off. |
API keys and web hooks | |
| Event | Definition |
| API Key Created | An API key was created. This also appears when a Greenhouse Sourcing key is created for your organization. |
| API Key Permissions Updated | The endpoint permissions for a Harvest API key were saved. This event appears every time the permissions are saved, even if nothing changed. |
| API Key Re-Enabled | An inactive API key was reactivated. |
| API Key Revoked | An API key was revoked. This event does not appear when a Harvest OAuth credential is revoked. |
| API Key Updated | An API key was changed. This covers edits to its description or source identifier, a regenerated Job Board API key, and a renamed Harvest OAuth credential. |
| Webhook Changed | A webhook was edited, turned on, or turned off. |
| Webhook Created | A webhook was created. |
| Webhook Removed | A webhook was removed. This also appears when Greenhouse removes webhooks automatically, such as after a plan change or when a partner is removed. The performer is then Greenhouse Internal. |
Billing and account | |
| Event | Definition |
| Billing Contact Updated | The organization's billing contact was updated. |
| Company Headcount Updated | The company headcount on the billing account was updated. |
| Renewal Contact Updated | The organization's renewal contact was updated. |
| Tax Information Updated | An organization's tax information (tax ID and tax ID type) was updated in billing settings. |
Bulk actions | |
| Event | Definition |
| Bulk Add Blocked Spam Source | Multiple blocked spam sources were added at once. |
| Bulk Agency Job Edited | An agency recruiter's job access was edited in bulk. |
| Bulk Candidate Stage Change | Candidates were moved to a different stage in bulk. The event is recorded when the action starts, and it does not list the affected records. |
| Bulk Copied Rules to Jobs | Stage transition rules were bulk copied to a job. |
| Bulk Deactivate Users | Users were deactivated in bulk. The event is recorded when the action starts, and it does not list the affected records. |
| Bulk Delete Candidate | Candidates were deleted in bulk. The event is recorded when the action starts, and it does not list the affected records. |
| Bulk Hiring Team Updated | Hiring teams were updated for multiple jobs at once. The event is recorded when the action starts, and it does not list the affected records. |
| Bulk Import Candidates | A spreadsheet of candidates was uploaded for bulk import. The event is recorded at upload, before the import finishes. |
| Bulk Import Prospects | A spreadsheet of prospects was uploaded for bulk import. The event is recorded at upload, before the import finishes. |
| Bulk Interview Plan Edited | Interview plans for multiple jobs were edited at once. The event is recorded when the action starts, and it does not list the affected records. |
| Bulk Job Scorecard Edited | Scorecards were edited for multiple jobs at once. The event is recorded when the action starts, and it does not list the affected records. |
| Bulk Reject Candidate | Candidates were rejected in bulk. The event is recorded when the action starts, and it does not list the affected records. |
| Bulk User Permission Edited | User permissions were edited in bulk. |
Business Intelligence Connector | |
| Event | Definition |
| Business Intelligence Connector Changed | Business Intelligence Connector configuration settings were edited. |
Candidate packets | |
| Event | Definition |
| Candidate Packet Created | A candidate packet was created. |
| Candidate Packet Deleted | A candidate packet was deleted. |
| Candidate Packet Updated | A candidate packet was changed. |
Candidates and prospects | |
| Event | Definition |
| Application Limit Rule Created | An application limit rule was created. |
| Application Limit Rule Deleted | An application limit rule was deleted. |
| Application Limit Rule Updated | An application limit rule was edited. |
| Candidate Added | A candidate, prospect, or referral was added through the Add Candidate form. This event does not appear for people added by API, import, or job post application. |
| Candidate Added to Another Job | An application was created for a candidate. This includes adding an existing candidate to another job, converting a prospect to a candidate, and creating an application through the Harvest API. |
| Candidate has been hired | A candidate was hired. The performer is blank because a background process records this event. |
| Candidate has been unhired | A candidate was unmarked as hired. |
| Candidate has changed stage | A candidate was moved to a different stage. This includes automatic and API moves. The performer is blank. |
| Candidate or Prospect rejected | A candidate or prospect was rejected. |
| Candidate or Prospect unrejected | A candidate or prospect was unrejected. |
| Candidate or Prospect updated | Something on a candidate or prospect profile was changed. The event does not say which field. Some updates, such as job form submissions, have no acting user. |
| Candidate Survey Settings Changed | The candidate experience survey was turned on or off. |
| Candidate Transferred to Different Job | A candidate's application was moved from one job to another. |
| Delete Application | A candidate was removed from a job. |
