diff --git a/src/eventlog.js b/src/eventlog.js
index 6b62fcff1..22226455f 100644
--- a/src/eventlog.js
+++ b/src/eventlog.js
@@ -26,6 +26,7 @@ exports = module.exports = {
     ACTION_CERTIFICATE_RENEWAL: 'certificate.renew',
 
     ACTION_MAIL_ENABLED: 'mail.enabled',
+    ACTION_MAIL_DISABLED: 'mail.disabled',
     ACTION_MAIL_MAILBOX_ADD: 'mail.box.add',
     ACTION_MAIL_MAILBOX_REMOVE: 'mail.box.remove',
     ACTION_MAIL_LIST_ADD: 'mail.list.add',
diff --git a/src/mail.js b/src/mail.js
index ed4b61c64..4f9ee57ce 100644
--- a/src/mail.js
+++ b/src/mail.js
@@ -865,7 +865,7 @@ function setMailEnabled(domain, enabled, auditSource, callback) {
 
         restartMail(NOOP_CALLBACK);
 
-        eventlog.add(eventlog.ACTION_MAIL_ENABLED, auditSource, { domain, enabled });
+        eventlog.add(enabled ? eventlog.ACTION_MAIL_ENABLED : eventlog.ACTION_MAIL_DISABLED, auditSource, { domain });
 
         callback(null);
     });