feat: metrics (#1024)

* refactor: switch from opencensus to opentelemetry

* tempo works as designed nooooot

* fix: log traceids

* with grafana agent

* fix: http tracing

* fix: cleanup files

* chore: remove todo

* fix: bad test

* fix: ignore methods in grpc interceptors

* fix: remove test log

* clean up

* typo

* fix(config): configure tracing endpoint

* fix(span): add error id to span

* feat: metrics package

* feat: metrics package

* fix: counter

* fix: metric

* try metrics

* fix: coutner metrics

* fix: active sessin counter

* fix: active sessin counter

* fix: change current Sequence table

* fix: change current Sequence table

* fix: current sequences

* fix: spooler div metrics

* fix: console view

* fix: merge master

* fix: Last spool run on search result instead of eventtimestamp

* fix: go mod

* Update console/src/assets/i18n/de.json

Co-authored-by: Livio Amstutz <livio.a@gmail.com>

* fix: pr review

* fix: map

* update oidc pkg

* fix: handlers

* fix: value observer

* fix: remove fmt

* fix: handlers

* fix: tests

* fix: handler minimum cycle duration 1s

* fix(spooler): handler channel buffer

* fix interceptors

Co-authored-by: adlerhurst <silvan.reusser@gmail.com>
Co-authored-by: Livio Amstutz <livio.a@gmail.com>

internal/admin/repository/administrator.go

@@ -8,6 +8,7 @@ import (
 type AdministratorRepository interface {
 	GetFailedEvents(context.Context) ([]*model.FailedEvent, error)
 	RemoveFailedEvent(context.Context, *model.FailedEvent) error
-	GetViews(context.Context) ([]*model.View, error)
-	ClearView(ctx context.Context, db, view string) error
+	GetViews() ([]*model.View, error)
+	GetSpoolerDiv(db, viewName string) int64
+	ClearView(ctx context.Context, db, viewName string) error
 }

internal/admin/repository/eventsourcing/eventstore/administrator.go

@@ -5,6 +5,7 @@ import (
 	"github.com/caos/zitadel/internal/admin/repository/eventsourcing/view"
 	view_model "github.com/caos/zitadel/internal/view/model"
 	"github.com/caos/zitadel/internal/view/repository"
+	"time"
 )
 
 var dbList = []string{"management", "auth", "authz", "adminapi", "notification"}
@@ -31,7 +32,7 @@ func (repo *AdministratorRepo) RemoveFailedEvent(ctx context.Context, failedEven
 	return repo.View.RemoveFailedEvent(failedEvent.Database, repository.FailedEventFromModel(failedEvent))
 }
 
-func (repo *AdministratorRepo) GetViews(ctx context.Context) ([]*view_model.View, error) {
+func (repo *AdministratorRepo) GetViews() ([]*view_model.View, error) {
 	views := make([]*view_model.View, 0)
 	for _, db := range dbList {
 		sequences, err := repo.View.AllCurrentSequences(db)
@@ -45,6 +46,16 @@ func (repo *AdministratorRepo) GetViews(ctx context.Context) ([]*view_model.View
 	return views, nil
 }
 
+func (repo *AdministratorRepo) GetSpoolerDiv(database, view string) int64 {
+	sequence, err := repo.View.GetCurrentSequence(database, view)
+	if err != nil {
+
+		return 0
+	}
+	divDuration := time.Now().Sub(sequence.LastSuccessfulSpoolerRun)
+	return divDuration.Milliseconds()
+}
+
 func (repo *AdministratorRepo) ClearView(ctx context.Context, database, view string) error {
 	return repo.View.ClearView(database, view)
 }

internal/admin/repository/eventsourcing/eventstore/iam.go

@@ -14,7 +14,7 @@ import (
 	iam_es "github.com/caos/zitadel/internal/iam/repository/eventsourcing"
 	iam_es_model "github.com/caos/zitadel/internal/iam/repository/view/model"
 	org_es "github.com/caos/zitadel/internal/org/repository/eventsourcing"
-	"github.com/caos/zitadel/internal/tracing"
+	"github.com/caos/zitadel/internal/telemetry/tracing"
 	usr_model "github.com/caos/zitadel/internal/user/model"
 	usr_es "github.com/caos/zitadel/internal/user/repository/eventsourcing"
 )
@@ -68,7 +68,7 @@ func (repo *IAMRepository) SearchIAMMembers(ctx context.Context, request *iam_mo
 	}
 	if err == nil {
 		result.Sequence = sequence.CurrentSequence
-		result.Timestamp = sequence.CurrentTimestamp
+		result.Timestamp = sequence.LastSuccessfulSpoolerRun
 	}
 	return result, nil
 }
@@ -170,7 +170,7 @@ func (repo *IAMRepository) SearchIDPConfigs(ctx context.Context, request *iam_mo
 	}
 	if err == nil {
 		result.Sequence = sequence.CurrentSequence
-		result.Timestamp = sequence.CurrentTimestamp
+		result.Timestamp = sequence.LastSuccessfulSpoolerRun
 	}
 	return result, nil
 }
@@ -262,7 +262,7 @@ func (repo *IAMRepository) SearchDefaultIDPProviders(ctx context.Context, reques
 	}
 	if err == nil {
 		result.Sequence = sequence.CurrentSequence
-		result.Timestamp = sequence.CurrentTimestamp
+		result.Timestamp = sequence.LastSuccessfulSpoolerRun
 	}
 	return result, nil
 }

internal/admin/repository/eventsourcing/eventstore/org.go

@@ -6,7 +6,7 @@ import (
 	"github.com/caos/zitadel/internal/errors"
 	iam_model "github.com/caos/zitadel/internal/iam/model"
 	iam_view "github.com/caos/zitadel/internal/iam/repository/view/model"
-	"github.com/caos/zitadel/internal/tracing"
+	"github.com/caos/zitadel/internal/telemetry/tracing"
 
 	"github.com/caos/logging"
 	admin_model "github.com/caos/zitadel/internal/admin/model"
@@ -101,7 +101,7 @@ func (repo *OrgRepo) SearchOrgs(ctx context.Context, query *org_model.OrgSearchR
 	}
 	if err == nil {
 		result.Sequence = sequence.CurrentSequence
-		result.Timestamp = sequence.CurrentTimestamp
+		result.Timestamp = sequence.LastSuccessfulSpoolerRun
 	}
 	return result, nil
 }

internal/admin/repository/eventsourcing/handler/handler.go

@@ -41,7 +41,7 @@ func Register(configs Configs, bulkLimit, errorCount uint64, view *view.View, ev
 		&IDPConfig{handler: handler{view, bulkLimit, configs.cycleDuration("IDPConfig"), errorCount}},
 		&LabelPolicy{handler: handler{view, bulkLimit, configs.cycleDuration("LabelPolicy"), errorCount}},
 		&LoginPolicy{handler: handler{view, bulkLimit, configs.cycleDuration("LoginPolicy"), errorCount}},
-		&IDPProvider{handler: handler{view, bulkLimit, configs.cycleDuration("LoginPolicy"), errorCount},
+		&IDPProvider{handler: handler{view, bulkLimit, configs.cycleDuration("IDPProvider"), errorCount},
 			systemDefaults: defaults, iamEvents: repos.IamEvents, orgEvents: repos.OrgEvents},
 		&User{handler: handler{view, bulkLimit, configs.cycleDuration("User"), errorCount},
 			eventstore: eventstore, orgEvents: repos.OrgEvents, iamEvents: repos.IamEvents, systemDefaults: defaults},
@@ -49,7 +49,7 @@ func Register(configs Configs, bulkLimit, errorCount uint64, view *view.View, ev
 		&PasswordAgePolicy{handler: handler{view, bulkLimit, configs.cycleDuration("PasswordAgePolicy"), errorCount}},
 		&PasswordLockoutPolicy{handler: handler{view, bulkLimit, configs.cycleDuration("PasswordLockoutPolicy"), errorCount}},
 		&OrgIAMPolicy{handler: handler{view, bulkLimit, configs.cycleDuration("OrgIAMPolicy"), errorCount}},
-		&ExternalIDP{handler: handler{view, bulkLimit, configs.cycleDuration("User"), errorCount},
+		&ExternalIDP{handler: handler{view, bulkLimit, configs.cycleDuration("ExternalIDP"), errorCount},
 			orgEvents: repos.OrgEvents, iamEvents: repos.IamEvents, systemDefaults: defaults},
 	}
 }

internal/admin/repository/eventsourcing/handler/iam_member.go

@@ -72,14 +72,14 @@ func (m *IamMember) processIamMember(event *models.Event) (err error) {
 		if err != nil {
 			return err
 		}
-		return m.view.DeleteIAMMember(event.AggregateID, member.UserID, event.Sequence)
+		return m.view.DeleteIAMMember(event.AggregateID, member.UserID, event.Sequence, event.CreationDate)
 	default:
-		return m.view.ProcessedIAMMemberSequence(event.Sequence)
+		return m.view.ProcessedIAMMemberSequence(event.Sequence, event.CreationDate)
 	}
 	if err != nil {
 		return err
 	}
-	return m.view.PutIAMMember(member, member.Sequence)
+	return m.view.PutIAMMember(member, member.Sequence, event.CreationDate)
 }
 
 func (m *IamMember) processUser(event *models.Event) (err error) {
@@ -94,7 +94,7 @@ func (m *IamMember) processUser(event *models.Event) (err error) {
 			return err
 		}
 		if len(members) == 0 {
-			return m.view.ProcessedIAMMemberSequence(event.Sequence)
+			return m.view.ProcessedIAMMemberSequence(event.Sequence, event.CreationDate)
 		}
 		user, err := m.userEvents.UserByID(context.Background(), event.AggregateID)
 		if err != nil {
@@ -103,11 +103,11 @@ func (m *IamMember) processUser(event *models.Event) (err error) {
 		for _, member := range members {
 			m.fillUserData(member, user)
 		}
-		return m.view.PutIAMMembers(members, event.Sequence)
+		return m.view.PutIAMMembers(members, event.Sequence, event.CreationDate)
 	case usr_es_model.UserRemoved:
-		return m.view.DeleteIAMMembersByUserID(event.AggregateID, event.Sequence)
+		return m.view.DeleteIAMMembersByUserID(event.AggregateID, event.Sequence, event.CreationDate)
 	default:
-		return m.view.ProcessedIAMMemberSequence(event.Sequence)
+		return m.view.ProcessedIAMMemberSequence(event.Sequence, event.CreationDate)
 	}
 	return nil
 }
@@ -137,3 +137,7 @@ func (m *IamMember) OnError(event *models.Event, err error) error {
 	logging.LogWithFields("SPOOL-Ld9ow", "id", event.AggregateID).WithError(err).Warn("something went wrong in iammember handler")
 	return spooler.HandleError(event, err, m.view.GetLatestIAMMemberFailedEvent, m.view.ProcessedIAMMemberFailedEvent, m.view.ProcessedIAMMemberSequence, m.errorCountUntilSkip)
 }
+
+func (m *IamMember) OnSuccess() error {
+	return spooler.HandleSuccess(m.view.UpdateIAMMemberSpoolerRunTimestamp)
+}

internal/admin/repository/eventsourcing/handler/idp_config.go

@@ -19,12 +19,12 @@ const (
 	idpConfigTable = "adminapi.idp_configs"
 )
 
-func (m *IDPConfig) ViewModel() string {
+func (i *IDPConfig) ViewModel() string {
 	return idpConfigTable
 }
 
-func (m *IDPConfig) EventQuery() (*models.SearchQuery, error) {
-	sequence, err := m.view.GetLatestIDPConfigSequence()
+func (i *IDPConfig) EventQuery() (*models.SearchQuery, error) {
+	sequence, err := i.view.GetLatestIDPConfigSequence()
 	if err != nil {
 		return nil, err
 	}
@@ -33,15 +33,15 @@ func (m *IDPConfig) EventQuery() (*models.SearchQuery, error) {
 		LatestSequenceFilter(sequence.CurrentSequence), nil
 }
 
-func (m *IDPConfig) Reduce(event *models.Event) (err error) {
+func (i *IDPConfig) Reduce(event *models.Event) (err error) {
 	switch event.AggregateType {
 	case model.IAMAggregate:
-		err = m.processIDPConfig(event)
+		err = i.processIDPConfig(event)
 	}
 	return err
 }
 
-func (m *IDPConfig) processIDPConfig(event *models.Event) (err error) {
+func (i *IDPConfig) processIDPConfig(event *models.Event) (err error) {
 	idp := new(iam_view_model.IDPConfigView)
 	switch event.Type {
 	case model.IDPConfigAdded:
@@ -53,7 +53,7 @@ func (m *IDPConfig) processIDPConfig(event *models.Event) (err error) {
 		if err != nil {
 			return err
 		}
-		idp, err = m.view.IDPConfigByID(idp.IDPConfigID)
+		idp, err = i.view.IDPConfigByID(idp.IDPConfigID)
 		if err != nil {
 			return err
 		}
@@ -63,17 +63,21 @@ func (m *IDPConfig) processIDPConfig(event *models.Event) (err error) {
 		if err != nil {
 			return err
 		}
-		return m.view.DeleteIDPConfig(idp.IDPConfigID, event.Sequence)
+		return i.view.DeleteIDPConfig(idp.IDPConfigID, event.Sequence, event.CreationDate)
 	default:
-		return m.view.ProcessedIDPConfigSequence(event.Sequence)
+		return i.view.ProcessedIDPConfigSequence(event.Sequence, event.CreationDate)
 	}
 	if err != nil {
 		return err
 	}
-	return m.view.PutIDPConfig(idp, idp.Sequence)
+	return i.view.PutIDPConfig(idp, idp.Sequence, event.CreationDate)
 }
 
-func (m *IDPConfig) OnError(event *models.Event, err error) error {
+func (i *IDPConfig) OnError(event *models.Event, err error) error {
 	logging.LogWithFields("SPOOL-Mslo9", "id", event.AggregateID).WithError(err).Warn("something went wrong in idp config handler")
-	return spooler.HandleError(event, err, m.view.GetLatestIDPConfigFailedEvent, m.view.ProcessedIDPConfigFailedEvent, m.view.ProcessedIDPConfigSequence, m.errorCountUntilSkip)
+	return spooler.HandleError(event, err, i.view.GetLatestIDPConfigFailedEvent, i.view.ProcessedIDPConfigFailedEvent, i.view.ProcessedIDPConfigSequence, i.errorCountUntilSkip)
+}
+
+func (i *IDPConfig) OnSuccess() error {
+	return spooler.HandleSuccess(i.view.UpdateIDPConfigSpoolerRunTimestamp)
 }

internal/admin/repository/eventsourcing/handler/idp_providers.go

@@ -27,12 +27,12 @@ const (
 	idpProviderTable = "adminapi.idp_providers"
 )
 
-func (m *IDPProvider) ViewModel() string {
+func (i *IDPProvider) ViewModel() string {
 	return idpProviderTable
 }
 
-func (m *IDPProvider) EventQuery() (*models.SearchQuery, error) {
-	sequence, err := m.view.GetLatestIDPProviderSequence()
+func (i *IDPProvider) EventQuery() (*models.SearchQuery, error) {
+	sequence, err := i.view.GetLatestIDPProviderSequence()
 	if err != nil {
 		return nil, err
 	}
@@ -41,15 +41,15 @@ func (m *IDPProvider) EventQuery() (*models.SearchQuery, error) {
 		LatestSequenceFilter(sequence.CurrentSequence), nil
 }
 
-func (m *IDPProvider) Reduce(event *models.Event) (err error) {
+func (i *IDPProvider) Reduce(event *models.Event) (err error) {
 	switch event.AggregateType {
 	case model.IAMAggregate, org_es_model.OrgAggregate:
-		err = m.processIdpProvider(event)
+		err = i.processIdpProvider(event)
 	}
 	return err
 }
 
-func (m *IDPProvider) processIdpProvider(event *models.Event) (err error) {
+func (i *IDPProvider) processIdpProvider(event *models.Event) (err error) {
 	provider := new(iam_view_model.IDPProviderView)
 	switch event.Type {
 	case model.LoginPolicyIDPProviderAdded, org_es_model.LoginPolicyIDPProviderAdded:
@@ -57,64 +57,68 @@ func (m *IDPProvider) processIdpProvider(event *models.Event) (err error) {
 		if err != nil {
 			return err
 		}
-		err = m.fillData(provider)
+		err = i.fillData(provider)
 	case model.LoginPolicyIDPProviderRemoved, model.LoginPolicyIDPProviderCascadeRemoved,
 		org_es_model.LoginPolicyIDPProviderRemoved, org_es_model.LoginPolicyIDPProviderCascadeRemoved:
 		err = provider.SetData(event)
 		if err != nil {
 			return err
 		}
-		return m.view.DeleteIDPProvider(event.AggregateID, provider.IDPConfigID, event.Sequence)
+		return i.view.DeleteIDPProvider(event.AggregateID, provider.IDPConfigID, event.Sequence, event.CreationDate)
 	case model.IDPConfigChanged, org_es_model.IDPConfigChanged:
 		esConfig := new(iam_view_model.IDPConfigView)
 		providerType := iam_model.IDPProviderTypeSystem
-		if event.AggregateID != m.systemDefaults.IamID {
+		if event.AggregateID != i.systemDefaults.IamID {
 			providerType = iam_model.IDPProviderTypeOrg
 		}
 		esConfig.AppendEvent(providerType, event)
-		providers, err := m.view.IDPProvidersByIdpConfigID(esConfig.IDPConfigID)
+		providers, err := i.view.IDPProvidersByIdpConfigID(esConfig.IDPConfigID)
 		if err != nil {
 			return err
 		}
-		config, err := m.iamEvents.GetIDPConfig(context.Background(), event.AggregateID, esConfig.IDPConfigID)
+		config, err := i.iamEvents.GetIDPConfig(context.Background(), event.AggregateID, esConfig.IDPConfigID)
 		if err != nil {
 			return err
 		}
 		for _, provider := range providers {
-			m.fillConfigData(provider, config)
+			i.fillConfigData(provider, config)
 		}
-		return m.view.PutIDPProviders(event.Sequence, providers...)
+		return i.view.PutIDPProviders(event.Sequence, event.CreationDate, providers...)
 	default:
-		return m.view.ProcessedIDPProviderSequence(event.Sequence)
+		return i.view.ProcessedIDPProviderSequence(event.Sequence, event.CreationDate)
 	}
 	if err != nil {
 		return err
 	}
-	return m.view.PutIDPProvider(provider, provider.Sequence)
+	return i.view.PutIDPProvider(provider, provider.Sequence, event.CreationDate)
 }
 
-func (m *IDPProvider) fillData(provider *iam_view_model.IDPProviderView) (err error) {
+func (i *IDPProvider) fillData(provider *iam_view_model.IDPProviderView) (err error) {
 	var config *iam_model.IDPConfig
 	if provider.IDPProviderType == int32(iam_model.IDPProviderTypeSystem) {
-		config, err = m.iamEvents.GetIDPConfig(context.Background(), m.systemDefaults.IamID, provider.IDPConfigID)
+		config, err = i.iamEvents.GetIDPConfig(context.Background(), i.systemDefaults.IamID, provider.IDPConfigID)
 	} else {
-		config, err = m.orgEvents.GetIDPConfig(context.Background(), provider.AggregateID, provider.IDPConfigID)
+		config, err = i.orgEvents.GetIDPConfig(context.Background(), provider.AggregateID, provider.IDPConfigID)
 	}
 	if err != nil {
 		return err
 	}
-	m.fillConfigData(provider, config)
+	i.fillConfigData(provider, config)
 	return nil
 }
 
-func (m *IDPProvider) fillConfigData(provider *iam_view_model.IDPProviderView, config *iam_model.IDPConfig) {
+func (i *IDPProvider) fillConfigData(provider *iam_view_model.IDPProviderView, config *iam_model.IDPConfig) {
 	provider.Name = config.Name
 	provider.StylingType = int32(config.StylingType)
 	provider.IDPConfigType = int32(config.Type)
 	provider.IDPState = int32(config.State)
 }
 
-func (m *IDPProvider) OnError(event *models.Event, err error) error {
+func (i *IDPProvider) OnError(event *models.Event, err error) error {
 	logging.LogWithFields("SPOOL-Msj8c", "id", event.AggregateID).WithError(err).Warn("something went wrong in idp provider handler")
-	return spooler.HandleError(event, err, m.view.GetLatestIDPProviderFailedEvent, m.view.ProcessedIDPProviderFailedEvent, m.view.ProcessedIDPProviderSequence, m.errorCountUntilSkip)
+	return spooler.HandleError(event, err, i.view.GetLatestIDPProviderFailedEvent, i.view.ProcessedIDPProviderFailedEvent, i.view.ProcessedIDPProviderSequence, i.errorCountUntilSkip)
+}
+
+func (i *IDPProvider) OnSuccess() error {
+	return spooler.HandleSuccess(i.view.UpdateIDPProviderSpoolerRunTimestamp)
 }

internal/admin/repository/eventsourcing/handler/label_policy.go

@@ -18,12 +18,12 @@ const (
 	labelPolicyTable = "adminapi.label_policies"
 )
 
-func (m *LabelPolicy) ViewModel() string {
+func (p *LabelPolicy) ViewModel() string {
 	return labelPolicyTable
 }
 
-func (m *LabelPolicy) EventQuery() (*models.SearchQuery, error) {
-	sequence, err := m.view.GetLatestLabelPolicySequence()
+func (p *LabelPolicy) EventQuery() (*models.SearchQuery, error) {
+	sequence, err := p.view.GetLatestLabelPolicySequence()
 	if err != nil {
 		return nil, err
 	}
@@ -32,35 +32,39 @@ func (m *LabelPolicy) EventQuery() (*models.SearchQuery, error) {
 		LatestSequenceFilter(sequence.CurrentSequence), nil
 }
 
-func (m *LabelPolicy) Reduce(event *models.Event) (err error) {
+func (p *LabelPolicy) Reduce(event *models.Event) (err error) {
 	switch event.AggregateType {
 	case model.IAMAggregate:
-		err = m.processLabelPolicy(event)
+		err = p.processLabelPolicy(event)
 	}
 	return err
 }
 
-func (m *LabelPolicy) processLabelPolicy(event *models.Event) (err error) {
+func (p *LabelPolicy) processLabelPolicy(event *models.Event) (err error) {
 	policy := new(iam_model.LabelPolicyView)
 	switch event.Type {
 	case model.LabelPolicyAdded:
 		err = policy.AppendEvent(event)
 	case model.LabelPolicyChanged:
-		policy, err = m.view.LabelPolicyByAggregateID(event.AggregateID)
+		policy, err = p.view.LabelPolicyByAggregateID(event.AggregateID)
 		if err != nil {
 			return err
 		}
 		err = policy.AppendEvent(event)
 	default:
-		return m.view.ProcessedLabelPolicySequence(event.Sequence)
+		return p.view.ProcessedLabelPolicySequence(event.Sequence, event.CreationDate)
 	}
 	if err != nil {
 		return err
 	}
-	return m.view.PutLabelPolicy(policy, policy.Sequence)
+	return p.view.PutLabelPolicy(policy, policy.Sequence, event.CreationDate)
 }
 
-func (m *LabelPolicy) OnError(event *models.Event, err error) error {
+func (p *LabelPolicy) OnError(event *models.Event, err error) error {
 	logging.LogWithFields("SPOOL-Wj8sf", "id", event.AggregateID).WithError(err).Warn("something went wrong in label policy handler")
-	return spooler.HandleError(event, err, m.view.GetLatestLabelPolicyFailedEvent, m.view.ProcessedLabelPolicyFailedEvent, m.view.ProcessedLabelPolicySequence, m.errorCountUntilSkip)
+	return spooler.HandleError(event, err, p.view.GetLatestLabelPolicyFailedEvent, p.view.ProcessedLabelPolicyFailedEvent, p.view.ProcessedLabelPolicySequence, p.errorCountUntilSkip)
+}
+
+func (p *LabelPolicy) OnSuccess() error {
+	return spooler.HandleSuccess(p.view.UpdateLabelPolicySpoolerRunTimestamp)
 }

internal/admin/repository/eventsourcing/handler/login_policy.go

@@ -18,12 +18,12 @@ const (
 	loginPolicyTable = "adminapi.login_policies"
 )
 
-func (m *LoginPolicy) ViewModel() string {
+func (p *LoginPolicy) ViewModel() string {
 	return loginPolicyTable
 }
 
-func (m *LoginPolicy) EventQuery() (*models.SearchQuery, error) {
-	sequence, err := m.view.GetLatestLoginPolicySequence()
+func (p *LoginPolicy) EventQuery() (*models.SearchQuery, error) {
+	sequence, err := p.view.GetLatestLoginPolicySequence()
 	if err != nil {
 		return nil, err
 	}
@@ -32,15 +32,15 @@ func (m *LoginPolicy) EventQuery() (*models.SearchQuery, error) {
 		LatestSequenceFilter(sequence.CurrentSequence), nil
 }
 
-func (m *LoginPolicy) Reduce(event *models.Event) (err error) {
+func (p *LoginPolicy) Reduce(event *models.Event) (err error) {
 	switch event.AggregateType {
 	case model.IAMAggregate:
-		err = m.processLoginPolicy(event)
+		err = p.processLoginPolicy(event)
 	}
 	return err
 }
 
-func (m *LoginPolicy) processLoginPolicy(event *models.Event) (err error) {
+func (p *LoginPolicy) processLoginPolicy(event *models.Event) (err error) {
 	policy := new(iam_model.LoginPolicyView)
 	switch event.Type {
 	case model.LoginPolicyAdded:
@@ -50,21 +50,25 @@ func (m *LoginPolicy) processLoginPolicy(event *models.Event) (err error) {
 		model.LoginPolicySecondFactorRemoved,
 		model.LoginPolicyMultiFactorAdded,
 		model.LoginPolicyMultiFactorRemoved:
-		policy, err = m.view.LoginPolicyByAggregateID(event.AggregateID)
+		policy, err = p.view.LoginPolicyByAggregateID(event.AggregateID)
 		if err != nil {
 			return err
 		}
 		err = policy.AppendEvent(event)
 	default:
-		return m.view.ProcessedLoginPolicySequence(event.Sequence)
+		return p.view.ProcessedLoginPolicySequence(event.Sequence, event.CreationDate)
 	}
 	if err != nil {
 		return err
 	}
-	return m.view.PutLoginPolicy(policy, policy.Sequence)
+	return p.view.PutLoginPolicy(policy, policy.Sequence, event.CreationDate)
 }
 
-func (m *LoginPolicy) OnError(event *models.Event, err error) error {
+func (p *LoginPolicy) OnError(event *models.Event, err error) error {
 	logging.LogWithFields("SPOOL-Wj8sf", "id", event.AggregateID).WithError(err).Warn("something went wrong in login policy handler")
-	return spooler.HandleError(event, err, m.view.GetLatestLoginPolicyFailedEvent, m.view.ProcessedLoginPolicyFailedEvent, m.view.ProcessedLoginPolicySequence, m.errorCountUntilSkip)
+	return spooler.HandleError(event, err, p.view.GetLatestLoginPolicyFailedEvent, p.view.ProcessedLoginPolicyFailedEvent, p.view.ProcessedLoginPolicySequence, p.errorCountUntilSkip)
+}
+
+func (p *LoginPolicy) OnSuccess() error {
+	return spooler.HandleSuccess(p.view.UpdateLoginPolicySpoolerRunTimestamp)
 }

internal/admin/repository/eventsourcing/handler/org.go

@@ -53,13 +53,17 @@ func (o *Org) Reduce(event *es_models.Event) error {
 			return err
 		}
 	default:
-		return o.view.ProcessedOrgSequence(event.Sequence)
+		return o.view.ProcessedOrgSequence(event.Sequence, event.CreationDate)
 	}
 
-	return o.view.PutOrg(org)
+	return o.view.PutOrg(org, event.CreationDate)
 }
 
 func (o *Org) OnError(event *es_models.Event, spoolerErr error) error {
 	logging.LogWithFields("SPOOL-ls9ew", "id", event.AggregateID).WithError(spoolerErr).Warn("something went wrong in project app handler")
 	return spooler.HandleError(event, spoolerErr, o.view.GetLatestOrgFailedEvent, o.view.ProcessedOrgFailedEvent, o.view.ProcessedOrgSequence, o.errorCountUntilSkip)
 }
+
+func (o *Org) OnSuccess() error {
+	return spooler.HandleSuccess(o.view.UpdateOrgSpoolerRunTimestamp)
+}

internal/admin/repository/eventsourcing/handler/org_iam_policy.go

@@ -19,12 +19,12 @@ const (
 	orgIAMPolicyTable = "adminapi.org_iam_policies"
 )
 
-func (m *OrgIAMPolicy) ViewModel() string {
+func (p *OrgIAMPolicy) ViewModel() string {
 	return orgIAMPolicyTable
 }
 
-func (m *OrgIAMPolicy) EventQuery() (*models.SearchQuery, error) {
-	sequence, err := m.view.GetLatestOrgIAMPolicySequence()
+func (p *OrgIAMPolicy) EventQuery() (*models.SearchQuery, error) {
+	sequence, err := p.view.GetLatestOrgIAMPolicySequence()
 	if err != nil {
 		return nil, err
 	}
@@ -33,37 +33,41 @@ func (m *OrgIAMPolicy) EventQuery() (*models.SearchQuery, error) {
 		LatestSequenceFilter(sequence.CurrentSequence), nil
 }
 
