0

Playing with the Google Admin SDK I found out that When one of the users under a Google Apps Unlimited account renames a file to lowercase (i.e. from "Test file" to "test file") I see in the Audit logs an 'Edit' event instead of a 'Rename' event.

Is that intentional or is it a bug?

https://i.stack.imgur.com/hYtQ4.png

I am using the API Explorer from Google to test it developers.google.com/admin-sdk/reports/v1/reference/activities/ and after renaming a file to lowercase this is the entry that the API Explorer returns http://prnt.sc/aacsic

Ronan Weinberg Waks
  • 51
  • 3

1 Answers1

0

As described in the docs, a single user action can produce multiple events in the log. Check for other events and look for primary_event=true to better understand what the user might have actually done.

Jay Lee
  • 13,415
  • 3
  • 28
  • 59
  • There is only one event in the `events` array, its primary_event=true, and the name of the event is 'name': 'edit', 'type': 'access'. There is not any event that says 'rename' @JayLee – Ronan Weinberg Waks Mar 01 '16 at 23:19
  • I am using the API Explorer from Google to test it https://developers.google.com/admin-sdk/reports/v1/reference/activities/list And after renaming a file to lowercase, this is the entry that the API Explorer returns http://prnt.sc/aacsic – Ronan Weinberg Waks Mar 02 '16 at 18:26