> ## Documentation Index
> Fetch the complete documentation index at: https://auth0-feat-sdk-reference-docs.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

> Filter Auth0 logs by event type to surface errors, warnings, and successful operations across your tenant for monitoring and incident response.

# Filter Log Events

You can filter logs for errors, warnings, and success events in the [Dashboard](https://manage.auth0.com/#/logs) when you click the **Filter** down arrow.

## Error event filters

| Event Code | Filter | Description |
| - | - | - |
| [`limit_wc`](/docs/tenant-logs/system-notification/limit-wc) | Block Account | IP blocked for >10 failed attempts to login to single account |
| [`limit_mu`](/docs/tenant-logs/system-notification/limit-mu) | Blocked IP Address | IP blocked for >100 failed login attempts or >50 signup attempts |
| [`pwd_leak`](/docs/tenant-logs/other/pwd-leak) | Breached password | Attempted login with a leaked password |
| [`fdecc`](/docs/tenant-logs/user-fail/fdecc) | Device Confirmation Canceled by User | User did not confirm device |
| [`gd_send_pn_failure`](/docs/tenant-logs/other/gd-send-pn-failure) | Error sending MFA Push Notification | Push notification for MFA failed |
| [`gd_send_sms_failure`](/docs/tenant-logs/other/gd-send-sms-failure) | Error sending MFA SMS | SMS for MFA failed |
| [`fce`](/docs/tenant-logs/user-fail/fce) | Failed Change Email | Failed to change user email |
| [`fcp`](/docs/tenant-logs/user-fail/fcp) | Failed Change Password | Failed to change user password |
| [`fcpr`](/docs/tenant-logs/user-fail/fcpr) | Failed Change Password Request | Change password request failed |
| [`fcpn`](/docs/tenant-logs/user-fail/fcpn) | Failed Change Phone Number | Failed to change user phone number |
| [`fcu`](/docs/tenant-logs/user-fail/fcu) | Failed Change Username | Failed to change username |
| [`fcpro`](/docs/tenant-logs/system-notification/fcpro) | Failed Connector Provisioning | Failed to provision a AD/LDAP connector |
| [`fd`](/docs/tenant-logs/user-fail/fd) | Failed Delegation | Failed to generate delegation token |
| [`fecte`](/docs/tenant-logs/auth-token-exchange-fail/fecte) | Failed Exchange | Token Exchange |
| [`fens`](/docs/tenant-logs/auth-login-fail/fens) | Failed Exchange | Native Social Login |
| [`feacft`](/docs/tenant-logs/auth-token-exchange-fail/feacft) | Failed Exchange | Authorization Code for Access Token |
| [`feccft`](/docs/tenant-logs/auth-token-exchange-fail/feccft) | Failed Exchange | Client Credentials for Access Token |
| [`fepft`](/docs/tenant-logs/auth-token-exchange-fail/fepft) | Failed Exchange | Password for Access Token |
| [`fertft`](/docs/tenant-logs/auth-token-exchange-fail/fertft) | Failed Exchange | Refresh Token for Access Token |
| [`feoobft`](/docs/tenant-logs/auth-token-exchange-fail/feoobft) | Failed Exchange | Password and OOB Challenge for Access Token |
| [`feotpft`](/docs/tenant-logs/auth-token-exchange-fail/feotpft) | Failed Exchange | Password and OTP Challenge for Access Token |
