Audit Logs
The audit log records significant actions surfaced within your organization for compliance and debugging.
What's Logged
Every create, update, and delete operation on organization resources is recorded:
- Jobs — creation, configuration changes, deletion
- Schedules — creation, cron changes, pause/resume, deletion
- Alerts — rule, subscription, silence, escalation policy, and channel changes
- Users — invites, group changes, removal
- Groups — membership changes
- Roles — permission changes
- API keys — creation, revocation
- Registry credentials — creation, updates, deletion
- Reports — creation, modifications
- Billing — subscription changes, plan modifications
- Account — email changes, password changes, 2FA enrollment/removal, passkey changes
Self-service account changes (email, password, 2FA, passkeys) are recorded in every organization the user belongs to.
Log Entry Fields
Each audit log entry includes:
| Field | Description |
|---|---|
| Action | The operation performed (e.g., create, update, delete) |
| Resource type | What was acted on (e.g., job, schedule, user) |
| Resource ID | The ID of the affected resource |
| Actor | Who performed the action (user email or API key name) |
| Timestamp | When the action occurred |
| Changes | For updates: a diff showing what changed (old and new values) |
| Snapshot | A sanitized snapshot of the resource at the time of the action |
Sensitive values (passwords, secrets, encryption keys) are redacted in snapshots and diffs.
Access
Viewing audit logs requires the audit_logs:read permission, which is not included in the default member role. Organization admins can always view the organization audit log.
Organization audit logs show regular organization activity. Platform-level actions are only shown in the organization view when the platform user was also an active member of that organization at the time of the action; platform-only audit history remains available to platform admins.
Retention
Audit logs are automatically cleaned up after the configured retention period. The default retention window is 365 days.