> For the complete MongoDB documentation index, see www.mongodb.com/docs/llms.txt

# Atlas Alert Event Types

## Account Event Types

| Event Type | Description | Alertable? |
| --- | --- | --- |
| `ACCOUNT_DOWNGRADED` | Account downgraded | no |
| `ACCOUNT_MODIFIED` | Account modified | no |
| `ACCOUNT_UPGRADED` | Account upgraded | no |
| `GLOBAL_SERVICE_ACCOUNT_SECRETS_EXPIRED` | Global Service Account Secrets have expired | yes |
| `GLOBAL_SERVICE_ACCOUNT_SECRETS_EXPIRING` | Global Service Account Secrets are expiring | yes |
| `GLOBAL_SERVICE_ACCOUNT_SECRETS_NO_LONGER_EXPIRED` | Global Service Account Secrets are no longer expired | no |
| `GLOBAL_SERVICE_ACCOUNT_SECRETS_NO_LONGER_EXPIRING` | Global Service Account Secrets are no longer expiring | no |

## AI Event Types

| Event Type | Description | Alertable? |
| --- | --- | --- |
| `AI_MODELS_APIS_API_KEY_CREATED` | API key has been created | no |
| `AI_MODELS_APIS_API_KEY_DELETED` | API key has been deleted | no |
| `AI_MODELS_APIS_API_KEY_UPDATED` | API key has been updated | no |
| `AI_MODELS_APIS_FREE_TOKENS_ADMIN_ADJUSTED` | Free token balance has been adjusted by admin | no |
| `AI_MODELS_APIS_RATE_LIMIT_ADMIN_OVERRIDE` | Rate limit has been overridden by admin | no |
| `AI_MODELS_APIS_RATE_LIMIT_RESET` | Rate limit has been reset | no |
| `AI_MODELS_APIS_RATE_LIMIT_UPDATED` | Rate limit has been updated | no |
| `AI_MODELS_APIS_USAGE_TIER_UPDATED` | Usage tier has been updated | no |

## API Event Types

| Event Type | Description | Alertable? |
| --- | --- | --- |
| `API_KEY_ACCESS_LIST_ENTRY_ADDED` | API Key Access List Entry Added | no |
| `API_KEY_ACCESS_LIST_ENTRY_DELETED` | API Key Access List Entry Deleted | no |
| `API_KEY_ADDED_TO_GROUP` | API Key added to Group | no |
| `API_KEY_CREATED` | A new API key has been created | no |
| `API_KEY_DELETED` | An API Key has been deleted | no |
| `API_KEY_DESCRIPTION_CHANGED` | API Key Description Changed | no |
| `API_KEY_REMOVED_FROM_GROUP` | API Key removed from Group | no |
| `API_KEY_ROLES_CHANGED` | API Key Roles Changed | no |
| `API_KEY_UI_IP_ACCESS_LIST_INHERITANCE_DISABLED` | UI IP access list inheritance disabled | no |
| `API_KEY_UI_IP_ACCESS_LIST_INHERITANCE_ENABLED` | UI IP access list inheritance enabled | no |

## Atlas Event Types

| Event Type | Description | Alertable? |
| --- | --- | --- |
| `ATLAS_MAINTENANCE_AUTO_DEFER_DISABLED` | User disabled auto defer | no |
| `ATLAS_MAINTENANCE_AUTO_DEFER_ENABLED` | User enabled auto defer | no |
| `ATLAS_MAINTENANCE_DEFERRED` | Project maintenance deferred by one week | no |
| `ATLAS_MAINTENANCE_DEFERRED_BY_ADMIN` | Admin deferred maintenance | no |
| `ATLAS_MAINTENANCE_FLEET_ACTIVE_WAVE_CLOSED_BY_ADMIN` | Admin manually closed the active fleet maintenance wave for an org | no |
| `ATLAS_MAINTENANCE_PROTECTED_HOURS_CREATED` | Project maintenance protected hours created | no |
| `ATLAS_MAINTENANCE_PROTECTED_HOURS_MODIFIED` | Project maintenance protected hours modified | no |
| `ATLAS_MAINTENANCE_PROTECTED_HOURS_REMOVED` | Project maintenance protected hours removed | no |
| `ATLAS_MAINTENANCE_RESET_BY_ADMIN` | Admin reset maintenance | no |
| `ATLAS_MAINTENANCE_SCHEDULED_FOR_NEXT_WINDOW` | User requested maintenance for the next window without 72-hours notice | no |
| `ATLAS_MAINTENANCE_START_ASAP` | User requested immediate start of project maintenance | no |
| `ATLAS_MAINTENANCE_WINDOW_ADDED` | Project maintenance window created | no |
| `ATLAS_MAINTENANCE_WINDOW_MODIFIED` | Project maintenance window modified | no |
| `ATLAS_MAINTENANCE_WINDOW_REMOVED` | Project maintenance window removed | no |
| `ATLAS_SQL_SCHEDULED_UPDATE_CREATED` | New Atlas SQL Scheduled Schema Update created | no |
| `ATLAS_SQL_SCHEDULED_UPDATE_MODIFIED` | Atlas SQL Scheduled Schema Update modified | no |
| `ATLAS_SQL_SCHEDULED_UPDATE_REMOVED` | Atlas SQL Scheduled Schema Update removed | no |

## Audit Event Types

| Event Type | Description | Alertable? |
| --- | --- | --- |
| `ADD_HOST_AUDIT` | Host added | yes |
| `ADD_HOST_TO_REPLICA_SET_AUDIT` | Mongo process is being monitored | yes |
| `ALERT_ACKNOWLEDGED_AUDIT` | Alert acknowledged | no |
| `ALERT_CONFIG_ADDED_AUDIT` | Alert configuration added | no |
| `ALERT_CONFIG_CHANGED_AUDIT` | Alert configuration changed | no |
| `ALERT_CONFIG_DELETED_AUDIT` | Alert configuration deleted | no |
| `ALERT_CONFIG_DISABLED_AUDIT` | Alert configuration disabled | no |
| `ALERT_CONFIG_ENABLED_AUDIT` | Alert configuration enabled | no |
| `ALERT_UNACKNOWLEDGED_AUDIT` | Alert unacknowledged | no |
| `ATTEMPT_KILLOP_AUDIT` | Attempted to kill operation | no |
| `ATTEMPT_KILLSESSION_AUDIT` | Attempted to kill session | no |
| `AUDIT_LOG_CONFIGURATION_UPDATED` | Audit log configuration updated | no |
| `AUTOMATION_CONFIG_PUBLISHED_AUDIT` | Deployment configuration published | no |
| `BUCKET_CREATED_AUDIT` | A new export bucket has been added | no |
| `BUCKET_DELETED_AUDIT` | A export bucket has been deleted | no |
| `CLUSTERSHOT_DELETED_AUDIT` | Cluster snapshot has been deleted | no |
| `CLUSTERSHOT_EXPIRY_UPDATED_AUDIT` | Clustershot expiry has been updated. | no |
| `CLUSTER_BLACKLIST_UPDATED_AUDIT` | Excluded namespaces were modified for cluster | no |
| `CLUSTER_CHECKPOINT_UPDATED_AUDIT` | Checkpoint interval updated for cluster | no |
| `CLUSTER_CREDENTIAL_UPDATED_AUDIT` | Backup authentication credentials updated for cluster | no |
| `CLUSTER_DENYLIST_UPDATED_AUDIT` | Excluded namespaces were modified for cluster | no |
| `CLUSTER_SNAPSHOT_SCHEDULE_UPDATED_AUDIT` | Snapshot schedule updated for cluster | no |
| `CLUSTER_STATE_CHANGED_AUDIT` | Cluster backup state is now | no |
| `CLUSTER_STORAGE_ENGINE_UPDATED_AUDIT` | Cluster storage engine has been updated | no |
| `CPS_OPLOG_BEHIND_AUDIT` | CPS oplogs have fallen behind by more than 10 min | no |
| `CPS_OPLOG_CAUGHT_UP_AUDIT` | CPS oplogs are caught up within 10 min | no |
| `CPS_RESTORE_AUTH_AUDIT` | A Cloud Backup collection-restore agent retrieved system cluster credentials | no |
| `CPS_RESTORE_REQUESTED_AUDIT` | A Cloud Backup restore has been requested | no |
| `CPS_SNAPSHOT_COMPLETED_AUDIT` | Cloud Backup snapshot has completed | no |
| `CPS_SNAPSHOT_DELETED_AUDIT` | Cloud Backup snapshot has been deleted | no |
| `CPS_SNAPSHOT_FASTER_RESTORES_FAILED_AUDIT` | Migration to faster cross-project restores has failed | no |
| `CPS_SNAPSHOT_FASTER_RESTORES_START_AUDIT` | Migration to faster cross-project restores has started | no |
| `CPS_SNAPSHOT_FASTER_RESTORES_SUCCESS_AUDIT` | Migration to faster cross-project restores has succeeded | no |
| `CPS_SNAPSHOT_IN_PROGRESS_AUDIT` | Cloud Backup snapshot has started | no |
| `CPS_SNAPSHOT_RETENTION_MODIFIED_AUDIT` | Cloud Backup snapshot's retention has been edited | no |
| `CPS_SNAPSHOT_SCHEDULE_UPDATED_AUDIT` | Cloud Backup schedule updated | no |
| `DB_PROFILER_DISABLE_AUDIT` | Database profiling disabled | no |
| `DB_PROFILER_ENABLE_AUDIT` | Database profiling enabled | no |
| `DELETE_HOST_AUDIT` | Host removed | yes |
| `DISABLE_HOST_AUDIT` | Monitoring for host disabled | no |
| `HIDE_AND_DISABLE_HOST_AUDIT` | Monitoring for host disabled and hidden | no |
| `HIDE_HOST_AUDIT` | Monitoring for host hidden | no |
| `INITIAL_SYNC_FINISHED_AUDIT` | Backup initial sync finished | no |
| `INITIAL_SYNC_STARTED_AUDIT` | Backup initial sync started | no |
| `JOIN_GROUP_REQUEST_APPROVED_AUDIT` | Request to join project was approved | no |
| `JOIN_GROUP_REQUEST_DENIED_AUDIT` | Request to join project was denied | no |
| `MAINTENANCE_WINDOW_ADDED_AUDIT` | Maintenance window configuration added | no |
| `MAINTENANCE_WINDOW_CHANGED_AUDIT` | Maintenance window configuration changed | no |
| `MAINTENANCE_WINDOW_DELETED_AUDIT` | Maintenance window configuration deleted | no |
| `PAUSE_HOST_AUDIT` | Monitoring for host paused | no |
| `REMOVE_HOST_FROM_REPLICA_SET_AUDIT` | Mongo process is not being monitored as it has been unresponsive for a period of time | yes |
| `RESTORE_REQUESTED_AUDIT` | A restore has been requested | no |
| `RESUME_HOST_AUDIT` | Monitoring for host resumed | no |
| `RS_BLACKLIST_UPDATED_AUDIT` | Excluded namespaces were modified for replica set | no |
| `RS_CREDENTIAL_UPDATED_AUDIT` | Backup authentication credentials updated for replica set | no |
| `RS_DENYLIST_UPDATED_AUDIT` | Excluded namespaces were modified for replica set | no |
| `RS_ROTATE_MASTER_KEY_AUDIT` | A master key rotation has been requested for a replica set. | no |
| `RS_SNAPSHOT_SCHEDULE_UPDATED_AUDIT` | Snapshot schedule updated for replica set | no |
| `RS_STATE_CHANGED_AUDIT` | Replica set backup state is now | no |
| `RS_STORAGE_ENGINE_UPDATED_AUDIT` | Replica set storage engine has been updated | no |
| `SNAPSHOT_DELETED_AUDIT` | Snapshot has been deleted | no |
| `SNAPSHOT_EXPIRY_UPDATED_AUDIT` | Snapshot expiry has been updated. | no |
| `STREAMS_AUDIT_LOG_CONFIGURATION_UPDATED` | Atlas Stream Processing Audit log configuration updated | no |
| `STREAM_TENANT_AUDIT_LOGS` | Stream Processing Workspace audit logs downloaded | no |
| `STREAM_TENANT_AUDIT_LOGS_DELETED` | Stream Processing Workspace audit logs deleted | no |
| `SYNC_PENDING_AUDIT` | Backup sync is pending | no |
| `SYNC_REQUIRED_AUDIT` | Backup sync has been initiated | no |
| `TENANT_RESTORE_COMPLETED_AUDIT` | A tenant restore has completed | no |
| `TENANT_RESTORE_REQUESTED_AUDIT` | A tenant restore has been requested | no |
| `TENANT_SNAPSHOT_COMPLETED_AUDIT` | A tenant snapshot has completed | no |
| `TENANT_SNAPSHOT_DELETED_AUDIT` | A tenant snapshot has been deleted | no |
| `TENANT_SNAPSHOT_DOWNLOAD_REQUESTED_AUDIT` | A tenant snapshot download has been requested | no |
| `TENANT_SNAPSHOT_STARTED_AUDIT` | A tenant snapshot has started | no |
| `UNDELETE_HOST_AUDIT` | Host undeleted | no |
| `USER_ROLES_CHANGED_AUDIT` | User had their role changed | yes |

## Auto Healing Event Types

| Event Type | Description | Alertable? |
| --- | --- | --- |
| `AUTO_HEALING_ACTION` | Auto-healing system took action | no |
| `AUTO_HEALING_REQUESTED_CRITICAL_INSTANCE_POWER_CYCLE` | Atlas auto-healing requested instance stop and start | no |
| `AUTO_HEALING_REQUESTED_INSTANCE_REPLACEMENT` | Atlas auto-healing requested instance replacement | no |
| `AUTO_HEALING_REQUESTED_NODE_RESYNC` | Atlas auto-healing requested node resync | no |

## Auto Indexing Event Types

| Event Type | Description | Alertable? |
| --- | --- | --- |
| `AUTO_INDEXING_COMPLETED_INDEX_BUILD` | Auto-created index build completed | no |
| `AUTO_INDEXING_DISABLED` | Auto-indexing disabled | no |
| `AUTO_INDEXING_ENABLED` | Auto-indexing enabled | no |
| `AUTO_INDEXING_FAILED_INDEX_BUILD` | Auto-created index build failed | no |
| `AUTO_INDEXING_INDEX_BUILD_SUBMITTED` | Submitted auto-created index build | no |
| `AUTO_INDEXING_SLOW_INDEX_BUILD` | Slow index build detected for auto-created index | no |
| `AUTO_INDEXING_STALLED_INDEX_BUILD` | Stalled index build detected for auto-created index | no |
| `AUTO_INDEXING_STARTED_INDEX_BUILD` | Auto-created index build started | no |

## AWS Event Types

| Event Type | Description | Alertable? |
| --- | --- | --- |
| `AWS_AVAILABILITY_ZONE_DOWN` | AWS AZ Appears Down | yes |
| `AWS_AVAILABILITY_ZONE_OK` | AWS AZ Appears Down | no |
| `AWS_BILLING_ACCOUNT_CREDIT_ISSUED` | Credit issued | no |
| `AWS_ENCRYPTION_KEY_INVALID` | AWS Encryption at Rest key is invalid | yes |
| `AWS_ENCRYPTION_KEY_NEEDS_ROTATION` | AWS encryption key needs rotation | yes |
| `AWS_ENCRYPTION_KEY_ROTATED` | AWS Encryption key rotation no longer due | no |
| `AWS_ENCRYPTION_KEY_VALID` | AWS Encryption at Rest key is valid | no |
| `AWS_PAYMENT_PAID` | AWS Payment Paid | no |
| `AWS_SELF_SERVE_ACCOUNT_CANCELLED` | AWS Subscription Cancelled | no |
| `AWS_SELF_SERVE_ACCOUNT_LINKED` | AWS Subscription Linked | no |
| `AWS_SELF_SERVE_ACCOUNT_LINK_FAILED` | AWS Subscription Link Failed | no |
| `AWS_SELF_SERVE_ACCOUNT_LINK_PENDING` | AWS Subscription Link Pending | no |
| `AWS_USAGE_REPORTED` | AWS Usage Reported | no |
| `LOW_S3_BLOCKSTORE_METADATA_DB_FREE_SPACE_PERCENT` | S3 Blockstore metadata DB has low free disk space percentage | yes |
| `LOW_S3_OPLOGSTORE_METADATA_DB_FREE_SPACE_PERCENT` | S3 Oplogstore metadata DB has low free disk space percentage | yes |
| `S3_LOG_STREAMING_CONFIGURATION_UPDATED` | S3 Log Streaming configuration updated | no |
| `S3_LOG_STREAMING_DISABLED` | S3 Log Streaming disabled | no |
| `S3_LOG_STREAMING_ENABLED` | S3 Log Streaming enabled | no |
| `SUFFICIENT_S3_BLOCKSTORE_METADATA_DB_FREE_SPACE` | S3 Blockstore metadata DB has sufficient free disk space | no |
| `SUFFICIENT_S3_OPLOGSTORE_METADATA_DB_FREE_SPACE` | S3 Oplogstore metadata DB has sufficient free disk space | no |

