Problem statement
With Datadog Log Stream configured in an Auth0 tenant, most all of the events streamed to Datadog such as ‘Successful exchange of Refresh Token for Access Token’ contain an ‘evt.name’ property. The ‘success_silent_auth’ event which doesn’t include the ‘evt.name’ property. This article explains whether it is possible to also add the ‘evt.name’ property to the ‘success_silent_auth’ events.
Cause
Datadog automatically maps the Auth0 event type code to ‘evt.name’ and is not set by Auth0 explicitly. Please review Analyze and audit Auth0 activity for more information.
Solution
Auth0 does not send the ‘evt.name’ string, rather this occurs once the logs have been streamed to Datadog where they are processed further. Since this is maintained by Datadog, the recommendation is to reach out to their Support Team to provide assistance and feedback.