Audit Logs

Comprehensive audit logging provides visibility into all user and system actions for security monitoring and compliance.

What's Logged

User Actions

• Login/logout events
• Resource creation/modification/deletion
• Permission changes
• Settings updates

System Events

• Deployments
• Scheduled executions
• API calls
• Error events

Data Access

• Data views
• Exports
• Sensitive data access

Viewing Audit Logs

1. Navigate to Settings > Audit Logs
2. Filter by date range, user, or action type
3. Search for specific events
4. Export for analysis

Log Format

{
  "timestamp": "2024-01-15T10:30:00Z",
  "actor": {
    "id": "user_123",
    "email": "user@example.com",
    "type": "user"
  },
  "action": "workflow.deploy",
  "resource": {
    "type": "workflow",
    "id": "wf_456",
    "name": "Customer Onboarding"
  },
  "context": {
    "ip": "192.168.1.1",
    "userAgent": "Mozilla/5.0...",
    "environment": "production"
  },
  "result": "success"
}

Retention

• Standard - 90 days
• Extended - 1 year (enterprise)
• Custom - Configurable retention periods

Export and Integration

Export Formats

• JSON
• CSV
• PDF reports

SIEM Integration

Stream logs to:

• Splunk
• Datadog
• Elastic
• Custom webhook

Compliance Reports

Pre-built reports for:

• User access reviews
• Permission change history
• Data access patterns
• Security incident timeline

Best Practices

1. Regular Reviews - Weekly security reviews
2. Set Up Alerts - Monitor for suspicious activity
3. Long-term Storage - Archive for compliance
4. Integrate with SIEM - Centralize security monitoring