## Azure Event Types

| Event Type | Description | Alertable? |
| --- | --- | --- |
| `AZURE_BILLING_ACCOUNT_CREDIT_ISSUED` | Credit issued | no |
| `AZURE_CLUSTER_PREFERRED_STORAGE_TYPE_UPDATED` | Azure Cluster preferred storage type has been updated | no |
| `AZURE_ENCRYPTION_KEY_INVALID` | Azure Encryption at Rest key is invalid | yes |
| `AZURE_ENCRYPTION_KEY_NEEDS_ROTATION` | Azure encryption key needs rotation | yes |
| `AZURE_ENCRYPTION_KEY_ROTATED` | AZURE Encryption key rotation no longer due | no |
| `AZURE_ENCRYPTION_KEY_VALID` | Azure Encryption at Rest key is valid | no |
| `AZURE_LOG_STREAMING_CONFIGURATION_UPDATED` | Azure Log Streaming configuration updated | no |
| `AZURE_LOG_STREAMING_DISABLED` | Azure Log Streaming disabled | no |
| `AZURE_LOG_STREAMING_ENABLED` | Azure Log Streaming enabled | no |
| `AZURE_PEER_ACTIVE` | Azure Virtual Network peering connection active | no |
| `AZURE_PEER_CREATED` | Azure Virtual Network peering initiated | no |
| `AZURE_PEER_DELETED` | Azure Virtual Network peering deleted | no |
| `AZURE_PEER_UPDATED` | Azure Virtual Network peering updated | no |
| `AZURE_REGION_DOWN` | AZURE Region Appears Down | yes |
| `AZURE_REGION_OK` | AZURE Region Appears Down | no |
| `AZURE_SELF_SERVE_ACCOUNT_CANCELLED` | Azure Subscription Cancelled | no |
| `AZURE_SELF_SERVE_ACCOUNT_LINKED` | Azure Subscription Linked | no |
| `AZURE_SELF_SERVE_ACCOUNT_LINK_FAILED` | Azure Subscription Link Failed | no |
| `AZURE_SELF_SERVE_ACCOUNT_LINK_PENDING` | Azure Subscription Link Pending | no |
| `AZURE_USAGE_REPORTED` | Azure Usage Reported | no |

## Backup Event Types

| Event Type | Description | Alertable? |
| --- | --- | --- |
| `BACKUP_AGENT_DOWN` | Backup is down | yes |
| `BACKUP_AGENT_UP` | Backup is up | no |
| `BACKUP_AGENT_VERSION_BEHIND` | Backup does not have the latest version | yes |
| `BACKUP_AGENT_VERSION_CURRENT` | Backup has the latest version | no |
| `BACKUP_DEPLOYMENT_CHANGE` | Backup deployment changed | no |
| `BACKUP_DEPLOYMENT_CONFIG_IS_MISSING` | Backup deployment config is missing. | yes |
| `BACKUP_DEPLOYMENT_CONFIG_IS_PRESENT` | Backup deployment config is present. | no |
| `BACKUP_DEPLOYMENT_DELETED` | Backup deployment deleted | no |
| `BACKUP_IMPORT_CHANGE` | Backup import status changed | no |
| `BACKUP_SUPPORTED` | Backups are supported | no |
| `BACKUP_UNSUPPORTED` | Backups are not supported | yes |

## Billing Event Types

| Event Type | Description | Alertable? |
| --- | --- | --- |
| `BILLING_AUDITOR_ON_ALERT` | Billing Auditor is on Alert. | yes |
| `BILLING_AUDITOR_ON_FAILURE` | Billing Auditor has failed. | yes |
| `BILLING_EMAIL_ADDRESS_ADDED` | Billing email address added | no |
| `BILLING_EMAIL_ADDRESS_CHANGED` | Billing email address changed | no |
| `BILLING_EMAIL_ADDRESS_REMOVED` | Billing email address removed | no |
| `CREDIT_TOTAL_BILLED_CENTS_MODIFIED` | Credit Total Billed Cents Modified | no |
| `DAILY_BILLING_CHANGE_NORMAL` | Project daily billing percentage change is below threshold | no |
| `DAILY_BILLING_CHANGE_OVER_THRESHOLD` | Project daily billing has increased by more than the threshold percent | yes |
| `DAILY_BILL_OVER_THRESHOLD` | Daily amount billed ($) is above threshold | yes |
| `DAILY_BILL_UNDER_THRESHOLD` | Daily amount billed ($) is below threshold | no |
| `LEGACY_REBILL_EXECUTED` | Legacy rebill completed | no |
| `MONTHLY_BILLING_CHANGE_NORMAL` | Project monthly billing percentage change is below threshold | no |
| `MONTHLY_BILLING_CHANGE_OVER_THRESHOLD` | Project monthly billing has increased by more than the threshold percent | yes |
| `ORG_DAILY_BILLING_CHANGE_NORMAL` | Organization daily billing change is within normal threshold | no |
| `ORG_DAILY_BILLING_CHANGE_OVER_THRESHOLD` | Organization daily billing has increased by more than the limit you set compared to previous day | yes |
| `ORG_DAILY_BILL_OVER_THRESHOLD` | Amount billed yesterday is above the limit you set | yes |
| `ORG_DAILY_BILL_UNDER_THRESHOLD` | Daily amount billed is below the limit you set | no |
| `ORG_MONTHLY_BILLING_CHANGE_NORMAL` | Organization monthly billing change is within normal threshold | no |
| `ORG_MONTHLY_BILLING_CHANGE_OVER_THRESHOLD` | Organization monthly billing has increased by more than the limit you set compared to the previous 30 days | yes |
| `ORG_WEEKLY_BILLING_CHANGE_NORMAL` | Organization weekly billing change is within normal threshold | no |
| `ORG_WEEKLY_BILLING_CHANGE_OVER_THRESHOLD` | Organization weekly billing has increased by more than the limit you set compared to the previous 7 days | yes |
| `TARGETED_REBILL_EXECUTED` | Targeted rebill completed | no |
| `WEEKLY_BILLING_CHANGE_NORMAL` | Project weekly billing percentage change is below threshold | no |
| `WEEKLY_BILLING_CHANGE_OVER_THRESHOLD` | Project weekly billing has increased by more than the threshold percent | yes |

## Cloud Event Types

| Event Type | Description | Alertable? |
| --- | --- | --- |
| `CLOUD_PROVIDER_ACCESS_AWS_IAM_ROLE_ADDED` | Cloud Provider Access AWS IAM Role added | no |
| `CLOUD_PROVIDER_ACCESS_AWS_IAM_ROLE_DELETED` | Cloud Provider Access AWS IAM Role deleted | no |
| `CLOUD_PROVIDER_ACCESS_AWS_IAM_ROLE_UPDATED` | Cloud Provider Access AWS IAM Role updated | no |
| `CLOUD_PROVIDER_ACCESS_AZURE_SERVICE_PRINCIPAL_ADDED` | Cloud Provider Access Azure Service Principal added | no |
| `CLOUD_PROVIDER_ACCESS_AZURE_SERVICE_PRINCIPAL_DELETED` | Cloud Provider Access Azure Service Principal deleted | no |
| `CLOUD_PROVIDER_ACCESS_AZURE_SERVICE_PRINCIPAL_UPDATED` | Cloud Provider Access Azure Service Principal updated | no |
| `CLOUD_PROVIDER_ACCESS_GCP_SERVICE_ACCOUNT_ADDED` | Cloud Provider Access GCP Service Account added | no |
| `CLOUD_PROVIDER_ACCESS_GCP_SERVICE_ACCOUNT_DELETED` | Cloud Provider Access GCP Service Account deleted | no |
| `CLOUD_PROVIDER_ACCESS_GCP_SERVICE_ACCOUNT_UPDATED` | Cloud Provider Access GCP Service Account updated | no |

## Cluster Event Types

| Event Type | Description | Alertable? |
| --- | --- | --- |
| `CLUSTER_AUTOMATICALLY_PAUSED` | Cluster has been automatically paused due to inactivity | no |
| `CLUSTER_AUTOMATION_CONFIG_PUBLISHED` | Admin published cluster automation config | no |
| `CLUSTER_AUTO_SHARDING_INITIATED` | Cluster auto-sharding initiated | yes |
| `CLUSTER_BINARY_VERSION_DOWNGRADED` | Cluster binary version downgrade submitted | no |
| `CLUSTER_BINARY_VERSION_UPGRADED` | Cluster binary version upgrade submitted | no |
| `CLUSTER_BLOCK_WRITE` | Writes have been blocked on your cluster due to critically low available storage | yes |
| `CLUSTER_CANCELING_CONFIG_SERVER_TRANSITION_REQUESTED` | Cluster cancel config server transition requested | no |
| `CLUSTER_CANCELING_SHARD_DRAIN_REQUESTED` | Cluster cancel shard drain requested | no |
| `CLUSTER_CONNECTION_AGGREGATE` | Run aggregation | no |
| `CLUSTER_CONNECTION_CREATE_COLLECTION` | A collection was created for a cluster | no |
| `CLUSTER_CONNECTION_FIND_DOCUMENTS` | Run find to fetch documents from a collection | no |
| `CLUSTER_CONNECTION_GET_AGGREGATED_VIEW_INFOS` | A list of aggregated view information requested for a cluster (includes namespaces, viewOn, rootCollectionName/UUID and effective pipeline) | no |
| `CLUSTER_CONNECTION_GET_DATABASES` | A list of databases requested for a cluster | no |
| `CLUSTER_CONNECTION_GET_DATABASE_COLLECTIONS` | A list of database collections requested for a cluster | no |
| `CLUSTER_CONNECTION_GET_DATABASE_NAMESPACES` | A list of database namespaces requested for a cluster | no |
| `CLUSTER_CONNECTION_GET_NAMESPACES_AND_PROJECT_SQL_SCHEMA_DATA` | List Atlas SQL namespaces and project schema data for a cluster | no |
| `CLUSTER_CONNECTION_GET_NAMESPACES_WITH_UUID` | A list of database namespaces and uuids requested for a cluster | no |
| `CLUSTER_CONNECTION_SAMPLE_COLLECTION_FIELD_NAMES` | Run $sample aggregation to get document field names | no |
| `CLUSTER_CONNECTION_SAMPLE_COLLECTION_FIELD_NAMES_AND_TYPES` | Run $sample aggregation to get document field names and types | no |
| `CLUSTER_CREATED` | New cluster created | no |
| `CLUSTER_CREATED_VIA_ANIS` | Cluster created via Azure Native integration | no |
| `CLUSTER_DELETED` | Cluster deleted | no |
| `CLUSTER_DELETE_SUBMITTED` | Cluster delete submitted | no |
| `CLUSTER_DELETE_SUBMITTED_INTERNAL` | Cluster delete submitted: hidden properties | no |
| `CLUSTER_FCV_DOWNGRADED` | Cluster FCV was downgraded | no |
| `CLUSTER_FCV_EXPIRATION_DATE_UPDATED` | Cluster feature compatibility version expiration date was updated | no |
| `CLUSTER_FCV_FIXED` | Cluster feature compatibility version was fixed | no |
| `CLUSTER_FCV_UNFIXED` | Cluster feature compatibility version was unfixed | no |
| `CLUSTER_FORCE_PLANNED` | Cluster with selected primary hosts force planned | no |
| `CLUSTER_FORCE_RECONFIG_REQUESTED` | User requested force reconfiguration for cluster | no |
| `CLUSTER_IMPORT_CANCELLED` | Cluster data migration cancelled | no |
| `CLUSTER_IMPORT_COMPLETED` | Cluster data migration completed | no |
| `CLUSTER_IMPORT_CUTOVER` | Cluster data migration cutover initiated | no |
| `CLUSTER_IMPORT_EXPIRED` | A Live Migration failed because the cutover time window expired | no |
| `CLUSTER_IMPORT_FAILED` | Cluster data migration failed | no |
| `CLUSTER_IMPORT_RESTART_REQUESTED` | Cluster data migration restart requested | no |
| `CLUSTER_IMPORT_STARTED` | Cluster data migration started | no |
| `CLUSTER_INSTANCE_ADMIN_BACKUP_SNAPSHOT_REQUESTED` | An admin backup snapshot for an instance in the cluster requested | no |
| `CLUSTER_INSTANCE_AGENT_API_KEY_ROTATED` | An instance in the cluster had its agent API key manually rotated | no |
| `CLUSTER_INSTANCE_CONFIG_UPDATED` | An instance in the cluster had its config manually updated | no |
| `CLUSTER_INSTANCE_DISABLED` | An instance in the cluster was manually disabled | no |
| `CLUSTER_INSTANCE_ENABLED` | An instance in the cluster was manually enabled | no |
| `CLUSTER_INSTANCE_FAMILY_UPDATED` | Cluster Instance Family has been updated | no |
| `CLUSTER_INSTANCE_REPLACED` | An instance in the cluster was manually replaced | no |
| `CLUSTER_INSTANCE_REPLACE_CLEARED` | An instance replacement in the cluster was manually cleared | no |
| `CLUSTER_INSTANCE_RESTARTED` | An instance in the cluster was manually restarted | no |
| `CLUSTER_INSTANCE_RESYNC_CLEARED` | An instance resync in the cluster was manually cleared | no |
| `CLUSTER_INSTANCE_RESYNC_REQUESTED` | An instance resync in the cluster was manually requested | yes |
| `CLUSTER_INSTANCE_SSL_REVOKED` | An instance in the cluster had its SSL certificate manually revoked | no |
| `CLUSTER_INSTANCE_SSL_ROTATED` | An instance in the cluster had its SSL certificate manually rotated | no |
| `CLUSTER_INSTANCE_SSL_ROTATED_PER_CLUSTER` | A cluster had its SSL certificate manually rotated | no |
| `CLUSTER_INSTANCE_STOP_START` | An instance in the cluster was manually stopped and started | yes |
| `CLUSTER_INSTANCE_SWAPPED` | An instance in the cluster was manually swapped | no |
| `CLUSTER_INSTANCE_SWAP_CLEARED` | An instance swap in the cluster was manually cleared | no |
| `CLUSTER_INSTANCE_UPDATE_REQUESTED` | An instance update in the cluster was manually requested | yes |
| `CLUSTER_INSTANCE_VM_REBOOT_CLEARED` | An instance VM reboot in the cluster was manually cleared | no |
| `CLUSTER_INSTANCE_VM_RESTART_CLEARED` | An instance VM restart in the cluster was manually cleared | no |
| `CLUSTER_IP_MIGRATED_FINAL_ROUND` | All nodes in the cluster have their IPs migrated | no |
| `CLUSTER_IP_MIGRATED_FIRST_ROUND` | 33 percent of nodes in the cluster have their IPs migrated | no |
| `CLUSTER_IP_MIGRATED_SECOND_ROUND` | 66 percent of nodes in the cluster have their IPs migrated | no |
| `CLUSTER_IP_ROLLED_BACK` | All nodes in the cluster have their IPs rolled back to their previous IPs | no |
| `CLUSTER_LINKED_TO_VERCEL` | Cluster linked to Vercel | no |
| `CLUSTER_MIGRATE_BACK_TO_AWS_MANAGED_IP_REQUESTED` | Cluster migrate back to AWS managed ip addresses requested | no |
| `CLUSTER_MONGODB_VERSION_UPDATED` | All processes in a cluster had their MongoDB version updated to the latest supported patch | no |
| `CLUSTER_MONGOS_IS_MISSING` | Cluster has no active mongos processes. | yes |
| `CLUSTER_MONGOS_IS_PRESENT` | Cluster has an active mongos | no |
| `CLUSTER_MONGOT_PROCESS_ARGS_UPDATE_SUBMITTED` | Cluster Mongot process arguments update submitted | no |
| `CLUSTER_OPLOG_RESIZED` | Cluster oplog size was changed | no |
| `CLUSTER_OPTED_OUT_OF_DATA_VALIDATION` | The cluster has been opted out of data validation | no |
| `CLUSTER_OPTED_OUT_OF_DB_CHECK` | Cluster was opted out of DB Check | no |
| `CLUSTER_OS_FIXED` | Cluster OS version was fixed | no |
| `CLUSTER_OS_UNFIXED` | Cluster OS version was unfixed | no |
| `CLUSTER_OS_UPDATED` | Cluster OS has been updated | no |
| `CLUSTER_PREFERRED_CPU_ARCHITECTURE_MODIFIED` | Cluster's Preferred CPU Architecture modified | no |
| `CLUSTER_PROCESS_ARGS_UPDATE_SUBMITTED` | Cluster startup parameters update submitted | no |
| `CLUSTER_READY` | New cluster ready to use | no |
| `CLUSTER_REGIONAL_OUTAGE_SIMULATION_CANCELLED_CLUSTER_PAUSE` | System cancelled cluster pause request due to cluster regional outage simulation | no |
| `CLUSTER_REGIONAL_OUTAGE_SIMULATION_COMPLETED` | Cluster regional outage simulation completed | no |
| `CLUSTER_REGIONAL_OUTAGE_SIMULATION_END_REQUESTED` | Cluster regional outage simulation end requested | no |
| `CLUSTER_REGIONAL_OUTAGE_SIMULATION_FAILED_TO_START` | Cluster regional outage simulation failed to start | no |
| `CLUSTER_REGIONAL_OUTAGE_SIMULATION_STARTED` | Cluster regional outage simulation started | no |
| `CLUSTER_RESET_FORCE_RECONFIG_REQUESTED` | User requested reset force reconfiguration for cluster | no |
| `CLUSTER_RESHARDING_COMPLETED` | Cluster resharding completed | yes |
| `CLUSTER_RESURRECTED` | Cluster resurrected | no |
| `CLUSTER_ROLLING_RESYNC_CANCELED` | Cluster rolling resync canceled | no |
| `CLUSTER_ROLLING_RESYNC_COMPLETED` | Cluster rolling resync completed | no |
| `CLUSTER_ROLLING_RESYNC_FAILED` | Cluster rolling resync failed | no |
| `CLUSTER_ROLLING_RESYNC_STARTED` | Cluster rolling resync started | no |
| `CLUSTER_SAMPLED_FOR_DATA_VALIDATION` | The cluster was sampled for data validation | no |
| `CLUSTER_SAMPLED_FOR_DB_CHECK` | Cluster was sampled for DB Check | no |
| `CLUSTER_SERVER_PARAMETERS_UPDATE_SUBMITTED` | Cluster server parameters update submitted | no |
| `CLUSTER_TAGS_MODIFIED` | Tag(s) were added or modified on a cluster | yes |
| `CLUSTER_UNBLOCK_WRITE` | Writes have been unblocked on your cluster | yes |
| `CLUSTER_UNLINKED_FROM_VERCEL` | Cluster unlinked from Vercel | no |
| `CLUSTER_UPDATE_COMPLETED` | Cluster update completed | no |
| `CLUSTER_UPDATE_STARTED` | Cluster update started | no |
| `CLUSTER_UPDATE_STARTED_INTERNAL` | Cluster update started - including approximate changes | no |
| `CLUSTER_UPDATE_SUBMITTED` | Cluster update submitted | no |

