Audit Log
An append-only record of every privileged action. Entries cannot be edited or deleted.
Events (30d)
32,690
+4.8% vs. last month
Privileged actions
1,428
By 15 admins
Blocked / denied
344
Mostly failed sign-ins
Retention
400d
Then archived to cold storage
Event volume
All recorded events per month
| When | Actor | Action | Category | Target | Outcome | IP address |
|---|---|---|---|---|---|---|
| Aug 19, 2026 14:12 | Priya Raghavan | user.invite |
Users | 6 accounts in Sales | Success | 51.15.204.8 |
| Aug 19, 2026 13:44 | Tomas Berg | role.update |
Access | Billing Admin | Success | 78.72.19.204 |
| Aug 19, 2026 13:58 | l.chen | auth.signin |
Auth | Session from Seoul, KR | Blocked | 45.129.8.203 |
| Aug 19, 2026 12:20 | System | group.sync |
Groups | Okta — 331 members reconciled | Success | — |
| Aug 19, 2026 11:05 | Amara Okonkwo | admin.grant |
Access | Team Admin → Sofia Oliveira | Success | 102.89.44.7 |
| Aug 19, 2026 10:31 | Noah Whitfield | billing.export |
Billing | August invoice run | Success | 81.130.7.92 |
| Aug 19, 2026 09:47 | admin | auth.signin |
Auth | 3 failed attempts | Blocked | 185.220.101.4 |
| Aug 19, 2026 09:02 | Tomas Berg | policy.update |
Security | MFA enforcement → Engineering | Success | 78.72.19.204 |
| Aug 18, 2026 16:20 | Lucia Ferrero | user.deprovision |
Users | 12 dormant accounts | Success | 93.44.201.15 |
| Aug 18, 2026 15:11 | Sofia Oliveira | user.update |
Users | rafael.antunes@northwind.co | Success | 88.157.42.19 |
| Aug 18, 2026 14:14 | Amara Okonkwo | group.member.add |
Groups | Sofia Oliveira → Billing Console | Success | 102.89.44.7 |
| Aug 18, 2026 11:38 | Wei Zhang | apikey.rotate |
API | svc-billing production key | Success | 116.87.5.201 |
| Aug 18, 2026 10:02 | Zara Haddad | team.update |
Teams | Design merged into Product | Success | 94.200.33.118 |
| Aug 18, 2026 09:15 | Priya Raghavan | user.role.change |
Access | Sofia Oliveira: Editor → Manager | Success | 49.207.11.86 |
| Aug 17, 2026 17:44 | System | invite.expire |
Users | 3 invitations lapsed | Success | — |
| Aug 17, 2026 16:02 | Jonas Ritter | billing.method.update |
Billing | Card ending 4417 | Success | 213.47.88.156 |
| Aug 17, 2026 14:29 | Tomas Berg | session.revoke |
Security | 8 sessions on unknown devices | Success | 78.72.19.204 |
| Aug 17, 2026 12:11 | Mateo Ibarra | report.export |
Reports | Licence usage — Q3 | Success | 88.14.176.23 |
| Aug 17, 2026 10:50 | Idris Bello | user.update |
Users | Own profile | Success | 105.112.8.41 |
| Aug 16, 2026 15:33 | Amara Okonkwo | module.toggle |
Settings | Webhooks disabled | Success | 102.89.44.7 |
| Aug 16, 2026 13:07 | d.kovalenko | auth.mfa.enrol |
Auth | Authenticator app | Failed | 89.64.12.7 |
| Aug 16, 2026 11:22 | Fatima Nasser | user.invite |
Users | 2 accounts in People Ops | Success | 156.204.77.9 |
| Aug 15, 2026 16:48 | Lucia Ferrero | audit.export |
Reports | Q3 access review evidence | Success | 93.44.201.15 |
| Aug 15, 2026 14:19 | Tomas Berg | sso.config.update |
Security | SAML certificate rotated | Success | 78.72.19.204 |
| Aug 15, 2026 09:41 | Beatriz Correia | group.member.remove |
Groups | 4 members from Brand assets | Success | 94.63.140.28 |
| Aug 14, 2026 15:02 | Noah Whitfield | plan.change |
Billing | Team → Business | Success | 81.130.7.92 |
| Aug 14, 2026 12:36 | owen.bradley | auth.signin |
Auth | Suspended account | Denied | 77.111.244.9 |
| Aug 14, 2026 10:14 | Samuel Adeyemi | apikey.create |
API | warehouse-reader | Success | 154.160.22.4 |
| Aug 13, 2026 16:55 | Amara Okonkwo | admin.revoke |
Access | App Admin ← Viktor Petrov | Success | 102.89.44.7 |
| Aug 13, 2026 11:09 | System | user.dormant.flag |
Users | 74 accounts marked dormant | Success | — |