Viewing Audit Logs

Track who did what in your workspace with audit logs.

Overview

The audit log is the workspace's record of significant actions: who created, edited, or deleted a workflow, who added a connection, who changed a member's role, who approved a pending workflow. Every entry includes the actor, the action, the affected object, the outcome, and a timestamp.

Audit logs are how you investigate incidents, satisfy internal compliance reviews, and confirm that a sensitive change actually happened the way you expected. They are visible to Admins and Owners only.

Before You Start

You need the Admin or Owner role.
The Audit link appears in the sidebar once your role grants access.

Steps

Open Audit from the sidebar.
Use the filters at the top to narrow down by actor, action, date range, or outcome.
Click any entry to expand the full payload, including before/after values where applicable.

What Gets Logged

Workflow create, update, delete, enable, disable, and approval events.
Connection create, update, rotate, and remove events.
Member invitations, role changes, and removals.
Workspace settings changes, including plan and billing actions.
Knowledge collection create, update, and delete events.

Filters

Action type - create, update, delete, and other event types.
Actor - The user who performed the action.
Date range - Restrict the view to a specific window.
Outcome - success or failure, useful for spotting blocked actions.

Tips

Filter by failure outcomes to surface permission issues or rejected API calls before users report them.
When investigating a broken workflow, filter by the workflow's name or ID to see every change made to it.
Combine the actor and date range filters to review what a specific user did during a session.

Common Pitfalls

Audit logs record user-initiated actions. Automated runs of workflows show up as execution history, not audit entries.
Members and Viewers cannot see the audit log. If a teammate needs visibility, they need Admin.
Deleting a workflow does not erase its audit entries - the record of the deletion is preserved.
Filters combine with AND, not OR. Setting both actor and action type only shows entries matching both.