-func (m *OrgIAMPolicy) Reduce(event *models.Event) (err error) {
+func (p *OrgIAMPolicy) Reduce(event *models.Event) (err error) {
 	switch event.AggregateType {
 	case model.OrgAggregate, iam_es_model.IAMAggregate:
-		err = m.processOrgIAMPolicy(event)
+		err = p.processOrgIAMPolicy(event)
 	}
 	return err
 }
 
-func (m *OrgIAMPolicy) processOrgIAMPolicy(event *models.Event) (err error) {
+func (p *OrgIAMPolicy) processOrgIAMPolicy(event *models.Event) (err error) {
 	policy := new(iam_model.OrgIAMPolicyView)
 	switch event.Type {
 	case iam_es_model.OrgIAMPolicyAdded, model.OrgIAMPolicyAdded:
 		err = policy.AppendEvent(event)
 	case iam_es_model.OrgIAMPolicyChanged, model.OrgIAMPolicyChanged:
-		policy, err = m.view.OrgIAMPolicyByAggregateID(event.AggregateID)
+		policy, err = p.view.OrgIAMPolicyByAggregateID(event.AggregateID)
 		if err != nil {
 			return err
 		}
 		err = policy.AppendEvent(event)
 	case model.OrgIAMPolicyRemoved:
-		return m.view.DeleteOrgIAMPolicy(event.AggregateID, event.Sequence)
+		return p.view.DeleteOrgIAMPolicy(event.AggregateID, event.Sequence, event.CreationDate)
 	default:
-		return m.view.ProcessedOrgIAMPolicySequence(event.Sequence)
+		return p.view.ProcessedOrgIAMPolicySequence(event.Sequence, event.CreationDate)
 	}
 	if err != nil {
 		return err
 	}
-	return m.view.PutOrgIAMPolicy(policy, policy.Sequence)
+	return p.view.PutOrgIAMPolicy(policy, policy.Sequence, event.CreationDate)
 }
 
-func (m *OrgIAMPolicy) OnError(event *models.Event, err error) error {
+func (p *OrgIAMPolicy) OnError(event *models.Event, err error) error {
 	logging.LogWithFields("SPOOL-Wm8fs", "id", event.AggregateID).WithError(err).Warn("something went wrong in orgIAM policy handler")
-	return spooler.HandleError(event, err, m.view.GetLatestOrgIAMPolicyFailedEvent, m.view.ProcessedOrgIAMPolicyFailedEvent, m.view.ProcessedOrgIAMPolicySequence, m.errorCountUntilSkip)
+	return spooler.HandleError(event, err, p.view.GetLatestOrgIAMPolicyFailedEvent, p.view.ProcessedOrgIAMPolicyFailedEvent, p.view.ProcessedOrgIAMPolicySequence, p.errorCountUntilSkip)
+}
+
+func (p *OrgIAMPolicy) OnSuccess() error {
+	return spooler.HandleSuccess(p.view.UpdateOrgIAMPolicySpoolerRunTimestamp)
 }

internal/admin/repository/eventsourcing/handler/password_age_policy.go

@@ -19,12 +19,12 @@ const (
 	passwordAgePolicyTable = "adminapi.password_age_policies"
 )
 
-func (m *PasswordAgePolicy) ViewModel() string {
+func (p *PasswordAgePolicy) ViewModel() string {
 	return passwordAgePolicyTable
 }
 
-func (m *PasswordAgePolicy) EventQuery() (*models.SearchQuery, error) {
-	sequence, err := m.view.GetLatestPasswordAgePolicySequence()
+func (p *PasswordAgePolicy) EventQuery() (*models.SearchQuery, error) {
+	sequence, err := p.view.GetLatestPasswordAgePolicySequence()
 	if err != nil {
 		return nil, err
 	}
@@ -33,37 +33,41 @@ func (m *PasswordAgePolicy) EventQuery() (*models.SearchQuery, error) {
 		LatestSequenceFilter(sequence.CurrentSequence), nil
 }
 
-func (m *PasswordAgePolicy) Reduce(event *models.Event) (err error) {
+func (p *PasswordAgePolicy) Reduce(event *models.Event) (err error) {
 	switch event.AggregateType {
 	case model.OrgAggregate, iam_es_model.IAMAggregate:
-		err = m.processPasswordAgePolicy(event)
+		err = p.processPasswordAgePolicy(event)
 	}
 	return err
 }
 
-func (m *PasswordAgePolicy) processPasswordAgePolicy(event *models.Event) (err error) {
+func (p *PasswordAgePolicy) processPasswordAgePolicy(event *models.Event) (err error) {
 	policy := new(iam_model.PasswordAgePolicyView)
 	switch event.Type {
 	case iam_es_model.PasswordAgePolicyAdded, model.PasswordAgePolicyAdded:
 		err = policy.AppendEvent(event)
 	case iam_es_model.PasswordAgePolicyChanged, model.PasswordAgePolicyChanged:
-		policy, err = m.view.PasswordAgePolicyByAggregateID(event.AggregateID)
+		policy, err = p.view.PasswordAgePolicyByAggregateID(event.AggregateID)
 		if err != nil {
 			return err
 		}
 		err = policy.AppendEvent(event)
 	case model.PasswordAgePolicyRemoved:
-		return m.view.DeletePasswordAgePolicy(event.AggregateID, event.Sequence)
+		return p.view.DeletePasswordAgePolicy(event.AggregateID, event.Sequence, event.CreationDate)
 	default:
-		return m.view.ProcessedPasswordAgePolicySequence(event.Sequence)
+		return p.view.ProcessedPasswordAgePolicySequence(event.Sequence, event.CreationDate)
 	}
 	if err != nil {
 		return err
 	}
-	return m.view.PutPasswordAgePolicy(policy, policy.Sequence)
+	return p.view.PutPasswordAgePolicy(policy, policy.Sequence, event.CreationDate)
 }
 
-func (m *PasswordAgePolicy) OnError(event *models.Event, err error) error {
+func (p *PasswordAgePolicy) OnError(event *models.Event, err error) error {
 	logging.LogWithFields("SPOOL-nD8sie", "id", event.AggregateID).WithError(err).Warn("something went wrong in passwordAge policy handler")
-	return spooler.HandleError(event, err, m.view.GetLatestPasswordAgePolicyFailedEvent, m.view.ProcessedPasswordAgePolicyFailedEvent, m.view.ProcessedPasswordAgePolicySequence, m.errorCountUntilSkip)
+	return spooler.HandleError(event, err, p.view.GetLatestPasswordAgePolicyFailedEvent, p.view.ProcessedPasswordAgePolicyFailedEvent, p.view.ProcessedPasswordAgePolicySequence, p.errorCountUntilSkip)
+}
+
+func (p *PasswordAgePolicy) OnSuccess() error {
+	return spooler.HandleSuccess(p.view.UpdateProcessedPasswordAgePolicySpoolerRunTimestamp)
 }

internal/admin/repository/eventsourcing/handler/password_complexity_policy.go

@@ -19,12 +19,12 @@ const (
 	passwordComplexityPolicyTable = "adminapi.password_complexity_policies"
 )
 
-func (m *PasswordComplexityPolicy) ViewModel() string {
+func (p *PasswordComplexityPolicy) ViewModel() string {
 	return passwordComplexityPolicyTable
 }
 
-func (m *PasswordComplexityPolicy) EventQuery() (*models.SearchQuery, error) {
-	sequence, err := m.view.GetLatestPasswordComplexityPolicySequence()
+func (p *PasswordComplexityPolicy) EventQuery() (*models.SearchQuery, error) {
+	sequence, err := p.view.GetLatestPasswordComplexityPolicySequence()
 	if err != nil {
 		return nil, err
 	}
@@ -33,37 +33,41 @@ func (m *PasswordComplexityPolicy) EventQuery() (*models.SearchQuery, error) {
 		LatestSequenceFilter(sequence.CurrentSequence), nil
 }
 
-func (m *PasswordComplexityPolicy) Reduce(event *models.Event) (err error) {
+func (p *PasswordComplexityPolicy) Reduce(event *models.Event) (err error) {
 	switch event.AggregateType {
 	case model.OrgAggregate, iam_es_model.IAMAggregate:
-		err = m.processPasswordComplexityPolicy(event)
+		err = p.processPasswordComplexityPolicy(event)
 	}
 	return err
 }
 
-func (m *PasswordComplexityPolicy) processPasswordComplexityPolicy(event *models.Event) (err error) {
+func (p *PasswordComplexityPolicy) processPasswordComplexityPolicy(event *models.Event) (err error) {
 	policy := new(iam_model.PasswordComplexityPolicyView)
 	switch event.Type {
 	case iam_es_model.PasswordComplexityPolicyAdded, model.PasswordComplexityPolicyAdded:
 		err = policy.AppendEvent(event)
 	case iam_es_model.PasswordComplexityPolicyChanged, model.PasswordComplexityPolicyChanged:
-		policy, err = m.view.PasswordComplexityPolicyByAggregateID(event.AggregateID)
+		policy, err = p.view.PasswordComplexityPolicyByAggregateID(event.AggregateID)
 		if err != nil {
 			return err
 		}
 		err = policy.AppendEvent(event)
 	case model.PasswordComplexityPolicyRemoved:
-		return m.view.DeletePasswordComplexityPolicy(event.AggregateID, event.Sequence)
+		return p.view.DeletePasswordComplexityPolicy(event.AggregateID, event.Sequence, event.CreationDate)
 	default:
-		return m.view.ProcessedPasswordComplexityPolicySequence(event.Sequence)
+		return p.view.ProcessedPasswordComplexityPolicySequence(event.Sequence, event.CreationDate)
 	}
 	if err != nil {
 		return err
 	}
-	return m.view.PutPasswordComplexityPolicy(policy, policy.Sequence)
+	return p.view.PutPasswordComplexityPolicy(policy, policy.Sequence, event.CreationDate)
 }
 
-func (m *PasswordComplexityPolicy) OnError(event *models.Event, err error) error {
+func (p *PasswordComplexityPolicy) OnError(event *models.Event, err error) error {
 	logging.LogWithFields("SPOOL-Wm8fs", "id", event.AggregateID).WithError(err).Warn("something went wrong in passwordComplexity policy handler")
-	return spooler.HandleError(event, err, m.view.GetLatestPasswordComplexityPolicyFailedEvent, m.view.ProcessedPasswordComplexityPolicyFailedEvent, m.view.ProcessedPasswordComplexityPolicySequence, m.errorCountUntilSkip)
+	return spooler.HandleError(event, err, p.view.GetLatestPasswordComplexityPolicyFailedEvent, p.view.ProcessedPasswordComplexityPolicyFailedEvent, p.view.ProcessedPasswordComplexityPolicySequence, p.errorCountUntilSkip)
+}
+
+func (p *PasswordComplexityPolicy) OnSuccess() error {
+	return spooler.HandleSuccess(p.view.UpdatePasswordComplexityPolicySpoolerRunTimestamp)
 }

internal/admin/repository/eventsourcing/handler/password_lockout_policy.go

@@ -19,12 +19,12 @@ const (
 	passwordLockoutPolicyTable = "adminapi.password_lockout_policies"
 )
 
-func (m *PasswordLockoutPolicy) ViewModel() string {
+func (p *PasswordLockoutPolicy) ViewModel() string {
 	return passwordLockoutPolicyTable
 }
 
-func (m *PasswordLockoutPolicy) EventQuery() (*models.SearchQuery, error) {
-	sequence, err := m.view.GetLatestPasswordLockoutPolicySequence()
+func (p *PasswordLockoutPolicy) EventQuery() (*models.SearchQuery, error) {
+	sequence, err := p.view.GetLatestPasswordLockoutPolicySequence()
 	if err != nil {
 		return nil, err
 	}
@@ -33,37 +33,41 @@ func (m *PasswordLockoutPolicy) EventQuery() (*models.SearchQuery, error) {
 		LatestSequenceFilter(sequence.CurrentSequence), nil
 }
 
-func (m *PasswordLockoutPolicy) Reduce(event *models.Event) (err error) {
+func (p *PasswordLockoutPolicy) Reduce(event *models.Event) (err error) {
 	switch event.AggregateType {
 	case model.OrgAggregate, iam_es_model.IAMAggregate:
-		err = m.processPasswordLockoutPolicy(event)
+		err = p.processPasswordLockoutPolicy(event)
 	}
 	return err
 }
 
-func (m *PasswordLockoutPolicy) processPasswordLockoutPolicy(event *models.Event) (err error) {
+func (p *PasswordLockoutPolicy) processPasswordLockoutPolicy(event *models.Event) (err error) {
 	policy := new(iam_model.PasswordLockoutPolicyView)
 	switch event.Type {
 	case iam_es_model.PasswordLockoutPolicyAdded, model.PasswordLockoutPolicyAdded:
 		err = policy.AppendEvent(event)
 	case iam_es_model.PasswordLockoutPolicyChanged, model.PasswordLockoutPolicyChanged:
-		policy, err = m.view.PasswordLockoutPolicyByAggregateID(event.AggregateID)
+		policy, err = p.view.PasswordLockoutPolicyByAggregateID(event.AggregateID)
 		if err != nil {
 			return err
 		}
 		err = policy.AppendEvent(event)
 	case model.PasswordLockoutPolicyRemoved:
-		return m.view.DeletePasswordLockoutPolicy(event.AggregateID, event.Sequence)
+		return p.view.DeletePasswordLockoutPolicy(event.AggregateID, event.Sequence, event.CreationDate)
 	default:
-		return m.view.ProcessedPasswordLockoutPolicySequence(event.Sequence)
+		return p.view.ProcessedPasswordLockoutPolicySequence(event.Sequence, event.CreationDate)
 	}
 	if err != nil {
 		return err
 	}
-	return m.view.PutPasswordLockoutPolicy(policy, policy.Sequence)
+	return p.view.PutPasswordLockoutPolicy(policy, policy.Sequence, event.CreationDate)
 }
 
-func (m *PasswordLockoutPolicy) OnError(event *models.Event, err error) error {
+func (p *PasswordLockoutPolicy) OnError(event *models.Event, err error) error {
 	logging.LogWithFields("SPOOL-nD8sie", "id", event.AggregateID).WithError(err).Warn("something went wrong in passwordLockout policy handler")
-	return spooler.HandleError(event, err, m.view.GetLatestPasswordLockoutPolicyFailedEvent, m.view.ProcessedPasswordLockoutPolicyFailedEvent, m.view.ProcessedPasswordLockoutPolicySequence, m.errorCountUntilSkip)
+	return spooler.HandleError(event, err, p.view.GetLatestPasswordLockoutPolicyFailedEvent, p.view.ProcessedPasswordLockoutPolicyFailedEvent, p.view.ProcessedPasswordLockoutPolicySequence, p.errorCountUntilSkip)
+}
+
+func (p *PasswordLockoutPolicy) OnSuccess() error {
+	return spooler.HandleSuccess(p.view.UpdatePasswordLockoutPolicySpoolerRunTimestamp)
 }

internal/admin/repository/eventsourcing/handler/user.go

@@ -110,14 +110,14 @@ func (u *User) ProcessUser(event *models.Event) (err error) {
 		}
 		err = u.fillLoginNames(user)
 	case es_model.UserRemoved:
-		return u.view.DeleteUser(event.AggregateID, event.Sequence)
+		return u.view.DeleteUser(event.AggregateID, event.Sequence, event.CreationDate)
 	default:
-		return u.view.ProcessedUserSequence(event.Sequence)
+		return u.view.ProcessedUserSequence(event.Sequence, event.CreationDate)
 	}
 	if err != nil {
 		return err
 	}
-	return u.view.PutUser(user, user.Sequence)
+	return u.view.PutUser(user, user.Sequence, event.CreationDate)
 }
 
 func (u *User) ProcessOrg(event *models.Event) (err error) {
@@ -131,7 +131,7 @@ func (u *User) ProcessOrg(event *models.Event) (err error) {
 	case org_es_model.OrgDomainPrimarySet:
 		return u.fillPreferredLoginNamesOnOrgUsers(event)
 	default:
-		return u.view.ProcessedUserSequence(event.Sequence)
+		return u.view.ProcessedUserSequence(event.Sequence, event.CreationDate)
 	}
 }
 
@@ -154,7 +154,7 @@ func (u *User) fillLoginNamesOnOrgUsers(event *models.Event) error {
 	for _, user := range users {
 		user.SetLoginNames(policy, org.Domains)
 	}
-	return u.view.PutUsers(users, event.Sequence)
+	return u.view.PutUsers(users, event.Sequence, event.CreationDate)
 }
 
 func (u *User) fillPreferredLoginNamesOnOrgUsers(event *models.Event) error {
@@ -179,7 +179,7 @@ func (u *User) fillPreferredLoginNamesOnOrgUsers(event *models.Event) error {
 	for _, user := range users {
 		user.PreferredLoginName = user.GenerateLoginName(org.GetPrimaryDomain().Domain, policy.UserLoginMustBeDomain)
 	}
-	return u.view.PutUsers(users, event.Sequence)
+	return u.view.PutUsers(users, event.Sequence, event.CreationDate)
 }
 
 func (u *User) fillLoginNames(user *view_model.UserView) (err error) {
@@ -203,3 +203,7 @@ func (u *User) OnError(event *models.Event, err error) error {
 	logging.LogWithFields("SPOOL-vLmwQ", "id", event.AggregateID).WithError(err).Warn("something went wrong in user handler")
 	return spooler.HandleError(event, err, u.view.GetLatestUserFailedEvent, u.view.ProcessedUserFailedEvent, u.view.ProcessedUserSequence, u.errorCountUntilSkip)
 }
+
+func (u *User) OnSuccess() error {
+	return spooler.HandleSuccess(u.view.UpdateUserSpoolerRunTimestamp)
+}

internal/admin/repository/eventsourcing/handler/user_external_idps.go

@@ -30,12 +30,12 @@ const (
 	externalIDPTable = "adminapi.user_external_idps"
 )
 
-func (m *ExternalIDP) ViewModel() string {
+func (i *ExternalIDP) ViewModel() string {
 	return externalIDPTable
 }
 
-func (m *ExternalIDP) EventQuery() (*models.SearchQuery, error) {
-	sequence, err := m.view.GetLatestExternalIDPSequence()
+func (i *ExternalIDP) EventQuery() (*models.SearchQuery, error) {
+	sequence, err := i.view.GetLatestExternalIDPSequence()
 	if err != nil {
 		return nil, err
 	}
@@ -44,17 +44,17 @@ func (m *ExternalIDP) EventQuery() (*models.SearchQuery, error) {
 		LatestSequenceFilter(sequence.CurrentSequence), nil
 }
 
-func (m *ExternalIDP) Reduce(event *models.Event) (err error) {
+func (i *ExternalIDP) Reduce(event *models.Event) (err error) {
 	switch event.AggregateType {
 	case model.UserAggregate:
-		err = m.processUser(event)
+		err = i.processUser(event)
 	case iam_es_model.IAMAggregate, org_es_model.OrgAggregate:
-		err = m.processIdpConfig(event)
+		err = i.processIdpConfig(event)
 	}
 	return err
 }
 
-func (m *ExternalIDP) processUser(event *models.Event) (err error) {
+func (i *ExternalIDP) processUser(event *models.Event) (err error) {
 	externalIDP := new(usr_view_model.ExternalIDPView)
 	switch event.Type {
 	case model.HumanExternalIDPAdded:
@@ -62,25 +62,25 @@ func (m *ExternalIDP) processUser(event *models.Event) (err error) {
 		if err != nil {
 			return err
 		}
-		err = m.fillData(externalIDP)
+		err = i.fillData(externalIDP)
 	case model.HumanExternalIDPRemoved, model.HumanExternalIDPCascadeRemoved:
 		err = externalIDP.SetData(event)
 		if err != nil {
 			return err
 		}
-		return m.view.DeleteExternalIDP(externalIDP.ExternalUserID, externalIDP.IDPConfigID, event.Sequence)
+		return i.view.DeleteExternalIDP(externalIDP.ExternalUserID, externalIDP.IDPConfigID, event.Sequence, event.CreationDate)
 	case model.UserRemoved:
-		return m.view.DeleteExternalIDPsByUserID(event.AggregateID, event.Sequence)
+		return i.view.DeleteExternalIDPsByUserID(event.AggregateID, event.Sequence, event.CreationDate)
 	default:
-		return m.view.ProcessedExternalIDPSequence(event.Sequence)
+		return i.view.ProcessedExternalIDPSequence(event.Sequence, event.CreationDate)
 	}
 	if err != nil {
 		return err
 	}
-	return m.view.PutExternalIDP(externalIDP, externalIDP.Sequence)
+	return i.view.PutExternalIDP(externalIDP, externalIDP.Sequence, event.CreationDate)
 }
 
-func (m *ExternalIDP) processIdpConfig(event *models.Event) (err error) {
+func (i *ExternalIDP) processIdpConfig(event *models.Event) (err error) {
 	switch event.Type {
 	case iam_es_model.IDPConfigChanged, org_es_model.IDPConfigChanged:
 		configView := new(iam_view_model.IDPConfigView)
@@ -90,45 +90,49 @@ func (m *ExternalIDP) processIdpConfig(event *models.Event) (err error) {
 		} else {
 			configView.AppendEvent(iam_model.IDPProviderTypeOrg, event)
 		}
-		exterinalIDPs, err := m.view.ExternalIDPsByIDPConfigID(configView.IDPConfigID)
+		exterinalIDPs, err := i.view.ExternalIDPsByIDPConfigID(configView.IDPConfigID)
 		if err != nil {
 			return err
 		}
 		if event.AggregateType == iam_es_model.IAMAggregate {
-			config, err = m.iamEvents.GetIDPConfig(context.Background(), event.AggregateID, configView.IDPConfigID)
+			config, err = i.iamEvents.GetIDPConfig(context.Background(), event.AggregateID, configView.IDPConfigID)
 		} else {
-			config, err = m.orgEvents.GetIDPConfig(context.Background(), event.AggregateID, configView.IDPConfigID)
+			config, err = i.orgEvents.GetIDPConfig(context.Background(), event.AggregateID, configView.IDPConfigID)
 		}
 		if err != nil {
 			return err
 		}
 		for _, provider := range exterinalIDPs {
-			m.fillConfigData(provider, config)
+			i.fillConfigData(provider, config)
 		}
-		return m.view.PutExternalIDPs(event.Sequence, exterinalIDPs...)
+		return i.view.PutExternalIDPs(event.Sequence, event.CreationDate, exterinalIDPs...)
 	default:
-		return m.view.ProcessedExternalIDPSequence(event.Sequence)
+		return i.view.ProcessedExternalIDPSequence(event.Sequence, event.CreationDate)
 	}
 	return nil
 }
 
-func (m *ExternalIDP) fillData(externalIDP *usr_view_model.ExternalIDPView) error {
-	config, err := m.orgEvents.GetIDPConfig(context.Background(), externalIDP.ResourceOwner, externalIDP.IDPConfigID)
+func (i *ExternalIDP) fillData(externalIDP *usr_view_model.ExternalIDPView) error {
+	config, err := i.orgEvents.GetIDPConfig(context.Background(), externalIDP.ResourceOwner, externalIDP.IDPConfigID)
 	if caos_errs.IsNotFound(err) {
-		config, err = m.iamEvents.GetIDPConfig(context.Background(), m.systemDefaults.IamID, externalIDP.IDPConfigID)
+		config, err = i.iamEvents.GetIDPConfig(context.Background(), i.systemDefaults.IamID, externalIDP.IDPConfigID)
 	}
 	if err != nil {
 		return err
 	}
-	m.fillConfigData(externalIDP, config)
+	i.fillConfigData(externalIDP, config)
 	return nil
 }
 
-func (m *ExternalIDP) fillConfigData(externalIDP *usr_view_model.ExternalIDPView, config *iam_model.IDPConfig) {
+func (i *ExternalIDP) fillConfigData(externalIDP *usr_view_model.ExternalIDPView, config *iam_model.IDPConfig) {
 	externalIDP.IDPName = config.Name
 }
 
-func (m *ExternalIDP) OnError(event *models.Event, err error) error {
+func (i *ExternalIDP) OnError(event *models.Event, err error) error {
 	logging.LogWithFields("SPOOL-4Rsu8", "id", event.AggregateID).WithError(err).Warn("something went wrong in idp provider handler")
-	return spooler.HandleError(event, err, m.view.GetLatestExternalIDPFailedEvent, m.view.ProcessedExternalIDPFailedEvent, m.view.ProcessedExternalIDPSequence, m.errorCountUntilSkip)
+	return spooler.HandleError(event, err, i.view.GetLatestExternalIDPFailedEvent, i.view.ProcessedExternalIDPFailedEvent, i.view.ProcessedExternalIDPSequence, i.errorCountUntilSkip)
+}
+
+func (i *ExternalIDP) OnSuccess() error {
+	return spooler.HandleSuccess(i.view.UpdateExternalIDPSpoolerRunTimestamp)
 }

internal/admin/repository/eventsourcing/view/external_idps.go

@@ -6,6 +6,7 @@ import (
 	"github.com/caos/zitadel/internal/user/repository/view"
 	"github.com/caos/zitadel/internal/user/repository/view/model"
 	global_view "github.com/caos/zitadel/internal/view/repository"
+	"time"
 )
 
 const (
@@ -32,44 +33,48 @@ func (v *View) SearchExternalIDPs(request *usr_model.ExternalIDPSearchRequest) (
 	return view.SearchExternalIDPs(v.Db, externalIDPTable, request)
 }
 
-func (v *View) PutExternalIDP(externalIDP *model.ExternalIDPView, sequence uint64) error {
+func (v *View) PutExternalIDP(externalIDP *model.ExternalIDPView, sequence uint64, eventTimestamp time.Time) error {
 	err := view.PutExternalIDP(v.Db, externalIDPTable, externalIDP)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedExternalIDPSequence(sequence)
+	return v.ProcessedExternalIDPSequence(sequence, eventTimestamp)
 }
 
-func (v *View) PutExternalIDPs(sequence uint64, externalIDPs ...*model.ExternalIDPView) error {
+func (v *View) PutExternalIDPs(sequence uint64, eventTimestamp time.Time, externalIDPs ...*model.ExternalIDPView) error {
 	err := view.PutExternalIDPs(v.Db, externalIDPTable, externalIDPs...)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedExternalIDPSequence(sequence)
+	return v.ProcessedExternalIDPSequence(sequence, eventTimestamp)
 }
 
-func (v *View) DeleteExternalIDP(externalUserID, idpConfigID string, eventSequence uint64) error {
+func (v *View) DeleteExternalIDP(externalUserID, idpConfigID string, eventSequence uint64, eventTimestamp time.Time) error {
 	err := view.DeleteExternalIDP(v.Db, externalIDPTable, externalUserID, idpConfigID)
 	if err != nil && !errors.IsNotFound(err) {
 		return err
 	}
-	return v.ProcessedExternalIDPSequence(eventSequence)
+	return v.ProcessedExternalIDPSequence(eventSequence, eventTimestamp)
 }
 
-func (v *View) DeleteExternalIDPsByUserID(userID string, eventSequence uint64) error {
+func (v *View) DeleteExternalIDPsByUserID(userID string, eventSequence uint64, eventTimestamp time.Time) error {
 	err := view.DeleteExternalIDPsByUserID(v.Db, externalIDPTable, userID)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedExternalIDPSequence(eventSequence)
+	return v.ProcessedExternalIDPSequence(eventSequence, eventTimestamp)
 }
 
 func (v *View) GetLatestExternalIDPSequence() (*global_view.CurrentSequence, error) {
 	return v.latestSequence(externalIDPTable)
 }
 
-func (v *View) ProcessedExternalIDPSequence(eventSequence uint64) error {
-	return v.saveCurrentSequence(externalIDPTable, eventSequence)
+func (v *View) ProcessedExternalIDPSequence(eventSequence uint64, eventTimestamp time.Time) error {
+	return v.saveCurrentSequence(externalIDPTable, eventSequence, eventTimestamp)
+}
+
+func (v *View) UpdateExternalIDPSpoolerRunTimestamp() error {
+	return v.updateSpoolerRunSequence(externalIDPTable)
 }
 
 func (v *View) GetLatestExternalIDPFailedEvent(sequence uint64) (*global_view.FailedEvent, error) {

internal/admin/repository/eventsourcing/view/iam_member.go

@@ -6,6 +6,7 @@ import (
 	"github.com/caos/zitadel/internal/iam/repository/view"
 	"github.com/caos/zitadel/internal/iam/repository/view/model"
 	global_view "github.com/caos/zitadel/internal/view/repository"
+	"time"
 )
 
 const (
@@ -24,44 +25,48 @@ func (v *View) IAMMembersByUserID(userID string) ([]*model.IAMMemberView, error)
 	return view.IAMMembersByUserID(v.Db, iamMemberTable, userID)
 }
 
-func (v *View) PutIAMMember(org *model.IAMMemberView, sequence uint64) error {
+func (v *View) PutIAMMember(org *model.IAMMemberView, sequence uint64, eventTimestamp time.Time) error {
 	err := view.PutIAMMember(v.Db, iamMemberTable, org)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedIAMMemberSequence(sequence)
+	return v.ProcessedIAMMemberSequence(sequence, eventTimestamp)
 }
 