| Delete Candidate | A candidate was deleted. |
| Delete Prospect Process | A prospect was removed from a prospect process. |
| Identity Verification Setting Activated | The identity verification setting was turned on. |
| Identity Verification Setting Deactivated | The identity verification setting was turned off. |
| Identity Verification Setting Departments Changed | The departments that identity verification applies to were changed. |
| Identity Verification Setting Offices Changed | The offices that identity verification applies to were changed. |
| Merged Candidate | Two candidate profiles were merged into one. |
| Prospect created | A prospect was created. |
Custom options | |
| Event | Definition |
| Cancellation & Reschedule Reason Setting Changed | The setting that controls whether a reason is collected when an interview is canceled or rescheduled was changed. |
| Custom Option Added | An item was added to a list you can configure, such as a custom option, custom field, candidate tag, outside referrer, or cancellation and reschedule reason. |
| Custom Option Archived | A custom option was archived. |
| Custom Option Deleted | A custom option was deleted. |
| Custom Option Restored | A custom option was restored. |
| Custom Option Updated | A custom option or custom field was edited. This also covers custom field options that were added, changed, or deleted in bulk. |
| Workday Credential Added | A Workday® credential was added for custom options sync. |
| Workday Credential Changed | A Workday® credential was changed for custom options sync. |
| Workday Credential Removed | A Workday® credential was removed for custom options sync. |
| Workday Reports-As-A-Service Custom Field Integration Added | A Workday® custom options sync via RaaS was created. |
| Workday Reports-As-A-Service Custom Field Integration Changed | A Workday® custom options sync via RaaS was changed. |
| Workday Reports-As-A-Service Custom Field Integration Removed | A Workday® custom options sync via RaaS was removed. |
| Workday Service Call Custom Field Integration Added | A Workday® custom options sync via service call was created. |
| Workday Service Call Custom Field Integration Changed | A Workday® custom options sync via service call configuration was edited. |
| Workday Service Call Custom Field Integration Removed | A Workday® custom options sync via service call was removed. |
Diversity, equity, and inclusion | |
| Event | Definition |
| Inclusion Setting Disabled | A diversity, equity, and inclusion setting was deactivated. |
| Inclusion Setting Enabled | A diversity, equity, and inclusion setting was enabled. |
| Inclusion Setting Modified | A diversity, equity, and inclusion setting was modified. |
| Required EEOC Updated | The required EEOC setting was turned on or off for a job board. |
E-signature | |
| Event | Definition |
| Document Sent | A document was sent to a candidate for e-signature. |
Email settings | |
| Event | Definition |
| Email Domain Added | An email domain was added. |
| Email Domain Removed | An email domain was removed. |
| Global Email Added | A global email was added. |
| Global Email Removed | A global email was removed. |
Email, offer, and social templates | |
| Event | Definition |
| Org Wide Email Template Added | An organization-wide email template was added. |
| Org Wide Email Template Changed | An organization-wide email template was edited. |
| Org Wide Email Template Removed | An organization-wide email template was removed. |
| Org Wide Offer Template Added | An organization-wide offer template was added. |
| Org Wide Offer Template Changed | An organization-wide offer template was changed. |
| Org Wide Offer Template Removed | An organization-wide offer template was removed. |
| Org Wide Offer Template Replaced | The file for an organization-wide offer letter template was replaced. |
| Org Wide Social Template Added | An organization-wide social template was added. |
| Org Wide Social Template Changed | An organization-wide social template was changed. |
| Org Wide Social Template Removed | An organization-wide social template was removed. |
Fraud protection | |
| Event | Definition |
| Fraud Setting Activated | The fraud protection setting was turned on. |
| Fraud Setting Deactivated | The fraud protection setting was turned off. |
| Fraud Setting Departments Changed | The departments covered by the fraud protection setting were changed. |
| Fraud Setting Offices Changed | The offices covered by the fraud protection setting were changed. |
Greenhouse Notetaker | |
| Event | Definition |
| Candidate Opted Out of Greenhouse Notetaker | A candidate opted out of Greenhouse Notetaker for an interview that had a notetaker scheduled. |
| Greenhouse Notetaker Setting Departments Changed | The departments that Greenhouse Notetaker applies to were changed. |
| Greenhouse Notetaker Setting Offices Changed | The offices that Greenhouse Notetaker applies to were changed. |
| Greenhouse Notetaker Settings Updated | Greenhouse Notetaker recording rules were updated. |
| Interview Kit Greenhouse Notetaker Disabled | Greenhouse Notetaker was turned off for an interview kit. |
| Interview Kit Greenhouse Notetaker Enabled | Greenhouse Notetaker was turned on for an interview kit. |
