Audit Logs
The audit log provides you a history of changes to user accounts, user roles, and more for your organization. Audit logs are available for each of your organizations in intervals of 30, 60, or 90 days. To open an audit log:
-
Open Astra and click the down arrow by the box, Current Organization.
-
Select Organization Settings, and then select Security.
-
Scroll to the Audit Logs box. Select the arrow and select the number of days you want to review: 30, 60, or 90 days.
The available log fields are:
-
typename: log type
-
actionResult: result status (SUCCESS/FAILED)
-
user ID: unique ID of the user that generated the log event
-
event: detailed data from an event
-
eventTime: date and time event occurred, YYYY-MM-DD
-
eventType: event category of the logged action
The available eventTypes include:
| eventType | Description |
|---|---|
ACCEPT_USER_TO_ORGANIZATION |
A user has been accepted to an organization. |
ADD_SAML_IDP |
A new SSO Identity Provider has been added. |
COPY_ROLE |
An existing role was copied. |
CREATE_ORG |
A new organization was created. |
CREATE_ROLE |
A new role was created. |
CREATE_USER |
A new user account was created. |
DELETE_IDP |
A new SSO Identity Provider has been deleted. |
DELETE_ORG |
An existing organization was deleted. |
DELETE_ROLE |
An existing role was deleted. |
DELETE_TOKEN_FOR_CLIENT |
An existing API token was deleted. |
DELETE_USER |
An existing user account was deleted. |
DISABLE_IDP |
A new SSO Identity Provider has been disabled, but not deleted. |
DISABLE_ORG_SSO |
An SSO was disabled for the organization. |
ENABLE_IDP |
A new SSO Identity Provider has been enabled. |
ENABLE_ORG_SSO |
An SSO was enabled for the organization. |
GENERATE_TOKEN_FOR_CLIENT |
A new API token was created. |
INVITE_USER_TO_ORGANIZATION |
A user has been invited to an organization. |
PREP_NEW_IDP |
A new SSO Identity Provider configuration has been prepared. |
PROVISION_SSO_USER_INTO_ORGANIZATION |
An SSO user account was added to the organization. |
REMOVE_USER_FROM_ORG |
An existing user account was removed from an organization. |
REVOKE_INVITATION |
A previous user invitation to an organization has been revoked. |
UPDATE_IDP |
An existing SSO Identity Provider has been updated. |
UPDATE_ROLE |
An existing role was updated. |