## Compute Event Types

| Event Type | Description | Alertable? |
| --- | --- | --- |
| `COMPUTE_AUTO_SCALE_DOWNSCALE_SKIPPED_FALLBACK_ANALYTICS` | Compute auto-scaling down skipped for analytics tier: target instance size currently capacity constrained in region | yes |
| `COMPUTE_AUTO_SCALE_DOWNSCALE_SKIPPED_FALLBACK_BASE` | Compute auto-scaling down skipped for base tier: target instance size currently capacity constrained in region | yes |
| `COMPUTE_AUTO_SCALE_INITIATED` | Compute auto-scale initiated | no |
| `COMPUTE_AUTO_SCALE_INITIATED_ANALYTICS` | Compute auto-scaling initiated for analytics tier | yes |
| `COMPUTE_AUTO_SCALE_INITIATED_BASE` | Compute auto-scaling initiated for base tier | yes |
| `COMPUTE_AUTO_SCALE_MAX_INSTANCE_SIZE_FAIL_ANALYTICS` | Compute auto-scaling did not initiate for analytics tier due to maximum configured cluster tier | yes |
| `COMPUTE_AUTO_SCALE_MAX_INSTANCE_SIZE_FAIL_BASE` | Compute auto-scaling did not initiate for base tier due to maximum configured cluster tier | yes |
| `COMPUTE_AUTO_SCALE_OPLOG_FAIL_ANALYTICS` | Compute auto-scaling did not initiate for analytics tier due to insufficient oplog size | yes |
| `COMPUTE_AUTO_SCALE_OPLOG_FAIL_BASE` | Compute auto-scaling did not initiate for base tier due to insufficient oplog size | yes |
| `COMPUTE_AUTO_SCALE_SCALE_DOWN_FAIL_ANALYTICS` | Compute auto-scaling down did not initiate for analytics tier due to storage requirements | yes |
| `COMPUTE_AUTO_SCALE_SCALE_DOWN_FAIL_BASE` | Compute auto-scaling down did not initiate for base tier due to storage requirements | yes |

## CPS Event Types

| Event Type | Description | Alertable? |
| --- | --- | --- |
| `CPS_AUTO_EXPORT_FAILED` | Auto export snapshot failed | yes |
| `CPS_BILLING_AWS_DOWNLOAD_SUBMISSION_BEHIND` | CPS billing AWS download submission has fallen behind | yes |
| `CPS_BILLING_AWS_DOWNLOAD_SUBMISSION_CAUGHT_UP` | CPS billing AWS download submission is caught up | no |
| `CPS_BILLING_AWS_EXPORT_SUBMISSION_BEHIND` | CPS billing AWS export submission has fallen behind | yes |
| `CPS_BILLING_AWS_EXPORT_SUBMISSION_CAUGHT_UP` | CPS billing AWS export submission is caught up | no |
| `CPS_BILLING_AWS_SNAPSHOT_SUBMISSION_BEHIND` | CPS billing AWS snapshot submission has fallen behind | yes |
| `CPS_BILLING_AWS_SNAPSHOT_SUBMISSION_CAUGHT_UP` | CPS billing AWS snapshot submission is caught up | no |
| `CPS_BILLING_AZURE_DOWNLOAD_SUBMISSION_BEHIND` | CPS billing Azure download submission has fallen behind | yes |
| `CPS_BILLING_AZURE_DOWNLOAD_SUBMISSION_CAUGHT_UP` | CPS billing Azure download submission is caught up | no |
| `CPS_BILLING_AZURE_EXPORT_SUBMISSION_BEHIND` | CPS billing Azure export submission has fallen behind | yes |
| `CPS_BILLING_AZURE_EXPORT_SUBMISSION_CAUGHT_UP` | CPS billing Azure export submission is caught up | no |
| `CPS_BILLING_AZURE_SNAPSHOT_SUBMISSION_BEHIND` | CPS billing Azure snapshot submission has fallen behind | yes |
| `CPS_BILLING_AZURE_SNAPSHOT_SUBMISSION_CAUGHT_UP` | CPS billing Azure snapshot submission is caught up | no |
| `CPS_BILLING_EXPORT_SUBMISSION_BEHIND` | CPS billing export submission has fallen behind | yes |
| `CPS_BILLING_EXPORT_SUBMISSION_CAUGHT_UP` | CPS billing export submission is caught up | no |
| `CPS_BILLING_EXPORT_UPLOAD_SUBMISSION_BEHIND` | CPS billing export upload submission has fallen behind | yes |
| `CPS_BILLING_EXPORT_UPLOAD_SUBMISSION_CAUGHT_UP` | CPS billing export upload submission is caught up | no |
| `CPS_BILLING_GCP_DOWNLOAD_SUBMISSION_BEHIND` | CPS billing GCP download submission has fallen behind | yes |
| `CPS_BILLING_GCP_DOWNLOAD_SUBMISSION_CAUGHT_UP` | CPS billing GCP download submission is caught up | no |
| `CPS_BILLING_GCP_EXPORT_SUBMISSION_BEHIND` | CPS billing GCP export submission has fallen behind | yes |
| `CPS_BILLING_GCP_EXPORT_SUBMISSION_CAUGHT_UP` | CPS billing GCP export submission is caught up | no |
| `CPS_BILLING_GCP_SNAPSHOT_SUBMISSION_BEHIND` | CPS billing GCP snapshot submission has fallen behind | yes |
| `CPS_BILLING_GCP_SNAPSHOT_SUBMISSION_CAUGHT_UP` | CPS billing GCP snapshot submission is caught up | no |
| `CPS_BILLING_OPLOG_COLLECTION_BEHIND` | CPS billing oplog collection has fallen behind | yes |
| `CPS_BILLING_OPLOG_COLLECTION_CAUGHT_UP` | CPS billing oplog collection is caught up | no |
| `CPS_BILLING_OPLOG_SUBMISSION_BEHIND` | CPS billing oplog submission has fallen behind | yes |
| `CPS_BILLING_OPLOG_SUBMISSION_CAUGHT_UP` | CPS billing oplog submission is caught up | no |
| `CPS_COLLECTION_RESTORE_CANCELED` | A collection restore canceled | yes |
| `CPS_COLLECTION_RESTORE_FAILED` | A collection restore failed | yes |
| `CPS_COLLECTION_RESTORE_PARTIAL_SUCCESS` | A collection restore partially succeeded | yes |
| `CPS_COLLECTION_RESTORE_SUCCESSFUL` | A collection restore succeeded | yes |
| `CPS_CONCURRENT_SNAPSHOT_FAILED_WILL_RETRY` | A concurrent snapshot failed. Will Retry | yes |
| `CPS_COPY_SNAPSHOT_FAILED` | A copy snapshot has failed | yes |
| `CPS_COPY_SNAPSHOT_FAILED_WILL_RETRY` | A copy snapshot has failed. Will Retry | yes |
| `CPS_COPY_SNAPSHOT_STARTED` | A copy snapshot has started | yes |
| `CPS_COPY_SNAPSHOT_SUCCESSFUL` | A copy snapshot was taken successfully | yes |
| `CPS_DATA_PROTECTION_APPROVED_FOR_DISABLEMENT` | Backup Compliance Policy can be disabled for the next 72 hours | yes |
| `CPS_DATA_PROTECTION_DISABLED` | Disabling Backup Compliance Policy has been completed | yes |
| `CPS_DATA_PROTECTION_DISABLE_REQUESTED` | Disabling Backup Compliance Policy has been requested | yes |
| `CPS_DATA_PROTECTION_ENABLED` | Enabling Backup Compliance Policy has been completed | yes |
| `CPS_DATA_PROTECTION_ENABLE_REQUESTED` | Enabling Backup Compliance Policy has been requested | yes |
| `CPS_DATA_PROTECTION_UPDATED` | Updating Backup Compliance Policy has been completed | yes |
| `CPS_DATA_PROTECTION_UPDATE_REQUESTED` | Updating Backup Compliance Policy has been requested | yes |
| `CPS_EXPORT_FAILED` | Export snapshot failed | yes |
| `CPS_EXPORT_SUCCESSFUL` | Export snapshot succeeded | yes |
| `CPS_ON_DEMAND_SNAPSHOT_REQUESTED` | An on-demand Cloud Backup snapshot has been requested | no |
| `CPS_OPLOG_BEHIND` | CPS oplogs have fallen behind alert | yes |
| `CPS_OPLOG_CAUGHT_UP` | Oplog slices are caught up alert | yes |
| `CPS_PREV_SNAPSHOT_OLD` | Too much time has passed since the last successful snapshot | yes |
| `CPS_RESTORE_FAILED` | A restore failed | yes |
| `CPS_RESTORE_SUCCESSFUL` | A restore succeeded | yes |
| `CPS_SNAPSHOT_BEHIND` | No snapshot taken over configured period | yes |
| `CPS_SNAPSHOT_DOWNLOAD_REQUEST_FAILED` | Your snapshot download request failed because of a temporary error in provisioning resources. Please try again. | yes |
| `CPS_SNAPSHOT_FAILED` | A snapshot failed | yes |
| `CPS_SNAPSHOT_FALLBACK_FAILED` | A fallback snapshot failed | yes |
| `CPS_SNAPSHOT_FALLBACK_SUCCESSFUL` | A regular backup failed, but Atlas was able to take a fallback snapshot | yes |
| `CPS_SNAPSHOT_STARTED` | A snapshot has started | yes |
| `CPS_SNAPSHOT_SUCCESSFUL` | A snapshot was taken successfully | yes |

## Credit Event Types

| Event Type | Description | Alertable? |
| --- | --- | --- |
| `CREDIT_AMOUNT_CENTS_MODIFIED` | Credit Amount Cents Modified | no |
| `CREDIT_AMOUNT_REMAINING_CENTS_MODIFIED` | Credit Amount Remaining Cents Modified | no |
| `CREDIT_AWS_ACCOUNT_ID_MODIFIED` | Credit AWS Account ID Modified | no |
| `CREDIT_AWS_CUSTOMER_ID_MODIFIED` | Credit AWS Customer ID Modified | no |
| `CREDIT_AWS_LICENSE_ARN_MODIFIED` | Credit AWS License ARN Modified | no |
| `CREDIT_AWS_PRODUCT_CODE_MODIFIED` | Credit AWS Customer product code Modified | no |
| `CREDIT_AZURE_PRIVATE_PLAN_ID_MODIFIED` | Credit Azure Private Plan ID Modified | no |
| `CREDIT_AZURE_SUBSCRIPTION_ID_MODIFIED` | Credit Azure Subscription ID Modified | no |
| `CREDIT_CARD_ABOUT_TO_EXPIRE` | Credit card is about to expire | yes |
| `CREDIT_CARD_ADDED` | Credit card was added | no |
| `CREDIT_CARD_CURRENT` | Credit card is current | no |
| `CREDIT_CARD_UPDATED` | Credit card information was updated | no |
| `CREDIT_ELASTIC_INVOICING_MODIFIED` | Credit Elastic Invoicing Modified | no |
| `CREDIT_END_DATE_MODIFIED` | Credit End Date Modified | no |
| `CREDIT_GCP_MARKETPLACE_ENTITLEMENT_ID_MODIFIED` | Credit GCP Marketplace entitlement ID Modified | no |
| `CREDIT_ISSUED` | Credit issued | no |
| `CREDIT_PULLED_FWD` | Credit Start Date pulled forward | no |
| `CREDIT_SFOLID_MODIFIED` | Credit SFOLI modified | no |
| `CREDIT_START_DATE_MODIFIED` | Credit Start Date Modified | no |
| `CREDIT_TYPE_MODIFIED` | Credit Type Modified | no |

