Skip to main content

Audit Logs

Paid Plan Required

Audit logs are only available to organization administrators on the Paid plan.

The audit log records all significant actions in your organization — user logins, session activity, resource changes, and admin operations.

Viewing Audit Logs​

Navigate to Audit Logs under the Admin section in the sidebar.

Audit Log Table​

ColumnDescription
EventThe type of event that occurred
UserThe user who performed the action
IPThe IP address the action was performed from
DetailsAdditional context about the event
TimeWhen the event occurred

Filtering​

Use the filter controls at the top of the page to narrow down results:

  • Event Type dropdown — Filter by event type (e.g., USER_LOGIN, SESSION_STARTED, RESOURCE_CREATED). Select "All events" to show everything.
  • User Email — Search by user email address using the search field (placeholder: "Search email...")
  • From / To date pickers — Filter by date range
  • Click Clear filters to reset all filters

Pagination​

The table is paginated. Use the Previous and Next buttons at the bottom to navigate. The current position is shown as "Page X of Y (Z total)".

Event Types​

EventDescription
USER_REGISTEREDNew organization registered
USER_LOGINUser signed in
USER_CREATEDAdmin created a new user
USER_UPDATEDUser profile or status changed
USER_DELETEDUser removed from organization
SESSION_STARTEDSession created
SESSION_STOPPEDSession manually stopped
SESSION_EXTENDEDSession duration extended
SESSION_EXPIREDSession expired automatically
RESOURCE_CREATEDCloud resource added
RESOURCE_UPDATEDCloud resource modified
RESOURCE_DELETEDCloud resource removed
CREDENTIAL_CREATEDCloud credential added
CREDENTIAL_DELETEDCloud credential removed
ROLE_CREATEDRole created
ROLE_UPDATEDRole modified
ROLE_DELETEDRole removed

Use Cases​

  • Security reviews — Filter by USER_LOGIN to review sign-in activity
  • Session auditing — Filter by SESSION_STARTED to see who accessed what and when
  • Change tracking — Filter by resource or credential events to track infrastructure changes
  • Incident investigation — Combine user and date filters to trace a specific user's actions

Next Steps​

API Reference: For programmatic access, see List Audit Logs.