-func (v *View) PutIAMMembers(members []*model.IAMMemberView, sequence uint64) error {
+func (v *View) PutIAMMembers(members []*model.IAMMemberView, sequence uint64, eventTimestamp time.Time) error {
 	err := view.PutIAMMembers(v.Db, iamMemberTable, members...)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedIAMMemberSequence(sequence)
+	return v.ProcessedIAMMemberSequence(sequence, eventTimestamp)
 }
 
-func (v *View) DeleteIAMMember(iamID, userID string, eventSequence uint64) error {
+func (v *View) DeleteIAMMember(iamID, userID string, eventSequence uint64, eventTimestamp time.Time) error {
 	err := view.DeleteIAMMember(v.Db, iamMemberTable, iamID, userID)
 	if err != nil && !errors.IsNotFound(err) {
 		return err
 	}
-	return v.ProcessedIAMMemberSequence(eventSequence)
+	return v.ProcessedIAMMemberSequence(eventSequence, eventTimestamp)
 }
 
-func (v *View) DeleteIAMMembersByUserID(userID string, eventSequence uint64) error {
+func (v *View) DeleteIAMMembersByUserID(userID string, eventSequence uint64, eventTimestamp time.Time) error {
 	err := view.DeleteIAMMembersByUserID(v.Db, iamMemberTable, userID)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedIAMMemberSequence(eventSequence)
+	return v.ProcessedIAMMemberSequence(eventSequence, eventTimestamp)
 }
 
 func (v *View) GetLatestIAMMemberSequence() (*global_view.CurrentSequence, error) {
 	return v.latestSequence(iamMemberTable)
 }
 
-func (v *View) ProcessedIAMMemberSequence(eventSequence uint64) error {
-	return v.saveCurrentSequence(iamMemberTable, eventSequence)
+func (v *View) ProcessedIAMMemberSequence(eventSequence uint64, eventTimestamp time.Time) error {
+	return v.saveCurrentSequence(iamMemberTable, eventSequence, eventTimestamp)
+}
+
+func (v *View) UpdateIAMMemberSpoolerRunTimestamp() error {
+	return v.updateSpoolerRunSequence(iamMemberTable)
 }
 
 func (v *View) GetLatestIAMMemberFailedEvent(sequence uint64) (*global_view.FailedEvent, error) {

internal/admin/repository/eventsourcing/view/idp_configs.go

@@ -6,6 +6,7 @@ import (
 	"github.com/caos/zitadel/internal/iam/repository/view"
 	"github.com/caos/zitadel/internal/iam/repository/view/model"
 	global_view "github.com/caos/zitadel/internal/view/repository"
+	"time"
 )
 
 const (
@@ -20,28 +21,32 @@ func (v *View) SearchIDPConfigs(request *iam_model.IDPConfigSearchRequest) ([]*m
 	return view.SearchIDPs(v.Db, idpConfigTable, request)
 }
 
-func (v *View) PutIDPConfig(idp *model.IDPConfigView, sequence uint64) error {
+func (v *View) PutIDPConfig(idp *model.IDPConfigView, sequence uint64, eventTimestamp time.Time) error {
 	err := view.PutIDP(v.Db, idpConfigTable, idp)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedIDPConfigSequence(sequence)
+	return v.ProcessedIDPConfigSequence(sequence, eventTimestamp)
 }
 
-func (v *View) DeleteIDPConfig(idpID string, eventSequence uint64) error {
+func (v *View) DeleteIDPConfig(idpID string, eventSequence uint64, eventTimestamp time.Time) error {
 	err := view.DeleteIDP(v.Db, idpConfigTable, idpID)
 	if err != nil && !errors.IsNotFound(err) {
 		return err
 	}
-	return v.ProcessedIDPConfigSequence(eventSequence)
+	return v.ProcessedIDPConfigSequence(eventSequence, eventTimestamp)
 }
 
 func (v *View) GetLatestIDPConfigSequence() (*global_view.CurrentSequence, error) {
 	return v.latestSequence(idpConfigTable)
 }
 
-func (v *View) ProcessedIDPConfigSequence(eventSequence uint64) error {
-	return v.saveCurrentSequence(idpConfigTable, eventSequence)
+func (v *View) ProcessedIDPConfigSequence(eventSequence uint64, eventTimestamp time.Time) error {
+	return v.saveCurrentSequence(idpConfigTable, eventSequence, eventTimestamp)
+}
+
+func (v *View) UpdateIDPConfigSpoolerRunTimestamp() error {
+	return v.updateSpoolerRunSequence(idpConfigTable)
 }
 
 func (v *View) GetLatestIDPConfigFailedEvent(sequence uint64) (*global_view.FailedEvent, error) {

internal/admin/repository/eventsourcing/view/idp_providers.go

@@ -6,6 +6,7 @@ import (
 	"github.com/caos/zitadel/internal/iam/repository/view"
 	"github.com/caos/zitadel/internal/iam/repository/view/model"
 	global_view "github.com/caos/zitadel/internal/view/repository"
+	"time"
 )
 
 const (
@@ -24,36 +25,40 @@ func (v *View) SearchIDPProviders(request *iam_model.IDPProviderSearchRequest) (
 	return view.SearchIDPProviders(v.Db, idpProviderTable, request)
 }
 
-func (v *View) PutIDPProvider(provider *model.IDPProviderView, sequence uint64) error {
+func (v *View) PutIDPProvider(provider *model.IDPProviderView, sequence uint64, eventTimestamp time.Time) error {
 	err := view.PutIDPProvider(v.Db, idpProviderTable, provider)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedIDPProviderSequence(sequence)
+	return v.ProcessedIDPProviderSequence(sequence, eventTimestamp)
 }
 
-func (v *View) PutIDPProviders(sequence uint64, providers ...*model.IDPProviderView) error {
+func (v *View) PutIDPProviders(sequence uint64, eventTimestamp time.Time, providers ...*model.IDPProviderView) error {
 	err := view.PutIDPProviders(v.Db, idpProviderTable, providers...)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedIDPProviderSequence(sequence)
+	return v.ProcessedIDPProviderSequence(sequence, eventTimestamp)
 }
 
-func (v *View) DeleteIDPProvider(aggregateID, idpConfigID string, eventSequence uint64) error {
+func (v *View) DeleteIDPProvider(aggregateID, idpConfigID string, eventSequence uint64, eventTimestamp time.Time) error {
 	err := view.DeleteIDPProvider(v.Db, idpProviderTable, aggregateID, idpConfigID)
 	if err != nil && !errors.IsNotFound(err) {
 		return err
 	}
-	return v.ProcessedIDPProviderSequence(eventSequence)
+	return v.ProcessedIDPProviderSequence(eventSequence, eventTimestamp)
 }
 
 func (v *View) GetLatestIDPProviderSequence() (*global_view.CurrentSequence, error) {
 	return v.latestSequence(idpProviderTable)
 }
 
-func (v *View) ProcessedIDPProviderSequence(eventSequence uint64) error {
-	return v.saveCurrentSequence(idpProviderTable, eventSequence)
+func (v *View) ProcessedIDPProviderSequence(eventSequence uint64, eventTimestamp time.Time) error {
+	return v.saveCurrentSequence(idpProviderTable, eventSequence, eventTimestamp)
+}
+
+func (v *View) UpdateIDPProviderSpoolerRunTimestamp() error {
+	return v.updateSpoolerRunSequence(idpProviderTable)
 }
 
 func (v *View) GetLatestIDPProviderFailedEvent(sequence uint64) (*global_view.FailedEvent, error) {

internal/admin/repository/eventsourcing/view/label_policies.go

@@ -4,6 +4,7 @@ import (
 	"github.com/caos/zitadel/internal/iam/repository/view"
 	"github.com/caos/zitadel/internal/iam/repository/view/model"
 	global_view "github.com/caos/zitadel/internal/view/repository"
+	"time"
 )
 
 const (
@@ -14,20 +15,24 @@ func (v *View) LabelPolicyByAggregateID(aggregateID string) (*model.LabelPolicyV
 	return view.GetLabelPolicyByAggregateID(v.Db, labelPolicyTable, aggregateID)
 }
 
-func (v *View) PutLabelPolicy(policy *model.LabelPolicyView, sequence uint64) error {
+func (v *View) PutLabelPolicy(policy *model.LabelPolicyView, sequence uint64, eventTimestamp time.Time) error {
 	err := view.PutLabelPolicy(v.Db, labelPolicyTable, policy)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedLabelPolicySequence(sequence)
+	return v.ProcessedLabelPolicySequence(sequence, eventTimestamp)
 }
 
 func (v *View) GetLatestLabelPolicySequence() (*global_view.CurrentSequence, error) {
 	return v.latestSequence(labelPolicyTable)
 }
 
-func (v *View) ProcessedLabelPolicySequence(eventSequence uint64) error {
-	return v.saveCurrentSequence(labelPolicyTable, eventSequence)
+func (v *View) ProcessedLabelPolicySequence(eventSequence uint64, eventTimestamp time.Time) error {
+	return v.saveCurrentSequence(labelPolicyTable, eventSequence, eventTimestamp)
+}
+
+func (v *View) UpdateLabelPolicySpoolerRunTimestamp() error {
+	return v.updateSpoolerRunSequence(labelPolicyTable)
 }
 
 func (v *View) GetLatestLabelPolicyFailedEvent(sequence uint64) (*global_view.FailedEvent, error) {

internal/admin/repository/eventsourcing/view/login_policies.go

@@ -5,6 +5,7 @@ import (
 	"github.com/caos/zitadel/internal/iam/repository/view"
 	"github.com/caos/zitadel/internal/iam/repository/view/model"
 	global_view "github.com/caos/zitadel/internal/view/repository"
+	"time"
 )
 
 const (
@@ -15,28 +16,32 @@ func (v *View) LoginPolicyByAggregateID(aggregateID string) (*model.LoginPolicyV
 	return view.GetLoginPolicyByAggregateID(v.Db, loginPolicyTable, aggregateID)
 }
 
-func (v *View) PutLoginPolicy(policy *model.LoginPolicyView, sequence uint64) error {
+func (v *View) PutLoginPolicy(policy *model.LoginPolicyView, sequence uint64, eventTimestamp time.Time) error {
 	err := view.PutLoginPolicy(v.Db, loginPolicyTable, policy)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedLoginPolicySequence(sequence)
+	return v.ProcessedLoginPolicySequence(sequence, eventTimestamp)
 }
 
-func (v *View) DeleteLoginPolicy(aggregateID string, eventSequence uint64) error {
+func (v *View) DeleteLoginPolicy(aggregateID string, eventSequence uint64, eventTimestamp time.Time) error {
 	err := view.DeleteLoginPolicy(v.Db, loginPolicyTable, aggregateID)
 	if err != nil && !errors.IsNotFound(err) {
 		return err
 	}
-	return v.ProcessedLoginPolicySequence(eventSequence)
+	return v.ProcessedLoginPolicySequence(eventSequence, eventTimestamp)
 }
 
 func (v *View) GetLatestLoginPolicySequence() (*global_view.CurrentSequence, error) {
 	return v.latestSequence(loginPolicyTable)
 }
 
-func (v *View) ProcessedLoginPolicySequence(eventSequence uint64) error {
-	return v.saveCurrentSequence(loginPolicyTable, eventSequence)
+func (v *View) ProcessedLoginPolicySequence(eventSequence uint64, eventTimestamp time.Time) error {
+	return v.saveCurrentSequence(loginPolicyTable, eventSequence, eventTimestamp)
+}
+
+func (v *View) UpdateLoginPolicySpoolerRunTimestamp() error {
+	return v.updateSpoolerRunSequence(loginPolicyTable)
 }
 
 func (v *View) GetLatestLoginPolicyFailedEvent(sequence uint64) (*global_view.FailedEvent, error) {

internal/admin/repository/eventsourcing/view/org.go

@@ -5,6 +5,7 @@ import (
 	org_view "github.com/caos/zitadel/internal/org/repository/view"
 	"github.com/caos/zitadel/internal/org/repository/view/model"
 	"github.com/caos/zitadel/internal/view/repository"
+	"time"
 )
 
 const (
@@ -19,12 +20,12 @@ func (v *View) SearchOrgs(query *org_model.OrgSearchRequest) ([]*model.OrgView,
 	return org_view.SearchOrgs(v.Db, orgTable, query)
 }
 
-func (v *View) PutOrg(org *model.OrgView) error {
+func (v *View) PutOrg(org *model.OrgView, eventTimestamp time.Time) error {
 	err := org_view.PutOrg(v.Db, orgTable, org)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedOrgSequence(org.Sequence)
+	return v.ProcessedOrgSequence(org.Sequence, eventTimestamp)
 }
 
 func (v *View) GetLatestOrgFailedEvent(sequence uint64) (*repository.FailedEvent, error) {
@@ -35,10 +36,14 @@ func (v *View) ProcessedOrgFailedEvent(failedEvent *repository.FailedEvent) erro
 	return v.saveFailedEvent(failedEvent)
 }
 
+func (v *View) UpdateOrgSpoolerRunTimestamp() error {
+	return v.updateSpoolerRunSequence(orgTable)
+}
+
 func (v *View) GetLatestOrgSequence() (*repository.CurrentSequence, error) {
 	return v.latestSequence(orgTable)
 }
 
-func (v *View) ProcessedOrgSequence(eventSequence uint64) error {
-	return v.saveCurrentSequence(orgTable, eventSequence)
+func (v *View) ProcessedOrgSequence(eventSequence uint64, eventTimestamp time.Time) error {
+	return v.saveCurrentSequence(orgTable, eventSequence, eventTimestamp)
 }

internal/admin/repository/eventsourcing/view/org_iam_policy.go

@@ -5,6 +5,7 @@ import (
 	"github.com/caos/zitadel/internal/iam/repository/view"
 	"github.com/caos/zitadel/internal/iam/repository/view/model"
 	global_view "github.com/caos/zitadel/internal/view/repository"
+	"time"
 )
 
 const (
@@ -15,28 +16,32 @@ func (v *View) OrgIAMPolicyByAggregateID(aggregateID string) (*model.OrgIAMPolic
 	return view.GetOrgIAMPolicyByAggregateID(v.Db, orgIAMPolicyTable, aggregateID)
 }
 
-func (v *View) PutOrgIAMPolicy(policy *model.OrgIAMPolicyView, sequence uint64) error {
+func (v *View) PutOrgIAMPolicy(policy *model.OrgIAMPolicyView, sequence uint64, eventTimestamp time.Time) error {
 	err := view.PutOrgIAMPolicy(v.Db, orgIAMPolicyTable, policy)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedOrgIAMPolicySequence(sequence)
+	return v.ProcessedOrgIAMPolicySequence(sequence, eventTimestamp)
 }
 
-func (v *View) DeleteOrgIAMPolicy(aggregateID string, eventSequence uint64) error {
+func (v *View) DeleteOrgIAMPolicy(aggregateID string, eventSequence uint64, eventTimestamp time.Time) error {
 	err := view.DeleteOrgIAMPolicy(v.Db, orgIAMPolicyTable, aggregateID)
 	if err != nil && !errors.IsNotFound(err) {
 		return err
 	}
-	return v.ProcessedOrgIAMPolicySequence(eventSequence)
+	return v.ProcessedOrgIAMPolicySequence(eventSequence, eventTimestamp)
 }
 
 func (v *View) GetLatestOrgIAMPolicySequence() (*global_view.CurrentSequence, error) {
 	return v.latestSequence(orgIAMPolicyTable)
 }
 
-func (v *View) ProcessedOrgIAMPolicySequence(eventSequence uint64) error {
-	return v.saveCurrentSequence(orgIAMPolicyTable, eventSequence)
+func (v *View) ProcessedOrgIAMPolicySequence(eventSequence uint64, eventTimestamp time.Time) error {
+	return v.saveCurrentSequence(orgIAMPolicyTable, eventSequence, eventTimestamp)
+}
+
+func (v *View) UpdateOrgIAMPolicySpoolerRunTimestamp() error {
+	return v.updateSpoolerRunSequence(orgIAMPolicyTable)
 }
 
 func (v *View) GetLatestOrgIAMPolicyFailedEvent(sequence uint64) (*global_view.FailedEvent, error) {

internal/admin/repository/eventsourcing/view/password_age_policy.go

@@ -5,6 +5,7 @@ import (
 	"github.com/caos/zitadel/internal/iam/repository/view"
 	"github.com/caos/zitadel/internal/iam/repository/view/model"
 	global_view "github.com/caos/zitadel/internal/view/repository"
+	"time"
 )
 
 const (
@@ -15,28 +16,32 @@ func (v *View) PasswordAgePolicyByAggregateID(aggregateID string) (*model.Passwo
 	return view.GetPasswordAgePolicyByAggregateID(v.Db, passwordAgePolicyTable, aggregateID)
 }
 
-func (v *View) PutPasswordAgePolicy(policy *model.PasswordAgePolicyView, sequence uint64) error {
+func (v *View) PutPasswordAgePolicy(policy *model.PasswordAgePolicyView, sequence uint64, eventTimestamp time.Time) error {
 	err := view.PutPasswordAgePolicy(v.Db, passwordAgePolicyTable, policy)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedPasswordAgePolicySequence(sequence)
+	return v.ProcessedPasswordAgePolicySequence(sequence, eventTimestamp)
 }
 
-func (v *View) DeletePasswordAgePolicy(aggregateID string, eventSequence uint64) error {
+func (v *View) DeletePasswordAgePolicy(aggregateID string, eventSequence uint64, eventTimestamp time.Time) error {
 	err := view.DeletePasswordAgePolicy(v.Db, passwordAgePolicyTable, aggregateID)
 	if err != nil && !errors.IsNotFound(err) {
 		return err
 	}
-	return v.ProcessedPasswordAgePolicySequence(eventSequence)
+	return v.ProcessedPasswordAgePolicySequence(eventSequence, eventTimestamp)
 }
 
 func (v *View) GetLatestPasswordAgePolicySequence() (*global_view.CurrentSequence, error) {
 	return v.latestSequence(passwordAgePolicyTable)
 }
 
-func (v *View) ProcessedPasswordAgePolicySequence(eventSequence uint64) error {
-	return v.saveCurrentSequence(passwordAgePolicyTable, eventSequence)
+func (v *View) ProcessedPasswordAgePolicySequence(eventSequence uint64, eventTimestamp time.Time) error {
+	return v.saveCurrentSequence(passwordAgePolicyTable, eventSequence, eventTimestamp)
+}
+
+func (v *View) UpdateProcessedPasswordAgePolicySpoolerRunTimestamp() error {
+	return v.updateSpoolerRunSequence(passwordAgePolicyTable)
 }
 
 func (v *View) GetLatestPasswordAgePolicyFailedEvent(sequence uint64) (*global_view.FailedEvent, error) {

internal/admin/repository/eventsourcing/view/password_complexity_policy.go

@@ -5,6 +5,7 @@ import (
 	"github.com/caos/zitadel/internal/iam/repository/view"
 	"github.com/caos/zitadel/internal/iam/repository/view/model"
 	global_view "github.com/caos/zitadel/internal/view/repository"
+	"time"
 )
 
 const (
@@ -15,28 +16,32 @@ func (v *View) PasswordComplexityPolicyByAggregateID(aggregateID string) (*model
 	return view.GetPasswordComplexityPolicyByAggregateID(v.Db, passwordComplexityPolicyTable, aggregateID)
 }
 
-func (v *View) PutPasswordComplexityPolicy(policy *model.PasswordComplexityPolicyView, sequence uint64) error {
+func (v *View) PutPasswordComplexityPolicy(policy *model.PasswordComplexityPolicyView, sequence uint64, eventTimestamp time.Time) error {
 	err := view.PutPasswordComplexityPolicy(v.Db, passwordComplexityPolicyTable, policy)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedPasswordComplexityPolicySequence(sequence)
+	return v.ProcessedPasswordComplexityPolicySequence(sequence, eventTimestamp)
 }
 
-func (v *View) DeletePasswordComplexityPolicy(aggregateID string, eventSequence uint64) error {
+func (v *View) DeletePasswordComplexityPolicy(aggregateID string, eventSequence uint64, eventTimestamp time.Time) error {
 	err := view.DeletePasswordComplexityPolicy(v.Db, passwordComplexityPolicyTable, aggregateID)
 	if err != nil && !errors.IsNotFound(err) {
 		return err
 	}
-	return v.ProcessedPasswordComplexityPolicySequence(eventSequence)
+	return v.ProcessedPasswordComplexityPolicySequence(eventSequence, eventTimestamp)
 }
 
 func (v *View) GetLatestPasswordComplexityPolicySequence() (*global_view.CurrentSequence, error) {
 	return v.latestSequence(passwordComplexityPolicyTable)
 }
 
-func (v *View) ProcessedPasswordComplexityPolicySequence(eventSequence uint64) error {
-	return v.saveCurrentSequence(passwordComplexityPolicyTable, eventSequence)
+func (v *View) ProcessedPasswordComplexityPolicySequence(eventSequence uint64, eventTimestamp time.Time) error {
+	return v.saveCurrentSequence(passwordComplexityPolicyTable, eventSequence, eventTimestamp)
+}
+
+func (v *View) UpdatePasswordComplexityPolicySpoolerRunTimestamp() error {
+	return v.updateSpoolerRunSequence(passwordComplexityPolicyTable)
 }
 
 func (v *View) GetLatestPasswordComplexityPolicyFailedEvent(sequence uint64) (*global_view.FailedEvent, error) {

internal/admin/repository/eventsourcing/view/password_lockout_policy.go

@@ -5,6 +5,7 @@ import (
 	"github.com/caos/zitadel/internal/iam/repository/view"
 	"github.com/caos/zitadel/internal/iam/repository/view/model"
 	global_view "github.com/caos/zitadel/internal/view/repository"
+	"time"
 )
 
 const (
@@ -15,28 +16,32 @@ func (v *View) PasswordLockoutPolicyByAggregateID(aggregateID string) (*model.Pa
 	return view.GetPasswordLockoutPolicyByAggregateID(v.Db, passwordLockoutPolicyTable, aggregateID)
 }
 
-func (v *View) PutPasswordLockoutPolicy(policy *model.PasswordLockoutPolicyView, sequence uint64) error {
+func (v *View) PutPasswordLockoutPolicy(policy *model.PasswordLockoutPolicyView, sequence uint64, eventTimestamp time.Time) error {
 	err := view.PutPasswordLockoutPolicy(v.Db, passwordLockoutPolicyTable, policy)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedPasswordLockoutPolicySequence(sequence)
+	return v.ProcessedPasswordLockoutPolicySequence(sequence, eventTimestamp)
 }
 
-func (v *View) DeletePasswordLockoutPolicy(aggregateID string, eventSequence uint64) error {
+func (v *View) DeletePasswordLockoutPolicy(aggregateID string, eventSequence uint64, eventTimestamp time.Time) error {
 	err := view.DeletePasswordLockoutPolicy(v.Db, passwordLockoutPolicyTable, aggregateID)
 	if err != nil && !errors.IsNotFound(err) {
 		return err
 	}
-	return v.ProcessedPasswordLockoutPolicySequence(eventSequence)
+	return v.ProcessedPasswordLockoutPolicySequence(eventSequence, eventTimestamp)
 }
 
 func (v *View) GetLatestPasswordLockoutPolicySequence() (*global_view.CurrentSequence, error) {
 	return v.latestSequence(passwordLockoutPolicyTable)
 }
 
-func (v *View) ProcessedPasswordLockoutPolicySequence(eventSequence uint64) error {
-	return v.saveCurrentSequence(passwordLockoutPolicyTable, eventSequence)
+func (v *View) ProcessedPasswordLockoutPolicySequence(eventSequence uint64, eventTimestamp time.Time) error {
+	return v.saveCurrentSequence(passwordLockoutPolicyTable, eventSequence, eventTimestamp)
+}
+
+func (v *View) UpdatePasswordLockoutPolicySpoolerRunTimestamp() error {
+	return v.updateSpoolerRunSequence(passwordLockoutPolicyTable)
 }
 
 func (v *View) GetLatestPasswordLockoutPolicyFailedEvent(sequence uint64) (*global_view.FailedEvent, error) {

internal/admin/repository/eventsourcing/view/sequence.go

@@ -2,14 +2,15 @@ package view
 
 import (
 	"github.com/caos/zitadel/internal/view/repository"
+	"time"
 )
 
 const (
 	sequencesTable = "adminapi.current_sequences"
 )
 
-func (v *View) saveCurrentSequence(viewName string, sequence uint64) error {
-	return repository.SaveCurrentSequence(v.Db, sequencesTable, viewName, sequence)
+func (v *View) saveCurrentSequence(viewName string, sequence uint64, eventTimeStamp time.Time) error {
+	return repository.SaveCurrentSequence(v.Db, sequencesTable, viewName, sequence, eventTimeStamp)
 }
 
 func (v *View) latestSequence(viewName string) (*repository.CurrentSequence, error) {
@@ -20,6 +21,24 @@ func (v *View) AllCurrentSequences(db string) ([]*repository.CurrentSequence, er
 	return repository.AllCurrentSequences(v.Db, db+".current_sequences")
 }
 
+func (v *View) updateSpoolerRunSequence(viewName string) error {
+	currentSequence, err := repository.LatestSequence(v.Db, sequencesTable, viewName)
+	if err != nil {
+		return err
+	}
+	if currentSequence.ViewName == "" {
+		currentSequence.ViewName = viewName
+	}
+	currentSequence.LastSuccessfulSpoolerRun = time.Now()
+	return repository.UpdateCurrentSequence(v.Db, sequencesTable, currentSequence)
+}
+
+func (v *View) GetCurrentSequence(db, viewName string) (*repository.CurrentSequence, error) {
+	sequenceTable := db + ".current_sequences"
+	fullView := db + "." + viewName
+	return repository.LatestSequence(v.Db, sequenceTable, fullView)
+}
+
 func (v *View) ClearView(db, viewName string) error {
 	truncateView := db + "." + viewName
 	sequenceTable := db + ".current_sequences"

internal/admin/repository/eventsourcing/view/user.go

@@ -5,6 +5,7 @@ import (
 	"github.com/caos/zitadel/internal/user/repository/view"
 	"github.com/caos/zitadel/internal/user/repository/view/model"
 	"github.com/caos/zitadel/internal/view/repository"
+	"time"
 )
 
 const (
@@ -39,39 +40,43 @@ func (v *View) UserMfas(userID string) ([]*usr_model.MultiFactor, error) {
 	return view.UserMfas(v.Db, userTable, userID)
 }
 
-func (v *View) PutUsers(user []*model.UserView, sequence uint64) error {
+func (v *View) PutUsers(user []*model.UserView, sequence uint64, eventTimestamp time.Time) error {
 	err := view.PutUsers(v.Db, userTable, user...)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedUserSequence(sequence)
+	return v.ProcessedUserSequence(sequence, eventTimestamp)
 }
 
-func (v *View) PutUser(user *model.UserView, sequence uint64) error {
+func (v *View) PutUser(user *model.UserView, sequence uint64, eventTimestamp time.Time) error {
 	err := view.PutUser(v.Db, userTable, user)
 	if err != nil {
 		return err
 	}
 	if sequence != 0 {
-		return v.ProcessedUserSequence(sequence)
+		return v.ProcessedUserSequence(sequence, eventTimestamp)
 	}
 	return nil
 }
 
-func (v *View) DeleteUser(userID string, eventSequence uint64) error {
+func (v *View) DeleteUser(userID string, eventSequence uint64, eventTimestamp time.Time) error {
 	err := view.DeleteUser(v.Db, userTable, userID)
 	if err != nil {
 		return nil
 	}
-	return v.ProcessedUserSequence(eventSequence)
+	return v.ProcessedUserSequence(eventSequence, eventTimestamp)
 }
 
 func (v *View) GetLatestUserSequence() (*repository.CurrentSequence, error) {
 	return v.latestSequence(userTable)
 }
 
-func (v *View) ProcessedUserSequence(eventSequence uint64) error {
-	return v.saveCurrentSequence(userTable, eventSequence)
+func (v *View) ProcessedUserSequence(eventSequence uint64, eventTimestamp time.Time) error {
+	return v.saveCurrentSequence(userTable, eventSequence, eventTimestamp)
+}
+
+func (v *View) UpdateUserSpoolerRunTimestamp() error {
+	return v.updateSpoolerRunSequence(userTable)
 }
 
 func (v *View) GetLatestUserFailedEvent(sequence uint64) (*repository.FailedEvent, error) {

internal/api/api.go

@@ -2,6 +2,12 @@ package api
 
 import (
 	"context"
+	admin_es "github.com/caos/zitadel/internal/admin/repository/eventsourcing"
+	auth_es "github.com/caos/zitadel/internal/auth/repository/eventsourcing"
+	"github.com/caos/zitadel/internal/telemetry/metrics"
+	"github.com/caos/zitadel/internal/telemetry/metrics/otel"
+	view_model "github.com/caos/zitadel/internal/view/model"
+	"go.opentelemetry.io/otel/api/metric"
 	"net/http"
 
 	"github.com/caos/logging"
@@ -16,7 +22,7 @@ import (
 	"github.com/caos/zitadel/internal/config/systemdefaults"
 	"github.com/caos/zitadel/internal/errors"
 	iam_model "github.com/caos/zitadel/internal/iam/model"
-	"github.com/caos/zitadel/internal/tracing"
+	"github.com/caos/zitadel/internal/telemetry/tracing"
 )
 
 type Config struct {
@@ -30,19 +36,33 @@ type API struct {
 	verifier       *authz.TokenVerifier
 	serverPort     string
 	health         health
+	auth           auth
+	admin          admin
 }
+
 type health interface {
 	Health(ctx context.Context) error
 	IamByID(ctx context.Context) (*iam_model.IAM, error)
 	VerifierClientID(ctx context.Context, appName string) (string, error)
 }
 