## Data Event Types

| Event Type | Description | Alertable? |
| --- | --- | --- |
| `DATA_API_SETUP_FOR_VERCEL` | Data API setup for Vercel | no |
| `DATA_EXPLORER` | User performed a Data Explorer read-only operation | no |
| `DATA_EXPLORER_CRUD` | User performed a Data Explorer CRUD operation, which modifies data | no |
| `DATA_EXPLORER_CRUD_ATTEMPT` | User attempted to perform a Data Explorer CRUD operation, which could modify data | no |
| `DATA_EXPLORER_CRUD_ERROR` | Error when user attempted to perform a Data Explorer CRUD operation, data could have been modified | no |
| `DATA_EXPLORER_DISABLED` | User disabled the Data Explorer feature for the associated project | no |
| `DATA_EXPLORER_ENABLED` | User enabled the Data Explorer feature for the associated project | no |
| `DATA_EXPLORER_SESSION_CREATED` | User created a new Data Explorer session | no |
| `DATA_LAKE_QUERY_LOGS_DOWNLOADED` | User downloaded query logs for Data Lake Tenant. | no |
| `DATA_VALIDATION_SUBMITTED_FOR_CLUSTER` | The cluster is currently undergoing scheduled data validation | no |

## Data Federation Event Types

| Event Type | Description | Alertable? |
| --- | --- | --- |
| `DATA_FEDERATION_QUERY_LIMIT_CONFIGURED` | Data Federation Query Limit configured | no |
| `DATA_FEDERATION_QUERY_LIMIT_DELETED` | Data Federation Query Limit deleted | no |
| `FEDERATED_DATABASE_CREATED` | New Federated Database Instance created | no |
| `FEDERATED_DATABASE_QUERY_LOGS_DOWNLOADED` | User downloaded query logs for Federated Database Instance. | no |
| `FEDERATED_DATABASE_REMOVED` | Federated Database Instance removed | no |
| `FEDERATED_DATABASE_UPDATED` | Federated Database Instance updated | no |
| `FEDERATION_SETTINGS_CREATED` | Federation settings have been created | no |
| `FEDERATION_SETTINGS_DELETED` | Federation settings have been deleted | no |
| `FEDERATION_SETTINGS_UPDATED` | Federation settings have been updated | no |

## Encryption Event Types

| Event Type | Description | Alertable? |
| --- | --- | --- |
| `ENCRYPTION_AT_REST_CONFIGURATION_UPDATED` | Encryption at Rest configuration updated | no |
| `ENCRYPTION_AT_REST_CONFIGURATION_VALIDATION_FAILED` | Customer key management service encryption at rest key is no longer accessible | no |
| `ENCRYPTION_AT_REST_CONFIGURATION_VALIDATION_SUCCEEDED` | Customer key management service encryption at rest configuration validation succeeded | no |
| `ENCRYPTION_AT_REST_CONFIG_IS_VALID` | Encryption at Rest configuration is valid | no |
| `ENCRYPTION_AT_REST_CONFIG_NO_LONGER_VALID` | Encryption at Rest configuration no longer valid | yes |
| `ENCRYPTION_AT_REST_KEY_ROTATION_STARTED` | MongoDB is re-wrapping internal encryption keys because the Customer Master Key was updated | no |
| `ENCRYPTION_AT_REST_KMS_NETWORK_ACCESS_DENIED` | Encryption at Rest KMS network access denied | yes |
| `ENCRYPTION_AT_REST_KMS_NETWORK_ACCESS_RESTORED` | Encryption at Rest KMS network access restored | no |
| `ENCRYPTION_AT_REST_PRIVATE_ENDPOINT_CREATED` | Encryption at Rest private endpoint created | no |
| `ENCRYPTION_AT_REST_PRIVATE_ENDPOINT_DELETED` | Encryption at Rest private endpoint deleted | no |

## FTS Event Types

| Event Type | Description | Alertable? |
| --- | --- | --- |
| `FTS_INDEXES_RESTORED` | Search Indexes Restored | no |
| `FTS_INDEXES_RESTORE_FAILED` | Failed to restore Search indexes | yes |
| `FTS_INDEXES_SYNONYM_MAPPING_INVALID` | Synonym Mapping Invalid | yes |
| `FTS_INDEX_BUILD_COMPLETE` | Search Index Build Complete | yes |
| `FTS_INDEX_BUILD_FAILED` | Search Index Build Failed | yes |
| `FTS_INDEX_CLEANED_UP` | Search Index Automatically Cleaned Up | yes |
| `FTS_INDEX_CREATED` | Search Index Created | no |
| `FTS_INDEX_DELETED` | Search Index Deleted | no |
| `FTS_INDEX_DELETION_FAILED` | Failed to delete Atlas Search indexes | yes |
| `FTS_INDEX_STALE` | Search main index has become stale (replication stopped) | yes |
| `FTS_INDEX_UPDATED` | Search Index Updated | no |

## GCP Event Types

| Event Type | Description | Alertable? |
| --- | --- | --- |
| `GCP_BILLING_ACCOUNT_CREDIT_ISSUED` | Credit issued | no |
| `GCP_ENCRYPTION_KEY_INVALID` | GCP Encryption at Rest key is invalid | yes |
| `GCP_ENCRYPTION_KEY_NEEDS_ROTATION` | GCP encryption key needs rotation | yes |
| `GCP_ENCRYPTION_KEY_ROTATED` | GCP Encryption key rotation no longer due | no |
| `GCP_ENCRYPTION_KEY_VALID` | GCP Encryption at Rest key is valid | no |
| `GCP_LOG_STREAMING_CONFIGURATION_UPDATED` | GCP Log Streaming configuration updated | no |
| `GCP_LOG_STREAMING_DISABLED` | GCP Log Streaming disabled | no |
| `GCP_LOG_STREAMING_ENABLED` | GCP Log Streaming enabled | no |
| `GCP_PEER_ACTIVE` | GCP VPC peering connection active | no |
| `GCP_PEER_CREATED` | GCP VPC peer created | no |
| `GCP_PEER_DELETED` | GCP VPC peer deleted | no |
| `GCP_PEER_INACTIVE` | GCP VPC peering connection inactive | no |
| `GCP_PEER_UPDATED` | GCP VPC peering updated | no |
| `GCP_SELF_SERVE_ACCOUNT_CANCELLED` | GCP Subscription Cancelled | no |
| `GCP_SELF_SERVE_ACCOUNT_LINKED` | GCP Subscription Linked | no |
| `GCP_SELF_SERVE_ACCOUNT_LINK_FAILED` | GCP Subscription Link Failed | no |
| `GCP_SELF_SERVE_ACCOUNT_LINK_PENDING` | GCP Subscription Link Pending | no |
| `GCP_USAGE_REPORTED` | GCP Usage Reported | no |
| `GCP_ZONE_DOWN` | GCP Zone Appears Down | yes |
| `GCP_ZONE_OK` | GCP Zone Appears Down | no |

## Group Event Types

| Event Type | Description | Alertable? |
| --- | --- | --- |
| `GROUP_ACTIVATED` | Project has been reactivated | no |
| `GROUP_ALERT_PROCESSING_DISABLED` | Ordinary alert processing is disabled | yes |
| `GROUP_ALERT_PROCESSING_ENABLED` | Ordinary alert processing is enabled | no |
| `GROUP_AUTOMATION_CONFIG_PUBLISHED` | Admin published group automation config | no |
| `GROUP_CHARTS_ACTIVATED` | Charts activated | no |
| `GROUP_CHARTS_ACTIVATION_REQUESTED` | Charts activation requested | no |
| `GROUP_CHARTS_RESET` | Charts reset | no |
| `GROUP_CHARTS_UPGRADED` | Charts upgraded | no |
| `GROUP_CLOSED` | Project closed | no |
| `GROUP_CONFIG_CHANGE` | Project configuration changed | no |
| `GROUP_CREATED` | Project was created | no |
| `GROUP_DEFAULT_ALERTS_SETTINGS_CHANGED` | Project default alert settings changed | no |
| `GROUP_DELETED` | Project was deleted | no |
| `GROUP_FLUSHED` | Project has been flushed | no |
| `GROUP_INVITATION_DELETED` | User had their project invitation deleted | no |
| `GROUP_LOCKED` | Project locked due to unpaid invoices over 60 days | no |
| `GROUP_MOVED` | Project moved | no |
| `GROUP_MOVED_FROM_ORG` | Project moved | no |
| `GROUP_NAME_CHANGED` | Project name changed | no |
| `GROUP_SERVICE_ACCOUNT_SECRETS_EXPIRED` | Project Service Account Secrets have expired | yes |
| `GROUP_SERVICE_ACCOUNT_SECRETS_EXPIRING` | Project Service Account Secrets are about to expire | yes |
| `GROUP_SERVICE_ACCOUNT_SECRETS_NO_LONGER_EXPIRED` | Alert Resolved: Project Service Account Secrets are no longer expired | no |
| `GROUP_SERVICE_ACCOUNT_SECRETS_NO_LONGER_EXPIRING` | Alert Resolved: Project Service Account Secrets are no longer about to expire | no |
| `GROUP_STUCK_IN_CLOSING` | Project stuck in closing | yes |
| `GROUP_SUSPENDED` | Project suspended due to unpaid invoices over 30 days | no |
| `GROUP_TAGS_MODIFIED` | Tag(s) were added or modified on project | yes |
| `GROUP_TEMPORARILY_ACTIVATED` | Project has been granted temporary access | no |

## Host Event Types

| Event Type | Description | Alertable? |
| --- | --- | --- |
| `HOST_DOWN` | Host is down | yes |
| `HOST_DOWNGRADED` | Host has been downgraded | no |
| `HOST_ENOUGH_DISK_SPACE` | Sufficient disk space to support rebuilding search indexes | no |
| `HOST_EXPOSED` | Host is exposed to the public Internet | yes |
| `HOST_EXTERNAL_LOG_SINK_EXPORT_DOWN` | Log export is unable to export logs on this host | yes |
| `HOST_EXTERNAL_LOG_SINK_EXPORT_RESUMED` | Log export has resumed on this host | no |
| `HOST_HAS_INDEX_SUGGESTIONS` | Host has index suggestions | yes |
| `HOST_LOCKED_DOWN` | Host is locked down | no |
| `HOST_MONGOT_APPROACHING_STOP_REPLICATION` | Mongot is approaching replication stop threshold | yes |
| `HOST_MONGOT_CRASHING_OOM` | Search process ran out of memory | yes |
| `HOST_MONGOT_PAUSE_INITIAL_SYNC` | Mongot paused initial sync | yes |
| `HOST_MONGOT_RECOVERED_OOM` | Mongot no longer crashing due to out of memory error | no |
| `HOST_MONGOT_RESTARTED` | Mongot process has restarted | no |
| `HOST_MONGOT_RESUME_REPLICATION` | Mongot resumed replication | no |
| `HOST_MONGOT_STOP_REPLICATION` | Mongot stopped replication | yes |
| `HOST_MONGOT_SUFFICIENT_DISK_SPACE` | Mongot is no longer at risk of replication stopping | no |
| `HOST_MONGOT_UNPAUSE_INITIAL_SYNC` | Mongot unpaused initial sync | no |
| `HOST_NOT_ENOUGH_DISK_SPACE` | Insufficient disk space to support rebuilding search indexes | yes |
| `HOST_NOW_PRIMARY` | Host is now primary | no |
| `HOST_NOW_SECONDARY` | Host is now secondary | no |
| `HOST_NOW_STANDALONE` | Host is now a standalone | no |
| `HOST_RECOVERED` | Host has recovered | no |
| `HOST_RECOVERING` | Host is recovering | yes |
| `HOST_RESTARTED` | Host has restarted | no |
| `HOST_ROLLBACK` | Host experienced a rollback | no |
| `HOST_SEARCH_NODE_INDEX_FAILED` | Newly provisioned search node may be blocked by failed index build | yes |
| `HOST_SEARCH_NODE_UNBLOCKED` | Newly provisioned search node no longer has any failed indexes | no |
| `HOST_SEARCH_PROCESS_NOT_THROTTLING` | MongoDB Search: Search Process is no longer overloaded | no |
| `HOST_SEARCH_PROCESS_THROTTLING` | MongoDB Search: Search Process is Overloaded | yes |
| `HOST_SECURITY_CHECKUP_MET` | Host is configured in accordance with security best practices | no |
| `HOST_SECURITY_CHECKUP_NOT_MET` | Host has security recommendations | yes |
| `HOST_SSH_SESSION_ENDED` | A MongoDB employee ended an SSH session for a host in this Atlas project. | no |
| `HOST_SSL_CERTIFICATE_CURRENT` | Host's SSL certificate is current | no |
| `HOST_SSL_CERTIFICATE_STALE` | Host's SSL certificate will expire soon | yes |
| `HOST_UP` | Host is up | no |
| `HOST_UPGRADED` | Host has been upgraded | no |
| `HOST_VERSION_BEHIND` | Host does not have the latest version | yes |
| `HOST_VERSION_CHANGED` | Host version changed | no |
| `HOST_VERSION_CURRENT` | Host has the latest version | no |
| `HOST_X509_CERTIFICATE_CERTIFICATE_GENERATED_FOR_SUPPORT_ACCESS` | A MongoDB employee requested an X509 certificate to perform support operations on a host in this Atlas project. | no |
| `NEW_HOST` | Host is new | no |

## Log Event Types

| Event Type | Description | Alertable? |
| --- | --- | --- |
| `LOG_COLLECTION_REQUESTED` | Log collection has been requested. | no |
| `LOG_DEBUG_OVERRIDE_ACTIVE` | Production logger overridden with a DEBUG level | no |
| `LOG_DOWNLOAD_STARTED` | Logs archive download has started. | yes |
| `LOG_FORWARDER_FAILURE` | A Log Forwarder has failed and cannot be restarted | yes |
| `LOG_LEVEL_CHANGE` | Log level changed | no |
| `LOG_STREAMING_CONFIGURATION_UPDATED` | Log Streaming configuration updated | no |
| `LOG_STREAMING_DISABLED` | Log Streaming disabled | no |
| `LOG_STREAMING_ENABLED` | Log Streaming enabled | no |
| `LOG_STREAMING_EXPORT_FAILED_NONRETRYABLE` | Log export has failed. Check your integration settings and credentials. | yes |
| `LOG_STREAMING_EXPORT_FAILED_RETRIES_EXHAUSTED` | Log export is failing after multiple attempts. Logs are being queued and will be sent once the connection is restored. | yes |
| `LOG_STREAMING_EXPORT_RECOVERED` | Log export has recovered. Queued logs are ready to resume sending. | no |
| `LOG_STREAMING_REPLAY_COMPLETE` | All queued logs have been delivered to sink. | no |
| `LOG_STREAMING_REPLAY_STARTED` | Log export has recovered. Queued logs are now being sent. | no |
| `LOG_UPLOADER_ACTIVATED` | A node's log uploader service has been re-activated | no |
| `LOG_UPLOADER_DOWN_FOR_EXTENDED_TIME` | A node's log uploader service is inactive | yes |

## Maintenance Event Types

| Event Type | Description | Alertable? |
| --- | --- | --- |
| `EXTRA_MAINTENANCE_DEFERRAL_GRANTED` | Admin granted an extra maintenance deferral for project | no |
| `MAINTENANCE_AUTO_DEFERRED` | Maintenance has been auto-deferred | yes |
| `MAINTENANCE_COMPLETED` | Maintenance window completed | yes |
| `MAINTENANCE_IN_ADVANCED` | Maintenance is scheduled | yes |
| `MAINTENANCE_NO_LONGER_NEEDED` | Maintenance no longer needed | yes |
| `MAINTENANCE_STARTED` | Maintenance started | yes |
| `MAINTENANCE_WAVE_ASSIGNMENT_ADDED` | Project maintenance wave assignment added | no |
| `MAINTENANCE_WAVE_ASSIGNMENT_MODIFIED` | Project maintenance wave assignment modified | no |
| `MAINTENANCE_WAVE_ASSIGNMENT_REMOVED` | Project maintenance wave assignment removed | no |

