Audit Logs

View a log of all actions performed across your organization.

Organization audit logs provide a centralized view of every action performed across all projects in your organization. This is useful for security reviews, compliance, and understanding activity across teams.

Organization Audit Logs

Overview

The organization audit logs page shows all API and user actions across every project. Each log entry includes:

ColumnDescription
DateTimestamp of the action (UTC).
StatusHTTP status code returned by the action (e.g., 200 for success).
LogsThe action performed, shown as a method and resource path (e.g., PUT org.users.role.update).
ProjectThe project the action was performed in (not shown for org-level actions).
UserThe email of the user or API key that triggered the action.

Compared to project-level audit logs, the organization view adds a Project column so you can see which project each action belongs to. Organization-level actions (like user role changes) are also included here.

A timeline chart at the top visualizes action volume over time across all projects.

Searching Logs

Use the search bar to filter logs by any field — action name, user email, project, status code, or resource path. This is useful for auditing specific users’ activity across projects or tracking org-wide configuration changes.

Common Actions

Actions follow a resource.action naming pattern. Some examples:

  • org.users.role.update — Updated a user’s organization role
  • org.retention-configs.retention-policies.create — Created an org-level retention policy
  • client.prompts.branches.update / delete — Updated or deleted prompt branches in a project
  • client.rt-frameworks.schedule.create / delete — Created or deleted a real-time framework schedule