Audit Log

The Audit Log records actions performed by users and the system across your CloudQuery Platform installation. Use it to track who did what, when, and from where — for security reviews, compliance requirements, and troubleshooting.

Accessing the audit log

In the sidebar, click your user icon and select Organization settings.
Navigate to the Audit Log section.

What is logged

Each audit log entry includes:

Field	Description
User	The user who performed the action
IP address	The IP address the action originated from
Team	The team associated with the event (if applicable)
Event type	The type of action performed (e.g., user login, sync created, policy updated)
Entity	The specific resource or object that was affected
Status	Whether the action succeeded or failed
Timestamp	When the event occurred
Details	Additional context about the event

Filtering and searching

Use the search bar and filters to narrow down audit log entries:

Search — full-text search across user name, team name, event type, entity name, and IP address
User — filter by a specific user
Team — filter by team name
Event type — filter by the type of action
Entity — filter by the affected resource name
IP address — filter by source IP
Time range — filter by start and end time

Use cases

Security investigation — identify who modified a sync configuration or changed user permissions
Compliance — demonstrate access controls and change tracking for auditors
Troubleshooting — correlate user actions with system behavior to diagnose issues
Access review — verify that API keys and user accounts are being used as expected

Programmatic access

Audit log entries can be queried via the Platform API for compliance automation and SIEM integrations. See the Platform API Reference (audit-logs section) for endpoint details including time-range filtering and pagination.

Next Steps

User Management - Manage the users shown in audit logs
API Keys - Manage API keys that appear in audit entries
Platform Settings - Configure platform-wide settings