## MLAB Event Types

| Event Type | Description | Alertable? |
| --- | --- | --- |
| `MLAB_MIGRATION_COMPLETED` | Migration from mLab completed | no |
| `MLAB_MIGRATION_DATABASE_RENAMED` | Migration database renamed | no |
| `MLAB_MIGRATION_DATABASE_USERS_IMPORTED` | Database users imported to project from mLab deployment | no |
| `MLAB_MIGRATION_DUMP_AND_RESTORE_STARTED` | Migration dump/restore started | no |
| `MLAB_MIGRATION_DUMP_AND_RESTORE_TEST_SKIPPED` | Migration dump/restore test skipped | no |
| `MLAB_MIGRATION_DUMP_AND_RESTORE_TEST_STARTED` | Migration dump/restore test started | no |
| `MLAB_MIGRATION_IP_WHITELIST_IMPORTED` | IP whitelist imported to project from mLab deployment | no |
| `MLAB_MIGRATION_LIVE_IMPORT_CANCELLED` | Migration live import cancelled | no |
| `MLAB_MIGRATION_LIVE_IMPORT_CUTOVER_COMPLETE` | Migration live import cutover complete | no |
| `MLAB_MIGRATION_LIVE_IMPORT_ERROR` | Migration live import error | no |
| `MLAB_MIGRATION_LIVE_IMPORT_READY_FOR_CUTOVER` | Migration live import ready for cutover | no |
| `MLAB_MIGRATION_LIVE_IMPORT_STARTED` | Migration live import started | no |
| `MLAB_MIGRATION_SUPPORT_PLAN_OPTED_OUT` | MLab Migration: Opted out of support plan | no |
| `MLAB_MIGRATION_SUPPORT_PLAN_SELECTED` | Atlas support plan updated | no |
| `MLAB_MIGRATION_TARGET_CLUSTER_CREATED` | Migration target cluster created | no |
| `MLAB_MIGRATION_TARGET_CLUSTER_SET` | Migration target cluster set | no |

## MongoDB Event Types

| Event Type | Description | Alertable? |
| --- | --- | --- |
| `MONGODB_LOGS_DOWNLOADED` | User downloaded logs for a host in this Atlas project. | no |
| `MONGODB_ROLE_ADDED` | MongoDB custom role added | no |
| `MONGODB_ROLE_DELETED` | MongoDB custom role deleted | no |
| `MONGODB_ROLE_UPDATED` | MongoDB custom role updated | no |
| `MONGODB_USER_ADDED` | MongoDB user added | no |
| `MONGODB_USER_DELETED` | MongoDB user deleted | no |
| `MONGODB_USER_UPDATED` | MongoDB user updated | no |
| `MONGODB_USER_X509_CERT_CREATED` | MongoDB user X509 certificate created | no |
| `MONGODB_USER_X509_CERT_REVOKED` | MongoDB user X509 certificate revoked | no |

## NDS Event Types

| Event Type | Description | Alertable? |
| --- | --- | --- |
| `NDS_SET_CHEF_TARBALL_URI` | Chef tarball URI override has been set | no |
| `NDS_SET_IMAGE_OVERRIDES` | Image override JSON has been set | no |
| `NDS_X509_USER_AUTHENTICATION_CUSTOMER_CA_EXPIRATION_CHECK` | X.509 User Authentication, Self-Managed CA Expiration Alert | yes |
| `NDS_X509_USER_AUTHENTICATION_CUSTOMER_CA_EXPIRATION_RESOLVED` | X.509 User Authentication, Self-Managed CA Expiration Alert Resolved | no |
| `NDS_X509_USER_AUTHENTICATION_CUSTOMER_CRL_EXPIRATION_CHECK` | X.509 User Authentication, Self-Managed CRL Expiration Alert | yes |
| `NDS_X509_USER_AUTHENTICATION_CUSTOMER_CRL_EXPIRATION_RESOLVED` | X.509 User Authentication, Self-Managed CRL Expiration Alert Resolved | no |
| `NDS_X509_USER_AUTHENTICATION_MANAGED_USER_CERTS_EXPIRATION_CHECK` | X.509 User Authentication, Client Certificates Expiration Alert | yes |
| `NDS_X509_USER_AUTHENTICATION_MANAGED_USER_CERTS_EXPIRATION_RESOLVED` | X.509 User Authentication, Client Certificates Expiration Alert Resolved | no |

## OAuth Event Types

| Event Type | Description | Alertable? |
| --- | --- | --- |
| `OAUTH_AUTHORIZATION_DENIED` | OAuth authorization denied | no |
| `OAUTH_AUTHORIZATION_GRANTED` | OAuth authorization granted | no |
| `OAUTH_CLIENT_CREATED` | OAuth client created | no |
| `OAUTH_CLIENT_DELETED` | OAuth client deleted | no |
| `OAUTH_CLIENT_SECRET_CREATED` | OAuth client secret created | no |
| `OAUTH_CLIENT_SECRET_DELETED` | OAuth client secret deleted | no |
| `OAUTH_CLIENT_UPDATED` | OAuth client updated | no |
| `OAUTH_TOKEN_ISSUED` | OAuth token issued | no |
| `OAUTH_TOKEN_REVOKED` | OAuth token revoked | no |
| `OAUTH_USER_CONSENT_GRANTED` | OAuth user consent granted | no |
| `OAUTH_USER_CONSENT_REVOKED` | OAuth user consent revoked | no |

## Online Archive Event Types

| Event Type | Description | Alertable? |
| --- | --- | --- |
| `ONLINE_ARCHIVE_ACTIVE` | Online Archive active | no |
| `ONLINE_ARCHIVE_CREATED` | Online Archive created | no |
| `ONLINE_ARCHIVE_DATA_EXPIRATION_RESOLVED` | Online archive data expiration resolved | no |
| `ONLINE_ARCHIVE_DATA_EXPIRATION_RULE_DISABLED` | Online Archive Data Expiration Rule Disabled | no |
| `ONLINE_ARCHIVE_DATA_EXPIRATION_RULE_ENABLED` | Online Archive Data Expiration Rule Enabled | no |
| `ONLINE_ARCHIVE_DATA_EXPIRATION_RULE_UPDATED` | Online Archive Data Expiration Rule Updated | no |
| `ONLINE_ARCHIVE_DELETED` | Online Archive deleted | no |
| `ONLINE_ARCHIVE_DELETE_AFTER_DATE_UPDATED` | Online Archive Delete After Date updated | no |
| `ONLINE_ARCHIVE_INSUFFICIENT_INDEXES_CHECK` | Online Archive, Insufficient Indexes Alert | yes |
| `ONLINE_ARCHIVE_INSUFFICIENT_INDEXES_RESOLVED` | Online Archive, Insufficient Indexes Alert Resolved | no |
| `ONLINE_ARCHIVE_MAX_CONSECUTIVE_OFFLOAD_WINDOWS_CHECK` | All Online Archive runs in the last 3 scheduled windows had reached max offload limit | yes |
| `ONLINE_ARCHIVE_ORPHANED` | Online Archive orphaned | no |
| `ONLINE_ARCHIVE_PAUSED` | Online Archive paused | no |
| `ONLINE_ARCHIVE_PAUSE_REQUESTED` | Online Archive pause requested | no |
| `ONLINE_ARCHIVE_QUERY_LOGS_DOWNLOADED` | User downloaded query logs for Online Archive. | no |
| `ONLINE_ARCHIVE_UPDATED` | Online Archive updated | no |
| `ONLINE_ARCHIVE_UP_TO_DATE` | Online Archive up to date | no |

## Organization Event Types

| Event Type | Description | Alertable? |
| --- | --- | --- |
| `ALL_ORG_USERS_HAVE_MFA` | All organization users have MFA enabled | no |
| `ORG_ACTIVATED` | Organization has been reactivated | no |
| `ORG_ADMIN_LOCKED` | Organization has been locked by an administrator | no |
| `ORG_ADMIN_SUSPENDED` | Organization has been suspended by an administrator | no |
| `ORG_BAAS_EOL_EXTENSION_ACCEPTED` | Extension request for App Services products has been granted | no |
| `ORG_BAAS_EOL_EXTENSION_CANCELED` | Extension request for App Services products has been canceled | no |
| `ORG_BAAS_EOL_EXTENSION_PENDING` | Extension request for App Services products is pending | no |
| `ORG_BANK_ACCOUNT_ADDED` | Bank account was added | no |
| `ORG_BANK_ACCOUNT_UPDATED` | Bank account information was updated | no |
| `ORG_CLUSTERS_DELETED` | Clusters deleted for projects in this organization | no |
| `ORG_CLUSTERS_PAUSED` | Clusters paused for projects in this organization | no |
| `ORG_CONNECTED_TO_MLAB` | Organization connected to mLab account | no |
| `ORG_CONNECTED_TO_VERCEL` | Organization is linked to Vercel | no |
| `ORG_CONNECTION_UNINSTALLED_FROM_VERCEL` | Vercel integration to Organization is removed from Vercel side | no |
| `ORG_CREATED` | Organization has been created | no |
| `ORG_CREDIT_CARD_ABOUT_TO_EXPIRE` | Credit card is about to expire | yes |
| `ORG_CREDIT_CARD_ADDED` | Credit card was added | no |
| `ORG_CREDIT_CARD_CURRENT` | Credit card is current | no |
| `ORG_CREDIT_CARD_UPDATED` | Credit card information was updated | no |
| `ORG_DELEGATION_SETTINGS_UPDATED` | Delegation Settings for Organization were updated | no |
| `ORG_DISCONNECTED_FROM_MLAB` | Organization disconnected from mLab account | no |
| `ORG_DISCONNECTED_TO_VERCEL` | Organization is disconnected from Vercel | no |
| `ORG_EDITED_UI_IP_ACCESS_LIST_ENTRIES` | IP Access List for the Atlas User Interface was changed | yes |
| `ORG_EMPLOYEE_ACCESS_RESTRICTED` | MongoDB Support blocked from accessing Atlas infrastructure for all clusters in this organization | no |
| `ORG_EMPLOYEE_ACCESS_UNRESTRICTED` | MongoDB Support unblocked from accessing Atlas infrastructure for all clusters in this organization | no |
| `ORG_FLEX_CONSULTING_PURCHASED` | Flex Consulting purchase made | no |
| `ORG_FLEX_CONSULTING_PURCHASE_FAILED` | Failed purchasing Flex Consulting | no |
| `ORG_GROUP_CHARGES_OVER_THRESHOLD` | Current bill for any single project is above the limit you set | yes |
| `ORG_GROUP_CHARGES_UNDER_THRESHOLD` | Project charges ($) are below threshold | no |
| `ORG_IDP_CERTIFICATE_ABOUT_TO_EXPIRE` | Organization's identity provider certificate is about to expire | yes |
| `ORG_IDP_CERTIFICATE_CURRENT` | Organization's identity provider certificate is current | no |
| `ORG_INVITATION_DELETED` | User had their organization invitation deleted | no |
| `ORG_INVOICE_OVER_THRESHOLD` | Current bill for organization is over the limit you set | yes |
| `ORG_INVOICE_UNDER_THRESHOLD` | Current bill is below the limit you set | no |
| `ORG_LIMIT_UPDATED` | Organization limit updated | no |
| `ORG_LINKED_TO_PAYING_ORG` | Organization has been linked to a paying organization | no |
| `ORG_LOCKED` | Organization locked due to unpaid charges over 60 days | no |
| `ORG_LOCKED_ACCELERATED` | Organization locked due to suspicious activity and unpaid usage | no |
| `ORG_MONGODB_VERSION_EOL_EXTENSION_ACCEPTED` | This organization's MongoDB version end of life extension request was accepted | no |
| `ORG_MONGODB_VERSION_EOL_EXTENSION_CANCELLED` | This organization's MongoDB version end of life extension request has been cancelled | no |
| `ORG_MONGODB_VERSION_EOL_EXTENSION_PENDING` | This organization's MongoDB version end of life extension request is pending | no |
| `ORG_NO_FINANCIAL_PROTECTION` | Organization is no longer under financial protection | no |
| `ORG_OVERRIDE_PAYMENT_METHOD_ADDED` | Admin Override payment method added | no |
| `ORG_PAYPAL_CANCELLED` | PayPal billing agreement has been cancelled | no |
| `ORG_PAYPAL_LINKED` | PayPal account is linked | no |
| `ORG_PAYPAL_UPDATED` | PayPal account is updated | no |
| `ORG_PUBLIC_API_ACCESS_LIST_NOT_REQUIRED` | IP Access List for Public API Not Required | no |
| `ORG_PUBLIC_API_ACCESS_LIST_REQUIRED` | Require IP Access List for Public API Enabled | no |
| `ORG_RENAMED` | Organization has been renamed | no |
| `ORG_SERVICE_ACCOUNT_MAX_SECRET_VALIDITY_EDITED` | Maximum allowed Service Account secret validity was changed | no |
| `ORG_SERVICE_ACCOUNT_SECRETS_EXPIRED` | Organization Service Account Secrets have expired | yes |
| `ORG_SERVICE_ACCOUNT_SECRETS_EXPIRING` | Organization Service Account Secrets are about to expire | yes |
| `ORG_SERVICE_ACCOUNT_SECRETS_NO_LONGER_EXPIRED` | Alert Resolved: Organization Service Account Secrets are no longer expired | no |
| `ORG_SERVICE_ACCOUNT_SECRETS_NO_LONGER_EXPIRING` | Alert Resolved: Organization Service Account Secrets are no longer about to expire | no |
| `ORG_SETTINGS_CONFIGURED` | Organization settings were configured | no |
| `ORG_SETTINGS_DELETED` | Organization Federation settings were deleted | no |
| `ORG_SETTINGS_UPDATED` | Organization Federation settings were updated | no |
| `ORG_SUSPENDED` | Organization suspended due to unpaid charges over 30 days | no |
| `ORG_SUSPENSION_DATE_CHANGED` | Organization suspension date changed | no |
| `ORG_TEMPORARILY_ACTIVATED` | Organization has been granted temporary access | no |
| `ORG_TWO_FACTOR_AUTH_OPTIONAL` | Multi-factor Authentication Optional | no |
| `ORG_TWO_FACTOR_AUTH_REQUIRED` | Multi-factor Authentication Required | no |
| `ORG_UI_IP_ACCESS_LIST_DISABLED` | IP Access List for the Atlas User Interface was disabled | yes |
| `ORG_UI_IP_ACCESS_LIST_ENABLED` | IP Access List for the Atlas User Interface was enabled | yes |
| `ORG_UNDER_FINANCIAL_PROTECTION` | Organization is under financial protection | no |
| `ORG_UNLINKED_FROM_PAYING_ORG` | Organization has been unlinked from a paying organization | no |
| `ORG_UNLINK_CANCELLED` | Organization unlink request has been cancelled | no |
| `ORG_UNLINK_REQUESTED` | Organization unlink request has been created | no |
| `ORG_USERS_WITHOUT_MFA` | Organization users do not have MFA enabled | yes |
| `ORG_WALLET_ADDED` | Wallet was added | no |
| `ORG_WALLET_UPDATED` | Wallet information was updated | no |
| `ORG_WAVE_ASSIGNMENT_MODE_ENV_TAG_MAPPING` | Organization maintenance wave assignment mode was set to: Environment Tag Mapping | no |
| `ORG_WAVE_ASSIGNMENT_MODE_MANUAL` | Organization maintenance wave assignment mode was set to: Manual | no |

## Project Event Types

| Event Type | Description | Alertable? |
| --- | --- | --- |
| `PROJECT_BYPASSED_MAINTENANCE` | Project maintenance will bypass scheduled window | no |
| `PROJECT_COLLECT_DATABASE_STATISTICS_UPDATED` | Collect database specific statistics updated | no |
| `PROJECT_CREATED_VIA_ANIS` | Project created via Azure Native integration | no |
| `PROJECT_ENABLE_DATA_VALIDATION_UPDATED` | Data validation setting updated | no |
| `PROJECT_ENABLE_EXTENDED_STORAGE_SIZES_UPDATED` | Enable extended storage sizes updated | no |
| `PROJECT_LIMIT_UPDATED` | Project limit updated | no |
| `PROJECT_LIVE_IMPORT_OVERRIDES_ADDED` | Project-level data migration overrides added | no |
| `PROJECT_LIVE_IMPORT_OVERRIDES_DELETED` | Project-level data migration overrides deleted | no |
| `PROJECT_LIVE_IMPORT_OVERRIDES_UPDATED` | Project-level data migration overrides updated | no |
| `PROJECT_SCHEDULED_MAINTENANCE` | Project scheduled maintenance will occur | no |
| `PROJECT_SCHEDULED_MAINTENANCE_OUTSIDE_OF_PROTECTED_HOURS` | Project scheduled maintenance outside of protected hours will occur | no |

