> ## Documentation Index
> Fetch the complete documentation index at: https://docs-staging-quickstart-revamp.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

> Lists the log filters for errors, warnings, and success events.

# Filter Log Events

You can filter logs for errors, warnings, and success events in the [Dashboard](https://manage.auth0.com/#/logs) when you click the **Filter** down arrow.

## Error event filters

<table class="table">
  <thead>
    <tr>
      <th>Filter</th>
      <th>Description</th>
    </tr>
  </thead>

  <tbody>
    <tr>
      <td>Block Account</td>
      <td>IP blocked for >10 failed attempts to login to single account</td>
    </tr>

    <tr>
      <td>Blocked IP Address</td>
      <td>IP blocked for >100 failed login attempts or >50 signup attempts</td>
    </tr>

    <tr>
      <td>Breached password</td>
      <td>Attempted login with a leaked password</td>
    </tr>

    <tr>
      <td>Device Confirmation Canceled by User</td>
      <td>User did not confirm device</td>
    </tr>

    <tr>
      <td>Error sending MFA Push Notification</td>
      <td>Push notification for MFA failed</td>
    </tr>

    <tr>
      <td>Error sending MFA SMS</td>
      <td>SMS for MFA failed</td>
    </tr>

    <tr>
      <td>Failed API Operation</td>
      <td>Operation on API failed</td>
    </tr>

    <tr>
      <td>Failed Change Email</td>
      <td>Failed to change user email</td>
    </tr>

    <tr>
      <td>Failed Change Password</td>
      <td>Failed to change user password</td>
    </tr>

    <tr>
      <td>Failed Change Password Request</td>
      <td>Change password request failed</td>
    </tr>

    <tr>
      <td>Failed Change Phone Number</td>
      <td>Failed to change user phone number</td>
    </tr>

    <tr>
      <td>Failed Change Username</td>
      <td>Failed to change username</td>
    </tr>

    <tr>
      <td>Failed Connector Provisioning</td>
      <td>Failed to provision a AD/LDAP connector</td>
    </tr>

    <tr>
      <td>Failed Delegation</td>
      <td>Failed to generate delegation token</td>
    </tr>

    <tr>
      <td>Failed Exchange</td>
      <td>Token Exchange</td>
    </tr>

    <tr>
      <td>Failed Exchange</td>
      <td>Native Socal Login</td>
    </tr>

    <tr>
      <td>Failed Exchange</td>
      <td>Authorization Code for Access Token</td>
    </tr>

    <tr>
      <td>Failed Exchange</td>
      <td>Client Credentials for Access Token</td>
    </tr>

    <tr>
      <td>Failed Exchange</td>
      <td>Password for Access Token</td>
    </tr>

    <tr>
      <td>Failed Exchange</td>
      <td>Refresh Token for Access Token</td>
    </tr>

    <tr>
      <td>Failed Exchange</td>
      <td>Password and OOB Challenge for Access Token</td>
    </tr>

    <tr>
      <td>Failed Exchange</td>
      <td>Password and OTP Challenge for Access Token</td>
    </tr>

    <tr>
      <td>Failed Exchange</td>
      <td>Password and MFA Recovery code for Access Token</td>
    </tr>

    <tr>
      <td>Failed Exchange</td>
      <td>Device Code for Access Token</td>
    </tr>

    <tr>
      <td>Failed Login</td>
      <td>User failed to login</td>
    </tr>

    <tr>
      <td>Failed Login (invalid email/username)</td>
      <td>User failed to login due to invalid username</td>
    </tr>

    <tr>
      <td>Failed Login (wrong password)</td>
      <td>User failed to login due to invalid password</td>
    </tr>

    <tr>
      <td>Failed Logout</td>
      <td>User logout failed</td>
    </tr>

    <tr>
      <td>Failed OIDC Back-Channel Logout Request</td>
      <td>Back-Channel Logout request failed</td>
    </tr>

    <tr>
      <td>Failed Post Change Password Hook</td>
      <td>Post-change password hook failed</td>
    </tr>

    <tr>
      <td>Failed Post User Registration Hook</td>
      <td>Post user registration hook failed</td>
    </tr>

    <tr>
      <td>Failed Sending Notification</td>
      <td>Failed to send email notification</td>
    </tr>

    <tr>
      <td>Failed Signup</td>
      <td>Sign up failed</td>
    </tr>

    <tr>
      <td>Failed Silent Auth</td>
      <td>Silent authentication failed</td>
    </tr>

    <tr>
      <td>Failed User Deletion</td>
      <td>User deletion failed</td>
    </tr>

    <tr>
      <td>Failed Verification Email</td>
      <td>Failed to send verification email</td>
    </tr>