HRIS Link | |
| Event | Definition |
| HRIS Link for Hired Candidates Modified | An HRIS Link for hired candidates export was modified. |
| HRIS Link for Hired Candidates Set Up | An HRIS Link for hired candidates export was set up. |
| Workday Report URL Added | A Workday® 'ready for hire' report URL was added so jobs can be imported from Workday®. |
| Workday Report URL Changed | An HRIS Link report URL was changed. |
| Workday Report URL Removed | The Workday 'ready for hire' report URL was removed. |
Job boards | |
| Event | Definition |
| Job Board Accessible Changed | The accessibility improvements setting for an embedded job board was changed. |
| Job Board Auto Load Changed | A job board's auto load setting was changed. |
| Job Board Created | A new job board was created. |
| Job Board Custom CSS Changed | A job board's custom CSS was changed. |
| Job Board Customizations Updated | A job board's design customizations (such as colors, fonts, layout and header text) were updated. |
| Job Board Edit | A job board was edited. |
| Job Board Hide Description Changed | A job board's hide description setting was changed. |
| Job Board Hide View All Jobs Link Changed | A job board's view all jobs link setting was changed. |
| Job Board No Auto Scroll Changed | A job board's no auto scroll setting was changed. |
| Job Board Responsive Changed | A job board's responsive setting was changed. |
| Job Board Status | A job board's status was changed. |
| Job Board URL Changed | A job board's URL was changed. |
| Job Post Publishing Rule Created | A job post publishing rule was created. |
| Job Post Publishing Rule Deleted | A job post publishing rule was deleted. |
| Job Post Publishing Rule Updated | A job post publishing rule was edited. |
| Job Post Scheduled Status Change Removed | A scheduled publish or unpublish was removed from a job post. |
| Job Post Scheduled Status Change Updated | A scheduled publish or unpublish for a job post was changed. |
| Job Post Status Change Created | A scheduled publish or unpublish was set for a job post. |
| Sourcing Strategy Rule Created | A new job post request email rule was created. |
| Sourcing Strategy Rule Deleted | A job post request email rule was deleted. |
| Sourcing Strategy Rule Updated | A job post request email was changed. |
Jobs | |
| Event | Definition |
| Form Added to Job | A form was added to a job. |
| Form Removed from Job | A form was removed from a job. |
| Form Updated in Job | A form was updated on a job. |
| Hiring Team Roles Changed | The hiring team roles were changed on a job. |
| Interview Plan Edited | An interview plan was edited on a job. |
| Job Created | A new job was created. |
| Job Deleted | A job was deleted. |
| Job Info Changed | A detail on a job was changed, such as its name, status, office, department, requisition ID, or notes. Each changed field creates its own event. |
| Job Kickoff Form Changed | A job kickoff form was edited. |
| Job Notifications Changed | The email notification settings for a job were changed. |
| Job Post Deleted | A job post was deleted. |
| Job Post Edited | A job post was created or edited. |
| Job Post State Change | A job post was published or taken offline. |
| Job Posts URL Changed | The URL where a job board's application form is embedded on your website was changed. |
| Job Scorecard Edited | A scorecard was edited on a job. |
| Opening Closed | An opening on a job was closed. |
| Opening Created | An opening was added to a job. |
| Opening Deleted | An opening was deleted from a job. |
| Opening Modified | An opening's details were changed or an opening was reopened. |
| Partner Campaign Created | A job ad market campaign was created for a job. |
| Post Description Modified | The introduction or conclusion text that appears on every job post on a job board was changed. |
| Rule Created | A stage transition rule was created on a job. |
| Rule Deleted | A stage transition rule was deleted on a job. |
| Rule Updated | A stage transition rule was updated on a job. |
Offers | |
| Event | Definition |
| Candidate Offer Downloaded | An offer was downloaded by a user. |
| Offer Created | An offer was created. |
| Offer Deleted | An offer was deleted. |
| Offer Sent | An offer letter was sent to a candidate for signature through Adobe Acrobat Sign. |
| Offer Updated | An offer was updated. |
Organization and permission policies | |
| Event | Definition |
| Auto Merge Setting Changed | An auto-merge setting was modified. |
| Default Date Format Updated | The organization's default date format was changed. |
| Default Time Format Updated | The organization's default time format was changed. |
| Department/Office Changed | A department / office was changed. |
| Department/Office Deleted | A department / office was deleted. |
| Job Added to Permission Rule | A job was added to a permission rule. |
| Job Permission Rules Updated | The permission rules that apply to a job were changed. |
| Job Removed from Permission Rule | A job was removed from a permission rule. |
| Next Requisition ID Changed | The next requisition ID was changed in organization settings. |
| Org Permission Policy Changed | Your organization's permission policies were changed. |
| Organization Name Changed | Your organization's name was changed. |
