> ## Documentation Index > Fetch the complete documentation index at: https://docs-dev.mintlify.site/llms.txt > Use this file to discover all available pages before exploring further. > Filter Auth0 logs by event type to surface errors, warnings, and successful operations across your tenant for monitoring and incident response. # Filter Log Events You can filter logs for errors, warnings, and success events in the [Dashboard](https://manage.auth0.com/#/logs) when you click the **Filter** down arrow. ## Error event filters | Event Code | Filter | Description | | ----------------------------------------------------------------------------------------------------- | --------------------------------------- | ----------------------------------------------------------------------------------- | | [`limit_wc`](/docs/tenant-logs/system-notification/limit-wc) | Block Account | IP blocked for >10 failed attempts to login to single account | | [`limit_mu`](/docs/tenant-logs/system-notification/limit-mu) | Blocked IP Address | IP blocked for >100 failed login attempts or >50 signup attempts | | [`pwd_leak`](/docs/tenant-logs/other/pwd-leak) | Breached password | Attempted login with a leaked password | | [`fdecc`](/docs/tenant-logs/user-fail/fdecc) | Device Confirmation Canceled by User | User did not confirm device | | [`gd_send_pn_failure`](/docs/tenant-logs/other/gd-send-pn-failure) | Error sending MFA Push Notification | Push notification for MFA failed | | [`gd_send_sms_failure`](/docs/tenant-logs/other/gd-send-sms-failure) | Error sending MFA SMS | SMS for MFA failed | | [`fce`](/docs/tenant-logs/user-fail/fce) | Failed Change Email | Failed to change user email | | [`fcp`](/docs/tenant-logs/user-fail/fcp) | Failed Change Password | Failed to change user password | | [`fcpr`](/docs/tenant-logs/user-fail/fcpr) | Failed Change Password Request | Change password request failed | | [`fcpn`](/docs/tenant-logs/user-fail/fcpn) | Failed Change Phone Number | Failed to change user phone number | | [`fcu`](/docs/tenant-logs/user-fail/fcu) | Failed Change Username | Failed to change username | | [`fcpro`](/docs/tenant-logs/system-notification/fcpro) | Failed Connector Provisioning | Failed to provision a AD/LDAP connector | | [`fd`](/docs/tenant-logs/user-fail/fd) | Failed Delegation | Failed to generate delegation token | | [`fecte`](/docs/tenant-logs/auth-token-exchange-fail/fecte) | Failed Exchange | Token Exchange | | [`fens`](/docs/tenant-logs/auth-login-fail/fens) | Failed Exchange | Native Social Login | | [`feacft`](/docs/tenant-logs/auth-token-exchange-fail/feacft) | Failed Exchange | Authorization Code for Access Token | | [`feccft`](/docs/tenant-logs/auth-token-exchange-fail/feccft) | Failed Exchange | Client Credentials for Access Token | | [`fepft`](/docs/tenant-logs/auth-token-exchange-fail/fepft) | Failed Exchange | Password for Access Token | | [`fertft`](/docs/tenant-logs/auth-token-exchange-fail/fertft) | Failed Exchange | Refresh Token for Access Token | | [`feoobft`](/docs/tenant-logs/auth-token-exchange-fail/feoobft) | Failed Exchange | Password and OOB Challenge for Access Token | | [`feotpft`](/docs/tenant-logs/auth-token-exchange-fail/feotpft) | Failed Exchange | Password and OTP Challenge for Access Token | | [`fercft`](/docs/tenant-logs/auth-token-exchange-fail/fercft) | Failed Exchange | Password and MFA Recovery code for Access Token | | [`fede`](/docs/tenant-logs/auth-token-exchange-fail/fede) | Failed Exchange | Device Code for Access Token | | [`f`](/docs/tenant-logs/auth-login-fail/f) | Failed Login | User failed to login | | [`fu`](/docs/tenant-logs/auth-login-fail/fu) | Failed Login (invalid email/username) | User failed to login due to invalid username | | [`fp`](/docs/tenant-logs/auth-login-fail/fp) | Failed Login (wrong password) | User failed to login due to invalid password | | [`flo`](/docs/tenant-logs/auth-logout-fail/flo) | Failed Logout | User logout failed | | [`oidc_backchannel_logout_failed`](/docs/tenant-logs/auth-logout-fail/oidc-backchannel-logout-failed) | Failed OIDC Back-Channel Logout Request | Back-Channel Logout request failed | | [`fcph`](/docs/tenant-logs/user-fail/fcph) | Failed Post Change Password Hook | Post-change password hook failed | | [`fpurh`](/docs/tenant-logs/other/fpurh) | Failed