@noorbasha534, you can use the action_name field to filter specific types of events. For example, to track permission changes—such as grants or revokes on catalogues, schemas, tables, or views, you can filter by updatePermissions. That said, the exact action name depends on the type of event you're trying to track.