    <tr>
      <td>Failed Verification Email Request</td>
      <td>Failed to process verification email request</td>
    </tr>

    <tr>
      <td>Failed CORS</td>
      <td>Origin is not in the Allowed Origins list for the specified application</td>
    </tr>

    <tr>
      <td>Failed by Connector</td>
      <td>AD/LDAP Connector Failure</td>
    </tr>

    <tr>
      <td>Failed cross origin authentication</td>
      <td>Cross-origin authentication failed</td>
    </tr>

    <tr>
      <td>Failed device activation</td>
      <td>Failed to activate device</td>
    </tr>

    <tr>
      <td>Failed device authorization request</td>
      <td>Device authorization request failed</td>
    </tr>

    <tr>
      <td>MFA Enrollment start failed</td>
      <td>Multi-factor authentication enroll failed</td>
    </tr>

    <tr>
      <td>OTP Auth failed</td>
      <td>One-time password authentication failed</td>
    </tr>

    <tr>
      <td>OTP Auth rejected</td>
      <td>One-time password authentication rejected</td>
    </tr>

    <tr>
      <td>Rate Limit on API</td>
      <td>Maximum number of requests to the Authentication API in given time has been reached</td>
    </tr>

    <tr>
      <td>Recovery failed</td>
      <td>Multi-factor recovery code failed</td>
    </tr>

    <tr>
      <td>Second factor email failed</td>
      <td>Email for MFA failed</td>
    </tr>

    <tr>
      <td>Too Many Calls to /delegation</td>
      <td>Rate limt exceeded to /delegation endpoint</td>
    </tr>

    <tr>
      <td>Too Many Calls to /userinfo</td>
      <td>Rate limit exceeded to /userinfo endpoint</td>
    </tr>

    <tr>
      <td>Too Many Invalid Device Codes</td>
      <td>Rate limit exceeded for invalid device codes</td>
    </tr>
  </tbody>
</table>

## Warning event filters

<table class="table">
  <thead>
    <tr>
      <th>Filter</th>
      <th>Description</th>
    </tr>
  </thead>

  <tbody>
    <tr>
      <td>Deprecation Notice</td>
      <td>Feature is deprecated</td>
    </tr>

    <tr>
      <td>Too many failures</td>
      <td>Multi-factor OTP has failed too many times</td>
    </tr>

    <tr>
      <td>Too many failures</td>
      <td>Mutli-factor recovery code has failed too many times</td>
    </tr>

    <tr>
      <td>Users import</td>
      <td>Failed to import users</td>
    </tr>

    <tr>
      <td>Warning During Login</td>
      <td>Warnings during login</td>
    </tr>
  </tbody>
</table>

## Success event filters

<table class="table">
  <thead>
    <tr>
      <th>Filter</th>
      <th>Description</th>
    </tr>
  </thead>

  <tbody>
    <tr>
      <td>API Operation</td>
      <td>API operation completed successfully</td>
    </tr>

    <tr>
      <td>API Read Operation</td>
      <td>API GET operation returning secrets completed successfully</td>
    </tr>

    <tr>
      <td>Account unblocked</td>
      <td>User block setup by anomay detection has been released</td>
    </tr>

    <tr>
      <td>Auth0 OS Update Ended</td>
      <td>Auth0 OS update ended</td>
    </tr>

    <tr>
      <td>Auth0 OS Update Started</td>
      <td>Auth0 OS update started</td>
    </tr>

    <tr>
      <td>Auth0 Update Ended</td>
      <td>Auth0 update ended</td>
    </tr>

    <tr>
      <td>Auth0 Update Launched</td>
      <td>New version of Auth0 released</td>
    </tr>

    <tr>
      <td>Auth0 Update Started</td>
      <td>Auth0 update started</td>
    </tr>

    <tr>
      <td>Code Sent</td>
      <td>Passwordess login code has been sent</td>
    </tr>

    <tr>
      <td>Code/Link Sent</td>
      <td>Passwordless lgoin code/link has been sent</td>
    </tr>

    <tr>
      <td>Configuration read</td>
      <td>PSaaS configuration has been read</td>
    </tr>

    <tr>
      <td>Configuration status checked</td>
      <td>PSaaS configuration's status has been checked</td>
    </tr>

    <tr>
      <td>Configuration updated</td>
      <td>PSaaS configuration has been updated</td>
    </tr>

    <tr>
      <td>Enrollment started</td>
      <td>Multi-factor authentication enrollment has started</td>
    </tr>

    <tr>
      <td>MFA enrollment complete</td>
      <td>Multi-factor authentication enrollment has completed</td>
    </tr>

    <tr>
      <td>MFA settings update</td>
      <td>Multi-factor tenant settings updated</td>
    </tr>

