# Panther Audit Log Actions

{% hint style="info" %}
Panther Audit Logs is a feature available in versions 1.34 and newer.
{% endhint %}

Below you'll find a list of all the available actions that Panther tracks as part of its audit logs:

* ADD\_MITRE\_REPORT\_MAPPING
* BATCH\_INFER\_JOBS
* CANCEL\_DATA\_LAKE\_QUERY
* CANCEL\_LOG\_SOURCE\_JOB
* CANCEL\_UBER\_SEARCH
* CHECK\_LOOKUP\_TABLE\_IMPORT\_STATUS
* CHECK\_LOOKUP\_TABLE\_SYNC\_STATUS
* CREATE\_ALERT\_DESTINATION
* CREATE\_API\_TOKEN
* CREATE\_BOOMERANG
* CREATE\_CLOUD\_ACCOUNT
* CREATE\_COMMENT
* CREATE\_DATA\_MODEL
* CREATE\_DETECTION\_FILTER
* CREATE\_DETECTION\_PACK\_SOURCE
* CREATE\_GLOBAL\_HELPER
* CREATE\_LOG\_SOURCE
* CREATE\_LOG\_SOURCE\_ALARM
* CREATE\_LOOKUP\_TABLE
* CREATE\_OR\_UPDATE\_SCHEMA
* CREATE\_PERF\_TEST
* CREATE\_POLICY
* CREATE\_REPLAY
* CREATE\_RULE
* CREATE\_SAVED\_DATA\_LAKE\_QUERY
* CREATE\_SOURCE\_REQUEST
* CREATE\_USER
* CREATE\_USER\_ROLE
* DELETE\_ALERT\_DESTINATION
* DELETE\_API\_TOKEN
* DELETE\_CLOUD\_ACCOUNT
* DELETE\_DATA\_MODEL
* DELETE\_DETECTION
* DELETE\_DETECTION\_FILTER
* DELETE\_DETECTION\_PACK\_SOURCE
* DELETE\_GLOBAL\_HELPER
* DELETE\_LOG\_SOURCE
* DELETE\_LOG\_SOURCE\_ALARM
* DELETE\_LOOKUP\_TABLE
* DELETE\_SAVED\_DATA\_LAKE\_QUERY
* DELETE\_USER
* DELETE\_USER\_ROLE
* DETECTION\_ENTITIES\_UPLOAD\_STATUS
* DOWNLOAD\_DATA\_LAKE\_QUERY
* DOWNLOAD\_DETECTIONS
* EXECUTE\_DATA\_LAKE\_QUERY
* EXECUTE\_INDICATOR\_SEARCH\_QUERY
* EXECUTE\_SIMPLE\_SEARCH\_QUERY
* EXECUTE\_UBER\_SEARCH
* GENERATE\_CUSTOM\_SCHEMA\_SAMPLE
* GENERATE\_CUSTOM\_SCHEMA\_SAMPLE\_UPLOAD\_URL
* GENERATE\_DATA\_LAKE\_SQL\_QUERY\_SNIPPET
* GENERATE\_ENRICHED\_EVENT
* GENERATE\_LOOKUP\_TABLE\_IMPORT\_URL
* GENERATE\_SIMPLE\_SEARCH\_QUERY
* GET\_ALERT
* GET\_ALERTS\_GROUPED\_BY\_INDICATOR
* GET\_ALERT\_DESTINATION
* GET\_ALERT\_METRIC\_DATA
* GET\_ALL\_DATA\_LAKE\_TABLES
* GET\_API\_TOKEN
* GET\_CHECKLISTS
* GET\_CLOUD\_ACCOUNT
* GET\_CLOUD\_RESOURCE
* GET\_CUSTOM\_SCHEMA
* GET\_DATA\_LAKE\_DATABASE
* GET\_DATA\_LAKE\_QUERY
* GET\_DATA\_LAKE\_QUERY\_SUMMARY
* GET\_DATA\_LAKE\_TABLE
* GET\_DATA\_MODEL
* GET\_DETECTION\_FILTER
* GET\_DETECTION\_PACK
* GET\_DETECTION\_PACK\_SOURCE
* GET\_GENERAL\_SETTINGS
* GET\_GLOBAL\_HELPER
* GET\_HOLDING\_TANK\_SOURCE\_RUNNING\_TASK
* GET\_INDICATOR\_GROUPS
* GET\_INDICATOR\_GROUP\_DETAILS
* GET\_INGESTION\_GOVERNOR\_STATE
* GET\_LOG\_SCHEMA\_TEST\_RESULTS
* GET\_LOG\_SOURCE
* GET\_LOG\_SOURCE\_JOB
* GET\_LOG\_SOURCE\_RAW\_DATA
* GET\_LOOKUP\_TABLE
* GET\_MITRE\_MATRIX
* GET\_MITRE\_MATRIX\_TREE
* GET\_MITRE\_TACTIC\_AND\_TECHNIQUE
