|
| 1 | +--- |
| 2 | +title: User Activity Logs |
| 3 | +sidebarTitle: User Activity Logs |
| 4 | +--- |
| 5 | + |
| 6 | +User activity logs track changes made by users across the system, including actions such as creating, editing, or deleting tests, monitors, metadata, and other configurations. |
| 7 | + |
| 8 | +## What's Included |
| 9 | + |
| 10 | +The user activity logs capture a wide range of user actions across your workspace, including: |
| 11 | + |
| 12 | +- **User login and logout events** |
| 13 | +- **Failed login attempts** (when applicable) |
| 14 | +- **Creation, modification, or deletion of configuration**, including: |
| 15 | + - Adding, editing, or deleting tests |
| 16 | + - Adding, editing, deleting, or archiving alert rules |
| 17 | + - Acknowledging, resolving, or assigning incidents |
| 18 | + - Adding, editing, or deleting metadata (owners, descriptions, tags, critical assets) |
| 19 | + - Adding, editing, or deleting integrations |
| 20 | + - Sending team member invites |
| 21 | + - Changing user roles |
| 22 | + |
| 23 | +## Fields |
| 24 | + |
| 25 | +The exported CSV file for user activity logs includes the following fields: |
| 26 | + |
| 27 | +- **Timestamp** - The date and time when the event occurred (in UTC, ISO 8601 format) |
| 28 | + - *Example:* `"2024-01-15T14:30:45.123456+00:00"` |
| 29 | + |
| 30 | +- **User Email** - The email address of the user who performed the action |
| 31 | + - *Example: * `"[email protected]"` |
| 32 | + |
| 33 | +- **User Name** - The display name of the user who performed the action |
| 34 | + - *Example:* `"John Doe"` |
| 35 | + |
| 36 | +- **Event Name** - The specific action that was performed |
| 37 | + - *Examples:* `"user_login"`, `"create_test"`, `"edit_alert_rule"`, `"assign_incident"`, `"create_alert_rule"`, `"edit_metadata"`, `"delete_test"`, `"invite_team_member"`, `"change_user_role"` |
| 38 | + - *Example:* `"user_login"` or `"create_test"` |
| 39 | + |
| 40 | +- **Success** - Whether the action completed successfully |
| 41 | + - *Values:* `"True"` or `"False"` (as strings in CSV) |
| 42 | + - *Example:* `"True"` or `"False"` |
| 43 | + |
| 44 | +- **Event Content** - Additional context-specific information about the action (stored as a JSON string) |
| 45 | + - The contents vary by action type. For example: |
| 46 | + - For incident actions: `{"incident_id": "inc_123", "incident_summary": "Test failure detected"}` |
| 47 | + - For test actions: `{"test_id": "test_456", "test_name": "assert_no_null_values"}` |
| 48 | + - For alert rule actions: `{"alert_routing_rule_id": "rule_789", "alert_routing_rule": {...}}` |
| 49 | + - For metadata actions: `{"asset_id": "asset_123", "metadata_type": "owner"}` |
| 50 | + - *Example:* `{"incident_id": "inc_123", "incident_summary": "Test failure detected"}` |
| 51 | + |
| 52 | +- **Env ID** - The environment identifier where the action occurred. Empty for account-level actions like login/logout that aren't tied to a specific environment. |
| 53 | + - *Example:* `"env_7890123456abcdef"` |
| 54 | + |
| 55 | +- **Env Name** - The name of the environment where the action occurred. Empty for account-level actions like login/logout that aren't tied to a specific environment. |
| 56 | + - *Example:* `"Production"` or `"Staging"` |
0 commit comments