## Serverless Event Types

| Event Type | Description | Alertable? |
| --- | --- | --- |
| `INSIDE_SERVERLESS_METRIC_THRESHOLD` | Serverless metric inside threshold | no |
| `OUTSIDE_SERVERLESS_METRIC_THRESHOLD` | Serverless metric outside threshold | yes |
| `SERVERLESS_AUTO_SCALING_INITIATED` | Serverless auto-scale initiated | no |
| `SERVERLESS_DEPLOYMENT_CREATED` | Serverless Deployment created | no |
| `SERVERLESS_DEPLOYMENT_DELETED` | Serverless Deployment deleted | no |
| `SERVERLESS_DEPLOYMENT_ENDPOINT_SERVICE_LINKED` | Serverless Deployment Endpoint Service linked | no |
| `SERVERLESS_DEPLOYMENT_ENDPOINT_SERVICE_UNLINKED` | Serverless Deployment Endpoint Service unlinked | no |
| `SERVERLESS_DEPLOYMENT_ENVOY_INSTANCE_UIS_KEYS_ROTATED` | Serverless Deployment Envoy Instance UIS Keys Rotated | no |
| `SERVERLESS_DEPLOYMENT_INSTANCE_REBOOTED` | Serverless Deployment Instance rebooted | no |
| `SERVERLESS_DEPLOYMENT_INSTANCE_REPLACED` | Serverless Deployment Instance replaced | no |
| `SERVERLESS_DEPLOYMENT_UPDATED` | Serverless Deployment updated | no |
| `SERVERLESS_HORIZONTAL_SCALING_INITIATED` | Serverless horizontal scale initiated | no |
| `SERVERLESS_INSTANCE_CREATED` | New serverless instance created | no |
| `SERVERLESS_INSTANCE_DELETED` | Serverless instance deleted | no |
| `SERVERLESS_INSTANCE_DELETE_SUBMITTED` | Serverless instance delete submitted | no |
| `SERVERLESS_INSTANCE_READY` | New serverless instance ready to use | no |
| `SERVERLESS_INSTANCE_UNBLOCKED` | Admin removed block request on a serverless instance. | no |
| `SERVERLESS_INSTANCE_UPDATE_COMPLETED` | Serverless instance update completed | no |
| `SERVERLESS_INSTANCE_UPDATE_STARTED` | Serverless instance update started | no |
| `SERVERLESS_INSTANCE_UPDATE_SUBMITTED` | Serverless instance update submitted | no |
| `SERVERLESS_MTM_DRAIN_COMPLETED` | Serverless MTM drain completed | no |
| `SERVERLESS_MTM_DRAIN_INITIATED` | Serverless MTM drain initiated | no |
| `SERVERLESS_MTM_DRAIN_REQUESTED` | Serverless MTM drain requested | no |
| `SERVERLESS_MTM_DRAIN_STOPPED` | Serverless MTM drain stopped | no |
| `SERVERLESS_UPGRADE_STARTED` | Serverless instance upgrade started | no |
| `SERVERLESS_UPGRADE_TO_DEDICATED_FAILED` | Serverless instance upgrade to Dedicated cluster failed | no |
| `SERVERLESS_UPGRADE_TO_DEDICATED_SUCCESSFUL` | Serverless instance upgrade to Dedicated cluster succeeded | no |
| `SERVERLESS_VERTICAL_SCALING_INITIATED` | Serverless vertical scale initiated | no |

## Service Event Types

| Event Type | Description | Alertable? |
| --- | --- | --- |
| `SERVICE_ACCOUNT_ACCESS_LIST_ENTRY_ADDED` | Service Account Access List Entry Added | no |
| `SERVICE_ACCOUNT_ACCESS_LIST_ENTRY_DELETED` | Service Account Access List Entry Deleted | no |
| `SERVICE_ACCOUNT_ADDED_TO_GROUP` | Service Account added to Project | no |
| `SERVICE_ACCOUNT_CREATED` | Service Account has been created | no |
| `SERVICE_ACCOUNT_DELETED` | Service Account has been deleted | no |
| `SERVICE_ACCOUNT_DETAILS_CHANGED` | Service Account Details have been changed | no |
| `SERVICE_ACCOUNT_REMOVED_FROM_GROUP` | Service Account removed from Project | no |
| `SERVICE_ACCOUNT_ROLES_CHANGED` | Service Account had its roles changed | no |
| `SERVICE_ACCOUNT_SECRET_ADDED` | Service Account Secret Added | no |
| `SERVICE_ACCOUNT_SECRET_DELETED` | Service Account Secret Deleted | no |
| `SERVICE_ACCOUNT_UI_IP_ACCESS_LIST_INHERITANCE_DISABLED` | Service Account UI IP access list inheritance disabled | no |
| `SERVICE_ACCOUNT_UI_IP_ACCESS_LIST_INHERITANCE_ENABLED` | Service Account UI IP access list inheritance enabled | no |

## Stream Event Types

| Event Type | Description | Alertable? |
| --- | --- | --- |
| `INSIDE_STREAM_PROCESSOR_METRIC_THRESHOLD` | Inside Stream Processor metric threshold | no |
| `OUTSIDE_STREAM_PROCESSOR_METRIC_THRESHOLD` | Outside Stream Processor metric threshold | yes |
| `STREAM_PROCESSOR_STARTED` | Stream Processor started | no |
| `STREAM_PROCESSOR_STATE_IS_FAILED` | Stream Processor State is failed | yes |
| `STREAM_TENANT_CONNECTIONS_LISTED` | Stream Processing Workspace connections listed | no |
| `STREAM_TENANT_CONNECTION_CREATED` | Stream Processing Workspace connection created | no |
| `STREAM_TENANT_CONNECTION_DELETED` | Stream Processing Workspace connection deleted | no |
| `STREAM_TENANT_CONNECTION_UPDATED` | Stream Processing Workspace connection updated | no |
| `STREAM_TENANT_CONNECTION_VIEWED` | Stream Processing Workspace connection viewed | no |
| `STREAM_TENANT_CREATED` | Stream Processing Workspace created | no |
| `STREAM_TENANT_DELETED` | Stream Processing Workspace deleted | no |
| `STREAM_TENANT_OPERATIONAL_LOGS` | Stream Processing Workspace operational logs downloaded | no |
| `STREAM_TENANT_UPDATED` | Stream Processing Workspace updated | no |

## Tenant Event Types

| Event Type | Description | Alertable? |
| --- | --- | --- |
| `TENANT_ENDPOINT_AVAILABLE` | Endpoint transitioned to available | no |
| `TENANT_ENDPOINT_CREATED` | Endpoint created | no |
| `TENANT_ENDPOINT_DELETED` | Endpoint deleted | no |
| `TENANT_ENDPOINT_DELETING` | Endpoint deleting | no |
| `TENANT_ENDPOINT_EXPIRED` | Endpoint marked for deletion due to incomplete setup | no |
| `TENANT_ENDPOINT_FAILED` | Endpoint transitioned to failed | no |
| `TENANT_ENDPOINT_INITIATING` | Endpoint transitioned to initiating | no |
| `TENANT_ENDPOINT_RESERVATION_FAILED` | Endpoint service reservation failed | no |
| `TENANT_ENDPOINT_RESERVED` | Endpoint transitioned to reserved | no |
| `TENANT_ENDPOINT_SERVICE_AVAILABLE` | Tenant endpoint service available | no |
| `TENANT_ENDPOINT_SERVICE_CREATED` | Tenant endpoint service created, but not available | no |
| `TENANT_ENDPOINT_SERVICE_DELETED` | Tenant endpoint service deleted | no |
| `TENANT_ENDPOINT_SERVICE_DEPLOYMENT_CREATED` | Tenant endpoint service deployment created | no |
| `TENANT_ENDPOINT_SERVICE_DEPLOYMENT_DELETED` | Tenant endpoint service deployment deleted | no |
| `TENANT_ENDPOINT_SERVICE_DEPLOYMENT_DELETE_REQUESTED` | Tenant endpoint service deployment deletion requested | no |
| `TENANT_ENDPOINT_SERVICE_DEPLOYMENT_NUM_DESIRED_ENDPOINT_SERVICES_INCREASED` | Tenant endpoint service deployment num desired endpoint services increased | no |
| `TENANT_ENDPOINT_UPDATED` | Endpoint updated | no |
| `TENANT_RESTORE_FAILED` | Tenant restore failed | no |
| `TENANT_SNAPSHOT_FAILED` | Tenant snapshot failed | no |
| `TENANT_UPGRADE_TO_SERVERLESS_FAILED` | Shared cluster upgrade to serverless failed | yes |
| `TENANT_UPGRADE_TO_SERVERLESS_SUCCESSFUL` | Shared cluster upgrade to serverless succeeded | yes |

## Vercel Event Types

| Event Type | Description | Alertable? |
| --- | --- | --- |
| `VERCEL_INVOICE_CREATED` | Vercel Invoice Created | no |
| `VERCEL_INVOICE_NOT_PAID` | Vercel Invoice Not Paid | no |
| `VERCEL_INVOICE_OVERDUE` | Vercel Invoice Overdue | no |
| `VERCEL_INVOICE_PAID` | Vercel Invoice Paid | no |
| `VERCEL_INVOICE_REFUNDED` | Vercel Invoice Refunded | no |
| `VERCEL_SELF_SERVE_ACCOUNT_CANCELLED` | Vercel Subscription Cancelled | no |
| `VERCEL_SELF_SERVE_ACCOUNT_LINKED` | Vercel Subscription Linked | no |
| `VERCEL_SELF_SERVE_ACCOUNT_LINK_FAILED` | Vercel Subscription Link Failed | no |
| `VERCEL_SELF_SERVE_ACCOUNT_LINK_PENDING` | Vercel Subscription Link Pending | no |
| `VERCEL_USAGE_REPORTED` | Vercel Usage Reported | no |

