Skip to content
Start free
Product Demo Pricing Security Docs Changelog Start free

Audit log

Org admin
Who can see it
Org admin only
Where
Admin → Audit log

The audit log records every privileged action in your workspace: who did it, to what, and when. Use it to answer security reviews, check what changed after a surprise, or give an auditor a record. The log is append-only. Entries cannot be edited, and they are removed only when the workspace is deleted.

What is logged

Actions are grouped by area. Examples:

  • Members: approvals, role changes, sign-outs, joins and reinstatements.
  • Invites: invite links created and revoked.
  • Integrations: connected, disconnected and reactivated, and repository option changes.
  • License: trial contributors changed, license viewed and issued, overage notices.
  • Settings: minimum group size, pseudonymous mode, IP allowlist, share links, time zone, working time, retention and ticket mappings.
  • Data rights: workspace and per-person exports, exclusions, and erasures.
  • Access credentials: API tokens, MCP credentials and AI ingest keys created and revoked, and share links.
  • Support access: when you grant, revoke and when KubeAce support uses a time-boxed grant.
  • Other: alert rules, hierarchy changes, digest channels, people merged or split, and sync runs restarted.

The log lists everything the product records, not only what an admin does by hand. Each entry has an Actor type:

  • Member, for a person in your workspace.
  • KubeAce operator, for KubeAce staff. Viewing a workspace as staff is itself logged.
  • System, for automatic actions such as the nightly cleanup.

Read the log

Open Admin → Audit log. Entries are listed newest first. Times are in UTC. Each row shows Time (UTC), Actor type, Actor, Action, Target type, Target and Details. Click a row to see its full details.

Click Load more to see older entries.

Filter the log

Use the controls above the table:

  • Action: choose All actions, one area’s actions, or a single action.
  • Actor type: choose Any actor or one type.
  • From (UTC) and To (UTC): a range of days, inclusive.
  • Search actor or target: free text over the actor, target type and target.

Click Clear filters to start over.

Export as CSV

  1. Set the filters you want. Leave them empty for everything.
  2. Click Export CSV.

The file contains every entry that matches the filters, not only the rows loaded on screen. It uses the same columns as the table. The file name includes the date range, for example audit-log_2026-10-01_2026-10-07.csv. If the export fails, nothing is downloaded.

Tip For an auditor, filter by a date range and export. The CSV opens in a spreadsheet.

Who can see it

Only org admins can open the audit log. Managers and developers do not see it in the Admin menu.