-func Create(config Config, authZ authz.Config, authZRepo *authz_es.EsRepository, sd systemdefaults.SystemDefaults) *API {
+type auth interface {
+	ActiveUserSessionCount() int64
+}
+
+type admin interface {
+	GetViews() ([]*view_model.View, error)
+	GetSpoolerDiv(database, viewName string) int64
+}
+
+func Create(config Config, authZ authz.Config, authZRepo *authz_es.EsRepository, authRepo *auth_es.EsRepository, adminRepo *admin_es.EsRepository, sd systemdefaults.SystemDefaults) *API {
 	api := &API{
 		serverPort: config.GRPC.ServerPort,
 	}
 	api.verifier = authz.Start(authZRepo)
 	api.health = authZRepo
+	api.auth = authRepo
+	api.admin = adminRepo
 	api.grpcServer = server.CreateServer(api.verifier, authZ, sd.DefaultLanguage)
 	api.gatewayHandler = server.CreateGatewayHandler(config.GRPC)
 	api.RegisterHandler("", api.healthHandler())
@@ -92,6 +112,7 @@ func (a *API) healthHandler() http.Handler {
 	handler.HandleFunc("/ready", handleReadiness(checks))
 	handler.HandleFunc("/validate", handleValidate(checks))
 	handler.HandleFunc("/clientID", a.handleClientID)
+	handler.Handle("/metrics", a.handleMetrics())
 
 	return handler
 }
@@ -132,6 +153,48 @@ func (a *API) handleClientID(w http.ResponseWriter, r *http.Request) {
 	http_util.MarshalJSON(w, id, nil, http.StatusOK)
 }
 
+func (a *API) handleMetrics() http.Handler {
+	a.registerActiveSessionCounters()
+	a.registerSpoolerDivCounters()
+	return metrics.GetExporter()
+}
+
+func (a *API) registerActiveSessionCounters() {
+	metrics.RegisterValueObserver(
+		metrics.ActiveSessionCounter,
+		metrics.ActiveSessionCounterDescription,
+		func(ctx context.Context, result metric.Int64ObserverResult) {
+			result.Observe(
+				a.auth.ActiveUserSessionCount(),
+			)
+		},
+	)
+}
+
+func (a *API) registerSpoolerDivCounters() {
+	views, err := a.admin.GetViews()
+	if err != nil {
+		logging.Log("API-3M8sd").WithError(err).Error("could not read views for metrics")
+		return
+	}
+	metrics.RegisterValueObserver(
+		metrics.SpoolerDivCounter,
+		metrics.SpoolerDivCounterDescription,
+		func(ctx context.Context, result metric.Int64ObserverResult) {
+			for _, view := range views {
+				labels := map[string]interface{}{
+					metrics.Database: view.Database,
+					metrics.ViewName: view.ViewName,
+				}
+				result.Observe(
+					a.admin.GetSpoolerDiv(view.Database, view.ViewName),
+					otel.MapToKeyValue(labels)...,
+				)
+			}
+		},
+	)
+}
+
 type ValidationFunction func(ctx context.Context) error
 
 func validate(ctx context.Context, validations []ValidationFunction) []error {

internal/api/authz/authorization.go

@@ -7,7 +7,7 @@ import (
 	"strings"
 
 	"github.com/caos/zitadel/internal/errors"
-	"github.com/caos/zitadel/internal/tracing"
+	"github.com/caos/zitadel/internal/telemetry/tracing"
 )
 
 const (

internal/api/authz/context.go

@@ -6,7 +6,7 @@ import (
 	"github.com/caos/zitadel/internal/api/grpc"
 	http_util "github.com/caos/zitadel/internal/api/http"
 	"github.com/caos/zitadel/internal/errors"
-	"github.com/caos/zitadel/internal/tracing"
+	"github.com/caos/zitadel/internal/telemetry/tracing"
 )
 
 type key int

internal/api/authz/permissions.go

@@ -4,7 +4,7 @@ import (
 	"context"
 
 	"github.com/caos/zitadel/internal/errors"
-	"github.com/caos/zitadel/internal/tracing"
+	"github.com/caos/zitadel/internal/telemetry/tracing"
 )
 
 func getUserMethodPermissions(ctx context.Context, t *TokenVerifier, requiredPerm string, authConfig Config) (_ context.Context, _ []string, err error) {

internal/api/authz/token.go

@@ -6,7 +6,7 @@ import (
 	"sync"
 
 	caos_errs "github.com/caos/zitadel/internal/errors"
-	"github.com/caos/zitadel/internal/tracing"
+	"github.com/caos/zitadel/internal/telemetry/tracing"
 )
 
 const (

internal/api/grpc/admin/administrator.go

@@ -10,7 +10,7 @@ import (
 )
 
 func (s *Server) GetViews(ctx context.Context, _ *empty.Empty) (_ *admin.Views, err error) {
-	views, err := s.administrator.GetViews(ctx)
+	views, err := s.administrator.GetViews()
 	if err != nil {
 		return nil, err
 	}

internal/api/grpc/admin/administrator_converter.go

@@ -26,14 +26,17 @@ func failedEventsFromModel(failedEvents []*view_model.FailedEvent) []*admin.Fail
 }
 
 func viewFromModel(view *view_model.View) *admin.View {
-	timestamp, err := ptypes.TimestampProto(view.CurrentTimestamp)
+	eventTimestamp, err := ptypes.TimestampProto(view.EventTimestamp)
+	logging.Log("GRPC-KSo03").OnError(err).Debug("unable to parse timestamp")
+	lastSpool, err := ptypes.TimestampProto(view.EventTimestamp)
 	logging.Log("GRPC-KSo03").OnError(err).Debug("unable to parse timestamp")
 
 	return &admin.View{
-		Database:          view.Database,
-		ViewName:          view.ViewName,
-		ProcessedSequence: view.CurrentSequence,
-		ViewTimestamp:     timestamp,
+		Database:                 view.Database,
+		ViewName:                 view.ViewName,
+		ProcessedSequence:        view.CurrentSequence,
+		EventTimestamp:           eventTimestamp,
+		LastSuccessfulSpoolerRun: lastSpool,
 	}
 }
 

internal/api/grpc/admin/probes.go

@@ -2,7 +2,6 @@ package admin
 
 import (
 	"context"
-
 	"github.com/golang/protobuf/ptypes/empty"
 )
 

internal/api/grpc/auth/user_converter.go

@@ -12,7 +12,7 @@ import (
 
 	"github.com/caos/zitadel/internal/api/authz"
 	"github.com/caos/zitadel/internal/eventstore/models"
-	"github.com/caos/zitadel/internal/tracing"
+	"github.com/caos/zitadel/internal/telemetry/tracing"
 	usr_model "github.com/caos/zitadel/internal/user/model"
 	"github.com/caos/zitadel/pkg/grpc/auth"
 	"github.com/caos/zitadel/pkg/grpc/message"

internal/api/grpc/server/gateway.go

@@ -14,7 +14,7 @@ import (
 	client_middleware "github.com/caos/zitadel/internal/api/grpc/client/middleware"
 	http_util "github.com/caos/zitadel/internal/api/http"
 	http_mw "github.com/caos/zitadel/internal/api/http/middleware"
-	"github.com/caos/zitadel/internal/tracing"
+	"github.com/caos/zitadel/internal/telemetry/tracing"
 )
 
 const (
@@ -129,7 +129,8 @@ func createDialOptions(g Gateway) []grpc.DialOption {
 }
 
 func addInterceptors(handler http.Handler, g Gateway) http.Handler {
-	handler = http_mw.DefaultTraceHandler(handler)
+	handler = http_mw.DefaultMetricsHandler(handler)
+	handler = http_mw.DefaultTelemetryHandler(handler)
 	handler = http_mw.NoCacheInterceptor(handler)
 	if interceptor, ok := g.(grpcGatewayCustomInterceptor); ok {
 		handler = interceptor.GatewayHTTPInterceptor(handler)

internal/api/grpc/server/middleware/auth_interceptor.go

@@ -10,7 +10,7 @@ import (
 	"github.com/caos/zitadel/internal/api/authz"
 	grpc_util "github.com/caos/zitadel/internal/api/grpc"
 	"github.com/caos/zitadel/internal/api/http"
-	"github.com/caos/zitadel/internal/tracing"
+	"github.com/caos/zitadel/internal/telemetry/tracing"
 )
 
 func AuthorizationInterceptor(verifier *authz.TokenVerifier, authConfig authz.Config) grpc.UnaryServerInterceptor {

internal/api/grpc/server/middleware/metrics_interceptor.go

@@ -0,0 +1,86 @@
+package middleware
+
+import (
+	"context"
+	"strings"
+
+	"github.com/grpc-ecosystem/grpc-gateway/runtime"
+	"google.golang.org/grpc"
+	"google.golang.org/grpc/status"
+
+	_ "github.com/caos/zitadel/internal/statik"
+	"github.com/caos/zitadel/internal/telemetry/metrics"
+)
+
+const (
+	GrpcMethod                         = "grpc_method"
+	ReturnCode                         = "return_code"
+	GrpcRequestCounter                 = "grpc.server.request_counter"
+	GrpcRequestCounterDescription      = "Grpc request counter"
+	TotalGrpcRequestCounter            = "grpc.server.total_request_counter"
+	TotalGrpcRequestCounterDescription = "Total grpc request counter"
+	GrpcStatusCodeCounter              = "grpc.server.grpc_status_code"
+	GrpcStatusCodeCounterDescription   = "Grpc status code counter"
+)
+
+func MetricsHandler(metricTypes []metrics.MetricType, ignoredMethodSuffixes ...string) grpc.UnaryServerInterceptor {
+	return func(ctx context.Context, req interface{}, info *grpc.UnaryServerInfo, handler grpc.UnaryHandler) (interface{}, error) {
+		return RegisterMetrics(ctx, req, info, handler, metricTypes, ignoredMethodSuffixes...)
+	}
+}
+
+func RegisterMetrics(ctx context.Context, req interface{}, info *grpc.UnaryServerInfo, handler grpc.UnaryHandler, metricTypes []metrics.MetricType, ignoredMethodSuffixes ...string) (_ interface{}, err error) {
+	if len(metricTypes) == 0 {
+		return handler(ctx, req)
+	}
+
+	for _, ignore := range ignoredMethodSuffixes {
+		if strings.HasSuffix(info.FullMethod, ignore) {
+			return handler(ctx, req)
+		}
+	}
+
+	resp, err := handler(ctx, req)
+	if containsMetricsMethod(metrics.MetricTypeRequestCount, metricTypes) {
+		RegisterGrpcRequestCounter(ctx, info)
+	}
+	if containsMetricsMethod(metrics.MetricTypeTotalCount, metricTypes) {
+		RegisterGrpcTotalRequestCounter(ctx)
+	}
+	if containsMetricsMethod(metrics.MetricTypeStatusCode, metricTypes) {
+		RegisterGrpcRequestCodeCounter(ctx, info, err)
+	}
+	return resp, err
+}
+
+func RegisterGrpcRequestCounter(ctx context.Context, info *grpc.UnaryServerInfo) {
+	var labels = map[string]interface{}{
+		GrpcMethod: info.FullMethod,
+	}
+	metrics.RegisterCounter(GrpcRequestCounter, GrpcRequestCounterDescription)
+	metrics.AddCount(ctx, GrpcRequestCounter, 1, labels)
+}
+
+func RegisterGrpcTotalRequestCounter(ctx context.Context) {
+	metrics.RegisterCounter(TotalGrpcRequestCounter, TotalGrpcRequestCounterDescription)
+	metrics.AddCount(ctx, TotalGrpcRequestCounter, 1, nil)
+}
+
+func RegisterGrpcRequestCodeCounter(ctx context.Context, info *grpc.UnaryServerInfo, err error) {
+	statusCode := status.Code(err)
+	var labels = map[string]interface{}{
+		GrpcMethod: info.FullMethod,
+		ReturnCode: runtime.HTTPStatusFromCode(statusCode),
+	}
+	metrics.RegisterCounter(GrpcStatusCodeCounter, GrpcStatusCodeCounterDescription)
+	metrics.AddCount(ctx, GrpcStatusCodeCounter, 1, labels)
+}
+
+func containsMetricsMethod(metricType metrics.MetricType, metricTypes []metrics.MetricType) bool {
+	for _, m := range metricTypes {
+		if m == metricType {
+			return true
+		}
+	}
+	return false
+}

internal/api/grpc/server/probes.go

@@ -9,7 +9,7 @@ import (
 
 	"github.com/caos/zitadel/internal/errors"
 	"github.com/caos/zitadel/internal/proto"
-	"github.com/caos/zitadel/internal/tracing"
+	"github.com/caos/zitadel/internal/telemetry/tracing"
 )
 
 type ValidationFunction func(ctx context.Context) error

internal/api/grpc/server/server.go

@@ -2,6 +2,8 @@ package server
 
 import (
 	"context"
+	grpc_api "github.com/caos/zitadel/internal/api/grpc"
+	"github.com/caos/zitadel/internal/telemetry/metrics"
 
 	"github.com/caos/logging"
 	grpc_middleware "github.com/grpc-ecosystem/go-grpc-middleware"
@@ -11,7 +13,7 @@ import (
 	"github.com/caos/zitadel/internal/api/authz"
 	"github.com/caos/zitadel/internal/api/grpc/server/middleware"
 	"github.com/caos/zitadel/internal/api/http"
-	"github.com/caos/zitadel/internal/tracing"
+	"github.com/caos/zitadel/internal/telemetry/tracing"
 )
 
 const (
@@ -27,10 +29,12 @@ type Server interface {
 }
 
 func CreateServer(verifier *authz.TokenVerifier, authConfig authz.Config, lang language.Tag) *grpc.Server {
+	metricTypes := []metrics.MetricType{metrics.MetricTypeTotalCount, metrics.MetricTypeRequestCount, metrics.MetricTypeStatusCode}
 	return grpc.NewServer(
 		grpc.UnaryInterceptor(
 			grpc_middleware.ChainUnaryServer(
 				middleware.DefaultTracingServer(),
+				middleware.MetricsHandler(metricTypes, grpc_api.Probes...),
 				middleware.ErrorHandler(),
 				middleware.AuthorizationInterceptor(verifier, authConfig),
 				middleware.TranslationHandler(lang),

internal/api/http/middleware/metrics_interceptor.go

@@ -0,0 +1,19 @@
+package middleware
+
+import (
+	"github.com/caos/zitadel/internal/telemetry/metrics"
+	"net/http"
+
+	http_utils "github.com/caos/zitadel/internal/api/http"
+)
+
+func DefaultMetricsHandler(handler http.Handler) http.Handler {
+	metricTypes := []metrics.MetricType{metrics.MetricTypeTotalCount}
+	return MetricsHandler(metricTypes, http_utils.Probes...)(handler)
+}
+
+func MetricsHandler(metricTypes []metrics.MetricType, ignoredMethods ...string) func(http.Handler) http.Handler {
+	return func(handler http.Handler) http.Handler {
+		return metrics.NewMetricsHandler(handler, metricTypes, ignoredMethods...)
+	}
+}

internal/api/http/middleware/telemetry_interceptor.go

@@ -0,0 +1,18 @@
+package middleware
+
+import (
+	"github.com/caos/zitadel/internal/telemetry"
+	"net/http"
+
+	http_utils "github.com/caos/zitadel/internal/api/http"
+)
+
+func DefaultTelemetryHandler(handler http.Handler) http.Handler {
+	return TelemetryHandler(http_utils.Probes...)(handler)
+}
+
+func TelemetryHandler(ignoredMethods ...string) func(http.Handler) http.Handler {
+	return func(handler http.Handler) http.Handler {
+		return telemetry.TelemetryHandler(handler, ignoredMethods...)
+	}
+}

internal/api/http/middleware/trace_interceptor.go

@@ -1,18 +0,0 @@
-package middleware
-
-import (
-	"net/http"
-
-	http_utils "github.com/caos/zitadel/internal/api/http"
-	"github.com/caos/zitadel/internal/tracing"
-)
-
-func DefaultTraceHandler(handler http.Handler) http.Handler {
-	return TraceHandler(http_utils.Probes...)(handler)
-}
-
-func TraceHandler(ignoredMethods ...string) func(http.Handler) http.Handler {
-	return func(handler http.Handler) http.Handler {
-		return tracing.TraceHandler(handler, ignoredMethods...)
-	}
-}

internal/api/http/server.go

@@ -5,7 +5,7 @@ import (
 	"net/http"
 
 	"github.com/caos/logging"
-	"github.com/caos/zitadel/internal/tracing"
+	"github.com/caos/zitadel/internal/telemetry/tracing"
 )
 
 func Serve(ctx context.Context, handler http.Handler, port, servername string) {

internal/api/oidc/auth_request.go

@@ -13,7 +13,7 @@ import (
 	"github.com/caos/zitadel/internal/api/http/middleware"
 	"github.com/caos/zitadel/internal/errors"
 	proj_model "github.com/caos/zitadel/internal/project/model"
-	"github.com/caos/zitadel/internal/tracing"
+	"github.com/caos/zitadel/internal/telemetry/tracing"
 	grant_model "github.com/caos/zitadel/internal/usergrant/model"
 )
 

internal/api/oidc/client.go

@@ -16,7 +16,7 @@ import (
 	"github.com/caos/zitadel/internal/crypto"
 	"github.com/caos/zitadel/internal/errors"
 	proj_model "github.com/caos/zitadel/internal/project/model"
-	"github.com/caos/zitadel/internal/tracing"
+	"github.com/caos/zitadel/internal/telemetry/tracing"
 	user_model "github.com/caos/zitadel/internal/user/model"
 	grant_model "github.com/caos/zitadel/internal/usergrant/model"
 )

internal/api/oidc/op.go

@@ -2,6 +2,7 @@ package oidc
 
 import (
 	"context"
+	"github.com/caos/zitadel/internal/telemetry/metrics"
 	"time"
 
 	"github.com/caos/logging"
@@ -12,7 +13,7 @@ import (
 	"github.com/caos/zitadel/internal/auth/repository"
 	"github.com/caos/zitadel/internal/config/types"
 	"github.com/caos/zitadel/internal/id"
-	"github.com/caos/zitadel/internal/tracing"
+	"github.com/caos/zitadel/internal/telemetry/tracing"
 )
 
 type OPHandlerConfig struct {
@@ -55,12 +56,14 @@ func NewProvider(ctx context.Context, config OPHandlerConfig, repo repository.Re
 	cookieHandler, err := middleware.NewUserAgentHandler(config.UserAgentCookieConfig, id.SonyFlakeGenerator, localDevMode)
 	logging.Log("OIDC-sd4fd").OnError(err).WithField("traceID", tracing.TraceIDFromCtx(ctx)).Panic("cannot user agent handler")
 	config.OPConfig.CodeMethodS256 = true
+	metricTypes := []metrics.MetricType{metrics.MetricTypeRequestCount, metrics.MetricTypeStatusCode, metrics.MetricTypeTotalCount}
 	provider, err := op.NewOpenIDProvider(
 		ctx,
 		config.OPConfig,
 		newStorage(config.StorageConfig, repo),
 		op.WithHttpInterceptors(
-			middleware.TraceHandler(),
+			middleware.MetricsHandler(metricTypes),
+			middleware.TelemetryHandler(),
 			middleware.NoCacheInterceptor,
 			cookieHandler,
 			http_utils.CopyHeadersToContext,

internal/auth/repository/eventsourcing/eventstore/auth_request.go

@@ -21,7 +21,7 @@ import (
 	org_event "github.com/caos/zitadel/internal/org/repository/eventsourcing"
 	org_view_model "github.com/caos/zitadel/internal/org/repository/view/model"
 	project_view_model "github.com/caos/zitadel/internal/project/repository/view/model"
-	"github.com/caos/zitadel/internal/tracing"
+	"github.com/caos/zitadel/internal/telemetry/tracing"
 	user_model "github.com/caos/zitadel/internal/user/model"
 	user_event "github.com/caos/zitadel/internal/user/repository/eventsourcing"
 	es_model "github.com/caos/zitadel/internal/user/repository/eventsourcing/model"

internal/auth/repository/eventsourcing/eventstore/org.go

@@ -9,7 +9,7 @@ import (
 	"github.com/caos/zitadel/internal/errors"
 	iam_model "github.com/caos/zitadel/internal/iam/model"
 	iam_view_model "github.com/caos/zitadel/internal/iam/repository/view/model"
-	"github.com/caos/zitadel/internal/tracing"
+	"github.com/caos/zitadel/internal/telemetry/tracing"
 
 	auth_model "github.com/caos/zitadel/internal/auth/model"
 	auth_view "github.com/caos/zitadel/internal/auth/repository/eventsourcing/view"
@@ -50,7 +50,7 @@ func (repo *OrgRepository) SearchOrgs(ctx context.Context, request *org_model.Or
 	}
 	if err == nil {
 		result.Sequence = sequence.CurrentSequence
-		result.Timestamp = sequence.CurrentTimestamp
+		result.Timestamp = sequence.LastSuccessfulSpoolerRun
 	}
 	return result, nil
 }

internal/auth/repository/eventsourcing/eventstore/token.go

@@ -3,17 +3,18 @@ package eventstore
 import (
 	"context"
 	"strings"
-	"time"
 
 	"github.com/caos/logging"
-	"github.com/caos/zitadel/internal/auth/repository/eventsourcing/view"
 	auth_req_model "github.com/caos/zitadel/internal/auth_request/model"
 	"github.com/caos/zitadel/internal/errors"
 	"github.com/caos/zitadel/internal/eventstore/models"
-	"github.com/caos/zitadel/internal/tracing"
+	"github.com/caos/zitadel/internal/telemetry/tracing"
 	usr_model "github.com/caos/zitadel/internal/user/model"
 	user_event "github.com/caos/zitadel/internal/user/repository/eventsourcing"
 	"github.com/caos/zitadel/internal/user/repository/view/model"
+	"time"
+
+	"github.com/caos/zitadel/internal/auth/repository/eventsourcing/view"
 )
 
 type TokenRepo struct {

internal/auth/repository/eventsourcing/eventstore/user.go

@@ -16,7 +16,7 @@ import (
 	"github.com/caos/zitadel/internal/eventstore/sdk"
 	org_model "github.com/caos/zitadel/internal/org/model"
 	org_event "github.com/caos/zitadel/internal/org/repository/eventsourcing"
-	"github.com/caos/zitadel/internal/tracing"
+	"github.com/caos/zitadel/internal/telemetry/tracing"
 	"github.com/caos/zitadel/internal/user/model"
 	user_event "github.com/caos/zitadel/internal/user/repository/eventsourcing"
 	usr_model "github.com/caos/zitadel/internal/user/repository/eventsourcing/model"
@@ -124,7 +124,7 @@ func (repo *UserRepo) SearchMyExternalIDPs(ctx context.Context, request *model.E
 	}
 	if seqErr == nil {
 		result.Sequence = sequence.CurrentSequence
-		result.Timestamp = sequence.CurrentTimestamp
+		result.Timestamp = sequence.LastSuccessfulSpoolerRun
 	}
 	return result, nil
 }

internal/auth/repository/eventsourcing/eventstore/user_grant.go

@@ -12,7 +12,7 @@ import (
 	global_model "github.com/caos/zitadel/internal/model"
 	org_model "github.com/caos/zitadel/internal/org/model"
 	org_view_model "github.com/caos/zitadel/internal/org/repository/view/model"
-	"github.com/caos/zitadel/internal/tracing"
+	"github.com/caos/zitadel/internal/telemetry/tracing"
 	user_model "github.com/caos/zitadel/internal/user/model"
 	user_view_model "github.com/caos/zitadel/internal/user/repository/view/model"
 	grant_model "github.com/caos/zitadel/internal/usergrant/model"
@@ -44,7 +44,7 @@ func (repo *UserGrantRepo) SearchMyUserGrants(ctx context.Context, request *gran
 	}
 	if err == nil {
 		result.Sequence = sequence.CurrentSequence
-		result.Timestamp = sequence.CurrentTimestamp
+		result.Timestamp = sequence.LastSuccessfulSpoolerRun
 	}
 	return result, nil
 }

internal/auth/repository/eventsourcing/eventstore/user_session.go

@@ -20,3 +20,8 @@ func (repo *UserSessionRepo) GetMyUserSessions(ctx context.Context) ([]*usr_mode
 	}
 	return model.UserSessionsToModel(userSessions), nil
 }
+
+func (repo *UserSessionRepo) ActiveUserSessionCount() int64 {
+	userSessions, _ := repo.View.ActiveUserSessions()
+	return int64(len(userSessions))
+}

internal/auth/repository/eventsourcing/handler/application.go

@@ -22,12 +22,12 @@ const (
 	applicationTable = "auth.applications"
 )
 
-func (p *Application) ViewModel() string {
+func (a *Application) ViewModel() string {
 	return applicationTable
 }
 
-func (p *Application) EventQuery() (*models.SearchQuery, error) {
-	sequence, err := p.view.GetLatestApplicationSequence()
+func (a *Application) EventQuery() (*models.SearchQuery, error) {
+	sequence, err := a.view.GetLatestApplicationSequence()
 	if err != nil {
 		return nil, err
 	}
@@ -65,33 +65,37 @@ func (a *Application) Reduce(event *models.Event) (err error) {
 		if err != nil {
 			return err
 		}
-		return a.view.DeleteApplication(app.ID, event.Sequence)
+		return a.view.DeleteApplication(app.ID, event.Sequence, event.CreationDate)
 	case es_model.ProjectChanged:
 		apps, err := a.view.ApplicationsByProjectID(event.AggregateID)
 		if err != nil {
 			return err
 		}
 		if len(apps) == 0 {
-			return a.view.ProcessedApplicationSequence(event.Sequence)
+			return a.view.ProcessedApplicationSequence(event.Sequence, event.CreationDate)
 		}
 		for _, app := range apps {
 			if err := app.AppendEvent(event); err != nil {
 				return err
 			}
 		}
-		return a.view.PutApplications(apps, event.Sequence)
+		return a.view.PutApplications(apps, event.Sequence, event.CreationDate)
 	case es_model.ProjectRemoved:
 		return a.view.DeleteApplicationsByProjectID(event.AggregateID)
 	default:
-		return a.view.ProcessedApplicationSequence(event.Sequence)
+		return a.view.ProcessedApplicationSequence(event.Sequence, event.CreationDate)
 	}
 	if err != nil {
 		return err
 	}
-	return a.view.PutApplication(app)
+	return a.view.PutApplication(app, event.CreationDate)
 }
 
-func (p *Application) OnError(event *models.Event, spoolerError error) error {
+func (a *Application) OnError(event *models.Event, spoolerError error) error {
 	logging.LogWithFields("SPOOL-ls9ew", "id", event.AggregateID).WithError(spoolerError).Warn("something went wrong in project app handler")
-	return spooler.HandleError(event, spoolerError, p.view.GetLatestApplicationFailedEvent, p.view.ProcessedApplicationFailedEvent, p.view.ProcessedApplicationSequence, p.errorCountUntilSkip)
+	return spooler.HandleError(event, spoolerError, a.view.GetLatestApplicationFailedEvent, a.view.ProcessedApplicationFailedEvent, a.view.ProcessedApplicationSequence, a.errorCountUntilSkip)
+}
+
+func (a *Application) OnSuccess() error {
+	return spooler.HandleSuccess(a.view.UpdateApplicationSpoolerRunTimestamp)
 }

internal/auth/repository/eventsourcing/handler/idp_config.go

@@ -19,12 +19,12 @@ const (
 	idpConfigTable = "auth.idp_configs"
 )
 
-func (m *IDPConfig) ViewModel() string {
+func (i *IDPConfig) ViewModel() string {
 	return idpConfigTable
 }
 
-func (m *IDPConfig) EventQuery() (*models.SearchQuery, error) {
-	sequence, err := m.view.GetLatestIDPConfigSequence()
+func (i *IDPConfig) EventQuery() (*models.SearchQuery, error) {
+	sequence, err := i.view.GetLatestIDPConfigSequence()
 	if err != nil {
 		return nil, err
 	}
@@ -33,17 +33,17 @@ func (m *IDPConfig) EventQuery() (*models.SearchQuery, error) {
 		LatestSequenceFilter(sequence.CurrentSequence), nil
 }
 
-func (m *IDPConfig) Reduce(event *models.Event) (err error) {
+func (i *IDPConfig) Reduce(event *models.Event) (err error) {
 	switch event.AggregateType {
 	case model.OrgAggregate:
-		err = m.processIdpConfig(iam_model.IDPProviderTypeOrg, event)
+		err = i.processIdpConfig(iam_model.IDPProviderTypeOrg, event)
 	case iam_es_model.IAMAggregate:
-		err = m.processIdpConfig(iam_model.IDPProviderTypeSystem, event)
+		err = i.processIdpConfig(iam_model.IDPProviderTypeSystem, event)
 	}
 	return err
 }
 