## Other Event Types

| Event Type | Description | Alertable? |
| --- | --- | --- |
| `ACTIVE_LEGACY_TLS_CONNECTIONS` | Deprecated. TLS 1.0 and TLS 1.1 are no longer supported. | yes |
| `ADMIN_CLUSTER_LOCK_UPDATED` | Admin updated admin cluster lock | no |
| `ADMIN_OVERRIDE_PAYMENT_METHOD_DELETED` | Admin Override payment method deleted | no |
| `ADMIN_OVERRIDE_PAYMENT_METHOD_EXPIRED` | Admin Override payment method expired automatically | no |
| `AGENT_FORCE_RESTART_REQUESTED` | Operator requested force restart of automation agents for cluster | no |
| `ALERT_HOST_SSH_SESSION_STARTED` | A MongoDB employee started an SSH session started for a host in this Atlas project. | yes |
| `ALL_USERS_HAVE_MULTI_FACTOR_AUTH` | All users have multi-factor authentication enabled | no |
| `AUTOMATION_AGENT_DOWN` | MongoDB Agent/Automation Module is down | yes |
| `AUTOMATION_AGENT_UP` | MongoDB Agent/Automation Module is up | no |
| `AZ_BALANCING_OVERRIDE_MODIFIED` | AZ Balancing Group Override setting updated | no |
| `BACKINGDB_DEFAULTRW_CONCERN_VERIFICATION_FAILED` | AppDB default Read/Write concerns are not set to recommended values | yes |
| `BACKINGDB_DEFAULTRW_CONCERN_VERIFICATION_PASSED` | AppDB default Read/Write concerns are set to recommended values | no |
| `BACKING_DATABASE_PROCESS_DOWN` | Detected a problem connecting to a database backing the system | yes |
| `BACKING_DATABASE_PROCESS_NO_STARTUP_WARNINGS` | Detected no startup warnings on the databases backing the system | no |
| `BACKING_DATABASE_PROCESS_STARTUP_WARNINGS` | Detected startup warnings on a database backing the system | yes |
| `BACKING_DATABASE_PROCESS_UP` | Successfully connected to a database backing the system | no |
| `BAD_CLUSTERSHOTS` | Backup has possibly inconsistent cluster snapshots | yes |
| `BALANCER_OFF` | Blockstore does not have a running balancer | no |
| `BALANCER_ON` | Blockstore has a running balancer | yes |
| `BECAME_LINKED_ORG` | Organization has become a linked organization | no |
| `BECAME_PAYING_ORG` | Organization has become a paying organization | no |
| `BI_CONNECTOR_DOWN` | BI Connector is down | yes |
| `BI_CONNECTOR_UP` | BI Connector is up | no |
| `BRAINTREE_CHARGE_FAILED` | PayPal charge has failed | no |
| `BREAK_JOB` | Break job | no |
| `BULK_HEAD_MOVE` | Bulk head move | no |
| `BUMPER_FILE_REMOVAL_NODE_NOT_REINFLATED_FOR_TWO_DAYS` | A node's bumper files have not been re-inflated for more than 48 hours | yes |
| `BUMPER_FILE_REMOVAL_NODE_REINFLATED` | A node's bumper files have been re-inflated | no |
| `CASE_CREATED` | Case created. | no |
| `CHARGE_FAILED` | Credit card charge has failed | no |
| `CHARGE_PENDING_REVERSAL` | Payment has entered a pending reversal state | no |
| `CHARGE_PROCESSING` | Payment has entered a processing state | no |
| `CHARGE_SUCCEEDED` | Credit card was successfully charged | no |
| `CHARTS_API_FAILURE` | Charts API request failed | no |
| `CHARTS_API_SUCCESS` | Charts API request succeeded | no |
| `CHARTS_DASHBOARD_EXPORTED` | Dashboard exported | no |
| `CHARTS_DASHBOARD_EXPORT_FAILED` | Dashboard export failed | no |
| `CHARTS_DASHBOARD_IMPORTED` | Dashboard imported | no |
| `CHARTS_DASHBOARD_IMPORT_FAILED` | Dashboard import failed | no |
| `CHECK_PAYMENT_RECEIVED` | Invoice has been paid by check | no |
| `CONFIGURATION_CHANGED` | Replica set has an updated version configuration | no |
| `CONSISTENT_BACKUP_CONFIGURATION` | Backup configuration is consistent | no |
| `CONTAINER_DELETED` | Cloud Provider container deleted | no |
| `CONTAINER_SUBNETS_UPDATE_REQUESTED` | Container subnets update requested | no |
| `CRON_JOB_COMPLETED` | Cron job has completed successfully | no |
| `CRON_JOB_DISABLED` | Cron job disabled | yes |
| `CRON_JOB_ENABLED` | Cron job enabled | no |
| `CRON_JOB_FAILED` | Cron job has failed | yes |
| `CROSS_ORG_OPERATION_TICKET_TRACKING` | Cross-org operation JIRA ticket tracking (Admin Only) | no |
| `CROSS_REGION_SUPPORTED_REGION_MODIFIED` | Cross-region private endpoint supported region modified | no |
| `CUSTOMER_X509_CRL_UPDATED` | Self-managed X509 CRL updated | no |
| `CUSTOM_SESSION_TIMEOUT_MODIFIED` | Custom Session Timeout was set/modified. | no |
| `DAEMON_CONFIG_CHANGE` | Daemon configuration changed | no |
| `DAEMON_DELETED` | Daemon deleted | no |
| `DAEMON_DOWN` | Backup Daemon is down | yes |
| `DAEMON_STARTED` | A backup daemon started. | no |
| `DAEMON_UP` | Backup Daemon is up | no |
| `DATADOG_LOG_STREAMING_CONFIGURATION_UPDATED` | Datadog Log Streaming configuration updated | no |
| `DATADOG_LOG_STREAMING_DISABLED` | Datadog Log Streaming disabled | no |
| `DATADOG_LOG_STREAMING_ENABLED` | Datadog Log Streaming enabled | no |
| `DB_CHECK_DEFERRED_FOR_CLUSTER` | Cluster was deferred for DB Check | no |
| `DB_CHECK_SCHEDULED_FOR_CLUSTER` | Cluster was scheduled for DB Check | no |
| `DB_CHECK_UPDATED` | DbCheck was updated | no |
| `DELINQUENT` | Service suspended due to unpaid invoice(s) more than 30 days old | no |
| `DEPLOYMENT_FAILURE` | A user (or Code Deployment) attempted to deploy changes but encountered an error | yes |
| `DEPLOYMENT_MODEL_CHANGE_FAILURE` | A user has failed to change the deployment model for an App Service | yes |
| `DEPLOYMENT_MODEL_CHANGE_SUCCESS` | A user has successfully changed the deployment model for an App Service | yes |
| `DEVICE_SYNC_DEBUG_ACCESS_GRANTED` | Granted temporary sync data access to MongoDB Support for 24 hours | no |
| `DEVICE_SYNC_DEBUG_ACCESS_REVOKED` | Revoked temporary sync data access to MongoDB Support | no |
| `DEVICE_SYNC_DEBUG_X509_CERT_CREATED` | Created an X.509 certificate for device sync data access | no |
| `DISABLE_BACKUP_PRIVATELINK_EVENT` | User DISABLED AWS PrivateLink for backup. | no |
| `DISCOUNT_APPLIED` | Discount applied | no |
| `DISK_AUTO_SCALE_INITIATED` | Disk auto-scaling initiated | yes |
| `DISK_AUTO_SCALE_MAX_DISK_SIZE_FAIL` | Disk auto-scaling did not initiate due to the cluster reaching maximum available disk size | yes |
| `DISK_AUTO_SCALE_OPLOG_FAIL` | Disk auto-scaling did not initiate due to insufficient oplog size | yes |
| `DOMAINS_ASSOCIATED` | Domains were associated with the Identity Provider | no |
| `DOMAIN_CREATED` | Domain was created | no |
| `DOMAIN_DELETED` | Domain was deleted | no |
| `DOMAIN_VERIFIED` | Domain was verified | no |
| `ELASTIC_INVOICING_MODE_ACTIVATED` | Active Invoicing Period initiated | no |
| `ELASTIC_INVOICING_MODE_DEACTIVATED` | Active Invoicing Period stopped | no |
| `EMPLOYEE_ACCESS_GRANTED` | Granted additional access to MongoDB support | no |
| `EMPLOYEE_ACCESS_REVOKED` | Revoked additional access from MongoDB support | no |
| `EMPLOYEE_DOWNLOADED_CLUSTER_LOGS` | A MongoDB employee downloaded cluster database logs for a host to help resolve an ongoing support issue. | no |
| `ENABLE_BACKUP_PRIVATELINK_EVENT` | User ENABLED AWS PrivateLink for backup. | no |
| `ENDPOINT_SERVICE_CREATED` | Private endpoint service created | no |
| `ENDPOINT_SERVICE_DELETED` | Private endpoint service deleted | no |
| `ENOUGH_HEALTHY_MEMBERS` | Replica set has enough healthy members | no |
| `EVERGREEN_DEAL_CANCELLED` | Evergreen deal has been cancelled | no |
| `EVERGREEN_PRIORITY_MODIFIED` | Evergreen Credit Priority Modified | no |
| `FAILOVER_STUCK` | A standby cluster failover has been in progress longer than the configured threshold | yes |
| `FAILOVER_STUCK_RESOLVED` | A previously stuck standby cluster failover is no longer stuck | no |
| `FEATURE_FLAG_MAINTENANCE` | Feature Flag maintenance will bypass scheduled window | no |
| `FLEX_UPGRADE_STARTED` | Flex cluster upgrade started | no |
| `FREE_UPGRADE_STARTED` | Free cluster upgrade started | no |
| `FTDC_SETTINGS_UPDATED` | FTDC export settings updated | no |
| `GOOD_CLUSTERSHOT` | Backup has a good clustershot | no |
| `GRACE_PERIOD_ACTIVATED` | Grace period has been activated | no |
| `GRACE_PERIOD_NO_LONGER_IN_EFFECT` | Grace period is no longer in effect | no |
| `IDENTITY_PROVIDER_ACTIVATED` | Identity Provider was activated | no |
| `IDENTITY_PROVIDER_CREATED` | Identity Provider was created | no |
| `IDENTITY_PROVIDER_DEACTIVATED` | Identity Provider was deactivated | no |
| `IDENTITY_PROVIDER_DELETED` | Identity Provider was deleted | no |
| `IDENTITY_PROVIDER_JWKS_REVOKED` | Identity Provider's JWKS was revoked | no |
| `IDENTITY_PROVIDER_UPDATED` | Identity Provider was updated | no |
| `INCONSISTENT_BACKUP_CONFIGURATION` | Inconsistent backup configuration has been detected | yes |
| `INDEPENDENT_SHARD_AUTO_SCALING_AVAILABLE` | Independent Shard AutoScaling is now available for a cluster | no |
| `INDEPENDENT_SHARD_SCALING_CLUSTER_MIGRATED` | Cluster schema has been migrated to support Independent Shard Scaling | no |
| `INDEPENDENT_SHARD_SCALING_CLUSTER_ROLLED_BACK` | Cluster schema has been rolled back and it no longer supports Independent Shard Scaling | no |
| `INDEX_FAILED_INDEX_BUILD` | Index build failed | no |
| `INDEX_SUCCESS_INDEX_BUILD` | Index build succeeded | no |
| `INGESTION_PIPELINE_CREATED` | Data Lake Pipeline created | no |
| `INGESTION_PIPELINE_DELETED` | Data Lake Pipeline deleted | no |
| `INGESTION_PIPELINE_DESTROYED` | Data Lake Pipeline destroyed | no |
| `INGESTION_PIPELINE_UPDATED` | Data Lake Pipeline updated | no |
| `INITIATE_SALESFORCE_SERVICE_CLOUD_SYNC` | Organization sync with SFSC initiated | no |
| `INSIDE_FLEX_METRIC_THRESHOLD` | Flex metric inside threshold | no |
| `INSIDE_METRIC_THRESHOLD` | Inside metric threshold | no |
| `INSIDE_REALM_METRIC_THRESHOLD` | App services metric inside threshold | no |
| `INSIDE_SPACE_USED_THRESHOLD` | Blockstore space used within threshold | no |
| `INTEGRATION_CONFIGURED` | A third party integration has been configured | no |
| `INTEGRATION_REMOVED` | A third party integration has been removed | no |
| `INTERFACE_ENDPOINT_CREATED` | Private endpoint created | no |
| `INTERFACE_ENDPOINT_DELETED` | Private endpoint deleted | no |
| `INTERFACE_ENDPOINT_PATCHED` | Private endpoint patched | no |
| `INTERFACE_ENDPOINT_RETRIED` | Private endpoint retried | no |
| `INTER_NODE_DATA_VALIDATION_SUBMITTED_FOR_REPLICA_SET` | The replica set was submitted for inter node data validation | no |
| `INVITED_TO_GROUP` | User was invited to project | no |
| `INVITED_TO_ORG` | User was invited to organization | no |
| `INVITED_TO_TEAM` | User was invited to team | no |
| `INVOICE_ADDRESS_ADDED` | Invoice address added | no |
| `INVOICE_ADDRESS_CHANGED` | Invoice address changed | no |
| `INVOICE_CLOSED` | Invoice closed | no |
| `JOB_CHANGE` | Job changed | no |
| `JOINED_GROUP` | User joined the project | yes |
| `JOINED_ORG` | User joined the organization | yes |
| `JOINED_TEAM` | User joined the team | no |
| `KMIP_KEY_ROTATION_SCHEDULED` | Rotating MongoDB Master Keys for Encryption at Rest | no |
| `LATE_WTC_SNAPSHOT` | Replica set has a late WiredTiger Checkpoint snapshot | yes |
| `LICENSE_ACCEPTED` | License accepted | no |
| `LIFECYCLE_MANAGEMENT_POLICY_CREATED` | Lifecycle Management policy created | no |
| `LIFECYCLE_MANAGEMENT_POLICY_DELETED` | Lifecycle Management policy deleted | no |
| `LIFECYCLE_MANAGEMENT_POLICY_PAUSED` | Lifecycle Management policy paused | no |
| `LIFECYCLE_MANAGEMENT_POLICY_PAUSE_REQUESTED` | Lifecycle Management policy pause requested | no |
| `LIFECYCLE_MANAGEMENT_POLICY_RESUMED` | Lifecycle Management policy resumed | no |
| `LIFECYCLE_MANAGEMENT_POLICY_UPDATED` | Lifecycle Management policy updated | no |
| `LOW_APP_DB_FREE_SPACE_PERCENT` | AppDB has low free disk space percentage | yes |
| `LOW_BLOCKSTORE_FREE_SPACE_PERCENT` | Blockstore has low free disk space percentage | yes |
| `LOW_FILESYSTEM_STORE_FREE_SPACE_PERCENT` | Filesystem store has low free disk space percentage | yes |
| `LOW_HEAD_FREE_SPACE` | Backup Daemon has low free head space | yes |
| `LOW_HEAD_FREE_SPACE_PERCENT` | Backup Daemon has low free head space percentage | yes |
| `LOW_OPLOGSTORE_FREE_SPACE_PERCENT` | Oplogstore has low free disk space percentage | yes |
| `MAAS_QUERY_EVALUATED_FALSE` | MaaS Query Evaluated to False | no |
| `MAAS_QUERY_EVALUATED_TRUE` | MaaS Query Evaluated to True | yes |
| `MARKETPLACE_REFUND_ISSUED` | Marketplace refund issued | no |
| `MATERIAL_CLUSTER_UPDATE_COMPLETED_INTERNAL` | Material cluster update completed | no |
| `MAX_PROCESSOR_COUNT_REACHED` | Processor limit reached for Stream Processing Workspace | no |
| `MEMBER_ADDED` | Replica set member added | no |
| `MEMBER_REMOVED` | Replica set member removed | no |
| `MONGOSQLD_LOGS_DOWNLOADED` | User downloaded logs for a BI Connector instance in this project. | no |
| `MONGOTUNE_ALERT` | Intelligent Workload Management has taken action on your cluster | yes |
| `MONGOTUNE_INFO` | Intelligent Workload Management informational event | no |
| `MONGOTUNE_WRITE_BLOCK_POLICY_ELIGIBLE` | Write-blocking policy active on the cluster | no |
| `MONGOTUNE_WRITE_BLOCK_POLICY_INELIGIBLE` | Write-blocking policy inactive on the cluster | no |
| `MONGOT_LOGS_DOWNLOADED` | User downloaded logs for a Search process in this project. | no |
| `MONITORING_AGENT_DOWN` | Monitoring is down | yes |
| `MONITORING_AGENT_OVERRIDES` | Admin set monitoring agent overrides | no |
| `MONITORING_AGENT_REBALANCE_FLAG` | Admin flagged or cleared monitoring agent rebalance | no |
| `MONITORING_AGENT_REBALANCE_TRIGGERED` | Admin triggered immediate monitoring agent rebalance | no |
| `MONITORING_AGENT_UP` | Monitoring is up | no |
| `MONITORING_AGENT_VERSION_BEHIND` | Monitoring does not have the latest version | yes |
| `MONITORING_AGENT_VERSION_CURRENT` | Monitoring has the latest version | no |
| `MOVE_SKIPPED` | Move in progress was skipped | no |
| `MTM_CAPACITY_LOW` | MTM capacity is low | yes |
| `MTM_CAPACITY_OK` | MTM capacity is ok | no |
| `NETWORK_PERMISSION_ENTRY_ADDED` | Network permission entry added | yes |
| `NETWORK_PERMISSION_ENTRY_REMOVED` | Network permission entry removed | yes |
| `NETWORK_PERMISSION_ENTRY_UPDATED` | Network permission entry updated | yes |
| `NEW_AGENT` | New agent | no |
| `NEW_LINKED_ORG` | A new organization has been linked to this paying organization | no |
| `NODE_HIDDEN_BY_ADMIN` | Member of Replica Set is hidden by an admin | no |
| `NODE_ROLLING_RESYNC_SCHEDULED` | Node rolling resync scheduled | no |
| `NODE_UNHIDDEN_BY_ADMIN` | Member of Replica Set is unhidden by an admin | no |
| `NO_ACTIVE_LEGACY_TLS_CONNECTIONS` | Deprecated. TLS 1.0 and TLS 1.1 are no longer supported. | no |
| `NO_PRIMARY` | Replica set has no primary | yes |
| `OIDC_IDENTITY_PROVIDER_DISABLED` | Identity Provider was disabled | no |
| `OIDC_IDENTITY_PROVIDER_ENABLED` | Identity Provider was enabled | no |
| `OIDC_IDENTITY_PROVIDER_UPDATED` | Identity Provider configuration was updated | no |
| `ONDEMAND_SNAPSHOT_REQUESTED` | Ondemand Snapshot has been requested | no |
| `ONE_PRIMARY` | Replica set elected one primary | no |
| `OPERATIONS_CONTACT_MODIFIED` | Atlas Operations Contact was modified | no |
| `OPLOG_BEHIND` | Backup oplog is behind | yes |
| `OPLOG_CURRENT` | Backup oplog is current | no |
| `OPLOG_STORE_CONFIG_CHANGE` | Oplog store configuration changed | no |
