# Log Event References

These references contain information about each StrongDM log type: the fields they might include and what sort of values could be expected to be set for those fields.

Log Stream events are only available for Enterprise organizations who are using the [Log Stream](/admin/audit/logs/log-stream.md) feature.

For logs that are being delivered via Log Stream, the following event types are present:

* **Activities**: Activities are logs of user and administrator activity within the StrongDM platform, including authentications with StrongDM, adding or configuring resources, managing nodes, and managing users.
* **Queries**: Queries are logs of actual queries and actions by users against resources.
* **Replays**: Replays are logs of SSH, RDP, or Kubernetes sessions that allow a session to be rendered and viewed.

For logs that are generated locally on nodes (gateways/relays) and viewed via a method other than Log Stream, the following event types are present:

* **Start**: Start events are logs of queries and actions by users against resources.
* **Post Start**: Post Start events are events that relate to Start events and record any necessary amendments to a query later in the connection in situations where that might be necessary, such as when a query is spread across multiple payloads.
* **Complete**: Complete events are events that relate to Start events and record the duration of a query and the amount of records returned.
* **Replay Chunks**: Replay Chunk events contain the information for a particular chunk of a replay, and are able to be compiled, rendered, and viewed as replays.

{% content-ref url="/pages/XW3mA9upmCitsoJ6Z8T7" %}
[Policy Evaluation and Authorization Information in Logs](/admin/audit/logs/references/authz-logs-object.md)
{% endcontent-ref %}

{% content-ref url="/pages/yOaIlmxNBvvOTeWwV4JW" %}
[Node Logs - Complete Event](/admin/audit/logs/references/node-complete.md)
{% endcontent-ref %}

{% content-ref url="/pages/utJ5nBpRcxiTHi1cDRBo" %}
[Node Logs - Post Start Event](/admin/audit/logs/references/node-post-start.md)
{% endcontent-ref %}

{% content-ref url="/pages/Nb0hdSFy4Uy1mEGiAtnM" %}
[Log Stream - Queries](/admin/audit/logs/references/logstream-queries.md)
{% endcontent-ref %}

{% content-ref url="/pages/zUjvkocK9sN1nTxTUNTh" %}
[Node Logs - Replay Chunks](/admin/audit/logs/references/node-replay-chunks.md)
{% endcontent-ref %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.strongdm.com/admin/audit/logs/references.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.