Update audit log event data (#57876)

docs-bot · steveward · web-flow · commit 4a17001993a7 · 2025-10-08T19:53:53.000Z
Co-authored-by: Steve Ward &lt;steveward@github.com&gt;
diff --git a/src/audit-logs/data/fpt/organization.json b/src/audit-logs/data/fpt/organization.json
@@ -397,6 +397,27 @@
       "action"
     ]
   },
+  {
+    "action": "billing.overage_policy_updated",
+    "description": "The premium request paid usage policy for your GitHub account was changed.",
+    "docs_reference_links": "/copilot/how-tos/manage-and-track-spending/manage-request-allowances#setting-a-policy-for-paid-usage",
+    "fields": [
+      "actor",
+      "actor_id",
+      "user_agent",
+      "request_id",
+      "request_access_security_header",
+      "business",
+      "business_id",
+      "action",
+      "_document_id",
+      "@timestamp",
+      "created_at",
+      "operation_type",
+      "actor_is_bot"
+    ],
+    "docs_reference_titles": "/copilot/how-tos/manage-and-track-spending/manage-request-allowances#setting-a-policy-for-paid-usage"
+  },
   {
     "action": "billing.unlock",
     "description": "N/A",
@@ -1387,7 +1408,7 @@
       "operation_type",
       "actor_is_bot"
     ],
-    "docs_reference_titles": "GitHub Copilot billing"
+    "docs_reference_titles": "GitHub Copilot licenses"
   },
   {
     "action": "copilot.plan_downgrade_scheduled",
diff --git a/src/audit-logs/data/fpt/user.json b/src/audit-logs/data/fpt/user.json
@@ -320,6 +320,27 @@
       "action"
     ]
   },
+  {
+    "action": "billing.overage_policy_updated",
+    "description": "The premium request paid usage policy for your GitHub account was changed.",
+    "docs_reference_links": "/copilot/how-tos/manage-and-track-spending/manage-request-allowances#setting-a-policy-for-paid-usage",
+    "fields": [
+      "actor",
+      "actor_id",
+      "user_agent",
+      "request_id",
+      "request_access_security_header",
+      "business",
+      "business_id",
+      "action",
+      "_document_id",
+      "@timestamp",
+      "created_at",
+      "operation_type",
+      "actor_is_bot"
+    ],
+    "docs_reference_titles": "/copilot/how-tos/manage-and-track-spending/manage-request-allowances#setting-a-policy-for-paid-usage"
+  },
   {
     "action": "billing.unlock",
     "description": "N/A",
diff --git a/src/audit-logs/data/ghec/enterprise.json b/src/audit-logs/data/ghec/enterprise.json
@@ -529,6 +529,27 @@
       "action"
     ]
   },
+  {
+    "action": "billing.overage_policy_updated",
+    "description": "The premium request paid usage policy for your GitHub account was changed.",
+    "docs_reference_links": "/copilot/how-tos/manage-and-track-spending/manage-request-allowances#setting-a-policy-for-paid-usage",
+    "fields": [
+      "actor",
+      "actor_id",
+      "user_agent",
+      "request_id",
+      "request_access_security_header",
+      "business",
+      "business_id",
+      "action",
+      "_document_id",
+      "@timestamp",
+      "created_at",
+      "operation_type",
+      "actor_is_bot"
+    ],
+    "docs_reference_titles": "/copilot/how-tos/manage-and-track-spending/manage-request-allowances#setting-a-policy-for-paid-usage"
+  },
   {
     "action": "billing.unlock",
     "description": "N/A",
@@ -4319,7 +4340,7 @@
       "operation_type",
       "actor_is_bot"
     ],
-    "docs_reference_titles": "GitHub Copilot billing"
+    "docs_reference_titles": "GitHub Copilot licenses"
   },
   {
     "action": "copilot.plan_downgrade_scheduled",
diff --git a/src/audit-logs/data/ghec/organization.json b/src/audit-logs/data/ghec/organization.json
@@ -397,6 +397,27 @@
       "action"
     ]
   },
+  {
+    "action": "billing.overage_policy_updated",
+    "description": "The premium request paid usage policy for your GitHub account was changed.",
+    "docs_reference_links": "/copilot/how-tos/manage-and-track-spending/manage-request-allowances#setting-a-policy-for-paid-usage",
+    "fields": [
+      "actor",
+      "actor_id",
+      "user_agent",
