Audit logs

Audit logs are available to administrators and owners on Enterprise workspaces. Use Dashboard → Audit logs to investigate actions by user, resource, status, source, date, and free-text search. Results load in pages of 50; open a row to inspect its details and copy identifiers or context into an incident record when necessary.

Start an investigation with narrow filters: an approximate time range, the affected resource, and the expected actor or action. This makes the timeline easier to review and reduces the chance that a broad export hides the event you need. Audit history is a workspace administration tool, not a substitute for application-level logs from your own integrations.

CSV export carries the current filters and is restricted to a member who is an administrator or owner. An export stops at 50,000 rows, so narrow the filters and create smaller evidence sets if that cap is reached. Preserve exported data according to your own retention policy and avoid sending raw logs to systems that do not need workspace identifiers or personal information.