Platform / Audit Log
⌕ Search audit events… ⌘K

Audit Log

Immutable record of platform actions · 7d window · all tenants
⚠
Audit logs are immutable and retained for 365 days  ·  Cross-tenant view requires Platform Admin role.
  • Records cannot be edited or deleted — append-only WORM storage
  • Retention: 365 days hot tier · 7 years cold archive (compliance default)
  • Cross-tenant view requires Platform Admin role; workspace admins see only their workspace
  • Sensitive actions (body.view, quota.override, body_logging.*) are flagged with Sensitive ⚠
Events (7d)
1,847
▲ 8.2% vs prior 7d
Sensitive actions
42
2.3% of total · flagged ⚠
Denied
18
failed auth / blocked
Top actor
jerry.du
314 events · Platform Admin
Live
Active filters: tenant: Accenture China × category: Sensitive ⚠ + Config × Clear all Showing 1–25 of 3,418 audit entries
TIMESTAMP ACTOR ROLE TENANT WORKSPACE CATEGORY ACTION TARGET OUTCOME IP
12:35:14 · 13m ago tony.wong Workspace Owner Accenture China projectx-prod Sensitive ⚠ body_logging.disable workspace=projectx-prod success 10.42.18.7
12:31:48 · 17m ago amy.chen Team Admin Accenture China projectx-prod Access body.view log_id=req_8a4f...91e2 success 10.42.18.21
12:28:02 · 21m ago amy.chen Team Admin Accenture China projectx-prod Access body.view log_id=req_b2c1...7d04 success 10.42.18.21
12:14:51 · 34m ago li.wei Platform Admin ACPCloud HK projectx-prod Sensitive ⚠ body.view log_id=req_3f9e...2a18 denied 10.88.4.92
11:58:24 · 51m ago jerry.du Platform Admin Accenture China projectx-prod Config retention.update workspace=projectx-prod body=180d→365d success 10.42.7.14
11:42:08 · 1h ago sarah.li Workspace Owner Accenture China mydeck-pilot Access member.invite user=peter.zhang@acn.com success 10.42.18.45
11:24:51 · 1h ago tony.wong Workspace Owner Accenture China projectx-prod Config config.update config=claude-fallback success 10.42.18.7
11:18:02 · 2h ago amy.chen Team Admin Accenture China projectx-prod Access apikey.rotate apikey=pk_***1f2a success 10.42.18.21
10:54:33 · 2h ago jerry.du Platform Admin Accenture China projectx-prod Sensitive ⚠ quota.override workspace=projectx-prod limit=2M→5M tpm success 10.42.7.14
10:42:18 · 3h ago zhang.min Member Accenture China mydeck-pilot Auth login.success sso=okta session=s_4f8e21 success 123.118.42.18
10:31:04 · 3h ago unknown — Accenture China — Auth login.failed email=tony.wong@acn.com reason=mfa_invalid denied 58.246.108.4
10:18:42 · 3h ago peter.zhang Member Accenture China mydeck-pilot Auth sso.linked provider=okta email=peter.zhang@acn.com success 10.42.18.45
09:58:14 · 4h ago tony.wong Workspace Owner Accenture China projectx-prod Config mcp.publish mcp=projectx-search@1.2.0 success 10.42.18.7
09:42:21 · 4h ago amy.chen Team Admin Accenture China projectx-prod Access member.role.change user=ken.lo role=Member→Team Admin success 10.42.18.21
09:18:54 · 5h ago jerry.du Platform Admin Accenture China — Sensitive ⚠ pricing.change model=claude-3-5-sonnet markup=1.10→1.15 success 10.42.7.14
08:54:02 · 5h ago sarah.li Workspace Owner Accenture China mydeck-pilot Quota quota.update team=research limit=500k→1M tpm success 10.42.18.45
08:32:18 · 6h ago li.wei Platform Admin ACPCloud HK projectx-prod Sensitive ⚠ config.view config=claude-fallback denied 10.88.4.92
08:14:48 · 6h ago tony.wong Workspace Owner Accenture China projectx-prod Access apikey.create apikey=pk_***c8e1 name=ci-runner success 10.42.18.7
07:48:22 · 7h ago amy.chen Team Admin Accenture China projectx-prod Access body.view log_id=req_d8e2...4f6c success 10.42.18.21
07:22:14 · 7h ago jerry.du Platform Admin Accenture China — Config model.add model=gpt-4o-2026-05 provider=openai success 10.42.7.14
06:51:48 · 8h ago tony.wong Workspace Owner Accenture China projectx-prod Quota quota.alert.ack alert=tpm_80pct workspace=projectx-prod success 10.42.18.7
06:34:02 · 8h ago ken.lo Member Accenture China projectx-staging Access apikey.revoke apikey=pk_***9b3d partial 10.42.18.84
05:48:21 · 9h ago jerry.du Platform Admin ACPCloud HK — Sensitive ⚠ tenant.impersonate.start tenant=ACPCloud HK reason=support-ticket #4218 success 10.42.7.14
05:21:14 · 9h ago amy.chen Team Admin Accenture China projectx-prod Config config.update config=rag-pipeline temperature=0.7→0.5 success 10.42.18.21
04:58:42 · 10h ago sarah.li Workspace Owner Accenture China mydeck-pilot Auth login.success sso=okta session=s_9c2d18 success 10.42.18.45
Showing 1–25 of 3,418 — click any row to see full diff (before/after JSON) + actor session info
Click a row to inspect. Drawer shows full before/after JSON diff, actor session (user-agent, MFA factor, IP geo), and cryptographic signature. Audit log is append-only — entries are immutable and signed. Retention 365 days for all entries. Cross-tenant denied rows reflect hard-blocked attempts (e.g. a Platform Admin trying to view body data outside their home tenant).