+      "request_id",
+      "request_access_security_header",
+      "business",
+      "business_id",
+      "action",
+      "_document_id",
+      "@timestamp",
+      "created_at",
+      "operation_type",
+      "actor_is_bot"
+    ],
+    "docs_reference_titles": "/copilot/how-tos/manage-and-track-spending/manage-request-allowances#setting-a-policy-for-paid-usage"
+  },
   {
     "action": "billing.unlock",
     "description": "N/A",
@@ -1387,7 +1408,7 @@
       "operation_type",
       "actor_is_bot"
     ],
-    "docs_reference_titles": "GitHub Copilot billing"
+    "docs_reference_titles": "GitHub Copilot licenses"
   },
   {
     "action": "copilot.plan_downgrade_scheduled",
diff --git a/src/audit-logs/data/ghec/user.json b/src/audit-logs/data/ghec/user.json
@@ -320,6 +320,27 @@
       "action"
     ]
   },
+  {
+    "action": "billing.overage_policy_updated",
+    "description": "The premium request paid usage policy for your GitHub account was changed.",
+    "docs_reference_links": "/copilot/how-tos/manage-and-track-spending/manage-request-allowances#setting-a-policy-for-paid-usage",
+    "fields": [
+      "actor",
+      "actor_id",
+      "user_agent",
+      "request_id",
+      "request_access_security_header",
+      "business",
+      "business_id",
+      "action",
+      "_document_id",
+      "@timestamp",
+      "created_at",
+      "operation_type",
+      "actor_is_bot"
+    ],
+    "docs_reference_titles": "/copilot/how-tos/manage-and-track-spending/manage-request-allowances#setting-a-policy-for-paid-usage"
+  },
   {
     "action": "billing.unlock",
     "description": "N/A",
diff --git a/src/audit-logs/data/ghes-3.14/organization.json b/src/audit-logs/data/ghes-3.14/organization.json
@@ -1057,7 +1057,7 @@
       "operation_type",
       "actor_is_bot"
     ],
-    "docs_reference_titles": "GitHub Copilot billing"
+    "docs_reference_titles": "GitHub Copilot licenses"
   },
   {
     "action": "custom_hosted_runner.create",
diff --git a/src/audit-logs/data/ghes-3.15/organization.json b/src/audit-logs/data/ghes-3.15/organization.json
@@ -1040,7 +1040,7 @@
       "operation_type",
       "actor_is_bot"
     ],
-    "docs_reference_titles": "GitHub Copilot billing"
+    "docs_reference_titles": "GitHub Copilot licenses"
   },
   {
     "action": "copilot.plan_downgrade_scheduled",
diff --git a/src/audit-logs/data/ghes-3.16/organization.json b/src/audit-logs/data/ghes-3.16/organization.json
@@ -1147,7 +1147,7 @@
       "operation_type",
       "actor_is_bot"
     ],
-    "docs_reference_titles": "GitHub Copilot billing"
+    "docs_reference_titles": "GitHub Copilot licenses"
   },
   {
     "action": "copilot.plan_downgrade_scheduled",
diff --git a/src/audit-logs/data/ghes-3.17/organization.json b/src/audit-logs/data/ghes-3.17/organization.json
@@ -1269,7 +1269,7 @@
       "operation_type",
       "actor_is_bot"
     ],
-    "docs_reference_titles": "GitHub Copilot billing"
+    "docs_reference_titles": "GitHub Copilot licenses"
   },
   {
     "action": "copilot.plan_downgrade_scheduled",
diff --git a/src/audit-logs/data/ghes-3.19/organization.json b/src/audit-logs/data/ghes-3.19/organization.json
@@ -1387,7 +1387,7 @@
       "operation_type",
       "actor_is_bot"
     ],
-    "docs_reference_titles": "GitHub Copilot billing"
+    "docs_reference_titles": "GitHub Copilot licenses"
   },
   {
     "action": "copilot.plan_downgrade_scheduled",
diff --git a/src/audit-logs/lib/config.json b/src/audit-logs/lib/config.json
@@ -9,5 +9,5 @@
     "git": "Note: Git events have special access requirements and retention policies that differ from other audit log events. For GitHub Enterprise Cloud, access Git events via the REST API only with 7-day retention. For GitHub Enterprise Server, Git events must be enabled in audit log configuration and are not included in search results.",
     "sso_redirect": "Note: Automatically redirecting users to sign in is currently in beta for Enterprise Managed Users and subject to change."