| Permission Rule Created | A permission rule was created. |
| Permission Rule Deleted | A permission rule was deleted. |
| Permission Rule Updated | A permission rule was updated. |
| Referral Program Changed | The referral program message that employees see was edited. The referral on and off settings do not create this event. |
| User Added to Permission Rule | A user was added to a permission rule. |
| User Permission Rules Updated | The permission rules a user belongs to were updated. |
| User Removed from Permission Rule | A user was removed from a permission rule. |
Personally identifiable information (PII) | |
| Event | Definition |
| Confidential Answers Purged | Confidential answers collected on application forms were automatically purged after their retention period. |
| Confidential Answers Sent to an Integration | Confidential answers from a hired candidate's application form were sent to an integration. |
Privacy and compliance | |
| Event | Definition |
| Automatic Anonymization Changed | The automatic anonymization setting was turned on or off. |
| GDPR Data Protection Officer Updated | The data protection officer contact for the organization was changed. |
| GDPR Legal Basis Updated | Your organization's legal basis for GDPR was changed. |
| GDPR Rule Added | A GDPR data retention rule or data collection rule was added. |
| GDPR Rule Modified | A GDPR data retention rule or data collection rule was created, edited, or deleted, so adding a rule can create two events. |
| GDPR Rule Removed | A GDPR data retention rule or data collection rule was removed. |
| Pay Transparency Rule Changed | A pay transparency rule was edited. |
| Pay Transparency Rule Created | A pay transparency rule was created. |
| Pay Transparency Rule Removed | A pay transparency rule was removed. |
Real Talent and talent matching | |
| Event | Definition |
| Real Talent Calibration Created | A calibration (talent matching criteria) was created for a job. |
| Real Talent Calibration Deleted | A calibration (talent matching criteria) was deleted from a job. |
| Real Talent Calibration Edited | A calibration (talent matching criteria) was edited for a job. |
| Real Talent Match Score Overridden | A user manually overrode the AI match strength score for an application in Talent Matching. |
| Talent Matching Setting Departments Changed | The list of departments whose jobs can use Talent Matching was changed. |
| Talent Matching Setting Offices Changed | The list of offices whose jobs can use Talent Matching was changed. |
Reports | |
| Event | Definition |
| Report Export | A report was exported. |
| Scheduled Reports | A report schedule was created or edited. Turning a schedule on or off does not create this event. |
Single sign-on (SSO) and two-factor authentication | |
| Event | Definition |
| Single Sign-On Changed | Single sign-on configuration was edited. |
| Two-Step Authentication Added | A user turned on two-factor authentication for their own account. |
| Two-Step Authentication Changed | A user set up or changed the method (text message or email) for two-factor authentication on their own account. |
| Two-Step Authentication Removed | A user turned off two-factor authentication for their own account. |
Sourcing automation | |
| Event | Definition |
| Org Sourcing Rule Updated | An organization-wide sourcing rule was updated. |
| Sourcing Rule Created | An automated sourcing rule was created for an outreach campaign. |
| Sourcing Rule Updated | An automated sourcing rule on an outreach campaign was updated. |
Spam protection | |
| Event | Definition |
| Blocked Spam Source Added | A blocked spam source was added. |
| Blocked Spam Source Removed | A blocked spam source was removed. |
| Blocked Spam Source Updated | A blocked spam source was edited. |
Users | |
| Event | Definition |
| Personal Information Changed | A user updated their own personal information on the My Info page. |
| Phantom User Login | Greenhouse Technical Support accessed an account for troubleshooting. |
| Temporary Access Granted | Greenhouse Technical Support was granted access to an account for troubleshooting. This also appears automatically when an organization is created. |
| Temporary Access Revoked | Greenhouse Technical Support access was revoked. |
| User Email Migration Completed | A bulk update of users' email addresses from an uploaded spreadsheet was completed. |
| User Import Completed | A bulk import of users from an uploaded spreadsheet was completed. |
| User Information Edited | A user's personal information was edited. |
| User Linked To Candidate | A Greenhouse Recruiting user at your organization was linked to a candidate profile. |
| User Login | A Greenhouse Recruiting user logged in. Logins through single sign-on can create two events. |
| User Notifications Changed | A user's notifications were edited. |
| User Permission Edited | A user's permissions were changed. This also appears when permissions are updated through the API or when an email address is added. |
| User Unlinked From Candidate | A Greenhouse Recruiting user at your organization was unlinked from a candidate profile. |
Note: Greenhouse Recruiting is not sponsored by, endorsed by, or affiliated with Workday®.