| `OPLOG_STORE_DELETED` | Oplog store deleted | no |
| `OPLOG_TTL_RESIZE` | Backup oplog TTL was resized | yes |
| `ORGANIZATION_VOYAGE_SETTINGS_CREATED` | Organization Voyage settings have been created | no |
| `ORGANIZATION_VOYAGE_SETTINGS_DELETED` | Organization Voyage settings have been deleted | no |
| `OS_MAINTENANCE` | Instance Reboot for OS maintenance requested | no |
| `OS_MAINTENANCE_REPLACEMENT` | Instance force replaced for OS maintenance | no |
| `OS_MAINTENANCE_RESTART` | TLS certificate rotation requested | no |
| `OS_TUNE_FILE_OVERRIDES` | Admin set OS tuned file overrides | no |
| `OTEL_LOG_STREAMING_CONFIGURATION_UPDATED` | OTel Log Streaming configuration updated | no |
| `OTEL_LOG_STREAMING_DISABLED` | OTel Log Streaming disabled | no |
| `OTEL_LOG_STREAMING_ENABLED` | OTel Log Streaming enabled | no |
| `OTEL_METRIC_INTEGRATION_CONFIGURATION_UPDATED` | OTel Metric Integration configuration updated | no |
| `OTEL_METRIC_INTEGRATION_DISABLED` | OTel Metric Integration disabled | no |
| `OTEL_METRIC_INTEGRATION_ENABLED` | OTel Metric Integration enabled | no |
| `OUTSIDE_FLEX_METRIC_THRESHOLD` | Flex metric outside threshold | yes |
| `OUTSIDE_METRIC_THRESHOLD` | Outside metric threshold | yes |
| `OUTSIDE_REALM_METRIC_THRESHOLD` | App services metric outside threshold | yes |
| `OUTSIDE_SPACE_USED_THRESHOLD` | Blockstore space used exceeds threshold | yes |
| `PAID_IN_FULL` | Service restored because all invoices are paid in full | no |
| `PAYMENT_DUE_DATE_EXTENDED` | Payment due date extended | no |
| `PAYMENT_FORGIVEN` | Payment forgiven | no |
| `PAYMENT_METHOD_FLAGGED` | Payment method flagged as high risk | no |
| `PAYMENT_METHOD_UNFLAGGED` | Payment method unflagged | no |
| `PAYMENT_UPDATED_THROUGH_API` | Payment was modified by private API endpoint | no |
| `PEER_CREATED` | AWS VPC peer created | no |
| `PEER_DELETED` | AWS VPC peer deleted | no |
| `PEER_UPDATED` | AWS VPC peer updated | no |
| `PENDING_DEAL_ACTIVATION_ADDED` | Credit Added | no |
| `PENDING_DEAL_ACTIVATION_CANCELED` | Credit Removed | no |
| `PENDING_DEAL_ACTIVATION_FAILED` | Credit Activation Failed | no |
| `PENDING_DEAL_APPLIED` | Pending credit has been applied | no |
| `PENDING_INDEXES_CANCELED` | Pending indexes canceled | no |
| `PENDING_INDEXES_DELETED` | Pending indexes deleted | no |
| `PENDING_INVOICE_OVER_THRESHOLD` | Monthly bill has exceeded the limit you set | yes |
| `PENDING_INVOICE_UNDER_THRESHOLD` | Monthly pending invoice ($) total is below threshold | no |
| `PLAN_ABANDONED` | Plan was manually abandoned | no |
| `PLAN_ASAP_REQUESTED` | Admin requested immediate planning for project | no |
| `PLAN_COMPLETED` | Completed a plan | no |
| `PLAN_DECLINED` | Plan was declined before execution | no |
| `PLAN_FAILURE_COUNT_RESET` | Failure count for all plans in project was reset | no |
| `PLAN_STARTED` | Started a plan | no |
| `PREDICTIVE_AUTOSCALING_DISABLED` | Predictive autoscaling disabled for a cluster | no |
| `PREDICTIVE_AUTOSCALING_ENABLED` | Predictive autoscaling enabled for a cluster | no |
| `PREDICTIVE_COMPUTE_AUTO_SCALE_INITIATED_BASE` | Predictive compute auto-scaling initiated for base tier | yes |
| `PREDICTIVE_COMPUTE_AUTO_SCALE_MAX_INSTANCE_SIZE_FAIL_BASE` | Predictive compute auto-scaling did not initiate for base tier due to maximum configured cluster tier | yes |
| `PREDICTIVE_COMPUTE_AUTO_SCALE_OPLOG_FAIL_BASE` | Predictive compute auto-scaling did not initiate for base tier due to insufficient oplog size | yes |
| `PREPAID_PLAN_ACTIVATED` | Prepaid plan added | no |
| `PREPAID_PLAN_MODIFIED` | Prepaid Plan Modified | no |
| `PRIMARY_ELECTED` | Replica set elected a new primary | yes |
| `PRIVATE_NETWORK_ENDPOINT_ENTRY_ADDED` | Private network endpoint entry added | no |
| `PRIVATE_NETWORK_ENDPOINT_ENTRY_REMOVED` | Private network endpoint entry removed | no |
| `PRIVATE_NETWORK_ENDPOINT_ENTRY_UPDATED` | Private network endpoint entry updated | no |
| `PROACTIVE_OPERATION_EVENT_LOGGED` | Internal MongoDB Support Proactive Event | no |
| `PROCESS_RESTART_REQUESTED` | Process restart requested | no |
| `PROFILER_CONFIGURED_TOO_WIDELY` | Profiler configured to capture all operations on a host, which might result in a significant performance impact. | yes |
| `PROMO_CODE_APPLIED` | Promo Credit issued | no |
| `PROVISIONING_CHANGE` | Provisioning changed | no |
| `PROXY_PANICKED` | Proxy has panicked | no |
| `PROXY_PROTOCOL_FOR_PRIVATE_LINK_MODE_UPDATED` | Cluster proxy protocol for private link mode has been updated | no |
| `PROXY_RESTARTED` | Proxy was restarted | no |
| `PUSH_BASED_LOG_EXPORT_CONFIGURATION_UPDATED` | Push-Based Log Export configuration updated | no |
| `PUSH_BASED_LOG_EXPORT_DISABLED` | Push-Based Log Export disabled | no |
| `PUSH_BASED_LOG_EXPORT_DROPPED_LOG` | Push based log export has dropped a log line | yes |
| `PUSH_BASED_LOG_EXPORT_ENABLED` | Push-Based Log Export enabled | no |
| `PUSH_BASED_LOG_EXPORT_RESUMED` | Push based log exporting has resumed | no |
| `PUSH_BASED_LOG_EXPORT_STOPPED` | Push based log export is unable to push logs on this host | yes |
| `QUERY_ENGINE_TENANT_CREATED` | New Data Lake tenant created | no |
| `QUERY_ENGINE_TENANT_REMOVED` | Data Lake tenant removed | no |
| `QUERY_ENGINE_TENANT_UPDATED` | Data Lake tenant updated | no |
| `QUERY_SAMPLING_STARTED` | Query sampling was enabled | no |
| `QUERY_SAMPLING_STOPPED` | Query sampling was disabled | no |
| `QUERY_SHAPE_BLOCKED` | Query shape has been blocked | no |
| `QUERY_SHAPE_UNBLOCKED` | Query shape has been unblocked | no |
| `QUEUED_ADMIN_ACTION_CANCELLED` | A queued Admin Action has been cancelled | no |
| `QUEUED_ADMIN_ACTION_COMPLETED` | A queued Admin Action has been completed | no |
| `QUEUED_ADMIN_ACTION_CREATED` | An Admin Action has been queued | no |
| `REFUND_ISSUED` | Refund issued | no |
| `REGIONALIZED_PRIVATE_ENDPOINT_MODE_DISABLED` | Regionalized private endpoint mode disabled | no |
| `REGIONALIZED_PRIVATE_ENDPOINT_MODE_ENABLED` | Regionalized private endpoint mode enabled | no |
| `RELOAD_SSL_ON_PROCESSES` | Instance needs TLS certificates reloaded from disk | no |
| `RELOAD_SSL_ON_PROCESSES_REQUESTED` | Maintenance is required to reload TLS certificates from disk | no |
| `REMOVED_FROM_GROUP` | User left the project | yes |
| `REMOVED_FROM_ORG` | User left the organization | yes |
| `REMOVED_FROM_TEAM` | User left the team | no |
| `REPLICATION_OPLOG_WINDOW_HEALTHY` | Replication oplog window is healthy | no |
| `REPLICATION_OPLOG_WINDOW_RUNNING_OUT` | Replication Oplog Window | yes |
| `REPLICA_SET_OPTED_OUT_OF_INTER_NODE_DATA_VALIDATION` | The replica set has been opted out of inter node data validation | no |
| `REPLICA_SET_SAMPLED_FOR_INTER_NODE_DATA_VALIDATION` | The replica set was sampled for inter node data validation | no |
| `REQUESTED_TO_JOIN_GROUP` | User requested to join project | no |
| `REQUEST_RATE_LIMIT` | An overall request rate limit has been hit | yes |
| `RESOURCE_POLICY_CREATED` | Resource policy created | no |
| `RESOURCE_POLICY_DELETED` | Resource policy deleted | no |
| `RESOURCE_POLICY_MODIFIED` | Resource policy updated | no |
| `RESOURCE_POLICY_VIOLATED` | Resource policies violated | yes |
| `RESTRICTED_EMPLOYEE_ACCESS_BYPASS` | Granted temporary infrastructure access to MongoDB Support for 24 hours | no |
| `RESTRICT_ORG_MEMBERSHIP_DISABLED` | Organization membership restriction was disabled | no |
| `RESTRICT_ORG_MEMBERSHIP_ENABLED` | Organization membership restriction was enabled | no |
| `RESYNC_PERFORMED` | Backup has been resynced | no |
| `RESYNC_REQUIRED` | Backup requires a resync | yes |
| `REVOKED_EMPLOYEE_ACCESS_BYPASS` | Revoked temporary infrastructure access to MongoDB Support | no |
| `ROLE_MAPPING_CREATED` | A Role Mapping was created | no |
| `ROLE_MAPPING_DELETED` | A Role Mapping was deleted | no |
| `ROLE_MAPPING_UPDATED` | A Role Mapping was updated | no |
| `ROLLING_INDEX_FAILED_INDEX_BUILD` | Rolling index build failed | no |
| `ROLLING_INDEX_SUCCESS_INDEX_BUILD` | Rolling index build succeeded | no |
| `SAMPLE_DATASET_LOAD_REQUESTED` | Sample dataset load requested | yes |
| `SANDBOX_CONFIG_DELETED` | Sandbox configuration has been deleted | no |
| `SANDBOX_DISABLED_FOR_ORG` | Sandbox has been disabled | no |
| `SANDBOX_ENABLED_FOR_ORG` | Sandbox has been enabled | no |
| `SANDBOX_TEMPLATE_UPDATED` | Sandbox project configurations have been set to provider: | no |
| `SCHEDULED_MAINTENANCE` | Scheduled maintenance will occur | no |
| `SCHEDULE_GROOM` | Schedule groom | no |
| `SEARCH_DEPLOYMENT_CREATED` | Search deployment created. | no |
| `SEARCH_DEPLOYMENT_DELETED` | Search deployment deleted. | no |
| `SEARCH_DEPLOYMENT_UPDATED` | Search deployment updated. | no |
| `SEARCH_HOST_DISABLE_FTS` | The FTS disabled was updated on a search host | no |
| `SEARCH_HOST_PAUSE_ALL_INITIAL_SYNCS` | The pause all initial syncs was updated on a search host | no |
| `SECURITY_CHECKUP_ALERTS_UPDATED` | Security checkup alerts updated | yes |
| `SECURITY_CONTACT_MODIFIED` | Atlas Security Contact was modified | no |
| `SETUP_SERVERLESS_INITIATED` | Setup Serverless button clicked | no |
| `SET_ENSURE_CLUSTER_CONNECTIVITY_AFTER_FOR_CLUSTER` | Admin scheduled ensure connectivity for cluster | no |
| `SHADOW_CLUSTER_CREATE_EXPOSURE` | Shadow cluster exposure created | no |
| `SHADOW_CLUSTER_DELETE_EXPOSURE` | Shadow cluster exposure deleted | no |
| `SHADOW_CLUSTER_ORG_OPT_IN` | Organization opted in to shadow cluster feature | no |
| `SHADOW_CLUSTER_ORG_OPT_OUT` | Organization opted out of shadow cluster feature | no |
| `SHADOW_CLUSTER_RECORDING_STATUS_UPDATE` | Shadow cluster recording status updated | no |
| `SHADOW_CLUSTER_REPLAY_STATUS_UPDATE` | Shadow cluster replay status updated | no |
| `SHARD_KEY_ANALYSIS_FINISHED` | AnalyzeShardKey command job was completed | no |
| `SHARD_KEY_ANALYSIS_STARTED` | AnalyzeShardKey command job was submitted | no |
| `SNAPSHOT_STORE_CONFIG_CHANGE` | Snapshot store configuration changed | no |
| `SNAPSHOT_STORE_DELETED` | Snapshot store deleted | no |
| `SOFTWARE_RELEASE_UPDATED` | Global software release updated | yes |
| `SPLUNK_LOG_STREAMING_CONFIGURATION_UPDATED` | Splunk Log Streaming configuration updated | no |
| `SPLUNK_LOG_STREAMING_DISABLED` | Splunk Log Streaming disabled | no |
| `SPLUNK_LOG_STREAMING_ENABLED` | Splunk Log Streaming enabled | no |
| `SSH_KEY_NDS_HOST_ACCESS_ATTEMPT` | A MongoDB employee attempted to access a cluster's infrastructure in this Atlas project. | no |
| `SSH_KEY_NDS_HOST_ACCESS_GRANTED` | A MongoDB employee was granted access to a cluster's infrastructure in this Atlas project. | no |
| `SSH_KEY_NDS_HOST_ACCESS_LEVEL_CHANGED` | A MongoDB employee's access level was changed for a cluster's infrastructure in this Atlas project. | no |
| `SSH_KEY_NDS_HOST_ACCESS_REFRESHED` | A MongoDB employee refreshed access to a cluster's infrastructure in this Atlas project. | yes |
| `SSH_KEY_NDS_HOST_ACCESS_REQUESTED` | A MongoDB employee requested access to a cluster's infrastructure in this Atlas project. | yes |
| `SSL_CERTIFICATE_ISSUED` | New SSL certificate has been successfully issued for a cluster instance | no |
| `STANDBY_LINK_INITIALIZATION_STUCK` | A standby link has been in the initialization workflow longer than the configured threshold | yes |
| `STANDBY_LINK_INITIALIZATION_STUCK_RESOLVED` | A previously stuck standby link initialization is no longer stuck | no |
| `STANDBY_LINK_TERMINATION_STUCK` | A standby link termination has been in progress longer than the configured threshold | yes |
| `STANDBY_LINK_TERMINATION_STUCK_RESOLVED` | A previously stuck standby link termination is no longer stuck | no |
| `STEP_SKIPPED` | Step in progress was skipped | no |
| `SUBSCRIPTION_USAGE_DOC_RATE_CHANGED_DRASTICALLY` | The rate of change in document count in the subscription usage collection changed drastically between the last two hours | yes |
| `SUBSCRIPTION_USAGE_DOC_RATE_STEADY` | The rate of change in document count in the subscription usage collection has been steady for the past two hours | no |
| `SUCCESSFUL_DEPLOY` | A user (or Code Deployment) has deployed changes successfully to an App Service | yes |
| `SUFFICIENT_APP_DB_FREE_SPACE` | AppDB has sufficient free disk space | no |
| `SUFFICIENT_BLOCKSTORE_FREE_SPACE` | Blockstore has sufficient free disk space | no |
| `SUFFICIENT_FILESYSTEM_STORE_FREE_SPACE` | Filesystem store has sufficient free disk space | no |
| `SUFFICIENT_HEAD_FREE_SPACE` | Backup Daemon has sufficient free head space | no |
| `SUFFICIENT_OPLOGSTORE_FREE_SPACE` | Oplogstore has sufficient free disk space | no |
| `SUPPORT_EMAILS_SENT_FAILURE` | Support emails failed to send. | no |
| `SUPPORT_EMAILS_SENT_SUCCESSFULLY` | Support email sent | no |
| `SUPPORT_PLAN_ACTIVATED` | Support plan activated | no |
| `SUPPORT_PLAN_CANCELLATION_SCHEDULED` | Support plan cancellation scheduled | no |
| `SUPPORT_PLAN_CANCELLED` | Support plan cancelled | no |
| `SYNC_FAILURE` | A Sync process has failed and cannot be restarted | yes |
| `SYNC_STORE_CONFIG_CHANGE` | Sync store configuration changed | no |
| `SYNC_STORE_DELETED` | Sync store deleted | no |
| `TAGS_MODIFIED` | Tag(s) were added or modified | yes |
| `TEAM_ADDED_TO_GROUP` | Team added to project | no |
| `TEAM_CREATED` | Team created | no |
| `TEAM_DELETED` | Team deleted | no |
| `TEAM_NAME_CHANGED` | Team name changed | no |
| `TEAM_REMOVED_FROM_GROUP` | Team removed from project | no |
| `TEAM_ROLES_MODIFIED` | Team roles modified in project | no |
| `TEAM_UPDATED` | Team updated | no |
| `TERMINATE_PAID_SERVICES` | Terminate all paid services for organization | no |
| `TEST_FAILOVER_REQUESTED` | Test of primary failover requested | no |
| `THEFT_FAILED` | Backup was not moved successfully | yes |
| `TIMELY_WTC_SNAPSHOT` | Replica set does not have a late WiredTiger Checkpoint snapshot | no |
| `TOO_FEW_HEALTHY_MEMBERS` | Replica set has too few healthy members | yes |
| `TOO_MANY_ELECTIONS` | Replica set has too many election events | yes |
| `TOO_MANY_UNHEALTHY_MEMBERS` | Replica set has too many unhealthy members | yes |
| `TRIGGER_AUTO_RESUMED` | A Trigger was automatically resumed | yes |
| `TRIGGER_FAILURE` | A Trigger has failed and cannot be restarted | yes |
| `UIS_PANICKED` | UIS has panicked | no |
| `UNLINKED_ORG` | An organization has been unlinked from this paying organization | no |
| `URL_CONFIRMATION` | A Custom URL has been confirmed for static hosting | yes |
| `USERS_WITHOUT_MULTI_FACTOR_AUTH` | Users do not have multi-factor authentication enabled | yes |
| `USER_SECURITY_SETTINGS_UPDATED` | User security settings updated | no |
| `VERSION_BEHIND` | Host does not have the latest version | yes |
| `VERSION_CHANGED` | Host version changed | no |
| `VERSION_CURRENT` | Host has the latest version | no |
| `WEBHOOK_TEMPLATE_RENDER_FAILED` | A webhook alert notification template failed to render, so the default payload was sent instead. Review the webhook template in your alert settings. | yes |
| `WIRE_TRANSFER_PAYMENT_RECEIVED` | Invoice has been paid by wire transfer | no |