* GET\_ORGANIZATION\_COMPLIANCE\_STATS
* GET\_ORGANIZATION\_METRICS
* GET\_POLICY
* GET\_REPLAY
* GET\_REPLAY\_ALERT
* GET\_REPLAY\_PREVIEW
* GET\_REPORT\_SETTING
* GET\_RULE
* GET\_SAML\_SETTINGS
* GET\_SAVED\_DATA\_LAKE\_QUERY
* GET\_SOURCE\_METRICS
* GET\_SUPPORTED\_LOG\_PROVIDER
* GET\_SUPPORT\_LOGIN\_CONFIG
* GET\_THREAT\_INTEL
* GET\_TRIAL\_INGESTION\_METRICS
* GET\_UBER\_SEARCH
* GET\_UNIVERSAL\_SETTINGS
* GET\_USER
* GET\_USER\_ROLE
* IMPORT\_LOOKUP\_TABLE\_DATA
* INFER\_CUSTOM\_SCHEMA
* INFER\_SCHEMA\_FROM\_BUCKET\_DATA
* INFER\_SCHEMA\_FROM\_RAW\_DATA
* ISSUE\_ALERT\_SUMMARY\_QUERIES
* LIST\_ALERTS
* LIST\_ALERTS\_V2
* LIST\_ALERT\_DESTINATIONS
* LIST\_API\_TOKENS
* LIST\_CLOUD\_ACCOUNTS
* LIST\_CLOUD\_RESOURCES
* LIST\_DATA\_LAKE\_DATABASES
* LIST\_DATA\_LAKE\_QUERIES
* LIST\_DATA\_MODELS
* LIST\_DETECTIONS
* LIST\_DETECTION\_PACKS
* LIST\_DETECTION\_PACK\_SOURCES
* LIST\_FILTER\_FIELDS
* LIST\_GLOBAL\_HELPERS
* LIST\_HOLDING\_TANK\_TASKS
* LIST\_JIRA\_TRANSITION\_STATUSES
* LIST\_LOG\_SOURCES
* LIST\_LOG\_TYPES
* LIST\_LOOKUP\_TABLES
* LIST\_POLICIES
* LIST\_REPLAYS
* LIST\_REPLAY\_ALERTS
* LIST\_RESOURCES
* LIST\_SAVED\_DATA\_LAKE\_QUERIES
* LIST\_SCHEMAS
* LIST\_SOURCE\_BUCKET\_KEYS
* LIST\_SUPPORTED\_LOG\_PROVIDERS
* LIST\_USERS
* LIST\_USER\_ROLES
* RESET\_USER\_PASSWORD
* RESOLVE\_SOURCE\_ALARM
* RETRY\_ALERT\_DELIVERY
* ROTATE\_API\_TOKEN
* SEND\_TEST\_ALERT
* SEND\_USER\_FEEDBACK
* SIGN\_IN
* STOP\_REPLAY
* SUMMARIZE\_DATA\_LAKE\_QUERY
* SUPPRESS\_POLICY
* SYNC\_LOOKUP\_TABLE\_DATA
* TEST\_CUSTOM\_SCHEMA
* TEST\_FILTER\_EVENT
* TEST\_LOG\_SCHEMA\_WITH\_RAW\_DATA
* TEST\_POLICY
* TEST\_RULE
* TRANSPILE\_FILTERS
* TRANSPILE\_SIMPLE\_DETECTIONS\_TO\_PYTHON
* UPDATE\_ALERT\_ASSIGNEE
* UPDATE\_ALERT\_DESTINATION
* UPDATE\_ALERT\_STATUS
* UPDATE\_API\_TOKEN
* UPDATE\_BOOMERANG
* UPDATE\_CLOUD\_ACCOUNT
* UPDATE\_CUSTOM\_SCHEMA\_STATE
* UPDATE\_DATA\_MODEL
* UPDATE\_DETECTION\_FILTER
* UPDATE\_DETECTION\_PACK\_SOURCE
* UPDATE\_DETECTION\_PACK\_STATE
* UPDATE\_DETECTION\_STATE
* UPDATE\_GENERAL\_SETTINGS
* UPDATE\_GLOBAL\_HELPER
* UPDATE\_LOG\_SOURCE
* UPDATE\_LOG\_SOURCE\_FILTERS
* UPDATE\_LOOKUP\_TABLE
* UPDATE\_MITRE\_REPORT\_SETTING
* UPDATE\_POLICY
* UPDATE\_RULE
* UPDATE\_RULE\_AND\_FILTER
* UPDATE\_SAML\_SETTINGS
* UPDATE\_SAVED\_DATA\_LAKE\_QUERY
* UPDATE\_SUPPORT\_LOGIN\_SETTINGS
* UPDATE\_USER
* UPDATE\_USER\_ROLE
* UPLOAD\_DETECTION\_ENTITIES
* UPLOAD\_DETECTION\_ENTITIES\_ASYNC
* VALIDATE\_BULK\_UPLOAD
* VALIDATE\_BULK\_UPLOAD\_STATUS
* VIEW\_SOURCE\_BUCKET\_DATA
* VIEW\_SOURCE\_PARSED\_EVENTS
