The auditing component of Stash will log many different events that occur when Stash is being used. The events have been assigned priorities based on how important they are – these priorities can be used to control how much information is added to the audit log file. For example, if you have a server under high load and no need for auditing, you may wish to turn audit logging off by setting it to NONE - see the audit log config properties.

Server level events

EventDescriptionPriority
ApplicationConfigurationChangedEventThe server configuration has changed e.g. the display name or the base url.

LicenseChangedEventThe server license has changed.
MailHostConfigurationChangedEventThe servers mail host has changed (used to send email notifications).
MigrationEventAudited at the begining and the end of a database migration.
ServerEmailAddressChangedEventThe server email address has changed (used in email notifications).
TicketRejectedEventCertain resources (e.g. the Git processes) are throttled, when tickets are rejected (e.g. too many Git processes are in use) this event is fired.

User management events

EventDescriptionPriority
DirectoryCreatedEventOccurs when a new directory is created.
DirectoryDeletedEventOccurs when a new directory is deleted.
GroupCreatedEventOccurs when a new group is created.
GroupUpdatedEventOccurs when a new group is updated (not when membership changes).
GroupDeletedEventOccurs when a new group is deleted.
GroupMembershipCreatedEventOccurs when a user is added to a group.
GroupMembershipDeletedEventOccurs when a user is removed from a group.
UserAuthenticatedEventOccurs when a user is successfully authenticated (logged in).
UserAuthenticationFailedInvalidAuthenticationEvent

Occurs whenever a user fails to authenticate.

Note that this can occur frequently in Stash whenever a command line CLI is used as the initial URL provided to Stash contains a username but no password, which is rejected by Crowd.

UserCreatedEventOccurs when a user is created.
UserCredentialUpdatedEventOccurs when a user changes password.
UserDeletedEventOccurs when a user is deleted.

Permission events

(info) in the table below indicates that the event is visible in the recent audit log screen for the project or repository.

EventDescriptionPriority
GlobalPermissionGrantedEventOccurs when a user or group is granted a global permission (e.g. create project).
GlobalPermissionRevokedEventOccurs when a user or group has a global permission revoked.
ProjectPermissionGrantedEvent

Occurs when a user or group is granted a permission for a specific project. (info)

ProjectPermissionRevokedEvent

Occurs when a user or group has a permission for a specific project revoked. (info)

RepositoryPermissionEvent

Occurs when a user or group has a permission for a specific repository altered. (info)

RestrictedRefEvent

Children of this event are fired when a restricted ref is altered. (info)

Project events

(info) in the table below indicates that the event is visible in the recent audit log screen for the project.

EventDescriptionPriority
ProjectAvatarUpdatedEventRaised when a project avatar has been successfully updated.

ProjectCreatedEvent

Raised when a project is created. (info)

ProjectCreationRequestedEventRaised just before a project is created; can be cancelled.
ProjectModifiedEvent

Raised when a project has been successfully updated (e.g. the project name). (info)

ProjectModificationRequestedEvent Raised just before a project is updated; can be cancelled.
ProjectDeletedEvent Raised when a project is deleted.
ProjectDeletionRequestedEvent Raised just before a project is deleted; can be cancelled.

Repository events

(info) in the table below indicates that the event is visible in the recent audit log screen for the project or repository.

EventDescriptionPriority
RepositoryAccessedEvent

Raised when a repository is accessed by a user.
Stash currently only fires this event selectively - when users hit a repository page.

RepositoryCreatedEvent

Raised when a repository is created. (info)

RepositoryCreationFailedEventRaised when an attempt to create a repository fails.
RepositoryCreationRequestedEventRaised just before a repository is created; can be cancelled.
RepositoryForkedEvent

Raised when a repository is forked successfully. (info)

RepositoryForkFailedEventRaised when an attempt to fork a repository fails.
RepositoryForkRequestedEventRaised just before a repository is forked; can be cancelled.
RepositoryDefaultBranchModifiedEventRaised when the default branch of a repository is reconfigured (typically through repository settings).
RepositoryDeletedEvent

Raised when a repository is deleted. (info)

RepositoryDeletionRequestedEventRaised just before a repository is deleted; can be cancelled.
RepositoryOtherReadEventRaised when the server uploads a pack file to the client via HTTP.
RepositoryOtherWriteEventRaised when the server receives a pack file from the client via HTTP.
RepositoryPullEventRaised when a Git client pulls from a repository (only when new content is sent to the client).
RepositoryPushEventRaised when a Git client pushed to a repository.

Pull request events

EventDescriptionPriority
PullRequestEventFired at different points in the pull request lifecycle (declined, merged, opened, reopened, rescoped [code updated], updated, approved, unapproved, participants updated).

Plugin events

See this plugin documentation for details of when these events below are triggered.

EventDescriptionPriority
PluginDisabledEventOccurs when a plugin has been disabled, either by the system or a user.

PluginEnabledEvent

Occurs when a plugin has been enabled, either by the system or a user.
PluginModuleDisabledEventOccurs when a plugin module has been disabled, either by the system or a user.
PluginModuleEnabledEventOccurs when a plugin module has been enabled, either by the system or a user.
PluginModuleUnavailableEventSignifies a plugin module is now unavailable outside the usual installation process.
PluginUninstalledEventOccurs when a plugin is explicitly uninstalled (as opposed to as part of an upgrade).
PluginUpgradedEventSignifies that a plugin has been upgraded at runtime.
PluginContainerUnavailableEventOccurs when the container of a plugin is being shutdown, usually as a result of the server being stopped.
PluginModuleAvailableEventSignifies that a plugin module is now available outside the usual installation process.
PluginFrameworkStartedEventSignifies that the plugin framework has been started and initialized.