diff --git a/docs/sources/setup-grafana/configure-security/audit-grafana.md b/docs/sources/setup-grafana/configure-security/audit-grafana.md
index 81902c4dfeb..c0bbafce2d0 100644
--- a/docs/sources/setup-grafana/configure-security/audit-grafana.md
+++ b/docs/sources/setup-grafana/configure-security/audit-grafana.md
@@ -45,12 +45,12 @@ Audit logs contain the following fields. The fields followed by **\*** are alway
 | `request`\*             | object  | Information about the HTTP request.                                                                                                                                                                                      |
 | `request.params`        | object  | Request’s path parameters.                                                                                                                                                                                               |
 | `request.query`         | object  | Request’s query parameters.                                                                                                                                                                                              |
-| `request.body`          | string  | Request’s body.                                                                                                                                                                                                          |
+| `request.body`          | string  | Request’s body. Filled with `<non-marshalable format>` when it isn't a valid JSON.                                                                                                                                       |
 | `result`\*              | object  | Information about the HTTP response.                                                                                                                                                                                     |
 | `result.statusType`     | string  | If the request action was successful, `success`. Otherwise, `failure`.                                                                                                                                                   |
 | `result.statusCode`     | number  | HTTP status of the request.                                                                                                                                                                                              |
 | `result.failureMessage` | string  | HTTP error message.                                                                                                                                                                                                      |
-| `result.body`           | string  | Response body.                                                                                                                                                                                                           |
+| `result.body`           | string  | Response body. Filled with `<non-marshalable format>` when it isn't a valid JSON.                                                                                                                                        |
 | `resources`             | array   | Information about the resources that the request action affected. This field can be null for non-resource actions such as `login` or `logout`.                                                                           |
 | `resources[x].id`\*     | number  | ID of the resource.                                                                                                                                                                                                      |
 | `resources[x].type`\*   | string  | The type of the resource that was logged: `alert`, `alert-notification`, `annotation`, `api-key`, `auth-token`, `dashboard`, `datasource`, `folder`, `org`, `panel`, `playlist`, `report`, `team`, `user`, or `version`. |