-func (m *IDPConfig) processIdpConfig(providerType iam_model.IDPProviderType, event *models.Event) (err error) {
+func (i *IDPConfig) processIdpConfig(providerType iam_model.IDPProviderType, event *models.Event) (err error) {
 	idp := new(iam_view_model.IDPConfigView)
 	switch event.Type {
 	case model.IDPConfigAdded,
@@ -56,7 +56,7 @@ func (m *IDPConfig) processIdpConfig(providerType iam_model.IDPProviderType, eve
 		if err != nil {
 			return err
 		}
-		idp, err = m.view.IDPConfigByID(idp.IDPConfigID)
+		idp, err = i.view.IDPConfigByID(idp.IDPConfigID)
 		if err != nil {
 			return err
 		}
@@ -66,17 +66,21 @@ func (m *IDPConfig) processIdpConfig(providerType iam_model.IDPProviderType, eve
 		if err != nil {
 			return err
 		}
-		return m.view.DeleteIDPConfig(idp.IDPConfigID, event.Sequence)
+		return i.view.DeleteIDPConfig(idp.IDPConfigID, event.Sequence, event.CreationDate)
 	default:
-		return m.view.ProcessedIDPConfigSequence(event.Sequence)
+		return i.view.ProcessedIDPConfigSequence(event.Sequence, event.CreationDate)
 	}
 	if err != nil {
 		return err
 	}
-	return m.view.PutIDPConfig(idp, idp.Sequence)
+	return i.view.PutIDPConfig(idp, idp.Sequence, event.CreationDate)
 }
 
-func (m *IDPConfig) OnError(event *models.Event, err error) error {
+func (i *IDPConfig) OnError(event *models.Event, err error) error {
 	logging.LogWithFields("SPOOL-Ejf8s", "id", event.AggregateID).WithError(err).Warn("something went wrong in idp config handler")
-	return spooler.HandleError(event, err, m.view.GetLatestIDPConfigFailedEvent, m.view.ProcessedIDPConfigFailedEvent, m.view.ProcessedIDPConfigSequence, m.errorCountUntilSkip)
+	return spooler.HandleError(event, err, i.view.GetLatestIDPConfigFailedEvent, i.view.ProcessedIDPConfigFailedEvent, i.view.ProcessedIDPConfigSequence, i.errorCountUntilSkip)
+}
+
+func (i *IDPConfig) OnSuccess() error {
+	return spooler.HandleSuccess(i.view.UpdateIDPConfigSpoolerRunTimestamp)
 }

internal/auth/repository/eventsourcing/handler/idp_providers.go

@@ -27,12 +27,12 @@ const (
 	idpProviderTable = "auth.idp_providers"
 )
 
-func (m *IDPProvider) ViewModel() string {
+func (i *IDPProvider) ViewModel() string {
 	return idpProviderTable
 }
 
-func (m *IDPProvider) EventQuery() (*models.SearchQuery, error) {
-	sequence, err := m.view.GetLatestIDPProviderSequence()
+func (i *IDPProvider) EventQuery() (*models.SearchQuery, error) {
+	sequence, err := i.view.GetLatestIDPProviderSequence()
 	if err != nil {
 		return nil, err
 	}
@@ -41,15 +41,15 @@ func (m *IDPProvider) EventQuery() (*models.SearchQuery, error) {
 		LatestSequenceFilter(sequence.CurrentSequence), nil
 }
 
-func (m *IDPProvider) Reduce(event *models.Event) (err error) {
+func (i *IDPProvider) Reduce(event *models.Event) (err error) {
 	switch event.AggregateType {
 	case model.IAMAggregate, org_es_model.OrgAggregate:
-		err = m.processIdpProvider(event)
+		err = i.processIdpProvider(event)
 	}
 	return err
 }
 
-func (m *IDPProvider) processIdpProvider(event *models.Event) (err error) {
+func (i *IDPProvider) processIdpProvider(event *models.Event) (err error) {
 	provider := new(iam_view_model.IDPProviderView)
 	switch event.Type {
 	case model.LoginPolicyIDPProviderAdded, org_es_model.LoginPolicyIDPProviderAdded:
@@ -57,71 +57,75 @@ func (m *IDPProvider) processIdpProvider(event *models.Event) (err error) {
 		if err != nil {
 			return err
 		}
-		err = m.fillData(provider)
+		err = i.fillData(provider)
 	case model.LoginPolicyIDPProviderRemoved, model.LoginPolicyIDPProviderCascadeRemoved,
 		org_es_model.LoginPolicyIDPProviderRemoved, org_es_model.LoginPolicyIDPProviderCascadeRemoved:
 		err = provider.SetData(event)
 		if err != nil {
 			return err
 		}
-		return m.view.DeleteIDPProvider(event.AggregateID, provider.IDPConfigID, event.Sequence)
+		return i.view.DeleteIDPProvider(event.AggregateID, provider.IDPConfigID, event.Sequence, event.CreationDate)
 	case model.IDPConfigChanged, org_es_model.IDPConfigChanged:
 		esConfig := new(iam_view_model.IDPConfigView)
 		providerType := iam_model.IDPProviderTypeSystem
-		if event.AggregateID != m.systemDefaults.IamID {
+		if event.AggregateID != i.systemDefaults.IamID {
 			providerType = iam_model.IDPProviderTypeOrg
 		}
 		esConfig.AppendEvent(providerType, event)
-		providers, err := m.view.IDPProvidersByIDPConfigID(esConfig.IDPConfigID)
+		providers, err := i.view.IDPProvidersByIDPConfigID(esConfig.IDPConfigID)
 		if err != nil {
 			return err
 		}
 		config := new(iam_model.IDPConfig)
-		if event.AggregateID == m.systemDefaults.IamID {
-			config, err = m.iamEvents.GetIDPConfig(context.Background(), event.AggregateID, esConfig.IDPConfigID)
+		if event.AggregateID == i.systemDefaults.IamID {
+			config, err = i.iamEvents.GetIDPConfig(context.Background(), event.AggregateID, esConfig.IDPConfigID)
 		} else {
-			config, err = m.orgEvents.GetIDPConfig(context.Background(), event.AggregateID, esConfig.IDPConfigID)
+			config, err = i.orgEvents.GetIDPConfig(context.Background(), event.AggregateID, esConfig.IDPConfigID)
 		}
 		if err != nil {
 			return err
 		}
 		for _, provider := range providers {
-			m.fillConfigData(provider, config)
+			i.fillConfigData(provider, config)
 		}
-		return m.view.PutIDPProviders(event.Sequence, providers...)
+		return i.view.PutIDPProviders(event.Sequence, event.CreationDate, providers...)
 	case org_es_model.LoginPolicyRemoved:
-		return m.view.DeleteIDPProvidersByAggregateID(event.AggregateID, event.Sequence)
+		return i.view.DeleteIDPProvidersByAggregateID(event.AggregateID, event.Sequence, event.CreationDate)
 	default:
-		return m.view.ProcessedIDPProviderSequence(event.Sequence)
+		return i.view.ProcessedIDPProviderSequence(event.Sequence, event.CreationDate)
 	}
 	if err != nil {
 		return err
 	}
-	return m.view.PutIDPProvider(provider, provider.Sequence)
+	return i.view.PutIDPProvider(provider, provider.Sequence, event.CreationDate)
 }
 
-func (m *IDPProvider) fillData(provider *iam_view_model.IDPProviderView) (err error) {
+func (i *IDPProvider) fillData(provider *iam_view_model.IDPProviderView) (err error) {
 	var config *iam_model.IDPConfig
 	if provider.IDPProviderType == int32(iam_model.IDPProviderTypeSystem) {
-		config, err = m.iamEvents.GetIDPConfig(context.Background(), m.systemDefaults.IamID, provider.IDPConfigID)
+		config, err = i.iamEvents.GetIDPConfig(context.Background(), i.systemDefaults.IamID, provider.IDPConfigID)
 	} else {
-		config, err = m.orgEvents.GetIDPConfig(context.Background(), provider.AggregateID, provider.IDPConfigID)
+		config, err = i.orgEvents.GetIDPConfig(context.Background(), provider.AggregateID, provider.IDPConfigID)
 	}
 	if err != nil {
 		return err
 	}
-	m.fillConfigData(provider, config)
+	i.fillConfigData(provider, config)
 	return nil
 }
 
-func (m *IDPProvider) fillConfigData(provider *iam_view_model.IDPProviderView, config *iam_model.IDPConfig) {
+func (i *IDPProvider) fillConfigData(provider *iam_view_model.IDPProviderView, config *iam_model.IDPConfig) {
 	provider.Name = config.Name
 	provider.StylingType = int32(config.StylingType)
 	provider.IDPConfigType = int32(config.Type)
 	provider.IDPState = int32(config.State)
 }
 
-func (m *IDPProvider) OnError(event *models.Event, err error) error {
+func (i *IDPProvider) OnError(event *models.Event, err error) error {
 	logging.LogWithFields("SPOOL-Fjd89", "id", event.AggregateID).WithError(err).Warn("something went wrong in idp provider handler")
-	return spooler.HandleError(event, err, m.view.GetLatestIDPProviderFailedEvent, m.view.ProcessedIDPProviderFailedEvent, m.view.ProcessedIDPProviderSequence, m.errorCountUntilSkip)
+	return spooler.HandleError(event, err, i.view.GetLatestIDPProviderFailedEvent, i.view.ProcessedIDPProviderFailedEvent, i.view.ProcessedIDPProviderSequence, i.errorCountUntilSkip)
+}
+
+func (i *IDPProvider) OnSuccess() error {
+	return spooler.HandleSuccess(i.view.UpdateIDPProviderSpoolerRunTimestamp)
 }

internal/auth/repository/eventsourcing/handler/key.go

@@ -41,11 +41,11 @@ func (k *Key) Reduce(event *models.Event) error {
 			return err
 		}
 		if privateKey.Expiry.Before(time.Now()) && publicKey.Expiry.Before(time.Now()) {
-			return k.view.ProcessedKeySequence(event.Sequence)
+			return k.view.ProcessedKeySequence(event.Sequence, event.CreationDate)
 		}
-		return k.view.PutKeys(privateKey, publicKey, event.Sequence)
+		return k.view.PutKeys(privateKey, publicKey, event.Sequence, event.CreationDate)
 	default:
-		return k.view.ProcessedKeySequence(event.Sequence)
+		return k.view.ProcessedKeySequence(event.Sequence, event.CreationDate)
 	}
 }
 
@@ -53,3 +53,9 @@ func (k *Key) OnError(event *models.Event, err error) error {
 	logging.LogWithFields("SPOOL-GHa3a", "id", event.AggregateID).WithError(err).Warn("something went wrong in key handler")
 	return spooler.HandleError(event, err, k.view.GetLatestKeyFailedEvent, k.view.ProcessedKeyFailedEvent, k.view.ProcessedKeySequence, k.errorCountUntilSkip)
 }
+
+func (k *Key) OnSuccess() error {
+	err := spooler.HandleSuccess(k.view.UpdateKeySpoolerRunTimestamp)
+	logging.LogWithFields("SPOOL-vM9sd", "table", keyTable).OnError(err).Warn("could not process on success func")
+	return err
+}

internal/auth/repository/eventsourcing/handler/login_policy.go

@@ -19,12 +19,12 @@ const (
 	loginPolicyTable = "auth.login_policies"
 )
 
-func (m *LoginPolicy) ViewModel() string {
+func (p *LoginPolicy) ViewModel() string {
 	return loginPolicyTable
 }
 
-func (m *LoginPolicy) EventQuery() (*models.SearchQuery, error) {
-	sequence, err := m.view.GetLatestLoginPolicySequence()
+func (p *LoginPolicy) EventQuery() (*models.SearchQuery, error) {
+	sequence, err := p.view.GetLatestLoginPolicySequence()
 	if err != nil {
 		return nil, err
 	}
@@ -33,15 +33,15 @@ func (m *LoginPolicy) EventQuery() (*models.SearchQuery, error) {
 		LatestSequenceFilter(sequence.CurrentSequence), nil
 }
 
-func (m *LoginPolicy) Reduce(event *models.Event) (err error) {
+func (p *LoginPolicy) Reduce(event *models.Event) (err error) {
 	switch event.AggregateType {
 	case model.OrgAggregate, iam_es_model.IAMAggregate:
-		err = m.processLoginPolicy(event)
+		err = p.processLoginPolicy(event)
 	}
 	return err
 }
 
-func (m *LoginPolicy) processLoginPolicy(event *models.Event) (err error) {
+func (p *LoginPolicy) processLoginPolicy(event *models.Event) (err error) {
 	policy := new(iam_model.LoginPolicyView)
 	switch event.Type {
 	case iam_es_model.LoginPolicyAdded, model.LoginPolicyAdded:
@@ -51,23 +51,27 @@ func (m *LoginPolicy) processLoginPolicy(event *models.Event) (err error) {
 		iam_es_model.LoginPolicySecondFactorRemoved, model.LoginPolicySecondFactorRemoved,
 		iam_es_model.LoginPolicyMultiFactorAdded, model.LoginPolicyMultiFactorAdded,
 		iam_es_model.LoginPolicyMultiFactorRemoved, model.LoginPolicyMultiFactorRemoved:
-		policy, err = m.view.LoginPolicyByAggregateID(event.AggregateID)
+		policy, err = p.view.LoginPolicyByAggregateID(event.AggregateID)
 		if err != nil {
 			return err
 		}
 		err = policy.AppendEvent(event)
 	case model.LoginPolicyRemoved:
-		return m.view.DeleteLoginPolicy(event.AggregateID, event.Sequence)
+		return p.view.DeleteLoginPolicy(event.AggregateID, event.Sequence, event.CreationDate)
 	default:
-		return m.view.ProcessedLoginPolicySequence(event.Sequence)
+		return p.view.ProcessedLoginPolicySequence(event.Sequence, event.CreationDate)
 	}
 	if err != nil {
 		return err
 	}
-	return m.view.PutLoginPolicy(policy, policy.Sequence)
+	return p.view.PutLoginPolicy(policy, policy.Sequence, event.CreationDate)
 }
 
-func (m *LoginPolicy) OnError(event *models.Event, err error) error {
+func (p *LoginPolicy) OnError(event *models.Event, err error) error {
 	logging.LogWithFields("SPOOL-5id9s", "id", event.AggregateID).WithError(err).Warn("something went wrong in login policy handler")
-	return spooler.HandleError(event, err, m.view.GetLatestLoginPolicyFailedEvent, m.view.ProcessedLoginPolicyFailedEvent, m.view.ProcessedLoginPolicySequence, m.errorCountUntilSkip)
+	return spooler.HandleError(event, err, p.view.GetLatestLoginPolicyFailedEvent, p.view.ProcessedLoginPolicyFailedEvent, p.view.ProcessedLoginPolicySequence, p.errorCountUntilSkip)
+}
+
+func (p *LoginPolicy) OnSuccess() error {
+	return spooler.HandleSuccess(p.view.UpdateLoginPolicySpoolerRunTimestamp)
 }

internal/auth/repository/eventsourcing/handler/machine_keys.go

@@ -48,26 +48,30 @@ func (d *MachineKeys) processMachineKeys(event *models.Event) (err error) {
 	case model.MachineKeyAdded:
 		err = key.AppendEvent(event)
 		if key.ExpirationDate.Before(time.Now()) {
-			return d.view.ProcessedMachineKeySequence(event.Sequence)
+			return d.view.ProcessedMachineKeySequence(event.Sequence, event.CreationDate)
 		}
 	case model.MachineKeyRemoved:
 		err = key.SetData(event)
 		if err != nil {
 			return err
 		}
-		return d.view.DeleteMachineKey(key.ID, event.Sequence)
+		return d.view.DeleteMachineKey(key.ID, event.Sequence, event.CreationDate)
 	case model.UserRemoved:
-		return d.view.DeleteMachineKeysByUserID(event.AggregateID, event.Sequence)
+		return d.view.DeleteMachineKeysByUserID(event.AggregateID, event.Sequence, event.CreationDate)
 	default:
-		return d.view.ProcessedMachineKeySequence(event.Sequence)
+		return d.view.ProcessedMachineKeySequence(event.Sequence, event.CreationDate)
 	}
 	if err != nil {
 		return err
 	}
-	return d.view.PutMachineKey(key, key.Sequence)
+	return d.view.PutMachineKey(key, key.Sequence, event.CreationDate)
 }
 
 func (d *MachineKeys) OnError(event *models.Event, err error) error {
 	logging.LogWithFields("SPOOL-S9fe", "id", event.AggregateID).WithError(err).Warn("something went wrong in machine key handler")
 	return spooler.HandleError(event, err, d.view.GetLatestMachineKeyFailedEvent, d.view.ProcessedMachineKeyFailedEvent, d.view.ProcessedMachineKeySequence, d.errorCountUntilSkip)
 }
+
+func (d *MachineKeys) OnSuccess() error {
+	return spooler.HandleSuccess(d.view.UpdateMachineKeySpoolerRunTimestamp)
+}

internal/auth/repository/eventsourcing/handler/org.go

@@ -58,16 +58,20 @@ func (o *Org) Reduce(event *es_models.Event) (err error) {
 		}
 		org.Domain = domain.Domain
 	default:
-		return o.view.ProcessedOrgSequence(event.Sequence)
+		return o.view.ProcessedOrgSequence(event.Sequence, event.CreationDate)
 	}
 	if err != nil {
 		return err
 	}
 
-	return o.view.PutOrg(org)
+	return o.view.PutOrg(org, event.CreationDate)
 }
 
 func (o *Org) OnError(event *es_models.Event, spoolerErr error) error {
 	logging.LogWithFields("SPOOL-8siWS", "id", event.AggregateID).WithError(spoolerErr).Warn("something went wrong in org handler")
 	return spooler.HandleError(event, spoolerErr, o.view.GetLatestOrgFailedEvent, o.view.ProcessedOrgFailedEvent, o.view.ProcessedOrgSequence, o.errorCountUntilSkip)
 }
+
+func (o *Org) OnSuccess() error {
+	return spooler.HandleSuccess(o.view.UpdateOrgSpoolerRunTimestamp)
+}

internal/auth/repository/eventsourcing/handler/org_iam_policy.go

@@ -19,12 +19,12 @@ const (
 	orgIAMPolicyTable = "auth.org_iam_policies"
 )
 
-func (m *OrgIAMPolicy) ViewModel() string {
+func (p *OrgIAMPolicy) ViewModel() string {
 	return orgIAMPolicyTable
 }
 
-func (m *OrgIAMPolicy) EventQuery() (*models.SearchQuery, error) {
-	sequence, err := m.view.GetLatestOrgIAMPolicySequence()
+func (p *OrgIAMPolicy) EventQuery() (*models.SearchQuery, error) {
+	sequence, err := p.view.GetLatestOrgIAMPolicySequence()
 	if err != nil {
 		return nil, err
 	}
@@ -33,37 +33,41 @@ func (m *OrgIAMPolicy) EventQuery() (*models.SearchQuery, error) {
 		LatestSequenceFilter(sequence.CurrentSequence), nil
 }
 
-func (m *OrgIAMPolicy) Reduce(event *models.Event) (err error) {
+func (p *OrgIAMPolicy) Reduce(event *models.Event) (err error) {
 	switch event.AggregateType {
 	case model.OrgAggregate, iam_es_model.IAMAggregate:
-		err = m.processOrgIAMPolicy(event)
+		err = p.processOrgIAMPolicy(event)
 	}
 	return err
 }
 
-func (m *OrgIAMPolicy) processOrgIAMPolicy(event *models.Event) (err error) {
+func (p *OrgIAMPolicy) processOrgIAMPolicy(event *models.Event) (err error) {
 	policy := new(iam_model.OrgIAMPolicyView)
 	switch event.Type {
 	case iam_es_model.OrgIAMPolicyAdded, model.OrgIAMPolicyAdded:
 		err = policy.AppendEvent(event)
 	case iam_es_model.OrgIAMPolicyChanged, model.OrgIAMPolicyChanged:
-		policy, err = m.view.OrgIAMPolicyByAggregateID(event.AggregateID)
+		policy, err = p.view.OrgIAMPolicyByAggregateID(event.AggregateID)
 		if err != nil {
 			return err
 		}
 		err = policy.AppendEvent(event)
 	case model.OrgIAMPolicyRemoved:
-		return m.view.DeleteOrgIAMPolicy(event.AggregateID, event.Sequence)
+		return p.view.DeleteOrgIAMPolicy(event.AggregateID, event.Sequence, event.CreationDate)
 	default:
-		return m.view.ProcessedOrgIAMPolicySequence(event.Sequence)
+		return p.view.ProcessedOrgIAMPolicySequence(event.Sequence, event.CreationDate)
 	}
 	if err != nil {
 		return err
 	}
-	return m.view.PutOrgIAMPolicy(policy, policy.Sequence)
+	return p.view.PutOrgIAMPolicy(policy, policy.Sequence, event.CreationDate)
 }
 
-func (m *OrgIAMPolicy) OnError(event *models.Event, err error) error {
+func (p *OrgIAMPolicy) OnError(event *models.Event, err error) error {
 	logging.LogWithFields("SPOOL-3Gj8s", "id", event.AggregateID).WithError(err).Warn("something went wrong in orgIAM policy handler")
-	return spooler.HandleError(event, err, m.view.GetLatestOrgIAMPolicyFailedEvent, m.view.ProcessedOrgIAMPolicyFailedEvent, m.view.ProcessedOrgIAMPolicySequence, m.errorCountUntilSkip)
+	return spooler.HandleError(event, err, p.view.GetLatestOrgIAMPolicyFailedEvent, p.view.ProcessedOrgIAMPolicyFailedEvent, p.view.ProcessedOrgIAMPolicySequence, p.errorCountUntilSkip)
+}
+
+func (p *OrgIAMPolicy) OnSuccess() error {
+	return spooler.HandleSuccess(p.view.UpdateOrgIAMPolicySpoolerRunTimestamp)
 }

internal/auth/repository/eventsourcing/handler/password_complexity_policy.go

@@ -19,12 +19,12 @@ const (
 	passwordComplexityPolicyTable = "auth.password_complexity_policies"
 )
 
-func (m *PasswordComplexityPolicy) ViewModel() string {
+func (p *PasswordComplexityPolicy) ViewModel() string {
 	return passwordComplexityPolicyTable
 }
 
-func (m *PasswordComplexityPolicy) EventQuery() (*models.SearchQuery, error) {
-	sequence, err := m.view.GetLatestPasswordComplexityPolicySequence()
+func (p *PasswordComplexityPolicy) EventQuery() (*models.SearchQuery, error) {
+	sequence, err := p.view.GetLatestPasswordComplexityPolicySequence()
 	if err != nil {
 		return nil, err
 	}
@@ -33,37 +33,41 @@ func (m *PasswordComplexityPolicy) EventQuery() (*models.SearchQuery, error) {
 		LatestSequenceFilter(sequence.CurrentSequence), nil
 }
 
-func (m *PasswordComplexityPolicy) Reduce(event *models.Event) (err error) {
+func (p *PasswordComplexityPolicy) Reduce(event *models.Event) (err error) {
 	switch event.AggregateType {
 	case model.OrgAggregate, iam_es_model.IAMAggregate:
-		err = m.processPasswordComplexityPolicy(event)
+		err = p.processPasswordComplexityPolicy(event)
 	}
 	return err
 }
 
-func (m *PasswordComplexityPolicy) processPasswordComplexityPolicy(event *models.Event) (err error) {
+func (p *PasswordComplexityPolicy) processPasswordComplexityPolicy(event *models.Event) (err error) {
 	policy := new(iam_model.PasswordComplexityPolicyView)
 	switch event.Type {
 	case iam_es_model.PasswordComplexityPolicyAdded, model.PasswordComplexityPolicyAdded:
 		err = policy.AppendEvent(event)
 	case iam_es_model.PasswordComplexityPolicyChanged, model.PasswordComplexityPolicyChanged:
-		policy, err = m.view.PasswordComplexityPolicyByAggregateID(event.AggregateID)
+		policy, err = p.view.PasswordComplexityPolicyByAggregateID(event.AggregateID)
 		if err != nil {
 			return err
 		}
 		err = policy.AppendEvent(event)
 	case model.PasswordComplexityPolicyRemoved:
-		return m.view.DeletePasswordComplexityPolicy(event.AggregateID, event.Sequence)
+		return p.view.DeletePasswordComplexityPolicy(event.AggregateID, event.Sequence, event.CreationDate)
 	default:
-		return m.view.ProcessedPasswordComplexityPolicySequence(event.Sequence)
+		return p.view.ProcessedPasswordComplexityPolicySequence(event.Sequence, event.CreationDate)
 	}
 	if err != nil {
 		return err
 	}
-	return m.view.PutPasswordComplexityPolicy(policy, policy.Sequence)
+	return p.view.PutPasswordComplexityPolicy(policy, policy.Sequence, event.CreationDate)
 }
 
-func (m *PasswordComplexityPolicy) OnError(event *models.Event, err error) error {
+func (p *PasswordComplexityPolicy) OnError(event *models.Event, err error) error {
 	logging.LogWithFields("SPOOL-4Djo9", "id", event.AggregateID).WithError(err).Warn("something went wrong in passwordComplexity policy handler")
-	return spooler.HandleError(event, err, m.view.GetLatestPasswordComplexityPolicyFailedEvent, m.view.ProcessedPasswordComplexityPolicyFailedEvent, m.view.ProcessedPasswordComplexityPolicySequence, m.errorCountUntilSkip)
+	return spooler.HandleError(event, err, p.view.GetLatestPasswordComplexityPolicyFailedEvent, p.view.ProcessedPasswordComplexityPolicyFailedEvent, p.view.ProcessedPasswordComplexityPolicySequence, p.errorCountUntilSkip)
+}
+
+func (p *PasswordComplexityPolicy) OnSuccess() error {
+	return spooler.HandleSuccess(p.view.UpdatePasswordComplexityPolicySpoolerRunTimestamp)
 }

internal/auth/repository/eventsourcing/handler/project_role.go

@@ -52,19 +52,23 @@ func (p *ProjectRole) Reduce(event *models.Event) (err error) {
 		if err != nil {
 			return err
 		}
-		return p.view.DeleteProjectRole(event.AggregateID, event.ResourceOwner, role.Key, event.Sequence)
+		return p.view.DeleteProjectRole(event.AggregateID, event.ResourceOwner, role.Key, event.Sequence, event.CreationDate)
 	case es_model.ProjectRemoved:
 		return p.view.DeleteProjectRolesByProjectID(event.AggregateID)
 	default:
-		return p.view.ProcessedProjectRoleSequence(event.Sequence)
+		return p.view.ProcessedProjectRoleSequence(event.Sequence, event.CreationDate)
 	}
 	if err != nil {
 		return err
 	}
-	return p.view.PutProjectRole(role)
+	return p.view.PutProjectRole(role, event.CreationDate)
 }
 
 func (p *ProjectRole) OnError(event *models.Event, err error) error {
 	logging.LogWithFields("SPOOL-lso9w", "id", event.AggregateID).WithError(err).Warn("something went wrong in project role handler")
 	return spooler.HandleError(event, err, p.view.GetLatestProjectRoleFailedEvent, p.view.ProcessedProjectRoleFailedEvent, p.view.ProcessedProjectRoleSequence, p.errorCountUntilSkip)
 }
+
+func (p *ProjectRole) OnSuccess() error {
+	return spooler.HandleSuccess(p.view.UpdateProjectRoleSpoolerRunTimestamp)
+}

internal/auth/repository/eventsourcing/handler/token.go

@@ -49,7 +49,7 @@ func (t *Token) Reduce(event *models.Event) (err error) {
 		if err != nil {
 			return err
 		}
-		return t.view.PutToken(token)
+		return t.view.PutToken(token, event.CreationDate)
 	case user_es_model.UserProfileChanged,
 		user_es_model.HumanProfileChanged:
 		user := new(view_model.UserView)
@@ -61,25 +61,25 @@ func (t *Token) Reduce(event *models.Event) (err error) {
 		for _, token := range tokens {
 			token.PreferredLanguage = user.PreferredLanguage
 		}
-		return t.view.PutTokens(tokens, event.Sequence)
+		return t.view.PutTokens(tokens, event.Sequence, event.CreationDate)
 	case user_es_model.SignedOut,
 		user_es_model.HumanSignedOut:
 		id, err := agentIDFromSession(event)
 		if err != nil {
 			return err
 		}
-		return t.view.DeleteSessionTokens(id, event.AggregateID, event.Sequence)
+		return t.view.DeleteSessionTokens(id, event.AggregateID, event.Sequence, event.CreationDate)
 	case user_es_model.UserLocked,
 		user_es_model.UserDeactivated,
 		user_es_model.UserRemoved:
-		return t.view.DeleteUserTokens(event.AggregateID, event.Sequence)
+		return t.view.DeleteUserTokens(event.AggregateID, event.Sequence, event.CreationDate)
 	case project_es_model.ApplicationDeactivated,
 		project_es_model.ApplicationRemoved:
 		application, err := applicationFromSession(event)
 		if err != nil {
 			return err
 		}
-		return t.view.DeleteApplicationTokens(event.Sequence, application.AppID)
+		return t.view.DeleteApplicationTokens(event.Sequence, event.CreationDate, application.AppID)
 	case project_es_model.ProjectDeactivated,
 		project_es_model.ProjectRemoved:
 		project, err := t.ProjectEvents.ProjectByID(context.Background(), event.AggregateID)
@@ -90,9 +90,9 @@ func (t *Token) Reduce(event *models.Event) (err error) {
 		for _, app := range project.Applications {
 			applicationsIDs = append(applicationsIDs, app.AppID)
 		}
-		return t.view.DeleteApplicationTokens(event.Sequence, applicationsIDs...)
+		return t.view.DeleteApplicationTokens(event.Sequence, event.CreationDate, applicationsIDs...)
 	default:
-		return t.view.ProcessedTokenSequence(event.Sequence)
+		return t.view.ProcessedTokenSequence(event.Sequence, event.CreationDate)
 	}
 }
 