Post User Registration Hook | Post user registration hook failed | | [`fn`](/docs/tenant-logs/user-fail/fn) | Failed Sending Notification | Failed to send email notification | | [`fs`](/docs/tenant-logs/auth-signup-fail/fs) | Failed Signup | Sign up failed | | [`fsa`](/docs/tenant-logs/auth-silent-auth-fail/fsa) | Failed Silent Auth | Silent authentication failed | | [`fdu`](/docs/tenant-logs/user-fail/fdu) | Failed User Deletion | User deletion failed | | [`fv`](/docs/tenant-logs/user-fail/fv) | Failed Verification Email | Failed to send verification email | | [`fvr`](/docs/tenant-logs/user-fail/fvr) | Failed Verification Email Request | Failed to process verification email request | | [`fco`](/docs/tenant-logs/other/fco) | Failed CORS | Origin is not in the Allowed Origins list for the specified application | | [`fcoa`](/docs/tenant-logs/auth-login-fail/fcoa) | Failed cross origin authentication | Cross-origin authentication failed | | [`fdeac`](/docs/tenant-logs/other/fdeac) | Failed device activation | Failed to activate device | | [`fdeaz`](/docs/tenant-logs/user-fail/fdeaz) | Failed device authorization request | Device authorization request failed | | [`gd_start_enroll_failed`](/docs/tenant-logs/other/gd-start-enroll-failed) | MFA Enrollment start failed | Multi-factor authentication enroll failed | | [`gd_auth_failed`](/docs/tenant-logs/other/gd-auth-failed) | OTP Auth failed | One-time password authentication failed | | [`gd_auth_rejected`](/docs/tenant-logs/other/gd-auth-rejected) | OTP Auth rejected | One-time password authentication rejected | | [`api_limit`](/docs/tenant-logs/system-notification/api-limit) | Rate Limit on API | Maximum number of requests to the Authentication API in given time has been reached | | [`gd_recovery_failed`](/docs/tenant-logs/other/gd-recovery-failed) | Recovery failed | Multi-factor recovery code failed | | [`limit_delegation`](/docs/tenant-logs/system-notification/limit-delegation) | Too Many Calls to /delegation | Rate limit exceeded to /delegation endpoint | ## Warning event filters | Event Code | Filter | Description | | ------------------------------------------------------------------------------ | -------------------- | ------------------------------------------ | | [`depnote`](/docs/tenant-logs/system-notification/depnote) | Deprecation Notice | Feature is deprecated | | [`gd_otp_rate_limit_exceed`](/docs/tenant-logs/other/gd-otp-rate-limit-exceed) | Too many failures | Multi-factor OTP has failed too many times | | [`fui`](/docs/tenant-logs/system-notification/fui) | Users import | Failed to import users | | [`w`](/docs/tenant-logs/auth-login-notification/w) | Warning During Login | Warnings during login | ## Success event filters | Event Code | Filter | Description | | -------------------------------------------------------------------------------------------------------------- | ------------------------------------------- | ---------------------------------------------------------------- | | [`sapi`](/docs/tenant-logs/management-success/sapi) | API Operation | API operation completed successfully | | [`mgmt_api_read`](/docs/tenant-logs/management-success/mgmt-api-read) | API Read Operation | API GET operation returning secrets completed successfully | | [`ublkdu`](/docs/tenant-logs/user-notification/ublkdu) | Account unblocked | User block setup by anomaly detection has been released | | [`cs`](/docs/tenant-logs/user-notification/cs) | Code Sent | Passwordless login code has been sent | | [`cls`](/docs/tenant-logs/other/cls) | Code/Link Sent | Passwordless login code/link has been sent | | [`gd_start_enroll`](/docs/tenant-logs/user-notification/gd-start-enroll) | Enrollment started | Multi-factor authentication enrollment has started | | [`gd_enrollment_complete`](/docs/tenant-logs/user-notification/gd-enrollment-complete) | MFA enrollment complete | Multi-factor authentication enrollment has completed | | [`gd_tenant_update`](/docs/tenant-logs/other/gd-tenant-update) | MFA settings update | Multi-factor tenant settings updated | | [`gd_auth_succeed`](/docs/tenant-logs/other/gd-auth-succeed) | OTP Auth Succeed | One-time password authentication success | | [`gd_send_pn`](/docs/tenant-logs/other/gd-send-pn) | Push notification sent | Push notification