Captures activity logs for a Dropbox Business team, including file sharing, edits, logins, and permission changes.

Table Specific Information

The following scopes are required to access this view: events.read

Select

The driver uses the Dropbox API to process search criteria that refer to the StartTime or EndTime columns. The driver processes other filters client-side within the driver. For example, the following queries are processed server side.

SELECT * FROM Events WHERE StartTime = '2020-04-05'

SELECT * FROM Events WHERE EndTime = '2020-04-05'

SELECT * FROM Events WHERE StartTime = '2020-04-05' AND EndTime = '2020-06-12'

Columns

Name	Type	Description
Timestamp	Timestamp	The Dropbox timestamp indicating when the event occurred.
Category	String	The general category associated with the type of action performed (for example, file operations, team changes, or sharing).
Type	String	The specific action type that was performed, such as file download, user login, or folder creation.
Description	String	A human-readable summary of the event type.
DetailsTag	String	A schema tag representing additional structured details about the specific event.
ErrorUserFriendlyMessage	String	A user-friendly message describing the error, if the action resulted in an error.
IsEmmManaged	Boolean	Indicates whether the action was performed in an environment managed by an Enterprise Mobility Management (EMM) system.
LoginMethod	String	The method used by the user to log in, such as password, single sign-on, or OAuth.
AppInfoTag	String	Structured tag containing information about the application involved in the action.
AppInfoAppId	String	The unique identifier of the app associated with the event.
AppInfoDisplayName	String	The display name of the app that initiated or was involved in the action.
IsGroupOwner	Boolean	Indicates whether the user is the owner of a group involved in the event.
IsCompanyManaged	Boolean	Indicates whether the company or organization is using Dropbox in a managed enterprise environment.
ActorTag	String	Represents the entity who performed the action. May be missing due to historical data gaps.
ActorAdminTag	String	Structured tag representing administrative information about the actor.
ActorAdminAccountId	String	The account Id of the administrator who performed the action.
ActorAdminDisplayName	String	The display name of the administrator who performed the action.
ActorAdminEmail	String	The email address of the administrator.
ActorAdminTeamMemberId	String	The team member Id of the administrator.
ActorAppTag	String	Structured tag representing the app as the actor.
ActorAppId	String	The unique identifier of the app that performed the action.
ActorAppDisplayName	String	The display name of the app that performed the action.
ContextTag	String	Represents the user or team on whose behalf the action was taken. Can be missing due to historical data gaps.
ContextAccountId	String	The account Id of the user or team in the context of the event.
ContextDisplayName	String	The display name of the user or team associated with the context.
ContextEmail	String	The email address of the user in context.
ContextTeamMemberId	String	The team member Id of the user in context.
AccessMethodTag	String	The method used to access Dropbox, such as web, desktop application, mobile app, or API.
EndUserWebSessionId	String	The session Id for the user's web session during the event.
EndUserDesktopSessionId	String	The session Id for the user's desktop app session during the event.
EndUserMobileSessionId	String	The session Id for the user's mobile app session during the event.
SignInAsWebSessionId	String	The session Id for 'sign-in-as' activity by an admin impersonating another user.
ContentManagerWebSessionId	String	The session Id for the content manager's web session.
AdminConsoleWebSessionId	String	The session Id for the admin console used during the event.
EnterpriseConsoleSessionId	String	The session Id for the enterprise console if used.
ApiSessionRequestId	String	The request Id associated with the API session that triggered the event.
GeoLocationIpAddress	String	The IP address from which the action was performed.
GeoLocationCity	String	The city associated with the IP address where the event occurred.
GeoLocationRegion	String	The geographic region (such as state or province) associated with the IP address.
GeoLocationCountry	String	The country associated with the IP address.
InvolveNonTeamMembers	Boolean	Indicates whether the event involved individuals outside the Dropbox team (non-team members).

Pseudo-Columns

Pseudo column fields are used in the WHERE clause of SELECT statements and offer a more granular control over the tuples that are returned from the data source.

Name	Type	Description
StartTime	Timestamp	Filter for events that occurred at or after this start timestamp.
EndTime	Timestamp	Filter for events that occurred at or before this end timestamp.