| [`fercft`](/docs/tenant-logs/auth-token-exchange-fail/fercft) | Failed Exchange | Password and MFA Recovery code for Access Token |
| [`fede`](/docs/tenant-logs/auth-token-exchange-fail/fede) | Failed Exchange | Device Code for Access Token |
| [`f`](/docs/tenant-logs/auth-login-fail/f) | Failed Login | User failed to login |
| [`fu`](/docs/tenant-logs/auth-login-fail/fu) | Failed Login (invalid email/username) | User failed to login due to invalid username |
| [`fp`](/docs/tenant-logs/auth-login-fail/fp) | Failed Login (wrong password) | User failed to login due to invalid password |
| [`flo`](/docs/tenant-logs/auth-logout-fail/flo) | Failed Logout | User logout failed |
| [`oidc_backchannel_logout_failed`](/docs/tenant-logs/auth-logout-fail/oidc-backchannel-logout-failed) | Failed OIDC Back-Channel Logout Request | Back-Channel Logout request failed |
| [`fcph`](/docs/tenant-logs/user-fail/fcph) | Failed Post Change Password Hook | Post-change password hook failed |
| [`fpurh`](/docs/tenant-logs/other/fpurh) | Failed Post User Registration Hook | Post user registration hook failed |
| [`fn`](/docs/tenant-logs/user-fail/fn) | Failed Sending Notification | Failed to send email notification |
| [`fs`](/docs/tenant-logs/auth-signup-fail/fs) | Failed Signup | Sign up failed |
| [`fsa`](/docs/tenant-logs/auth-silent-auth-fail/fsa) | Failed Silent Auth | Silent authentication failed |
| [`fdu`](/docs/tenant-logs/user-fail/fdu) | Failed User Deletion | User deletion failed |
| [`fv`](/docs/tenant-logs/user-fail/fv) | Failed Verification Email | Failed to send verification email |
| [`fvr`](/docs/tenant-logs/user-fail/fvr) | Failed Verification Email Request | Failed to process verification email request |
| [`fco`](/docs/tenant-logs/other/fco) | Failed CORS | Origin is not in the Allowed Origins list for the specified application |
| [`fcoa`](/docs/tenant-logs/auth-login-fail/fcoa) | Failed cross origin authentication | Cross-origin authentication failed |
| [`fdeac`](/docs/tenant-logs/other/fdeac) | Failed device activation | Failed to activate device |
| [`fdeaz`](/docs/tenant-logs/user-fail/fdeaz) | Failed device authorization request | Device authorization request failed |
| [`gd_start_enroll_failed`](/docs/tenant-logs/other/gd-start-enroll-failed) | MFA Enrollment start failed | Multi-factor authentication enroll failed |
| [`gd_auth_failed`](/docs/tenant-logs/other/gd-auth-failed) | OTP Auth failed | One-time password authentication failed |
| [`gd_auth_rejected`](/docs/tenant-logs/other/gd-auth-rejected) | OTP Auth rejected | One-time password authentication rejected |
| [`api_limit`](/docs/tenant-logs/system-notification/api-limit) | Rate Limit on API | Maximum number of requests to the Authentication API in given time has been reached |
| [`gd_recovery_failed`](/docs/tenant-logs/other/gd-recovery-failed) | Recovery failed | Multi-factor recovery code failed |
| [`limit_delegation`](/docs/tenant-logs/system-notification/limit-delegation) | Too Many Calls to /delegation | Rate limit exceeded to /delegation endpoint |