   },
-  "sha": "ff2be4f24eaeb83e0d054bcf1f2d36c5f8add0af"
+  "sha": "73af758b3ef22814e29e064415327dc0840f5ec8"
 }

Original file line number	Diff line number	Diff line change
`@@ -1057,7 +1057,7 @@`
`1057`	`1057`	`"operation_type",`
`1058`	`1058`	`"actor_is_bot"`
`1059`	`1059`	`],`
`1060`		`- "docs_reference_titles": "GitHub Copilot billing"`
	`1060`	`+ "docs_reference_titles": "GitHub Copilot licenses"`
`1061`	`1061`	`},`
`1062`	`1062`	`{`
`1063`	`1063`	`"action": "custom_hosted_runner.create",`
Original file line number	Diff line number	Diff line change
`@@ -1040,7 +1040,7 @@`
`1040`	`1040`	`"operation_type",`
`1041`	`1041`	`"actor_is_bot"`
`1042`	`1042`	`],`
`1043`		`- "docs_reference_titles": "GitHub Copilot billing"`
	`1043`	`+ "docs_reference_titles": "GitHub Copilot licenses"`
`1044`	`1044`	`},`
`1045`	`1045`	`{`
`1046`	`1046`	`"action": "copilot.plan_downgrade_scheduled",`
Original file line number	Diff line number	Diff line change
`@@ -1147,7 +1147,7 @@`
`1147`	`1147`	`"operation_type",`
`1148`	`1148`	`"actor_is_bot"`
`1149`	`1149`	`],`
`1150`		`- "docs_reference_titles": "GitHub Copilot billing"`
	`1150`	`+ "docs_reference_titles": "GitHub Copilot licenses"`
`1151`	`1151`	`},`
`1152`	`1152`	`{`
`1153`	`1153`	`"action": "copilot.plan_downgrade_scheduled",`
Original file line number	Diff line number	Diff line change
`@@ -1269,7 +1269,7 @@`
`1269`	`1269`	`"operation_type",`
`1270`	`1270`	`"actor_is_bot"`
`1271`	`1271`	`],`
`1272`		`- "docs_reference_titles": "GitHub Copilot billing"`
	`1272`	`+ "docs_reference_titles": "GitHub Copilot licenses"`
`1273`	`1273`	`},`
`1274`	`1274`	`{`
`1275`	`1275`	`"action": "copilot.plan_downgrade_scheduled",`
Original file line number	Diff line number	Diff line change
`@@ -1387,7 +1387,7 @@`
`1387`	`1387`	`"operation_type",`
`1388`	`1388`	`"actor_is_bot"`
`1389`	`1389`	`],`
`1390`		`- "docs_reference_titles": "GitHub Copilot billing"`
	`1390`	`+ "docs_reference_titles": "GitHub Copilot licenses"`
`1391`	`1391`	`},`
`1392`	`1392`	`{`
`1393`	`1393`	`"action": "copilot.plan_downgrade_scheduled",`