@@ -118,3 +118,7 @@ func applicationFromSession(event *models.Event) (*project_es_model.Application,
 	}
 	return application, nil
 }
+
+func (t *Token) OnSuccess() error {
+	return spooler.HandleSuccess(t.view.UpdateTokenSpoolerRunTimestamp)
+}

internal/auth/repository/eventsourcing/handler/user.go

@@ -114,14 +114,14 @@ func (u *User) ProcessUser(event *models.Event) (err error) {
 		}
 		err = u.fillLoginNames(user)
 	case es_model.UserRemoved:
-		return u.view.DeleteUser(event.AggregateID, event.Sequence)
+		return u.view.DeleteUser(event.AggregateID, event.Sequence, event.CreationDate)
 	default:
-		return u.view.ProcessedUserSequence(event.Sequence)
+		return u.view.ProcessedUserSequence(event.Sequence, event.CreationDate)
 	}
 	if err != nil {
 		return err
 	}
-	return u.view.PutUser(user, user.Sequence)
+	return u.view.PutUser(user, user.Sequence, event.CreationDate)
 }
 
 func (u *User) fillLoginNames(user *view_model.UserView) (err error) {
@@ -152,7 +152,7 @@ func (u *User) ProcessOrg(event *models.Event) (err error) {
 	case org_es_model.OrgDomainPrimarySet:
 		return u.fillPreferredLoginNamesOnOrgUsers(event)
 	default:
-		return u.view.ProcessedUserSequence(event.Sequence)
+		return u.view.ProcessedUserSequence(event.Sequence, event.CreationDate)
 	}
 }
 
@@ -175,7 +175,7 @@ func (u *User) fillLoginNamesOnOrgUsers(event *models.Event) error {
 	for _, user := range users {
 		user.SetLoginNames(policy, org.Domains)
 	}
-	return u.view.PutUsers(users, event.Sequence)
+	return u.view.PutUsers(users, event.Sequence, event.CreationDate)
 }
 
 func (u *User) fillPreferredLoginNamesOnOrgUsers(event *models.Event) error {
@@ -200,10 +200,14 @@ func (u *User) fillPreferredLoginNamesOnOrgUsers(event *models.Event) error {
 	for _, user := range users {
 		user.PreferredLoginName = user.GenerateLoginName(org.GetPrimaryDomain().Domain, policy.UserLoginMustBeDomain)
 	}
-	return u.view.PutUsers(users, 0)
+	return u.view.PutUsers(users, 0, event.CreationDate)
 }
 
 func (u *User) OnError(event *models.Event, err error) error {
 	logging.LogWithFields("SPOOL-is8aAWima", "id", event.AggregateID).WithError(err).Warn("something went wrong in user handler")
 	return spooler.HandleError(event, err, u.view.GetLatestUserFailedEvent, u.view.ProcessedUserFailedEvent, u.view.ProcessedUserSequence, u.errorCountUntilSkip)
 }
+
+func (u *User) OnSuccess() error {
+	return spooler.HandleSuccess(u.view.UpdateUserSpoolerRunTimestamp)
+}

internal/auth/repository/eventsourcing/handler/user_external_idps.go

@@ -29,12 +29,12 @@ const (
 	externalIDPTable = "auth.user_external_idps"
 )
 
-func (m *ExternalIDP) ViewModel() string {
+func (i *ExternalIDP) ViewModel() string {
 	return externalIDPTable
 }
 
-func (m *ExternalIDP) EventQuery() (*models.SearchQuery, error) {
-	sequence, err := m.view.GetLatestExternalIDPSequence()
+func (i *ExternalIDP) EventQuery() (*models.SearchQuery, error) {
+	sequence, err := i.view.GetLatestExternalIDPSequence()
 	if err != nil {
 		return nil, err
 	}
@@ -43,17 +43,17 @@ func (m *ExternalIDP) EventQuery() (*models.SearchQuery, error) {
 		LatestSequenceFilter(sequence.CurrentSequence), nil
 }
 
-func (m *ExternalIDP) Reduce(event *models.Event) (err error) {
+func (i *ExternalIDP) Reduce(event *models.Event) (err error) {
 	switch event.AggregateType {
 	case model.UserAggregate:
-		err = m.processUser(event)
+		err = i.processUser(event)
 	case iam_es_model.IAMAggregate, org_es_model.OrgAggregate:
-		err = m.processIdpConfig(event)
+		err = i.processIdpConfig(event)
 	}
 	return err
 }
 
-func (m *ExternalIDP) processUser(event *models.Event) (err error) {
+func (i *ExternalIDP) processUser(event *models.Event) (err error) {
 	externalIDP := new(usr_view_model.ExternalIDPView)
 	switch event.Type {
 	case model.HumanExternalIDPAdded:
@@ -61,25 +61,25 @@ func (m *ExternalIDP) processUser(event *models.Event) (err error) {
 		if err != nil {
 			return err
 		}
-		err = m.fillData(externalIDP)
+		err = i.fillData(externalIDP)
 	case model.HumanExternalIDPRemoved, model.HumanExternalIDPCascadeRemoved:
 		err = externalIDP.SetData(event)
 		if err != nil {
 			return err
 		}
-		return m.view.DeleteExternalIDP(externalIDP.ExternalUserID, externalIDP.IDPConfigID, event.Sequence)
+		return i.view.DeleteExternalIDP(externalIDP.ExternalUserID, externalIDP.IDPConfigID, event.Sequence, event.CreationDate)
 	case model.UserRemoved:
-		return m.view.DeleteExternalIDPsByUserID(event.AggregateID, event.Sequence)
+		return i.view.DeleteExternalIDPsByUserID(event.AggregateID, event.Sequence, event.CreationDate)
 	default:
-		return m.view.ProcessedExternalIDPSequence(event.Sequence)
+		return i.view.ProcessedExternalIDPSequence(event.Sequence, event.CreationDate)
 	}
 	if err != nil {
 		return err
 	}
-	return m.view.PutExternalIDP(externalIDP, externalIDP.Sequence)
+	return i.view.PutExternalIDP(externalIDP, externalIDP.Sequence, event.CreationDate)
 }
 
-func (m *ExternalIDP) processIdpConfig(event *models.Event) (err error) {
+func (i *ExternalIDP) processIdpConfig(event *models.Event) (err error) {
 	switch event.Type {
 	case iam_es_model.IDPConfigChanged, org_es_model.IDPConfigChanged:
 		configView := new(iam_view_model.IDPConfigView)
@@ -89,45 +89,49 @@ func (m *ExternalIDP) processIdpConfig(event *models.Event) (err error) {
 		} else {
 			configView.AppendEvent(iam_model.IDPProviderTypeOrg, event)
 		}
-		exterinalIDPs, err := m.view.ExternalIDPsByIDPConfigID(configView.IDPConfigID)
+		exterinalIDPs, err := i.view.ExternalIDPsByIDPConfigID(configView.IDPConfigID)
 		if err != nil {
 			return err
 		}
 		if event.AggregateType == iam_es_model.IAMAggregate {
-			config, err = m.iamEvents.GetIDPConfig(context.Background(), event.AggregateID, configView.IDPConfigID)
+			config, err = i.iamEvents.GetIDPConfig(context.Background(), event.AggregateID, configView.IDPConfigID)
 		} else {
-			config, err = m.orgEvents.GetIDPConfig(context.Background(), event.AggregateID, configView.IDPConfigID)
+			config, err = i.orgEvents.GetIDPConfig(context.Background(), event.AggregateID, configView.IDPConfigID)
 		}
 		if err != nil {
 			return err
 		}
 		for _, provider := range exterinalIDPs {
-			m.fillConfigData(provider, config)
+			i.fillConfigData(provider, config)
 		}
-		return m.view.PutExternalIDPs(event.Sequence, exterinalIDPs...)
+		return i.view.PutExternalIDPs(event.Sequence, event.CreationDate, exterinalIDPs...)
 	default:
-		return m.view.ProcessedExternalIDPSequence(event.Sequence)
+		return i.view.ProcessedExternalIDPSequence(event.Sequence, event.CreationDate)
 	}
 	return nil
 }
 
-func (m *ExternalIDP) fillData(externalIDP *usr_view_model.ExternalIDPView) error {
-	config, err := m.orgEvents.GetIDPConfig(context.Background(), externalIDP.ResourceOwner, externalIDP.IDPConfigID)
+func (i *ExternalIDP) fillData(externalIDP *usr_view_model.ExternalIDPView) error {
+	config, err := i.orgEvents.GetIDPConfig(context.Background(), externalIDP.ResourceOwner, externalIDP.IDPConfigID)
 	if caos_errs.IsNotFound(err) {
-		config, err = m.iamEvents.GetIDPConfig(context.Background(), m.systemDefaults.IamID, externalIDP.IDPConfigID)
+		config, err = i.iamEvents.GetIDPConfig(context.Background(), i.systemDefaults.IamID, externalIDP.IDPConfigID)
 	}
 	if err != nil {
 		return err
 	}
-	m.fillConfigData(externalIDP, config)
+	i.fillConfigData(externalIDP, config)
 	return nil
 }
 
-func (m *ExternalIDP) fillConfigData(externalIDP *usr_view_model.ExternalIDPView, config *iam_model.IDPConfig) {
+func (i *ExternalIDP) fillConfigData(externalIDP *usr_view_model.ExternalIDPView, config *iam_model.IDPConfig) {
 	externalIDP.IDPName = config.Name
 }
 
-func (m *ExternalIDP) OnError(event *models.Event, err error) error {
+func (i *ExternalIDP) OnError(event *models.Event, err error) error {
 	logging.LogWithFields("SPOOL-4Rsu8", "id", event.AggregateID).WithError(err).Warn("something went wrong in idp provider handler")
-	return spooler.HandleError(event, err, m.view.GetLatestExternalIDPFailedEvent, m.view.ProcessedExternalIDPFailedEvent, m.view.ProcessedExternalIDPSequence, m.errorCountUntilSkip)
+	return spooler.HandleError(event, err, i.view.GetLatestExternalIDPFailedEvent, i.view.ProcessedExternalIDPFailedEvent, i.view.ProcessedExternalIDPSequence, i.errorCountUntilSkip)
+}
+
+func (i *ExternalIDP) OnSuccess() error {
+	return spooler.HandleSuccess(i.view.UpdateExternalIDPSpoolerRunTimestamp)
 }

internal/auth/repository/eventsourcing/handler/user_grant.go

@@ -97,14 +97,14 @@ func (u *UserGrant) processUserGrant(event *models.Event) (err error) {
 		}
 		err = grant.AppendEvent(event)
 	case grant_es_model.UserGrantRemoved, grant_es_model.UserGrantCascadeRemoved:
-		return u.view.DeleteUserGrant(event.AggregateID, event.Sequence)
+		return u.view.DeleteUserGrant(event.AggregateID, event.Sequence, event.CreationDate)
 	default:
-		return u.view.ProcessedUserGrantSequence(event.Sequence)
+		return u.view.ProcessedUserGrantSequence(event.Sequence, event.CreationDate)
 	}
 	if err != nil {
 		return err
 	}
-	return u.view.PutUserGrant(grant, grant.Sequence)
+	return u.view.PutUserGrant(grant, grant.Sequence, event.CreationDate)
 }
 
 func (u *UserGrant) processUser(event *models.Event) (err error) {
@@ -119,7 +119,7 @@ func (u *UserGrant) processUser(event *models.Event) (err error) {
 			return err
 		}
 		if len(grants) == 0 {
-			return u.view.ProcessedUserGrantSequence(event.Sequence)
+			return u.view.ProcessedUserGrantSequence(event.Sequence, event.CreationDate)
 		}
 		user, err := u.userEvents.UserByID(context.Background(), event.AggregateID)
 		if err != nil {
@@ -128,9 +128,9 @@ func (u *UserGrant) processUser(event *models.Event) (err error) {
 		for _, grant := range grants {
 			u.fillUserData(grant, user)
 		}
-		return u.view.PutUserGrants(grants, event.Sequence)
+		return u.view.PutUserGrants(grants, event.Sequence, event.CreationDate)
 	default:
-		return u.view.ProcessedUserGrantSequence(event.Sequence)
+		return u.view.ProcessedUserGrantSequence(event.Sequence, event.CreationDate)
 	}
 }
 
@@ -148,7 +148,7 @@ func (u *UserGrant) processProject(event *models.Event) (err error) {
 		for _, grant := range grants {
 			u.fillProjectData(grant, project)
 		}
-		return u.view.PutUserGrants(grants, event.Sequence)
+		return u.view.PutUserGrants(grants, event.Sequence, event.CreationDate)
 	case proj_es_model.ProjectMemberAdded, proj_es_model.ProjectMemberChanged, proj_es_model.ProjectMemberRemoved:
 		member := new(proj_es_model.ProjectMember)
 		member.SetData(event)
@@ -158,7 +158,7 @@ func (u *UserGrant) processProject(event *models.Event) (err error) {
 		member.SetData(event)
 		return u.processMember(event, "PROJECT_GRANT", member.GrantID, member.UserID, member.Roles)
 	default:
-		return u.view.ProcessedUserGrantSequence(event.Sequence)
+		return u.view.ProcessedUserGrantSequence(event.Sequence, event.CreationDate)
 	}
 }
 
@@ -169,7 +169,7 @@ func (u *UserGrant) processOrg(event *models.Event) (err error) {
 		member.SetData(event)
 		return u.processMember(event, "ORG", "", member.UserID, member.Roles)
 	default:
-		return u.view.ProcessedUserGrantSequence(event.Sequence)
+		return u.view.ProcessedUserGrantSequence(event.Sequence, event.CreationDate)
 	}
 }
 
@@ -207,16 +207,16 @@ func (u *UserGrant) processIAMMember(event *models.Event, rolePrefix string, suf
 		}
 		grant.Sequence = event.Sequence
 		grant.ChangeDate = event.CreationDate
-		return u.view.PutUserGrant(grant, grant.Sequence)
+		return u.view.PutUserGrant(grant, grant.Sequence, event.CreationDate)
 	case iam_es_model.IAMMemberRemoved:
 		member.SetData(event)
 		grant, err := u.view.UserGrantByIDs(u.iamID, u.iamProjectID, member.UserID)
 		if err != nil {
 			return err
 		}
-		return u.view.DeleteUserGrant(grant.ID, event.Sequence)
+		return u.view.DeleteUserGrant(grant.ID, event.Sequence, event.CreationDate)
 	default:
-		return u.view.ProcessedUserGrantSequence(event.Sequence)
+		return u.view.ProcessedUserGrantSequence(event.Sequence, event.CreationDate)
 	}
 }
 
@@ -252,7 +252,7 @@ func (u *UserGrant) processMember(event *models.Event, rolePrefix, roleSuffix st
 		}
 		grant.Sequence = event.Sequence
 		grant.ChangeDate = event.CreationDate
-		return u.view.PutUserGrant(grant, event.Sequence)
+		return u.view.PutUserGrant(grant, event.Sequence, event.CreationDate)
 	case org_es_model.OrgMemberRemoved,
 		proj_es_model.ProjectMemberRemoved,
 		proj_es_model.ProjectGrantMemberRemoved:
@@ -262,18 +262,18 @@ func (u *UserGrant) processMember(event *models.Event, rolePrefix, roleSuffix st
 			return err
 		}
 		if errors.IsNotFound(err) {
-			return u.view.ProcessedUserGrantSequence(event.Sequence)
+			return u.view.ProcessedUserGrantSequence(event.Sequence, event.CreationDate)
 		}
 		if roleSuffix != "" {
 			roleKeys = suffixRoles(roleSuffix, roleKeys)
 		}
 		if grant.RoleKeys == nil {
-			return u.view.ProcessedUserGrantSequence(event.Sequence)
+			return u.view.ProcessedUserGrantSequence(event.Sequence, event.CreationDate)
 		}
 		grant.RoleKeys = mergeExistingRoles(rolePrefix, roleSuffix, grant.RoleKeys, nil)
-		return u.view.PutUserGrant(grant, event.Sequence)
+		return u.view.PutUserGrant(grant, event.Sequence, event.CreationDate)
 	default:
-		return u.view.ProcessedUserGrantSequence(event.Sequence)
+		return u.view.ProcessedUserGrantSequence(event.Sequence, event.CreationDate)
 	}
 }
 
@@ -367,3 +367,7 @@ func (u *UserGrant) OnError(event *models.Event, err error) error {
 	logging.LogWithFields("SPOOL-UZmc7", "id", event.AggregateID).WithError(err).Warn("something went wrong in user grant handler")
 	return spooler.HandleError(event, err, u.view.GetLatestUserGrantFailedEvent, u.view.ProcessedUserGrantFailedEvent, u.view.ProcessedUserGrantSequence, u.errorCountUntilSkip)
 }
+
+func (u *UserGrant) OnSuccess() error {
+	return spooler.HandleSuccess(u.view.UpdateUserGrantSpoolerRunTimestamp)
+}

internal/auth/repository/eventsourcing/handler/user_membership.go

@@ -74,14 +74,14 @@ func (m *UserMembership) processIam(event *models.Event) (err error) {
 		}
 		err = member.AppendEvent(event)
 	case iam_es_model.IAMMemberRemoved:
-		return m.view.DeleteUserMembership(member.UserID, event.AggregateID, event.AggregateID, usr_model.MemberTypeIam, event.Sequence)
+		return m.view.DeleteUserMembership(member.UserID, event.AggregateID, event.AggregateID, usr_model.MemberTypeIam, event.Sequence, event.CreationDate)
 	default:
-		return m.view.ProcessedUserMembershipSequence(event.Sequence)
+		return m.view.ProcessedUserMembershipSequence(event.Sequence, event.CreationDate)
 	}
 	if err != nil {
 		return err
 	}
-	return m.view.PutUserMembership(member, event.Sequence)
+	return m.view.PutUserMembership(member, event.Sequence, event.CreationDate)
 }
 
 func (m *UserMembership) fillIamDisplayName(member *usr_es_model.UserMembershipView) {
@@ -105,16 +105,16 @@ func (m *UserMembership) processOrg(event *models.Event) (err error) {
 		}
 		err = member.AppendEvent(event)
 	case org_es_model.OrgMemberRemoved:
-		return m.view.DeleteUserMembership(member.UserID, event.AggregateID, event.AggregateID, usr_model.MemberTypeOrganisation, event.Sequence)
+		return m.view.DeleteUserMembership(member.UserID, event.AggregateID, event.AggregateID, usr_model.MemberTypeOrganisation, event.Sequence, event.CreationDate)
 	case org_es_model.OrgChanged:
 		return m.updateOrgName(event)
 	default:
-		return m.view.ProcessedUserMembershipSequence(event.Sequence)
+		return m.view.ProcessedUserMembershipSequence(event.Sequence, event.CreationDate)
 	}
 	if err != nil {
 		return err
 	}
-	return m.view.PutUserMembership(member, event.Sequence)
+	return m.view.PutUserMembership(member, event.Sequence, event.CreationDate)
 }
 
 func (m *UserMembership) fillOrgName(member *usr_es_model.UserMembershipView) (err error) {
@@ -145,7 +145,7 @@ func (m *UserMembership) updateOrgName(event *models.Event) error {
 			membership.DisplayName = org.Name
 		}
 	}
-	return m.view.BulkPutUserMemberships(memberships, event.Sequence)
+	return m.view.BulkPutUserMemberships(memberships, event.Sequence, event.CreationDate)
 }
 
 func (m *UserMembership) processProject(event *models.Event) (err error) {
@@ -168,7 +168,7 @@ func (m *UserMembership) processProject(event *models.Event) (err error) {
 		}
 		err = member.AppendEvent(event)
 	case proj_es_model.ProjectMemberRemoved:
-		return m.view.DeleteUserMembership(member.UserID, event.AggregateID, event.AggregateID, usr_model.MemberTypeProject, event.Sequence)
+		return m.view.DeleteUserMembership(member.UserID, event.AggregateID, event.AggregateID, usr_model.MemberTypeProject, event.Sequence, event.CreationDate)
 	case proj_es_model.ProjectGrantMemberChanged:
 		member, err = m.view.UserMembershipByIDs(member.UserID, event.AggregateID, member.ObjectID, usr_model.MemberTypeProjectGrant)
 		if err != nil {
@@ -176,20 +176,20 @@ func (m *UserMembership) processProject(event *models.Event) (err error) {
 		}
 		err = member.AppendEvent(event)
 	case proj_es_model.ProjectGrantMemberRemoved:
-		return m.view.DeleteUserMembership(member.UserID, event.AggregateID, member.ObjectID, usr_model.MemberTypeProjectGrant, event.Sequence)
+		return m.view.DeleteUserMembership(member.UserID, event.AggregateID, member.ObjectID, usr_model.MemberTypeProjectGrant, event.Sequence, event.CreationDate)
 	case proj_es_model.ProjectChanged:
 		return m.updateProjectDisplayName(event)
 	case proj_es_model.ProjectRemoved:
-		return m.view.DeleteUserMembershipsByAggregateID(event.AggregateID, event.Sequence)
+		return m.view.DeleteUserMembershipsByAggregateID(event.AggregateID, event.Sequence, event.CreationDate)
 	case proj_es_model.ProjectGrantRemoved:
-		return m.view.DeleteUserMembershipsByAggregateIDAndObjectID(event.AggregateID, member.ObjectID, event.Sequence)
+		return m.view.DeleteUserMembershipsByAggregateIDAndObjectID(event.AggregateID, member.ObjectID, event.Sequence, event.CreationDate)
 	default:
-		return m.view.ProcessedUserMembershipSequence(event.Sequence)
+		return m.view.ProcessedUserMembershipSequence(event.Sequence, event.CreationDate)
 	}
 	if err != nil {
 		return err
 	}
-	return m.view.PutUserMembership(member, event.Sequence)
+	return m.view.PutUserMembership(member, event.Sequence, event.CreationDate)
 }
 
 func (m *UserMembership) fillProjectDisplayName(member *usr_es_model.UserMembershipView) (err error) {
@@ -214,15 +214,15 @@ func (m *UserMembership) updateProjectDisplayName(event *models.Event) error {
 	for _, membership := range memberships {
 		membership.DisplayName = project.Name
 	}
-	return m.view.BulkPutUserMemberships(memberships, event.Sequence)
+	return m.view.BulkPutUserMemberships(memberships, event.Sequence, event.CreationDate)
 }
 
 func (m *UserMembership) processUser(event *models.Event) (err error) {
 	switch event.Type {
 	case model.UserRemoved:
-		return m.view.DeleteUserMembershipsByUserID(event.AggregateID, event.Sequence)
+		return m.view.DeleteUserMembershipsByUserID(event.AggregateID, event.Sequence, event.CreationDate)
 	default:
-		return m.view.ProcessedUserMembershipSequence(event.Sequence)
+		return m.view.ProcessedUserMembershipSequence(event.Sequence, event.CreationDate)
 	}
 }
 
@@ -230,3 +230,7 @@ func (m *UserMembership) OnError(event *models.Event, err error) error {
 	logging.LogWithFields("SPOOL-Ms3fj", "id", event.AggregateID).WithError(err).Warn("something went wrong in user membership handler")
 	return spooler.HandleError(event, err, m.view.GetLatestUserMembershipFailedEvent, m.view.ProcessedUserMembershipFailedEvent, m.view.ProcessedUserMembershipSequence, m.errorCountUntilSkip)
 }
+
+func (m *UserMembership) OnSuccess() error {
+	return spooler.HandleSuccess(m.view.UpdateUserMembershipSpoolerRunTimestamp)
+}

internal/auth/repository/eventsourcing/handler/user_session.go

@@ -84,7 +84,7 @@ func (u *UserSession) Reduce(event *models.Event) (err error) {
 			return err
 		}
 		if len(sessions) == 0 {
-			return u.view.ProcessedUserSessionSequence(event.Sequence)
+			return u.view.ProcessedUserSessionSequence(event.Sequence, event.CreationDate)
 		}
 		for _, session := range sessions {
 			session.AppendEvent(event)
@@ -92,11 +92,11 @@ func (u *UserSession) Reduce(event *models.Event) (err error) {
 				return err
 			}
 		}
-		return u.view.PutUserSessions(sessions, event.Sequence)
+		return u.view.PutUserSessions(sessions, event.Sequence, event.CreationDate)
 	case es_model.UserRemoved:
-		return u.view.DeleteUserSessions(event.AggregateID, event.Sequence)
+		return u.view.DeleteUserSessions(event.AggregateID, event.Sequence, event.CreationDate)
 	default:
-		return u.view.ProcessedUserSessionSequence(event.Sequence)
+		return u.view.ProcessedUserSessionSequence(event.Sequence, event.CreationDate)
 	}
 }
 
@@ -105,12 +105,16 @@ func (u *UserSession) OnError(event *models.Event, err error) error {
 	return spooler.HandleError(event, err, u.view.GetLatestUserSessionFailedEvent, u.view.ProcessedUserSessionFailedEvent, u.view.ProcessedUserSessionSequence, u.errorCountUntilSkip)
 }
 
+func (u *UserSession) OnSuccess() error {
+	return spooler.HandleSuccess(u.view.UpdateUserSessionSpoolerRunTimestamp)
+}
+
 func (u *UserSession) updateSession(session *view_model.UserSessionView, event *models.Event) error {
 	session.AppendEvent(event)
 	if err := u.fillUserInfo(session, event.AggregateID); err != nil {
 		return err
 	}
-	return u.view.PutUserSession(session)
+	return u.view.PutUserSession(session, event.CreationDate)
 }
 
 func (u *UserSession) fillUserInfo(session *view_model.UserSessionView, id string) error {

internal/auth/repository/eventsourcing/repository.go

@@ -2,7 +2,6 @@ package eventsourcing
 
 import (
 	"context"
-
 	"github.com/caos/zitadel/internal/api/authz"
 	"github.com/caos/zitadel/internal/auth/repository/eventsourcing/eventstore"
 	"github.com/caos/zitadel/internal/auth/repository/eventsourcing/handler"

internal/auth/repository/eventsourcing/view/application.go

@@ -8,6 +8,7 @@ import (
 	"github.com/caos/zitadel/internal/project/repository/view"
 	"github.com/caos/zitadel/internal/project/repository/view/model"
 	"github.com/caos/zitadel/internal/view/repository"
+	"time"
 )
 
 const (
@@ -26,28 +27,28 @@ func (v *View) SearchApplications(request *proj_model.ApplicationSearchRequest)
 	return view.SearchApplications(v.Db, applicationTable, request)
 }
 
-func (v *View) PutApplication(app *model.ApplicationView) error {
+func (v *View) PutApplication(app *model.ApplicationView, eventTimestamp time.Time) error {
 	err := view.PutApplication(v.Db, applicationTable, app)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedApplicationSequence(app.Sequence)
+	return v.ProcessedApplicationSequence(app.Sequence, eventTimestamp)
 }
 
-func (v *View) PutApplications(apps []*model.ApplicationView, sequence uint64) error {
+func (v *View) PutApplications(apps []*model.ApplicationView, sequence uint64, eventTimestamp time.Time) error {
 	err := view.PutApplications(v.Db, applicationTable, apps...)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedApplicationSequence(sequence)
+	return v.ProcessedApplicationSequence(sequence, eventTimestamp)
 }
 
-func (v *View) DeleteApplication(appID string, eventSequence uint64) error {
+func (v *View) DeleteApplication(appID string, eventSequence uint64, eventTimestamp time.Time) error {
 	err := view.DeleteApplication(v.Db, applicationTable, appID)
 	if err != nil {
 		return nil
 	}
-	return v.ProcessedApplicationSequence(eventSequence)
+	return v.ProcessedApplicationSequence(eventSequence, eventTimestamp)
 }
 
 func (v *View) DeleteApplicationsByProjectID(projectID string) error {
@@ -58,8 +59,12 @@ func (v *View) GetLatestApplicationSequence() (*repository.CurrentSequence, erro
 	return v.latestSequence(applicationTable)
 }
 
-func (v *View) ProcessedApplicationSequence(eventSequence uint64) error {
-	return v.saveCurrentSequence(applicationTable, eventSequence)
+func (v *View) ProcessedApplicationSequence(eventSequence uint64, eventTimestamp time.Time) error {
+	return v.saveCurrentSequence(applicationTable, eventSequence, eventTimestamp)
+}
+
+func (v *View) UpdateApplicationSpoolerRunTimestamp() error {
+	return v.updateSpoolerRunSequence(applicationTable)
 }
 
 func (v *View) GetLatestApplicationFailedEvent(sequence uint64) (*repository.FailedEvent, error) {

internal/auth/repository/eventsourcing/view/external_idps.go

@@ -6,6 +6,7 @@ import (
 	"github.com/caos/zitadel/internal/user/repository/view"
 	"github.com/caos/zitadel/internal/user/repository/view/model"
 	global_view "github.com/caos/zitadel/internal/view/repository"
+	"time"
 )
 
 const (
@@ -32,44 +33,48 @@ func (v *View) SearchExternalIDPs(request *usr_model.ExternalIDPSearchRequest) (
 	return view.SearchExternalIDPs(v.Db, externalIDPTable, request)
 }
 
