Audit logs serve as an effective tool to understand changes made within your workspace. This feature documents a detailed record of actions taken by users, allowing you to track who made specific changes, when they were implemented, and what entity was altered. Audit logs are a great way for you to track changes, identify discrepancies, and gain a holistic view of changes that have been made in your workspace. You can access the audit log through the Cortex UI or the public API endpoint.

Accessing Audit logs through the Cortex UI

You can access audit logs in the Cortex UI by navigating to Settings and then selecting Audit logs under Authentication and access in the left-hand navigation bar.

When the audit log page is selected, you will see a list of user activities. Each log includes information categorized in the following columns:

• Actor - the user or API key who performed the action (N/A indicates that the change is attributed to Gitops or the auto-import of entities)
• Action - what action that was performed (i.e., updated, created, updated, deleted)
• Type - the type of action made (e.g.i.e., configuration, service, Scorecard, etc)
• Entity - which entity was affected by the action if applicable
• Date - time the action occurred

Accessing Audit logs through the public API endpoint

Audit logs can also be accessed through the public API endpoint. Please refer to our Audit Logs API documentation to learn how to retrieve audit logs.

To find out more ways to understand changes made within your workspace, see "Understanding changes to your workplace."