for MFA successfully sent | | [`gd_recovery_succeed`](/docs/tenant-logs/other/gd-recovery-succeed) | Recovery succeed | Multi-factor recovery code succeeded authorization | | [`gd_send_sms`](/docs/tenant-logs/other/gd-send-sms) | SMS Sent | SMS for MFA sent successfully | | [`gd_send_email`](/docs/tenant-logs/other/gd-send-email) | Second factor email sent | Email for MFA successfully sent | | [`gd_start_auth`](/docs/tenant-logs/other/gd-start-auth) | Second factor started | Second factor authentication event started for MFA | | [`sce`](/docs/tenant-logs/user-success/sce) | Success Change Email | Email changed successfully | | [`scp`](/docs/tenant-logs/user-success/scp) | Success Change Password | Password changed successfully | | [`scpr`](/docs/tenant-logs/user-success/scpr) | Success Change Password Request | Change password request succeeded | | [`scpn`](/docs/tenant-logs/user-success/scpn) | Success Change Phone Number | Phone number changed successfully | | [`scu`](/docs/tenant-logs/user-success/scu) | Success Change Username | Username changed successfully | | [`sd`](/docs/tenant-logs/user-success/sd) | Success Delegation | Delegation token generated successfully | | [`seacft`](/docs/tenant-logs/auth-token-exchange-success/seacft) | Success Exchange | Authorization Code for Access Token | | [`seccft`](/docs/tenant-logs/auth-token-exchange-success/seccft) | Success Exchange | Client Credentials for Access Token | | [`sepft`](/docs/tenant-logs/auth-token-exchange-success/sepft) | Success Exchange | Password for Access Token | | [`sertft`](/docs/tenant-logs/auth-token-exchange-success/sertft) | Success Exchange | Refresh Token for Access Token | | [`secte`](/docs/tenant-logs/auth-token-exchange-success/secte) | Success Exchange | Token Exchange | | [`sens`](/docs/tenant-logs/auth-login-success/sens) | Success Exchange | Native Social Login | | [`seoobft`](/docs/tenant-logs/auth-token-exchange-success/seoobft) | Success Exchange | Password and OOB Challenge for Access Token | | [`seotpft`](/docs/tenant-logs/auth-token-exchange-success/seotpft) | Success Exchange | Password and OTP Challenge for Access Token | | [`sercft`](/docs/tenant-logs/auth-token-exchange-success/sercft) | Success Exchange | Password and MFA Recovery code for Access Token | | [`sede`](/docs/tenant-logs/auth-token-exchange-success/sede) | Success Exchange | Device Code for Access Token | | [`s`](/docs/tenant-logs/auth-login-success/s) | Success Login | Successful Login | | [`slo`](/docs/tenant-logs/auth-logout-success/slo) | Success Logout | User successfully logged out | | [`oidc_backchannel_logout_succeeded`](/docs/tenant-logs/auth-logout-success/oidc-backchannel-logout-succeeded) | Successful OIDC Back-Channel Logout request | OIDC Back-Channel Logout request completed successfully | | [`ss`](/docs/tenant-logs/auth-signup-success/ss) | Success Signup | Successful signup | | [`ssa`](/docs/tenant-logs/auth-silent-auth-success/ssa) | Success Silent Auth | Successful silent authentication | | [`sv`](/docs/tenant-logs/user-success/sv) | Success Verification Email | Successful verification email | | [`svr`](/docs/tenant-logs/user-success/svr) | Success Verification Email Request | Successful verification email request | | [`scoa`](/docs/tenant-logs/auth-login-success/scoa) | Success cross origin authentication | Successful cross-origin authentication | | [`sdu`](/docs/tenant-logs/user-success/sdu) | Successful User Deletion | User successfully deleted | | [`gd_unenroll`](/docs/tenant-logs/user-notification/gd-unenroll) | Unenroll device account | Device used for second factor authentication has been unenrolled | | [`gd_update_device_account`](/docs/tenant-logs/user-notification/gd-update-device-account) | Update device account | Device used for second factor authentication has been updated | | [`sui`](/docs/tenant-logs/user-success/sui) | Users import | Successfully imported users | ## Learn more * [View Logs](/docs/deploy-monitor/logs/view-log-events) * [Retrieve Log Logs Using the Management API](/docs/deploy-monitor/logs/retrieve-log-events-using-mgmt-api) * [Log Type Codes](/docs/deploy-monitor/logs/log-event-type-codes) * [Log Search Query Syntax](/docs/deploy-monitor/logs/log-search-query-syntax) * [Log Streams](/docs/customize/log-streams)