This article will explain the different "Actions" you have in a File Audit Report. 

Action

Description

UPLOAD

If a file is edited and saving them to the server.

               OR

When New files are added to the server.

CREATE FOLDER
Shows folders that were created.
DOWNLOAD

When a file is downloaded from the cloud, including the opening of the file, it also includes the export of a file.

When a file is downloaded in Desktop App.

Because the user copied it from Egnyte drive to a local folder.

Because it was opened for editing because its parent folder was marked for offline access

Because external apps like explorer download the file to get information about the file or creating the thumbnail

MOVE FILE

When a file is renamed or moving files from one location to another within the Egnyte server.

MOVE FOLDER

When a folder is moved or renamed

DELETE NOTE

Remove comment

ADD NOTE

Add comment

DELETE FILE/FOLDER 

When a file/folder is deleted and moved to the trash

PROMOTE FILE VERSION

When the old version of a file is promoted to the current version 

DELETE FROM TRASH

When a file/folder is deleted permanently from the trash

RESTORE FROM TRASH

When a file is restored from the trash

PREVIEW

When a file is previewed from the cloud

 

CREATE LINK

When a share link is created

 

DELETE LINK

When a share link is deleted

DOWNLOAD VIA LINK

Downloads from the link are considered as Download via Link. 

 

CREATE UPLOAD LINK 

When an upload link is created

DELETE UPLOAD LINK 

When an upload link is deleted

 

PREVIEW VIA LINK 

When a File is previewed through a share link

 

LOCK FILE 

When a file is locked because it was opened from an application like Desktop App, Webedit, it is co-edited or manually locked. 

UNLOCK FILE

When the lock on a file is released, or a co-editing session is over

CO-EDIT FILE

 

When [an additional] user joins a co-editing session.

As the first use starts a co-editing session,  a "Lock File" event (with "Co-Editing Session Id: ... " information in the "Action Info" field) will be added to the audit. When the following users join the co-editing session, there will be a "Co-Edit File" event for each of the users.

* starting from Aug. 11, 2021.  See New Audit Events for Co-Editing

ADD METADATA

When the File/Folder had the metadata added/changed. 

DELETE METADATA

When the File/Folder had the metadata deleted.

 

READ

indicate that a file on a computer with Desktop App was accessed locally. This information is reflected in the File Audit report to indicate when a user (or a local application/process, e.g., antivirus) accessed a file on that computer.

COPY

Copy File/Folder from one location to another one