Skip to main content

Audit Log

View the audit log for system activity tracking.

Overview​

The audit log records significant actions performed in the system. Event types include user authentication events (user.login, user.logout, user.register), account lifecycle (account.created, account.updated, account.deleted), overlay changes (overlay.created, overlay.updated, overlay.deleted), connection management (connection.created, connection.deleted), API key activity (api_key.created, api_key.revoked), and generic admin.action entries.

Viewing Logs​

Access the audit log via Admin > Audit Log. The viewer supports filtering by:

  • Event type
  • User ID
  • Account ID
  • Date range (from / to)

Each row can be expanded to inspect the full event metadata, IP address, geolocation (city / country), and user agent.

Permissions​

Reading the audit log requires the audit-log:read permission. The dashboard entry itself is gated on admin:access. System admins (is_system: true) implicitly receive both.

Storage​

Audit events are persisted in TimescaleDB and queried via the admin API (GET /v1/admin/audit-log).