Prioritized Log Streams
Prioritized Log Streams is a Dashboard feature that exports a predefined list of security events to third-party solutions. In the event of an attack or otherwise increased user activity, Prioritized Log Streams will remain active so downstream security automation and processes aren't impacted.
You can create a new prioritized log stream in the Auth0 Dashboard using one of the services we support, or you can configure a stream to a service you already use with a custom webhook. Prioritized Log streams do not count towards the log stream limit depicted in the pricing plan.
Configure a Prioritized Log Stream
Follow the instructions on the Log Streams page to set up a new log stream.
While configuring the new stream, go to the Settings tab on your Auth0 Dashboard and select the Prioritized Log checkbox to activate the predefined security events detailed below. Choose Save.
Go to your Stream page and navigate to the Prioritized label.
Prioritized Logs Event Types
The following event codes are classified by Auth0 as security-related events:
| Event Code | Event |
|---|---|
limit_mu |
Blocked IP Address |
limit_sul |
Blocked Account (IP Throttling) |
limit_wc |
Blocked Account (Brute Force Protection) |
pwd_leak |
Breached password on Login |
ublkdu |
User login block released |
signup_pwd_leak |
Breached Password on Signup |
gd_send_sms |
MFA SMS Sent |