AC
Acme Co. ↓
⌕ ⌘K
? ◔
AP
Alex Park Owner

Audit log

Every privileged action · 90-day retention · exportable
WorkspaceBrandingDomainsNotificationsComplianceSecurityAudit log
live · auto-refresh
WhenActorActionTargetIP
Now Alex Park auth.signin.success alex@acme.co · Chrome / macOS 10.20.30.4
12m Mike Patel followup.draft.approve_bulk 86 drafts in seq:q2-mid-market 73.40.12.8
42m Alex Park integrations.connect Apollo.io · OAuth granted 10.20.30.4
1h Casey Ng microsite.publish Spring lawn offer · v15 99.224.10.42
2h Mike Patel sequence.pause Q1 winback 73.40.12.8
3h Alex Park team.invite sarah@acme.co · Editor 10.20.30.4
5h Alex Park apikey.rotate Production · backend · lg_live_8sK2… 10.20.30.4
6h System leadgen.icp.recalculate 14,820 records evaluated internal
8h Mike Patel team.role.change Tom Walsh · Viewer → Editor 73.40.12.8
12h Alex Park billing.payment_method.update Card ending 4242 10.20.30.4
14h Casey Ng microsite.create Spring lawn offer 99.224.10.42
1d Alex Park security.sso.enable Okta · acme.okta.com 10.20.30.4
2d Alex Park team.suspend marcus@acme.co 10.20.30.4
2d System backup.complete 2.4 GB · daily snapshot internal
3d Alex Park domain.add value.aspenrealty.example 10.20.30.4
3d Casey Ng auth.signin.success casey@acme.co · Chrome / macOS 99.224.10.42
4d Alex Park auth.mfa.enroll Hardware security key registered 10.20.30.4
4d Mike Patel sequence.create Insurance renewal nurture 73.40.12.8
5d System stripe.invoice.paid INV-2026-0042 · $1,490 internal
6d Alex Park integrations.disconnect ZoomInfo · revoked by Owner 10.20.30.4
7d Alex Park apikey.create Reporting pipeline · read-only 10.20.30.4
8d Tom Walsh auth.mfa.failure Incorrect TOTP code 73.18.4.92
10d Alex Park compliance.classifier.enable mortgage-respa-v2 10.20.30.4
12d Casey Ng microsite.ab.start Headline A/B test 99.224.10.42
14d Alex Park webhook.create https://app.acme.co/hooks/leadgen 10.20.30.4
Retention & export
Retention period90 days
Total events stored4,820
Export formatCSV · JSON · NDJSON
SIEM streamingEnterprise only
High-value actions tracked
Every entry captures actor, action, target object, IP, user agent, and request ID for traceability.
// Example event
{
  "when": "2026-05-22T18:34:12Z",
  "actor": { "id": "usr_alex", "email": "alex@acme.co" },
  "action": "apikey.rotate",
  "target": { "type": "api_key", "id": "key_prod_8sK2" },
  "ip": "10.20.30.4",
  "ua": "Chrome/126 · macOS 14.6",
  "request_id": "req_8sK2pQ9vR1mN"
}