Audit log
The audit log is the record of who did what in your Organization. Open it to find out who changed a setting, what an Agent did, or why a request was refused.
Applies to: Owner or AdminEvery plan
Owners and admins can read the audit log under Settings > Audit log. It lists, newest first, every create, change, delete and deploy a signed-in member made through the console or the API, every sign-in and sign-out, and every call an Agent made, whether it succeeded, was refused or failed.
What you can do
- Filter by who did it, what kind of thing it was done to, the action, the outcome and a date range.
- Open an entry to see the role the actor held at the time and what changed.
- See everything one Agent did, from a link on its row in Settings > Agents.
Find who changed something
Open the audit log
Open Settings > Audit log.
Newest first; refused Agent calls appear with the reason. Narrow it down
Use the filters: Actor (Anyone, an email, an Agent, or The platform), Kind, Action, Outcome (succeeded, refused or failed), and From and To. Email and name match any part of the value; action and kind match exactly.
Open the entry
Open a row to see Who, Their role at the time, Outcome, When, Action, Kind, the name and id of what it was done to, and what changed.
What is recorded
| Recorded | Not recorded |
|---|---|
| Creates, changes, deletes and deploys by members, through the console or the API | A person’s reads |
| Sign-ins and sign-outs | Connection tests |
| Every Agent call, allowed, refused (with the reason) or failed | A person’s refused requests |
| Actions Cloudgate takes itself, such as applying a template’s Plan for you | Calls through the Gateway (see Token spend on the AI model instead) |
What you cannot do
Related pages
- Agents: what an Agent may do, and its row’s link to its trail.
- Guard rails: why an Agent call is refused.
- Members and roles: roles and custom roles.
- AI models: Token spend for Gateway calls.
- Security at Cloudgate.
Questions
Is the audit log a paid feature?
No. Every Organization has one, on every plan and on a self-hosted instance without a license.
Can an entry be edited or deleted?
No. The log is append-only, and nothing in the console edits or removes an entry.
Are reads recorded?
Not for people. A person's reads, connection tests and refused requests are not recorded. Every Agent call is, including reads and refusals.
Something missing or wrong on this page? Email support@octabyte.io, or start a free trial and try it in the console.