-func (v *View) PutExternalIDP(externalIDP *model.ExternalIDPView, sequence uint64) error {
+func (v *View) PutExternalIDP(externalIDP *model.ExternalIDPView, sequence uint64, eventTimestamp time.Time) error {
 	err := view.PutExternalIDP(v.Db, externalIDPTable, externalIDP)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedExternalIDPSequence(sequence)
+	return v.ProcessedExternalIDPSequence(sequence, eventTimestamp)
 }
 
-func (v *View) PutExternalIDPs(sequence uint64, externalIDPs ...*model.ExternalIDPView) error {
+func (v *View) PutExternalIDPs(sequence uint64, eventTimestamp time.Time, externalIDPs ...*model.ExternalIDPView) error {
 	err := view.PutExternalIDPs(v.Db, externalIDPTable, externalIDPs...)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedExternalIDPSequence(sequence)
+	return v.ProcessedExternalIDPSequence(sequence, eventTimestamp)
 }
 
-func (v *View) DeleteExternalIDP(externalUserID, idpConfigID string, eventSequence uint64) error {
+func (v *View) DeleteExternalIDP(externalUserID, idpConfigID string, eventSequence uint64, eventTimestamp time.Time) error {
 	err := view.DeleteExternalIDP(v.Db, externalIDPTable, externalUserID, idpConfigID)
 	if err != nil && !errors.IsNotFound(err) {
 		return err
 	}
-	return v.ProcessedExternalIDPSequence(eventSequence)
+	return v.ProcessedExternalIDPSequence(eventSequence, eventTimestamp)
 }
 
-func (v *View) DeleteExternalIDPsByUserID(userID string, eventSequence uint64) error {
+func (v *View) DeleteExternalIDPsByUserID(userID string, eventSequence uint64, eventTimestamp time.Time) error {
 	err := view.DeleteExternalIDPsByUserID(v.Db, externalIDPTable, userID)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedExternalIDPSequence(eventSequence)
+	return v.ProcessedExternalIDPSequence(eventSequence, eventTimestamp)
 }
 
 func (v *View) GetLatestExternalIDPSequence() (*global_view.CurrentSequence, error) {
 	return v.latestSequence(externalIDPTable)
 }
 
-func (v *View) ProcessedExternalIDPSequence(eventSequence uint64) error {
-	return v.saveCurrentSequence(externalIDPTable, eventSequence)
+func (v *View) ProcessedExternalIDPSequence(eventSequence uint64, eventTimestamp time.Time) error {
+	return v.saveCurrentSequence(externalIDPTable, eventSequence, eventTimestamp)
+}
+
+func (v *View) UpdateExternalIDPSpoolerRunTimestamp() error {
+	return v.updateSpoolerRunSequence(externalIDPTable)
 }
 
 func (v *View) GetLatestExternalIDPFailedEvent(sequence uint64) (*global_view.FailedEvent, error) {

internal/auth/repository/eventsourcing/view/idp_configs.go

@@ -6,6 +6,7 @@ import (
 	"github.com/caos/zitadel/internal/iam/repository/view"
 	iam_es_model "github.com/caos/zitadel/internal/iam/repository/view/model"
 	global_view "github.com/caos/zitadel/internal/view/repository"
+	"time"
 )
 
 const (
@@ -24,28 +25,32 @@ func (v *View) SearchIDPConfigs(request *iam_model.IDPConfigSearchRequest) ([]*i
 	return view.SearchIDPs(v.Db, idpConfigTable, request)
 }
 
-func (v *View) PutIDPConfig(idp *iam_es_model.IDPConfigView, sequence uint64) error {
+func (v *View) PutIDPConfig(idp *iam_es_model.IDPConfigView, sequence uint64, eventTimestamp time.Time) error {
 	err := view.PutIDP(v.Db, idpConfigTable, idp)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedIDPConfigSequence(sequence)
+	return v.ProcessedIDPConfigSequence(sequence, eventTimestamp)
 }
 
-func (v *View) DeleteIDPConfig(idpID string, eventSequence uint64) error {
+func (v *View) DeleteIDPConfig(idpID string, eventSequence uint64, eventTimestamp time.Time) error {
 	err := view.DeleteIDP(v.Db, idpConfigTable, idpID)
 	if err != nil && !errors.IsNotFound(err) {
 		return err
 	}
-	return v.ProcessedIDPConfigSequence(eventSequence)
+	return v.ProcessedIDPConfigSequence(eventSequence, eventTimestamp)
 }
 
 func (v *View) GetLatestIDPConfigSequence() (*global_view.CurrentSequence, error) {
 	return v.latestSequence(idpConfigTable)
 }
 
-func (v *View) ProcessedIDPConfigSequence(eventSequence uint64) error {
-	return v.saveCurrentSequence(idpConfigTable, eventSequence)
+func (v *View) ProcessedIDPConfigSequence(eventSequence uint64, eventTimestamp time.Time) error {
+	return v.saveCurrentSequence(idpConfigTable, eventSequence, eventTimestamp)
+}
+
+func (v *View) UpdateIDPConfigSpoolerRunTimestamp() error {
+	return v.updateSpoolerRunSequence(idpConfigTable)
 }
 
 func (v *View) GetLatestIDPConfigFailedEvent(sequence uint64) (*global_view.FailedEvent, error) {

internal/auth/repository/eventsourcing/view/idp_providers.go

@@ -6,6 +6,7 @@ import (
 	"github.com/caos/zitadel/internal/iam/repository/view"
 	"github.com/caos/zitadel/internal/iam/repository/view/model"
 	global_view "github.com/caos/zitadel/internal/view/repository"
+	"time"
 )
 
 const (
@@ -28,44 +29,48 @@ func (v *View) SearchIDPProviders(request *iam_model.IDPProviderSearchRequest) (
 	return view.SearchIDPProviders(v.Db, idpProviderTable, request)
 }
 
-func (v *View) PutIDPProvider(provider *model.IDPProviderView, sequence uint64) error {
+func (v *View) PutIDPProvider(provider *model.IDPProviderView, sequence uint64, eventTimestamp time.Time) error {
 	err := view.PutIDPProvider(v.Db, idpProviderTable, provider)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedIDPProviderSequence(sequence)
+	return v.ProcessedIDPProviderSequence(sequence, eventTimestamp)
 }
 
-func (v *View) PutIDPProviders(sequence uint64, providers ...*model.IDPProviderView) error {
+func (v *View) PutIDPProviders(sequence uint64, eventTimestamp time.Time, providers ...*model.IDPProviderView) error {
 	err := view.PutIDPProviders(v.Db, idpProviderTable, providers...)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedIDPProviderSequence(sequence)
+	return v.ProcessedIDPProviderSequence(sequence, eventTimestamp)
 }
 
-func (v *View) DeleteIDPProvider(aggregateID, idpConfigID string, eventSequence uint64) error {
+func (v *View) DeleteIDPProvider(aggregateID, idpConfigID string, eventSequence uint64, eventTimestamp time.Time) error {
 	err := view.DeleteIDPProvider(v.Db, idpProviderTable, aggregateID, idpConfigID)
 	if err != nil && !errors.IsNotFound(err) {
 		return err
 	}
-	return v.ProcessedIDPProviderSequence(eventSequence)
+	return v.ProcessedIDPProviderSequence(eventSequence, eventTimestamp)
 }
 
-func (v *View) DeleteIDPProvidersByAggregateID(aggregateID string, eventSequence uint64) error {
+func (v *View) DeleteIDPProvidersByAggregateID(aggregateID string, eventSequence uint64, eventTimestamp time.Time) error {
 	err := view.DeleteIDPProvidersByAggregateID(v.Db, idpProviderTable, aggregateID)
 	if err != nil && !errors.IsNotFound(err) {
 		return err
 	}
-	return v.ProcessedIDPProviderSequence(eventSequence)
+	return v.ProcessedIDPProviderSequence(eventSequence, eventTimestamp)
 }
 
 func (v *View) GetLatestIDPProviderSequence() (*global_view.CurrentSequence, error) {
 	return v.latestSequence(idpProviderTable)
 }
 
-func (v *View) ProcessedIDPProviderSequence(eventSequence uint64) error {
-	return v.saveCurrentSequence(idpProviderTable, eventSequence)
+func (v *View) ProcessedIDPProviderSequence(eventSequence uint64, eventTimestamp time.Time) error {
+	return v.saveCurrentSequence(idpProviderTable, eventSequence, eventTimestamp)
+}
+
+func (v *View) UpdateIDPProviderSpoolerRunTimestamp() error {
+	return v.updateSpoolerRunSequence(idpProviderTable)
 }
 
 func (v *View) GetLatestIDPProviderFailedEvent(sequence uint64) (*global_view.FailedEvent, error) {

internal/auth/repository/eventsourcing/view/key.go

@@ -5,6 +5,7 @@ import (
 	"github.com/caos/zitadel/internal/key/repository/view"
 	"github.com/caos/zitadel/internal/key/repository/view/model"
 	"github.com/caos/zitadel/internal/view/repository"
+	"time"
 )
 
 const (
@@ -31,36 +32,40 @@ func (v *View) GetActiveKeySet() ([]*key_model.PublicKey, error) {
 	return key_model.PublicKeysFromKeyView(model.KeyViewsToModel(keys), v.keyAlgorithm)
 }
 
-func (v *View) PutKeys(privateKey, publicKey *model.KeyView, eventSequence uint64) error {
+func (v *View) PutKeys(privateKey, publicKey *model.KeyView, eventSequence uint64, eventTimestamp time.Time) error {
 	err := view.PutKeys(v.Db, keyTable, privateKey, publicKey)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedKeySequence(eventSequence)
+	return v.ProcessedKeySequence(eventSequence, eventTimestamp)
 }
 
-func (v *View) DeleteKey(keyID string, private bool, eventSequence uint64) error {
+func (v *View) DeleteKey(keyID string, private bool, eventSequence uint64, eventTimestamp time.Time) error {
 	err := view.DeleteKey(v.Db, keyTable, keyID, private)
 	if err != nil {
 		return nil
 	}
-	return v.ProcessedKeySequence(eventSequence)
+	return v.ProcessedKeySequence(eventSequence, eventTimestamp)
 }
 
-func (v *View) DeleteKeyPair(keyID string, eventSequence uint64) error {
+func (v *View) DeleteKeyPair(keyID string, eventSequence uint64, eventTimestamp time.Time) error {
 	err := view.DeleteKeyPair(v.Db, keyTable, keyID)
 	if err != nil {
 		return nil
 	}
-	return v.ProcessedKeySequence(eventSequence)
+	return v.ProcessedKeySequence(eventSequence, eventTimestamp)
 }
 
 func (v *View) GetLatestKeySequence() (*repository.CurrentSequence, error) {
 	return v.latestSequence(keyTable)
 }
 
-func (v *View) ProcessedKeySequence(eventSequence uint64) error {
-	return v.saveCurrentSequence(keyTable, eventSequence)
+func (v *View) ProcessedKeySequence(eventSequence uint64, eventTimestamp time.Time) error {
+	return v.saveCurrentSequence(keyTable, eventSequence, eventTimestamp)
+}
+
+func (v *View) UpdateKeySpoolerRunTimestamp() error {
+	return v.updateSpoolerRunSequence(keyTable)
 }
 
 func (v *View) GetLatestKeyFailedEvent(sequence uint64) (*repository.FailedEvent, error) {

internal/auth/repository/eventsourcing/view/login_policies.go

@@ -5,6 +5,7 @@ import (
 	"github.com/caos/zitadel/internal/iam/repository/view"
 	"github.com/caos/zitadel/internal/iam/repository/view/model"
 	global_view "github.com/caos/zitadel/internal/view/repository"
+	"time"
 )
 
 const (
@@ -15,28 +16,32 @@ func (v *View) LoginPolicyByAggregateID(aggregateID string) (*model.LoginPolicyV
 	return view.GetLoginPolicyByAggregateID(v.Db, loginPolicyTable, aggregateID)
 }
 
-func (v *View) PutLoginPolicy(policy *model.LoginPolicyView, sequence uint64) error {
+func (v *View) PutLoginPolicy(policy *model.LoginPolicyView, sequence uint64, eventTimestamp time.Time) error {
 	err := view.PutLoginPolicy(v.Db, loginPolicyTable, policy)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedLoginPolicySequence(sequence)
+	return v.ProcessedLoginPolicySequence(sequence, eventTimestamp)
 }
 
-func (v *View) DeleteLoginPolicy(aggregateID string, eventSequence uint64) error {
+func (v *View) DeleteLoginPolicy(aggregateID string, eventSequence uint64, eventTimestamp time.Time) error {
 	err := view.DeleteLoginPolicy(v.Db, loginPolicyTable, aggregateID)
 	if err != nil && !errors.IsNotFound(err) {
 		return err
 	}
-	return v.ProcessedLoginPolicySequence(eventSequence)
+	return v.ProcessedLoginPolicySequence(eventSequence, eventTimestamp)
 }
 
 func (v *View) GetLatestLoginPolicySequence() (*global_view.CurrentSequence, error) {
 	return v.latestSequence(loginPolicyTable)
 }
 
-func (v *View) ProcessedLoginPolicySequence(eventSequence uint64) error {
-	return v.saveCurrentSequence(loginPolicyTable, eventSequence)
+func (v *View) ProcessedLoginPolicySequence(eventSequence uint64, eventTimestamp time.Time) error {
+	return v.saveCurrentSequence(loginPolicyTable, eventSequence, eventTimestamp)
+}
+
+func (v *View) UpdateLoginPolicySpoolerRunTimestamp() error {
+	return v.updateSpoolerRunSequence(loginPolicyTable)
 }
 
 func (v *View) GetLatestLoginPolicyFailedEvent(sequence uint64) (*global_view.FailedEvent, error) {

internal/auth/repository/eventsourcing/view/machine_keys.go

@@ -5,6 +5,7 @@ import (
 	"github.com/caos/zitadel/internal/user/repository/view"
 	"github.com/caos/zitadel/internal/user/repository/view/model"
 	"github.com/caos/zitadel/internal/view/repository"
+	"time"
 )
 
 const (
@@ -27,39 +28,43 @@ func (v *View) SearchMachineKeys(request *usr_model.MachineKeySearchRequest) ([]
 	return view.SearchMachineKeys(v.Db, machineKeyTable, request)
 }
 
-func (v *View) PutMachineKey(key *model.MachineKeyView, sequence uint64) error {
+func (v *View) PutMachineKey(key *model.MachineKeyView, sequence uint64, eventTimestamp time.Time) error {
 	err := view.PutMachineKey(v.Db, machineKeyTable, key)
 	if err != nil {
 		return err
 	}
 	if sequence != 0 {
-		return v.ProcessedMachineKeySequence(sequence)
+		return v.ProcessedMachineKeySequence(sequence, eventTimestamp)
 	}
 	return nil
 }
 
-func (v *View) DeleteMachineKey(keyID string, eventSequence uint64) error {
+func (v *View) DeleteMachineKey(keyID string, eventSequence uint64, eventTimestamp time.Time) error {
 	err := view.DeleteMachineKey(v.Db, machineKeyTable, keyID)
 	if err != nil {
 		return nil
 	}
-	return v.ProcessedMachineKeySequence(eventSequence)
+	return v.ProcessedMachineKeySequence(eventSequence, eventTimestamp)
 }
 
-func (v *View) DeleteMachineKeysByUserID(userID string, eventSequence uint64) error {
+func (v *View) DeleteMachineKeysByUserID(userID string, eventSequence uint64, eventTimestamp time.Time) error {
 	err := view.DeleteMachineKey(v.Db, machineKeyTable, userID)
 	if err != nil {
 		return nil
 	}
-	return v.ProcessedMachineKeySequence(eventSequence)
+	return v.ProcessedMachineKeySequence(eventSequence, eventTimestamp)
 }
 
 func (v *View) GetLatestMachineKeySequence() (*repository.CurrentSequence, error) {
 	return v.latestSequence(machineKeyTable)
 }
 
-func (v *View) ProcessedMachineKeySequence(eventSequence uint64) error {
-	return v.saveCurrentSequence(machineKeyTable, eventSequence)
+func (v *View) ProcessedMachineKeySequence(eventSequence uint64, eventTimestamp time.Time) error {
+	return v.saveCurrentSequence(machineKeyTable, eventSequence, eventTimestamp)
+}
+
+func (v *View) UpdateMachineKeySpoolerRunTimestamp() error {
+	return v.updateSpoolerRunSequence(machineKeyTable)
 }
 
 func (v *View) GetLatestMachineKeyFailedEvent(sequence uint64) (*repository.FailedEvent, error) {

internal/auth/repository/eventsourcing/view/org.go

@@ -5,6 +5,7 @@ import (
 	org_view "github.com/caos/zitadel/internal/org/repository/view"
 	org_model "github.com/caos/zitadel/internal/org/repository/view/model"
 	"github.com/caos/zitadel/internal/view/repository"
+	"time"
 )
 
 const (
@@ -23,12 +24,12 @@ func (v *View) SearchOrgs(req *model.OrgSearchRequest) ([]*org_model.OrgView, ui
 	return org_view.SearchOrgs(v.Db, orgTable, req)
 }
 
-func (v *View) PutOrg(org *org_model.OrgView) error {
+func (v *View) PutOrg(org *org_model.OrgView, eventTimestamp time.Time) error {
 	err := org_view.PutOrg(v.Db, orgTable, org)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedOrgSequence(org.Sequence)
+	return v.ProcessedOrgSequence(org.Sequence, eventTimestamp)
 }
 
 func (v *View) GetLatestOrgFailedEvent(sequence uint64) (*repository.FailedEvent, error) {
@@ -39,10 +40,14 @@ func (v *View) ProcessedOrgFailedEvent(failedEvent *repository.FailedEvent) erro
 	return v.saveFailedEvent(failedEvent)
 }
 
+func (v *View) UpdateOrgSpoolerRunTimestamp() error {
+	return v.updateSpoolerRunSequence(orgTable)
+}
+
 func (v *View) GetLatestOrgSequence() (*repository.CurrentSequence, error) {
 	return v.latestSequence(orgTable)
 }
 
-func (v *View) ProcessedOrgSequence(eventSequence uint64) error {
-	return v.saveCurrentSequence(orgTable, eventSequence)
+func (v *View) ProcessedOrgSequence(eventSequence uint64, eventTimestamp time.Time) error {
+	return v.saveCurrentSequence(orgTable, eventSequence, eventTimestamp)
 }

internal/auth/repository/eventsourcing/view/org_iam_policy.go

@@ -5,6 +5,7 @@ import (
 	"github.com/caos/zitadel/internal/iam/repository/view"
 	"github.com/caos/zitadel/internal/iam/repository/view/model"
 	global_view "github.com/caos/zitadel/internal/view/repository"
+	"time"
 )
 
 const (
@@ -15,28 +16,32 @@ func (v *View) OrgIAMPolicyByAggregateID(aggregateID string) (*model.OrgIAMPolic
 	return view.GetOrgIAMPolicyByAggregateID(v.Db, orgIAMPolicyTable, aggregateID)
 }
 
-func (v *View) PutOrgIAMPolicy(policy *model.OrgIAMPolicyView, sequence uint64) error {
+func (v *View) PutOrgIAMPolicy(policy *model.OrgIAMPolicyView, sequence uint64, eventTimestamp time.Time) error {
 	err := view.PutOrgIAMPolicy(v.Db, orgIAMPolicyTable, policy)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedOrgIAMPolicySequence(sequence)
+	return v.ProcessedOrgIAMPolicySequence(sequence, eventTimestamp)
 }
 
-func (v *View) DeleteOrgIAMPolicy(aggregateID string, eventSequence uint64) error {
+func (v *View) DeleteOrgIAMPolicy(aggregateID string, eventSequence uint64, eventTimestamp time.Time) error {
 	err := view.DeleteOrgIAMPolicy(v.Db, orgIAMPolicyTable, aggregateID)
 	if err != nil && !errors.IsNotFound(err) {
 		return err
 	}
-	return v.ProcessedOrgIAMPolicySequence(eventSequence)
+	return v.ProcessedOrgIAMPolicySequence(eventSequence, eventTimestamp)
 }
 
 func (v *View) GetLatestOrgIAMPolicySequence() (*global_view.CurrentSequence, error) {
 	return v.latestSequence(orgIAMPolicyTable)
 }
 
-func (v *View) ProcessedOrgIAMPolicySequence(eventSequence uint64) error {
-	return v.saveCurrentSequence(orgIAMPolicyTable, eventSequence)
+func (v *View) ProcessedOrgIAMPolicySequence(eventSequence uint64, eventTimestamp time.Time) error {
+	return v.saveCurrentSequence(orgIAMPolicyTable, eventSequence, eventTimestamp)
+}
+
+func (v *View) UpdateOrgIAMPolicySpoolerRunTimestamp() error {
+	return v.updateSpoolerRunSequence(orgIAMPolicyTable)
 }
 
 func (v *View) GetLatestOrgIAMPolicyFailedEvent(sequence uint64) (*global_view.FailedEvent, error) {

internal/auth/repository/eventsourcing/view/password_complexity_policy.go

@@ -5,6 +5,7 @@ import (
 	"github.com/caos/zitadel/internal/iam/repository/view"
 	"github.com/caos/zitadel/internal/iam/repository/view/model"
 	global_view "github.com/caos/zitadel/internal/view/repository"
+	"time"
 )
 
 const (
@@ -15,28 +16,32 @@ func (v *View) PasswordComplexityPolicyByAggregateID(aggregateID string) (*model
 	return view.GetPasswordComplexityPolicyByAggregateID(v.Db, passwordComplexityPolicyTable, aggregateID)
 }
 
-func (v *View) PutPasswordComplexityPolicy(policy *model.PasswordComplexityPolicyView, sequence uint64) error {
+func (v *View) PutPasswordComplexityPolicy(policy *model.PasswordComplexityPolicyView, sequence uint64, eventTimestamp time.Time) error {
 	err := view.PutPasswordComplexityPolicy(v.Db, passwordComplexityPolicyTable, policy)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedPasswordComplexityPolicySequence(sequence)
+	return v.ProcessedPasswordComplexityPolicySequence(sequence, eventTimestamp)
 }
 
-func (v *View) DeletePasswordComplexityPolicy(aggregateID string, eventSequence uint64) error {
+func (v *View) DeletePasswordComplexityPolicy(aggregateID string, eventSequence uint64, eventTimestamp time.Time) error {
 	err := view.DeletePasswordComplexityPolicy(v.Db, passwordComplexityPolicyTable, aggregateID)
 	if err != nil && !errors.IsNotFound(err) {
 		return err
 	}
-	return v.ProcessedPasswordComplexityPolicySequence(eventSequence)
+	return v.ProcessedPasswordComplexityPolicySequence(eventSequence, eventTimestamp)
 }
 
 func (v *View) GetLatestPasswordComplexityPolicySequence() (*global_view.CurrentSequence, error) {
 	return v.latestSequence(passwordComplexityPolicyTable)
 }
 
-func (v *View) ProcessedPasswordComplexityPolicySequence(eventSequence uint64) error {
-	return v.saveCurrentSequence(passwordComplexityPolicyTable, eventSequence)
+func (v *View) ProcessedPasswordComplexityPolicySequence(eventSequence uint64, eventTimestamp time.Time) error {
+	return v.saveCurrentSequence(passwordComplexityPolicyTable, eventSequence, eventTimestamp)
+}
+
+func (v *View) UpdatePasswordComplexityPolicySpoolerRunTimestamp() error {
+	return v.updateSpoolerRunSequence(passwordComplexityPolicyTable)
 }
 
 func (v *View) GetLatestPasswordComplexityPolicyFailedEvent(sequence uint64) (*global_view.FailedEvent, error) {

internal/auth/repository/eventsourcing/view/project_role.go

@@ -5,6 +5,7 @@ import (
 	"github.com/caos/zitadel/internal/project/repository/view"
 	"github.com/caos/zitadel/internal/project/repository/view/model"
 	"github.com/caos/zitadel/internal/view/repository"
+	"time"
 )
 
 const (
@@ -31,20 +32,20 @@ func (v *View) SearchProjectRoles(request *proj_model.ProjectRoleSearchRequest)
 	return view.SearchProjectRoles(v.Db, projectRoleTable, request)
 }
 
-func (v *View) PutProjectRole(project *model.ProjectRoleView) error {
+func (v *View) PutProjectRole(project *model.ProjectRoleView, eventTimestamp time.Time) error {
 	err := view.PutProjectRole(v.Db, projectRoleTable, project)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedProjectRoleSequence(project.Sequence)
+	return v.ProcessedProjectRoleSequence(project.Sequence, eventTimestamp)
 }
 
-func (v *View) DeleteProjectRole(projectID, orgID, key string, eventSequence uint64) error {
+func (v *View) DeleteProjectRole(projectID, orgID, key string, eventSequence uint64, eventTimestamp time.Time) error {
 	err := view.DeleteProjectRole(v.Db, projectRoleTable, projectID, orgID, key)
 	if err != nil {
 		return nil
 	}
-	return v.ProcessedProjectRoleSequence(eventSequence)
+	return v.ProcessedProjectRoleSequence(eventSequence, eventTimestamp)
 }
 
 func (v *View) DeleteProjectRolesByProjectID(projectID string) error {
@@ -55,8 +56,12 @@ func (v *View) GetLatestProjectRoleSequence() (*repository.CurrentSequence, erro
 	return v.latestSequence(projectRoleTable)
 }
 
-func (v *View) ProcessedProjectRoleSequence(eventSequence uint64) error {
-	return v.saveCurrentSequence(projectRoleTable, eventSequence)
+func (v *View) ProcessedProjectRoleSequence(eventSequence uint64, eventTimestamp time.Time) error {
+	return v.saveCurrentSequence(projectRoleTable, eventSequence, eventTimestamp)
+}
+
+func (v *View) UpdateProjectRoleSpoolerRunTimestamp() error {
+	return v.updateSpoolerRunSequence(projectRoleTable)
 }
 
 func (v *View) GetLatestProjectRoleFailedEvent(sequence uint64) (*repository.FailedEvent, error) {

internal/auth/repository/eventsourcing/view/sequence.go

@@ -2,16 +2,29 @@ package view
 
 import (
 	"github.com/caos/zitadel/internal/view/repository"
+	"time"
 )
 
 const (
 	sequencesTable = "auth.current_sequences"
 )
 
-func (v *View) saveCurrentSequence(viewName string, sequence uint64) error {
-	return repository.SaveCurrentSequence(v.Db, sequencesTable, viewName, sequence)
+func (v *View) saveCurrentSequence(viewName string, sequence uint64, eventTimestamp time.Time) error {
+	return repository.SaveCurrentSequence(v.Db, sequencesTable, viewName, sequence, eventTimestamp)
 }
 
 func (v *View) latestSequence(viewName string) (*repository.CurrentSequence, error) {
 	return repository.LatestSequence(v.Db, sequencesTable, viewName)
 }
+
+func (v *View) updateSpoolerRunSequence(viewName string) error {
+	currentSequence, err := repository.LatestSequence(v.Db, sequencesTable, viewName)
+	if err != nil {
+		return err
+	}
+	if currentSequence.ViewName == "" {
+		currentSequence.ViewName = viewName
+	}
+	currentSequence.LastSuccessfulSpoolerRun = time.Now()
+	return repository.UpdateCurrentSequence(v.Db, sequencesTable, currentSequence)
+}

internal/auth/repository/eventsourcing/view/token.go

@@ -4,6 +4,7 @@ import (
 	usr_view "github.com/caos/zitadel/internal/user/repository/view"
 	"github.com/caos/zitadel/internal/user/repository/view/model"
 	"github.com/caos/zitadel/internal/view/repository"
+	"time"
 )
 
 const (
@@ -18,60 +19,64 @@ func (v *View) TokensByUserID(userID string) ([]*model.TokenView, error) {
 	return usr_view.TokensByUserID(v.Db, tokenTable, userID)
 }
 
-func (v *View) PutToken(token *model.TokenView) error {
+func (v *View) PutToken(token *model.TokenView, eventTimestamp time.Time) error {
 	err := usr_view.PutToken(v.Db, tokenTable, token)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedTokenSequence(token.Sequence)
+	return v.ProcessedTokenSequence(token.Sequence, eventTimestamp)
 }
 
-func (v *View) PutTokens(token []*model.TokenView, sequence uint64) error {
+func (v *View) PutTokens(token []*model.TokenView, sequence uint64, eventTimestamp time.Time) error {
 	err := usr_view.PutTokens(v.Db, tokenTable, token...)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedTokenSequence(sequence)
+	return v.ProcessedTokenSequence(sequence, eventTimestamp)
 }
 
-func (v *View) DeleteToken(tokenID string, eventSequence uint64) error {
+func (v *View) DeleteToken(tokenID string, eventSequence uint64, eventTimestamp time.Time) error {
 	err := usr_view.DeleteToken(v.Db, tokenTable, tokenID)
 	if err != nil {
 		return nil
 	}
-	return v.ProcessedTokenSequence(eventSequence)
+	return v.ProcessedTokenSequence(eventSequence, eventTimestamp)
 }
 
-func (v *View) DeleteSessionTokens(agentID, userID string, eventSequence uint64) error {
+func (v *View) DeleteSessionTokens(agentID, userID string, eventSequence uint64, eventTimestamp time.Time) error {
 	err := usr_view.DeleteSessionTokens(v.Db, tokenTable, agentID, userID)
 	if err != nil {
 		return nil
 	}
-	return v.ProcessedTokenSequence(eventSequence)
+	return v.ProcessedTokenSequence(eventSequence, eventTimestamp)
 }
 