    <tr>
      <td>Module switch</td>
      <td>Multi-factor module switched</td>
    </tr>

    <tr>
      <td>OTP Auth Succeed</td>
      <td>One-time password authentication success</td>
    </tr>

    <tr>
      <td>Push notification sent</td>
      <td>Push notification for MFA successfully sent</td>
    </tr>

    <tr>
      <td>Recovery succeed</td>
      <td>Multi-factor recovery code succeeded authorization</td>
    </tr>

    <tr>
      <td>SMS Sent</td>
      <td>SMS for MFA sent successfully sent</td>
    </tr>

    <tr>
      <td>Second factor email sent</td>
      <td>Email for MFA successfully sent</td>
    </tr>

    <tr>
      <td>Second factor started</td>
      <td>Second factor authentication event started for MFA</td>
    </tr>

    <tr>
      <td>Success Change Email</td>
      <td>Email changed successfully</td>
    </tr>

    <tr>
      <td>Success Change Password</td>
      <td>Password changed successfully</td>
    </tr>

    <tr>
      <td>Success Change Password Request</td>
      <td>Change password request succeeded</td>
    </tr>

    <tr>
      <td>Success Change Phone Number</td>
      <td>Phone number changed successfully</td>
    </tr>

    <tr>
      <td>Success Change Username</td>
      <td>Username changed successfully</td>
    </tr>

    <tr>
      <td>Success Delegation</td>
      <td>Delegation token generated successfully</td>
    </tr>

    <tr>
      <td>Success Exchange</td>
      <td>Authorization Code for Access Token</td>
    </tr>

    <tr>
      <td>Success Exchange</td>
      <td>Client Credentials for Access Token</td>
    </tr>

    <tr>
      <td>Success Exchange</td>
      <td>Password for Access Token</td>
    </tr>

    <tr>
      <td>Success Exchange</td>
      <td>Refresh Token for Access Token</td>
    </tr>

    <tr>
      <td>Success Exchange</td>
      <td>Token Exchange</td>
    </tr>

    <tr>
      <td>Success Exchange</td>
      <td>Native Social Login</td>
    </tr>

    <tr>
      <td>Success Exchange</td>
      <td>Password and OOB Challenge for Access Token</td>
    </tr>

    <tr>
      <td>Success Exchange</td>
      <td>Password and OTP Challenge for Access Token</td>
    </tr>

    <tr>
      <td>Success Exchange</td>
      <td>Password and MFA Recovery code for Access Token</td>
    </tr>

    <tr>
      <td>Success Exchange</td>
      <td>Device Code for Access Token</td>
    </tr>

    <tr>
      <td>Success Login</td>
      <td>Successful Login</td>
    </tr>

    <tr>
      <td>Success Logout</td>
      <td>User successfully logged out</td>
    </tr>

    <tr>
      <td>Successful OIDC Back-Channel Logout request</td>
      <td>OIDC Back-Channel Logout request completed successfully</td>
    </tr>

    <tr>
      <td>Success Post Change Password Hook</td>
      <td>Post-change password hook ran successfully</td>
    </tr>

    <tr>
      <td>Success Signup</td>
      <td>Successful signup</td>
    </tr>

    <tr>
      <td>Success Silent Auth</td>
      <td>Successful silent authentication</td>
    </tr>

    <tr>
      <td>Success Verification Email</td>
      <td>Successful verification email</td>
    </tr>

    <tr>
      <td>Success Verification Email Request</td>
      <td>Successful verification email request</td>
    </tr>

    <tr>
      <td>Success cross origin authentication</td>
      <td>Successful cross-origin authentication</td>
    </tr>

    <tr>
      <td>Successful User Deletion</td>
      <td>User successfully deleted</td>
    </tr>

    <tr>
      <td>Unenroll device account</td>
      <td>Device used for second factor authentication has been unenrolled</td>
    </tr>

    <tr>
      <td>Update device account</td>
      <td>Device used for second factor authentication has been updated</td>
    </tr>

    <tr>
      <td>User delete</td>
      <td>Deleted multi-factor user account</td>
    </tr>

    <tr>
      <td>Users import</td>
      <td>Successfully imported users</td>
    </tr>
  </tbody>
</table>

## Learn more

* [View Logs](/docs/deploy-monitor/logs/view-log-events)
* [Retrieve Log Logs Using the Management API](/docs/deploy-monitor/logs/retrieve-log-events-using-mgmt-api)
* [Log Type Codes](/docs/deploy-monitor/logs/log-event-type-codes)
* [Log Search Query Syntax](/docs/deploy-monitor/logs/log-search-query-syntax)
* [Log Streams](/docs/customize/log-streams)