## Warning event filters

| Event Code | Filter | Description |
| - | - | - |
| [`depnote`](/docs/tenant-logs/system-notification/depnote) | Deprecation Notice | Feature is deprecated |
| [`gd_otp_rate_limit_exceed`](/docs/tenant-logs/other/gd-otp-rate-limit-exceed) | Too many failures | Multi-factor OTP has failed too many times |
| [`fui`](/docs/tenant-logs/system-notification/fui) | Users import | Failed to import users |
| [`w`](/docs/tenant-logs/auth-login-notification/w) | Warning During Login | Warnings during login |

## Success event filters

| Event Code | Filter | Description |
| - | - | - |
| [`sapi`](/docs/tenant-logs/management-success/sapi) | API Operation | API operation completed successfully |
| [`mgmt_api_read`](/docs/tenant-logs/management-success/mgmt-api-read) | API Read Operation | API GET operation returning secrets completed successfully |
| [`ublkdu`](/docs/tenant-logs/user-notification/ublkdu) | Account unblocked | User block setup by anomaly detection has been released |
| [`cs`](/docs/tenant-logs/user-notification/cs) | Code Sent | Passwordless login code has been sent |
| [`cls`](/docs/tenant-logs/other/cls) | Code/Link Sent | Passwordless login code/link has been sent |
| [`gd_start_enroll`](/docs/tenant-logs/user-notification/gd-start-enroll) | Enrollment started | Multi-factor authentication enrollment has started |
| [`gd_enrollment_complete`](/docs/tenant-logs/user-notification/gd-enrollment-complete) | MFA enrollment complete | Multi-factor authentication enrollment has completed |
| [`gd_tenant_update`](/docs/tenant-logs/other/gd-tenant-update) | MFA settings update | Multi-factor tenant settings updated |
| [`gd_auth_succeed`](/docs/tenant-logs/other/gd-auth-succeed) | OTP Auth Succeed | One-time password authentication success |
| [`gd_send_pn`](/docs/tenant-logs/other/gd-send-pn) | Push notification sent | Push notification for MFA successfully sent |
| [`gd_recovery_succeed`](/docs/tenant-logs/other/gd-recovery-succeed) | Recovery succeed | Multi-factor recovery code succeeded authorization |
| [`gd_send_sms`](/docs/tenant-logs/other/gd-send-sms) | SMS Sent | SMS for MFA sent successfully |
| [`gd_send_email`](/docs/tenant-logs/other/gd-send-email) | Second factor email sent | Email for MFA successfully sent |
| [`gd_start_auth`](/docs/tenant-logs/other/gd-start-auth) | Second factor started | Second factor authentication event started for MFA |
| [`sce`](/docs/tenant-logs/user-success/sce) | Success Change Email | Email changed successfully |
| [`scp`](/docs/tenant-logs/user-success/scp) | Success Change Password | Password changed successfully |
| [`scpr`](/docs/tenant-logs/user-success/scpr) | Success Change Password Request | Change password request succeeded |
| [`scpn`](/docs/tenant-logs/user-success/scpn) | Success Change Phone Number | Phone number changed successfully |
| [`scu`](/docs/tenant-logs/user-success/scu) | Success Change Username | Username changed successfully |
| [`sd`](/docs/tenant-logs/user-success/sd) | Success Delegation | Delegation token generated successfully |
| [`seacft`](/docs/tenant-logs/auth-token-exchange-success/seacft) | Success Exchange | Authorization Code for Access Token |
| [`seccft`](/docs/tenant-logs/auth-token-exchange-success/seccft) | Success Exchange | Client Credentials for Access Token |
| [`sepft`](/docs/tenant-logs/auth-token-exchange-success/sepft) | Success Exchange | Password for Access Token |
| [`sertft`](/docs/tenant-logs/auth-token-exchange-success/sertft) | Success Exchange | Refresh Token for Access Token |
| [`secte`](/docs/tenant-logs/auth-token-exchange-success/secte) | Success Exchange | Token Exchange |
| [`sens`](/docs/tenant-logs/auth-login-success/sens) | Success Exchange | Native Social Login |
| [`seoobft`](/docs/tenant-logs/auth-token-exchange-success/seoobft) | Success Exchange | Password and OOB Challenge for Access Token |
| [`seotpft`](/docs/tenant-logs/auth-token-exchange-success/seotpft) | Success Exchange | Password and OTP Challenge for Access Token |
| [`sercft`](/docs/tenant-logs/auth-token-exchange-success/sercft) | Success Exchange | Password and MFA Recovery code for Access Token |
| [`sede`](/docs/tenant-logs/auth-token-exchange-success/sede) | Success Exchange | Device Code for Access Token |
| [`s`](/docs/tenant-logs/auth-login-success/s) | Success Login | Successful Login |
| [`slo`](/docs/tenant-logs/auth-logout-success/slo) | Success Logout | User successfully logged out |
| [`oidc_backchannel_logout_succeeded`](/docs/tenant-logs/auth-logout-success/oidc-backchannel-logout-succeeded) | Successful OIDC Back-Channel Logout request | OIDC Back-Channel Logout request completed successfully |
| [`ss`](/docs/tenant-logs/auth-signup-success/ss) | Success Signup | Successful signup |
| [`ssa`](/docs/tenant-logs/auth-silent-auth-success/ssa) | Success Silent Auth | Successful silent authentication |
| [`sv`](/docs/tenant-logs/user-success/sv) | Success Verification Email | Successful verification email |
| [`svr`](/docs/tenant-logs/user-success/svr) | Success Verification Email Request | Successful verification email request |
| [`scoa`](/docs/tenant-logs/auth-login-success/scoa) | Success cross origin authentication | Successful cross-origin authentication |
| [`sdu`](/docs/tenant-logs/user-success/sdu) | Successful User Deletion | User successfully deleted |
| [`gd_unenroll`](/docs/tenant-logs/user-notification/gd-unenroll) | Unenroll device account | Device used for second factor authentication has been unenrolled |
| [`gd_update_device_account`](/docs/tenant-logs/user-notification/gd-update-device-account) | Update device account | Device used for second factor authentication has been updated |
| [`sui`](/docs/tenant-logs/user-success/sui) | Users import | Successfully imported users |

## Learn more

* [View Logs](/docs/deploy-monitor/logs/view-log-events)
* [Retrieve Log Logs Using the Management API](/docs/deploy-monitor/logs/retrieve-log-events-using-mgmt-api)
* [Log Type Codes](/docs/deploy-monitor/logs/log-event-type-codes)
* [Log Search Query Syntax](/docs/deploy-monitor/logs/log-search-query-syntax)
* [Log Streams](/docs/customize/log-streams)