-func (v *View) DeleteUserTokens(userID string, eventSequence uint64) error {
+func (v *View) DeleteUserTokens(userID string, eventSequence uint64, eventTimestamp time.Time) error {
 	err := usr_view.DeleteUserTokens(v.Db, tokenTable, userID)
 	if err != nil {
 		return nil
 	}
-	return v.ProcessedTokenSequence(eventSequence)
+	return v.ProcessedTokenSequence(eventSequence, eventTimestamp)
 }
 
-func (v *View) DeleteApplicationTokens(eventSequence uint64, ids ...string) error {
+func (v *View) DeleteApplicationTokens(eventSequence uint64, eventTimestamp time.Time, ids ...string) error {
 	err := usr_view.DeleteApplicationTokens(v.Db, tokenTable, ids)
 	if err != nil {
 		return nil
 	}
-	return v.ProcessedTokenSequence(eventSequence)
+	return v.ProcessedTokenSequence(eventSequence, eventTimestamp)
 }
 
 func (v *View) GetLatestTokenSequence() (*repository.CurrentSequence, error) {
 	return v.latestSequence(tokenTable)
 }
 
-func (v *View) ProcessedTokenSequence(eventSequence uint64) error {
-	return v.saveCurrentSequence(tokenTable, eventSequence)
+func (v *View) ProcessedTokenSequence(eventSequence uint64, eventTimestamp time.Time) error {
+	return v.saveCurrentSequence(tokenTable, eventSequence, eventTimestamp)
+}
+
+func (v *View) UpdateTokenSpoolerRunTimestamp() error {
+	return v.updateSpoolerRunSequence(tokenTable)
 }
 
 func (v *View) GetLatestTokenFailedEvent(sequence uint64) (*repository.FailedEvent, error) {

internal/auth/repository/eventsourcing/view/user.go

@@ -5,6 +5,7 @@ import (
 	"github.com/caos/zitadel/internal/user/repository/view"
 	"github.com/caos/zitadel/internal/user/repository/view/model"
 	"github.com/caos/zitadel/internal/view/repository"
+	"time"
 )
 
 const (
@@ -51,36 +52,40 @@ func (v *View) UserMfas(userID string) ([]*usr_model.MultiFactor, error) {
 	return view.UserMfas(v.Db, userTable, userID)
 }
 
-func (v *View) PutUser(user *model.UserView, sequence uint64) error {
+func (v *View) PutUser(user *model.UserView, sequence uint64, eventTimestamp time.Time) error {
 	err := view.PutUser(v.Db, userTable, user)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedUserSequence(sequence)
+	return v.ProcessedUserSequence(sequence, eventTimestamp)
 }
 
-func (v *View) PutUsers(users []*model.UserView, sequence uint64) error {
+func (v *View) PutUsers(users []*model.UserView, sequence uint64, eventTimestamp time.Time) error {
 	err := view.PutUsers(v.Db, userTable, users...)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedUserSequence(sequence)
+	return v.ProcessedUserSequence(sequence, eventTimestamp)
 }
 
-func (v *View) DeleteUser(userID string, eventSequence uint64) error {
+func (v *View) DeleteUser(userID string, eventSequence uint64, eventTimestamp time.Time) error {
 	err := view.DeleteUser(v.Db, userTable, userID)
 	if err != nil {
 		return nil
 	}
-	return v.ProcessedUserSequence(eventSequence)
+	return v.ProcessedUserSequence(eventSequence, eventTimestamp)
 }
 
 func (v *View) GetLatestUserSequence() (*repository.CurrentSequence, error) {
 	return v.latestSequence(userTable)
 }
 
-func (v *View) ProcessedUserSequence(eventSequence uint64) error {
-	return v.saveCurrentSequence(userTable, eventSequence)
+func (v *View) ProcessedUserSequence(eventSequence uint64, eventTimestamp time.Time) error {
+	return v.saveCurrentSequence(userTable, eventSequence, eventTimestamp)
+}
+
+func (v *View) UpdateUserSpoolerRunTimestamp() error {
+	return v.updateSpoolerRunSequence(userTable)
 }
 
 func (v *View) GetLatestUserFailedEvent(sequence uint64) (*repository.FailedEvent, error) {

internal/auth/repository/eventsourcing/view/user_grant.go

@@ -5,6 +5,7 @@ import (
 	"github.com/caos/zitadel/internal/usergrant/repository/view"
 	"github.com/caos/zitadel/internal/usergrant/repository/view/model"
 	"github.com/caos/zitadel/internal/view/repository"
+	"time"
 )
 
 const (
@@ -35,36 +36,40 @@ func (v *View) SearchUserGrants(request *grant_model.UserGrantSearchRequest) ([]
 	return view.SearchUserGrants(v.Db, userGrantTable, request)
 }
 
-func (v *View) PutUserGrant(grant *model.UserGrantView, sequence uint64) error {
+func (v *View) PutUserGrant(grant *model.UserGrantView, sequence uint64, eventTimestamp time.Time) error {
 	err := view.PutUserGrant(v.Db, userGrantTable, grant)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedUserGrantSequence(sequence)
+	return v.ProcessedUserGrantSequence(sequence, eventTimestamp)
 }
 
-func (v *View) PutUserGrants(grants []*model.UserGrantView, sequence uint64) error {
+func (v *View) PutUserGrants(grants []*model.UserGrantView, sequence uint64, eventTimestamp time.Time) error {
 	err := view.PutUserGrants(v.Db, userGrantTable, grants...)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedUserGrantSequence(sequence)
+	return v.ProcessedUserGrantSequence(sequence, eventTimestamp)
 }
 
-func (v *View) DeleteUserGrant(grantID string, eventSequence uint64) error {
+func (v *View) DeleteUserGrant(grantID string, eventSequence uint64, eventTimestamp time.Time) error {
 	err := view.DeleteUserGrant(v.Db, userGrantTable, grantID)
 	if err != nil {
 		return nil
 	}
-	return v.ProcessedUserGrantSequence(eventSequence)
+	return v.ProcessedUserGrantSequence(eventSequence, eventTimestamp)
 }
 
 func (v *View) GetLatestUserGrantSequence() (*repository.CurrentSequence, error) {
 	return v.latestSequence(userGrantTable)
 }
 
-func (v *View) ProcessedUserGrantSequence(eventSequence uint64) error {
-	return v.saveCurrentSequence(userGrantTable, eventSequence)
+func (v *View) ProcessedUserGrantSequence(eventSequence uint64, eventTimestamp time.Time) error {
+	return v.saveCurrentSequence(userGrantTable, eventSequence, eventTimestamp)
+}
+
+func (v *View) UpdateUserGrantSpoolerRunTimestamp() error {
+	return v.updateSpoolerRunSequence(userGrantTable)
 }
 
 func (v *View) GetLatestUserGrantFailedEvent(sequence uint64) (*repository.FailedEvent, error) {

internal/auth/repository/eventsourcing/view/user_membership.go

@@ -5,6 +5,7 @@ import (
 	"github.com/caos/zitadel/internal/user/repository/view"
 	"github.com/caos/zitadel/internal/user/repository/view/model"
 	"github.com/caos/zitadel/internal/view/repository"
+	"time"
 )
 
 const (
@@ -27,60 +28,64 @@ func (v *View) SearchUserMemberships(request *usr_model.UserMembershipSearchRequ
 	return view.SearchUserMemberships(v.Db, userMembershipTable, request)
 }
 
-func (v *View) PutUserMembership(membership *model.UserMembershipView, sequence uint64) error {
+func (v *View) PutUserMembership(membership *model.UserMembershipView, sequence uint64, eventTimestamp time.Time) error {
 	err := view.PutUserMembership(v.Db, userMembershipTable, membership)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedUserMembershipSequence(sequence)
+	return v.ProcessedUserMembershipSequence(sequence, eventTimestamp)
 }
 
-func (v *View) BulkPutUserMemberships(memberships []*model.UserMembershipView, sequence uint64) error {
+func (v *View) BulkPutUserMemberships(memberships []*model.UserMembershipView, sequence uint64, eventTimestamp time.Time) error {
 	err := view.PutUserMemberships(v.Db, userMembershipTable, memberships...)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedUserMembershipSequence(sequence)
+	return v.ProcessedUserMembershipSequence(sequence, eventTimestamp)
 }
 
-func (v *View) DeleteUserMembership(userID, aggregateID, objectID string, memberType usr_model.MemberType, eventSequence uint64) error {
+func (v *View) DeleteUserMembership(userID, aggregateID, objectID string, memberType usr_model.MemberType, eventSequence uint64, eventTimestamp time.Time) error {
 	err := view.DeleteUserMembership(v.Db, userMembershipTable, userID, aggregateID, objectID, memberType)
 	if err != nil {
 		return nil
 	}
-	return v.ProcessedUserMembershipSequence(eventSequence)
+	return v.ProcessedUserMembershipSequence(eventSequence, eventTimestamp)
 }
 
-func (v *View) DeleteUserMembershipsByUserID(userID string, eventSequence uint64) error {
+func (v *View) DeleteUserMembershipsByUserID(userID string, eventSequence uint64, eventTimestamp time.Time) error {
 	err := view.DeleteUserMembershipsByUserID(v.Db, userMembershipTable, userID)
 	if err != nil {
 		return nil
 	}
-	return v.ProcessedUserMembershipSequence(eventSequence)
+	return v.ProcessedUserMembershipSequence(eventSequence, eventTimestamp)
 }
 
-func (v *View) DeleteUserMembershipsByAggregateID(aggregateID string, eventSequence uint64) error {
+func (v *View) DeleteUserMembershipsByAggregateID(aggregateID string, eventSequence uint64, eventTimestamp time.Time) error {
 	err := view.DeleteUserMembershipsByAggregateID(v.Db, userMembershipTable, aggregateID)
 	if err != nil {
 		return nil
 	}
-	return v.ProcessedUserMembershipSequence(eventSequence)
+	return v.ProcessedUserMembershipSequence(eventSequence, eventTimestamp)
 }
 
-func (v *View) DeleteUserMembershipsByAggregateIDAndObjectID(aggregateID, objectID string, eventSequence uint64) error {
+func (v *View) DeleteUserMembershipsByAggregateIDAndObjectID(aggregateID, objectID string, eventSequence uint64, eventTimestamp time.Time) error {
 	err := view.DeleteUserMembershipsByAggregateIDAndObjectID(v.Db, userMembershipTable, aggregateID, objectID)
 	if err != nil {
 		return nil
 	}
-	return v.ProcessedUserMembershipSequence(eventSequence)
+	return v.ProcessedUserMembershipSequence(eventSequence, eventTimestamp)
 }
 
 func (v *View) GetLatestUserMembershipSequence() (*repository.CurrentSequence, error) {
 	return v.latestSequence(userMembershipTable)
 }
 
-func (v *View) ProcessedUserMembershipSequence(eventSequence uint64) error {
-	return v.saveCurrentSequence(userMembershipTable, eventSequence)
+func (v *View) ProcessedUserMembershipSequence(eventSequence uint64, eventTimestamp time.Time) error {
+	return v.saveCurrentSequence(userMembershipTable, eventSequence, eventTimestamp)
+}
+
+func (v *View) UpdateUserMembershipSpoolerRunTimestamp() error {
+	return v.updateSpoolerRunSequence(userMembershipTable)
 }
 
 func (v *View) GetLatestUserMembershipFailedEvent(sequence uint64) (*repository.FailedEvent, error) {

internal/auth/repository/eventsourcing/view/user_session.go

@@ -4,6 +4,7 @@ import (
 	"github.com/caos/zitadel/internal/user/repository/view"
 	"github.com/caos/zitadel/internal/user/repository/view/model"
 	"github.com/caos/zitadel/internal/view/repository"
+	"time"
 )
 
 const (
@@ -22,36 +23,44 @@ func (v *View) UserSessionsByAgentID(agentID string) ([]*model.UserSessionView,
 	return view.UserSessionsByAgentID(v.Db, userSessionTable, agentID)
 }
 
-func (v *View) PutUserSession(userSession *model.UserSessionView) error {
+func (v *View) ActiveUserSessions() ([]*model.UserSessionView, error) {
+	return view.ActiveUserSessions(v.Db, userSessionTable)
+}
+
+func (v *View) PutUserSession(userSession *model.UserSessionView, eventTimestamp time.Time) error {
 	err := view.PutUserSession(v.Db, userSessionTable, userSession)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedUserSessionSequence(userSession.Sequence)
+	return v.ProcessedUserSessionSequence(userSession.Sequence, eventTimestamp)
 }
 
-func (v *View) PutUserSessions(userSession []*model.UserSessionView, sequence uint64) error {
+func (v *View) PutUserSessions(userSession []*model.UserSessionView, sequence uint64, eventTimestamp time.Time) error {
 	err := view.PutUserSessions(v.Db, userSessionTable, userSession...)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedUserSessionSequence(sequence)
+	return v.ProcessedUserSessionSequence(sequence, eventTimestamp)
 }
 
-func (v *View) DeleteUserSessions(userID string, eventSequence uint64) error {
+func (v *View) DeleteUserSessions(userID string, eventSequence uint64, eventTimestamp time.Time) error {
 	err := view.DeleteUserSessions(v.Db, userSessionTable, userID)
 	if err != nil {
 		return nil
 	}
-	return v.ProcessedUserSessionSequence(eventSequence)
+	return v.ProcessedUserSessionSequence(eventSequence, eventTimestamp)
 }
 
 func (v *View) GetLatestUserSessionSequence() (*repository.CurrentSequence, error) {
 	return v.latestSequence(userSessionTable)
 }
 
-func (v *View) ProcessedUserSessionSequence(eventSequence uint64) error {
-	return v.saveCurrentSequence(userSessionTable, eventSequence)
+func (v *View) ProcessedUserSessionSequence(eventSequence uint64, eventTimestamp time.Time) error {
+	return v.saveCurrentSequence(userSessionTable, eventSequence, eventTimestamp)
+}
+
+func (v *View) UpdateUserSessionSpoolerRunTimestamp() error {
+	return v.updateSpoolerRunSequence(userSessionTable)
 }
 
 func (v *View) GetLatestUserSessionFailedEvent(sequence uint64) (*repository.FailedEvent, error) {

internal/auth/repository/user_session.go

@@ -7,4 +7,5 @@ import (
 
 type UserSessionRepository interface {
 	GetMyUserSessions(ctx context.Context) ([]*model.UserSessionView, error)
+	ActiveUserSessionCount() int64
 }

internal/authz/repository/eventsourcing/eventstore/token_verifier.go

@@ -15,7 +15,7 @@ import (
 	caos_errs "github.com/caos/zitadel/internal/errors"
 	iam_event "github.com/caos/zitadel/internal/iam/repository/eventsourcing"
 	proj_event "github.com/caos/zitadel/internal/project/repository/eventsourcing"
-	"github.com/caos/zitadel/internal/tracing"
+	"github.com/caos/zitadel/internal/telemetry/tracing"
 )
 
 type TokenVerifierRepo struct {

internal/authz/repository/eventsourcing/handler/application.go

@@ -54,17 +54,21 @@ func (a *Application) Reduce(event *models.Event) (err error) {
 		if err != nil {
 			return err
 		}
-		return a.view.DeleteApplication(app.ID, event.Sequence)
+		return a.view.DeleteApplication(app.ID, event.Sequence, event.CreationDate)
 	default:
-		return a.view.ProcessedApplicationSequence(event.Sequence)
+		return a.view.ProcessedApplicationSequence(event.Sequence, event.CreationDate)
 	}
 	if err != nil {
 		return err
 	}
-	return a.view.PutApplication(app)
+	return a.view.PutApplication(app, event.CreationDate)
 }
 
 func (a *Application) OnError(event *models.Event, spoolerError error) error {
 	logging.LogWithFields("SPOOL-sjZw", "id", event.AggregateID).WithError(spoolerError).Warn("something went wrong in project app handler")
 	return spooler.HandleError(event, spoolerError, a.view.GetLatestApplicationFailedEvent, a.view.ProcessedApplicationFailedEvent, a.view.ProcessedApplicationSequence, a.errorCountUntilSkip)
 }
+
+func (a *Application) OnSuccess() error {
+	return spooler.HandleSuccess(a.view.UpdateApplicationSpoolerRunTimestamp)
+}

internal/authz/repository/eventsourcing/handler/org.go

@@ -53,13 +53,17 @@ func (o *Org) Reduce(event *es_models.Event) error {
 			return err
 		}
 	default:
-		return o.view.ProcessedOrgSequence(event.Sequence)
+		return o.view.ProcessedOrgSequence(event.Sequence, event.CreationDate)
 	}
 
-	return o.view.PutOrg(org)
+	return o.view.PutOrg(org, event.CreationDate)
 }
 
 func (o *Org) OnError(event *es_models.Event, spoolerErr error) error {
 	logging.LogWithFields("SPOOL-8siWS", "id", event.AggregateID).WithError(spoolerErr).Warn("something went wrong in org handler")
 	return spooler.HandleError(event, spoolerErr, o.view.GetLatestOrgFailedEvent, o.view.ProcessedOrgFailedEvent, o.view.ProcessedOrgSequence, o.errorCountUntilSkip)
 }
+
+func (o *Org) OnSuccess() error {
+	return spooler.HandleSuccess(o.view.UpdateOrgSpoolerRunTimestamp)
+}

internal/authz/repository/eventsourcing/handler/user_grant.go

@@ -75,7 +75,7 @@ func (u *UserGrant) processProject(event *models.Event) (err error) {
 		member.SetData(event)
 		return u.processMember(event, "PROJECT_GRANT", member.GrantID, member.UserID, member.Roles)
 	default:
-		return u.view.ProcessedUserGrantSequence(event.Sequence)
+		return u.view.ProcessedUserGrantSequence(event.Sequence, event.CreationDate)
 	}
 }
 
@@ -86,7 +86,7 @@ func (u *UserGrant) processOrg(event *models.Event) (err error) {
 		member.SetData(event)
 		return u.processMember(event, "ORG", "", member.UserID, member.Roles)
 	default:
-		return u.view.ProcessedUserGrantSequence(event.Sequence)
+		return u.view.ProcessedUserGrantSequence(event.Sequence, event.CreationDate)
 	}
 }
 
@@ -124,16 +124,16 @@ func (u *UserGrant) processIAMMember(event *models.Event, rolePrefix string, suf
 		}
 		grant.Sequence = event.Sequence
 		grant.ChangeDate = event.CreationDate
-		return u.view.PutUserGrant(grant, grant.Sequence)
+		return u.view.PutUserGrant(grant, grant.Sequence, event.CreationDate)
 	case iam_es_model.IAMMemberRemoved:
 		member.SetData(event)
 		grant, err := u.view.UserGrantByIDs(u.iamID, u.iamProjectID, member.UserID)
 		if err != nil {
 			return err
 		}
-		return u.view.DeleteUserGrant(grant.ID, event.Sequence)
+		return u.view.DeleteUserGrant(grant.ID, event.Sequence, event.CreationDate)
 	default:
-		return u.view.ProcessedUserGrantSequence(event.Sequence)
+		return u.view.ProcessedUserGrantSequence(event.Sequence, event.CreationDate)
 	}
 }
 
@@ -169,7 +169,7 @@ func (u *UserGrant) processMember(event *models.Event, rolePrefix, roleSuffix st
 		}
 		grant.Sequence = event.Sequence
 		grant.ChangeDate = event.CreationDate
-		return u.view.PutUserGrant(grant, event.Sequence)
+		return u.view.PutUserGrant(grant, event.Sequence, event.CreationDate)
 	case org_es_model.OrgMemberRemoved,
 		proj_es_model.ProjectMemberRemoved,
 		proj_es_model.ProjectGrantMemberRemoved:
@@ -179,18 +179,18 @@ func (u *UserGrant) processMember(event *models.Event, rolePrefix, roleSuffix st
 			return err
 		}
 		if errors.IsNotFound(err) {
-			return u.view.ProcessedUserGrantSequence(event.Sequence)
+			return u.view.ProcessedUserGrantSequence(event.Sequence, event.CreationDate)
 		}
 		if roleSuffix != "" {
 			roleKeys = suffixRoles(roleSuffix, roleKeys)
 		}
 		if grant.RoleKeys == nil {
-			return u.view.ProcessedUserGrantSequence(event.Sequence)
+			return u.view.ProcessedUserGrantSequence(event.Sequence, event.CreationDate)
 		}
 		grant.RoleKeys = mergeExistingRoles(rolePrefix, roleSuffix, grant.RoleKeys, nil)
-		return u.view.PutUserGrant(grant, event.Sequence)
+		return u.view.PutUserGrant(grant, event.Sequence, event.CreationDate)
 	default:
-		return u.view.ProcessedUserGrantSequence(event.Sequence)
+		return u.view.ProcessedUserGrantSequence(event.Sequence, event.CreationDate)
 	}
 }
 
@@ -235,3 +235,7 @@ func (u *UserGrant) OnError(event *models.Event, err error) error {
 	logging.LogWithFields("SPOOL-VcVoJ", "id", event.AggregateID).WithError(err).Warn("something went wrong in user grant handler")
 	return spooler.HandleError(event, err, u.view.GetLatestUserGrantFailedEvent, u.view.ProcessedUserGrantFailedEvent, u.view.ProcessedUserGrantSequence, u.errorCountUntilSkip)
 }
+
+func (u *UserGrant) OnSuccess() error {
+	return spooler.HandleSuccess(u.view.UpdateUserGrantSpoolerRunTimestamp)
+}

internal/authz/repository/eventsourcing/view/application.go

@@ -2,11 +2,12 @@ package view
 
 import (
 	"context"
+	"time"
 
 	proj_model "github.com/caos/zitadel/internal/project/model"
 	"github.com/caos/zitadel/internal/project/repository/view"
 	"github.com/caos/zitadel/internal/project/repository/view/model"
-	"github.com/caos/zitadel/internal/tracing"
+	"github.com/caos/zitadel/internal/telemetry/tracing"
 	"github.com/caos/zitadel/internal/view/repository"
 )
 
@@ -33,28 +34,32 @@ func (v *View) SearchApplications(request *proj_model.ApplicationSearchRequest)
 	return view.SearchApplications(v.Db, applicationTable, request)
 }
 
-func (v *View) PutApplication(project *model.ApplicationView) error {
+func (v *View) PutApplication(project *model.ApplicationView, eventTimestamp time.Time) error {
 	err := view.PutApplication(v.Db, applicationTable, project)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedApplicationSequence(project.Sequence)
+	return v.ProcessedApplicationSequence(project.Sequence, eventTimestamp)
 }
 
-func (v *View) DeleteApplication(appID string, eventSequence uint64) error {
+func (v *View) DeleteApplication(appID string, eventSequence uint64, eventTimestamp time.Time) error {
 	err := view.DeleteApplication(v.Db, applicationTable, appID)
 	if err != nil {
 		return nil
 	}
-	return v.ProcessedApplicationSequence(eventSequence)
+	return v.ProcessedApplicationSequence(eventSequence, eventTimestamp)
 }
 
 func (v *View) GetLatestApplicationSequence() (*repository.CurrentSequence, error) {
 	return v.latestSequence(applicationTable)
 }
 
-func (v *View) ProcessedApplicationSequence(eventSequence uint64) error {
-	return v.saveCurrentSequence(applicationTable, eventSequence)
+func (v *View) ProcessedApplicationSequence(eventSequence uint64, eventTimestamp time.Time) error {
+	return v.saveCurrentSequence(applicationTable, eventSequence, eventTimestamp)
+}
+
+func (v *View) UpdateApplicationSpoolerRunTimestamp() error {
+	return v.updateSpoolerRunSequence(applicationTable)
 }
 
 func (v *View) GetLatestApplicationFailedEvent(sequence uint64) (*repository.FailedEvent, error) {

internal/authz/repository/eventsourcing/view/org.go

@@ -5,6 +5,7 @@ import (
 	org_view "github.com/caos/zitadel/internal/org/repository/view"
 	org_model "github.com/caos/zitadel/internal/org/repository/view/model"
 	"github.com/caos/zitadel/internal/view/repository"
+	"time"
 )
 
 const (
@@ -19,12 +20,12 @@ func (v *View) SearchOrgs(req *model.OrgSearchRequest) ([]*org_model.OrgView, ui
 	return org_view.SearchOrgs(v.Db, orgTable, req)
 }
 
-func (v *View) PutOrg(org *org_model.OrgView) error {
+func (v *View) PutOrg(org *org_model.OrgView, eventTimestamp time.Time) error {
 	err := org_view.PutOrg(v.Db, orgTable, org)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedOrgSequence(org.Sequence)
+	return v.ProcessedOrgSequence(org.Sequence, eventTimestamp)
 }
 
 func (v *View) GetLatestOrgFailedEvent(sequence uint64) (*repository.FailedEvent, error) {
@@ -39,6 +40,10 @@ func (v *View) GetLatestOrgSequence() (*repository.CurrentSequence, error) {
 	return v.latestSequence(orgTable)
 }
 
-func (v *View) ProcessedOrgSequence(eventSequence uint64) error {
-	return v.saveCurrentSequence(orgTable, eventSequence)
+func (v *View) ProcessedOrgSequence(eventSequence uint64, eventTimestamp time.Time) error {
+	return v.saveCurrentSequence(orgTable, eventSequence, eventTimestamp)
+}
+
+func (v *View) UpdateOrgSpoolerRunTimestamp() error {
+	return v.updateSpoolerRunSequence(orgTable)
 }

internal/authz/repository/eventsourcing/view/sequence.go

@@ -2,16 +2,29 @@ package view
 
 import (
 	"github.com/caos/zitadel/internal/view/repository"
+	"time"
 )
 
 const (
 	sequencesTable = "authz.current_sequences"
 )
 
-func (v *View) saveCurrentSequence(viewName string, sequence uint64) error {
-	return repository.SaveCurrentSequence(v.Db, sequencesTable, viewName, sequence)
+func (v *View) saveCurrentSequence(viewName string, sequence uint64, eventTimestamp time.Time) error {
+	return repository.SaveCurrentSequence(v.Db, sequencesTable, viewName, sequence, eventTimestamp)
 }
 
 func (v *View) latestSequence(viewName string) (*repository.CurrentSequence, error) {
 	return repository.LatestSequence(v.Db, sequencesTable, viewName)
 }
+
+func (v *View) updateSpoolerRunSequence(viewName string) error {
+	currentSequence, err := repository.LatestSequence(v.Db, sequencesTable, viewName)
+	if err != nil {
+		return err
+	}
+	if currentSequence.ViewName == "" {
+		currentSequence.ViewName = viewName
+	}
+	currentSequence.LastSuccessfulSpoolerRun = time.Now()
+	return repository.UpdateCurrentSequence(v.Db, sequencesTable, currentSequence)
+}

internal/authz/repository/eventsourcing/view/token.go

@@ -4,6 +4,7 @@ import (
 	usr_view "github.com/caos/zitadel/internal/user/repository/view"
 	usr_view_model "github.com/caos/zitadel/internal/user/repository/view/model"
 	"github.com/caos/zitadel/internal/view/repository"
+	"time"
 )
 
 const (
@@ -14,36 +15,40 @@ func (v *View) TokenByID(tokenID string) (*usr_view_model.TokenView, error) {
 	return usr_view.TokenByID(v.Db, tokenTable, tokenID)
 }
 
-func (v *View) PutToken(token *usr_view_model.TokenView) error {
+func (v *View) PutToken(token *usr_view_model.TokenView, eventTimestamp time.Time) error {
 	err := usr_view.PutToken(v.Db, tokenTable, token)
 	if err != nil {
 		return err
 	}
-	return v.ProcessedTokenSequence(token.Sequence)
+	return v.ProcessedTokenSequence(token.Sequence, eventTimestamp)
 }
 
-func (v *View) DeleteToken(tokenID string, eventSequence uint64) error {
+func (v *View) DeleteToken(tokenID string, eventSequence uint64, eventTimestamp time.Time) error {
 	err := usr_view.DeleteToken(v.Db, tokenTable, tokenID)
 	if err != nil {
 		return nil
 	}
-	return v.ProcessedTokenSequence(eventSequence)
+	return v.ProcessedTokenSequence(eventSequence, eventTimestamp)
 }
 
-func (v *View) DeleteSessionTokens(agentID, userID string, eventSequence uint64) error {
+func (v *View) DeleteSessionTokens(agentID, userID string, eventSequence uint64, eventTimestamp time.Time) error {
 	err := usr_view.DeleteSessionTokens(v.Db, tokenTable, agentID, userID)
 	if err != nil {
 		return nil
 	}
-	return v.ProcessedTokenSequence(eventSequence)
+	return v.ProcessedTokenSequence(eventSequence, eventTimestamp)
 }
 
 func (v *View) GetLatestTokenSequence() (*repository.CurrentSequence, error) {
 	return v.latestSequence(tokenTable)
 }
 
-func (v *View) ProcessedTokenSequence(eventSequence uint64) error {
-	return v.saveCurrentSequence(tokenTable, eventSequence)
+func (v *View) ProcessedTokenSequence(eventSequence uint64, eventTimestamp time.Time) error {
+	return v.saveCurrentSequence(tokenTable, eventSequence, eventTimestamp)
+}
+
+func (v *View) UpdateTokenSpoolerRunTimestamp() error {
+	return v.updateSpoolerRunSequence(tokenTable)
 }
 
 func (v *View) GetLatestTokenFailedEvent(sequence uint64) (*repository.FailedEvent, error) {