What is logged
Every operation that creates, modifies, or deletes a resource is recorded:Log entry fields
Each audit log entry contains:Viewing audit logs
- Go to Settings → Audit Logs
- Browse the log in reverse-chronological order
- Filter by:
- Action — e.g. only show
connection.deletedevents - Resource — e.g. only show events for jobs
- Date range — narrow to a specific window
- Action — e.g. only show
Exporting logs
Click Export to download the current filter view as a CSV file. Use this for compliance reports, security reviews, or importing into your SIEM.Retention
Audit log retention depends on your plan. Logs are stored securely and are read-only — they cannot be modified or deleted by organization members.Common use cases
Security investigation:
Someone deleted a connection. Filter by connection.deleted and identify the user, timestamp, and IP address.
Compliance audit:
“Who had access to production credentials?” — filter by team events and SSO logins over the audit period.Change tracking:
“When was this job last changed and by whom?” — filter by job.updated and the specific job ID.