Guides
Start typing to search…

Audit Logs

Export comprehensive audit trails for compliance and security monitoring.

Stream Audit Logs as CSV

GET /v1/audit-logs

Streams audit logs as CSV. The response will be chunked and start downloading immediately as data becomes available.

Response (200 OK):

Headers:

  • Transfer-Encoding: chunked
  • Content-Disposition: attachment; filename=audit-logs.csv

Content-Type: text/csv

CSV Content Overview

The audit logs CSV contains comprehensive tracking data for all system activities. Each row represents a single audit event with the following structure:

  • Timestamp: ISO 8601 formatted timestamp of when the event occurred
  • Event Type: Human-readable description of what happened
  • User: JSON object containing user details who performed the action (or empty object for system actions)
  • Action: The type of operation performed (CREATE, UPDATE, DELETE, ACTION)
  • Principal Type: The type of entity that was affected
  • Principal Id: The unique identifier of the affected entity
  • Details: JSON object containing the specific changes made (old values vs new values)

Event Categories

User Management

Tracks all user-related activities including account creation, authentication, and profile changes.

Event Types: User created, Login: Valid credentials supplied, Login completed

Data Tracked: User profile information (name, email, role, avatar), authentication sessions, organization switches, and permission changes.

Data Operations

Monitors data entity management within datasets, including field mappings and data structure changes.

Event Types: DataFieldInEntity created/deleted, DataFieldOutEntity created/deleted, DatasetEntity created/deleted

Data Tracked: Dataset associations, field positions, search configurations, entity relationships, and data transformation methods.

Data Source Integrations

Logs all database and external service connections, tracking integration lifecycle and status changes.

Event Types: DatasourceIntegrationEntity created/updated

Data Tracked: Service provider details, integration types (DB, API, etc.), connection names, and status transitions (CONNECTING, CONNECTED, FAILED).

Workflow Operations

Captures workflow execution, logic rule creation, and step configuration changes.

Event Types: Execution created, Step logic rule created, Workflow created

Data Tracked: Workflow metadata, execution status, assigned users/groups, logic rule configurations, and step relationships.

Project Management

Tracks project lifecycle including creation, deletion, and team membership changes.

Event Types: Project created, Project soft deleted, UserAddedToProject

Data Tracked: Project details (name, description, type), organizational assignments, user memberships, and project status changes.

Security & Organization Settings

Monitors security policy changes and organizational configuration updates.

Event Types: Organization Security Policy Updated

Data Tracked: Security settings (2FA enforcement, password policies), policy changes with before/after values, and organizational preferences.

Search Operations

Logs search entity creation and search-related activities.

Event Types: SearchEntity created

Data Tracked: Search configurations, organization associations, and search entity metadata.

Digital Signatures & Documents

Tracks document builder operations, signature field management, and envelope processing.

Event Types: BuilderTemplate created/updated, BuilderField created, BuilderEnvelope created, BuilderParticipant created

Data Tracked: Document properties, field positioning and formatting, signature requirements, participant roles and signing order, and envelope status.

Example CSV Response:

Timestamp,Event Type,User,Action,Principal Type,Principal Id,Details
2024-06-20T14:59:21Z,User created,{},CREATE,User,12a3b456-7890-1234-5678-90abcdef1234,"{"firstName":{"oldValue":null,"newValue":"Sarah"},"lastName":{"oldValue":null,"newValue":"Johnson"},"role":{"oldValue":null,"newValue":"ADMIN"},"avatarUrl":{"oldValue":null,"newValue":"https://example.com/avatars/sarah_johnson.jpeg"},"email":{"oldValue":null,"newValue":"[email protected]"}}"
2024-06-20T21:13:28Z,Login: Valid credentials supplied,"{"type":"User","id":"56d4b940-ae51-4515-b207-f63328a66b32","sessionId":"a0aaf117-fb21-487d-bb69-aff5ae958bdc"}",ACTION,User,12a3b456-7890-1234-5678-90abcdef1234,{}
2024-06-20T21:13:28Z,Login completed into a different organization for application: Forms,"{"firstName":"Sarah","lastName":"Johnson","id":"12a3b456-7890-1234-5678-90abcdef1234","sessionId":"a0aaf117-fb21-487d-bb69-aff5ae958bdc","type":"User","email":"[email protected]"}",ACTION,User,12a3b456-7890-1234-5678-90abcdef1234,{}
2024-06-15T21:27:16Z,DataFieldInEntity created,"{"firstName":"John","lastName":"Smith","id":"78f6c152-bf62-5626-c318-g74439b77c43","sessionId":"b847c4f2-cbe4-4189-b5be-9cb205a785c3","type":"User","email":"[email protected]"}",CREATE,DataFieldInEntity,181c6c73-9909-4c11-93bf-6d8da77357af,"{"datasetId":{"oldValue":null,"newValue":"fa3a8af7-32f8-4d68-8358-4c29a78c4363"},"id":{"oldValue":null,"newValue":"181c6c73-9909-4c11-93bf-6d8da77357af"},"position":{"oldValue":null,"newValue":0},"searchId":{"oldValue":null,"newValue":"2bbe6fb8-e555-4c5c-8004-7eda8693ec7b"},"method":{"oldValue":null,"newValue":"MANUAL"}}"
2024-06-15T21:39:06Z,DataFieldInEntity deleted,"{"firstName":"John","lastName":"Smith","id":"78f6c152-bf62-5626-c318-g74439b77c43","sessionId":"b847c4f2-cbe4-4189-b5be-9cb205a785c3","type":"User","email":"[email protected]"}",DELETE,DataFieldInEntity,c5789f4a-3f9e-46de-aefd-9866f8365b6e,{}
2024-06-15T21:27:16Z,DataFieldOutEntity created,"{"firstName":"John","lastName":"Smith","id":"78f6c152-bf62-5626-c318-g74439b77c43","sessionId":"b847c4f2-cbe4-4189-b5be-9cb205a785c3","type":"User","email":"[email protected]"}",CREATE,DataFieldOutEntity,181c6c73-9909-4c11-93bf-6d8da77357af,"{"datasetId":{"oldValue":null,"newValue":"fa3a8af7-32f8-4d68-8358-4c29a78c4363"},"id":{"oldValue":null,"newValue":"181c6c73-9909-4c11-93bf-6d8da77357af"},"position":{"oldValue":null,"newValue":0},"searchId":{"oldValue":null,"newValue":"2bbe6fb8-e555-4c5c-8004-7eda8693ec7b"}}"
2024-06-15T21:39:06Z,DataFieldOutEntity deleted,"{"firstName":"John","lastName":"Smith","id":"78f6c152-bf62-5626-c318-g74439b77c43","sessionId":"b847c4f2-cbe4-4189-b5be-9cb205a785c3","type":"User","email":"[email protected]"}",DELETE,DataFieldOutEntity,0760984e-2d5b-4251-a4fb-c3c28bf7e025,{}
2024-06-15T21:27:04Z,DatasetEntity created,"{"firstName":"John","lastName":"Smith","id":"78f6c152-bf62-5626-c318-g74439b77c43","sessionId":"b847c4f2-cbe4-4189-b5be-9cb205a785c3","type":"User","email":"[email protected]"}",CREATE,DatasetEntity,fa3a8af7-32f8-4d68-8358-4c29a78c4363,"{"entityId":{"oldValue":null,"newValue":"00000000-0000-0000-0000-000000000000"},"id":{"oldValue":null,"newValue":"fa3a8af7-32f8-4d68-8358-4c29a78c4363"},"position":{"oldValue":null,"newValue":0},"searchId":{"oldValue":null,"newValue":"2bbe6fb8-e555-4c5c-8004-7eda8693ec7b"}}"
2024-06-11T16:20:13Z,DatasetEntity deleted,"{"firstName":"Mike","lastName":"Davis","id":"89g7d263-ch73-6737-d429-h85550c88d54","sessionId":"a849ed23-c497-4b76-b92f-88b81a10c856","type":"User","email":"[email protected]"}",DELETE,DatasetEntity,91b1b1f4-60d3-4262-87e3-68d04e7041a9,{}
2024-06-15T20:57:11Z,DatasourceIntegrationEntity created,"{"firstName":"John","lastName":"Smith","id":"78f6c152-bf62-5626-c318-g74439b77c43","sessionId":"b847c4f2-cbe4-4189-b5be-9cb205a785c3","type":"User","email":"[email protected]"}",CREATE,DatasourceIntegrationEntity,80c26810-e468-4e50-9b84-922f9e7c14c1,"{"serviceProvider":{"oldValue":null,"newValue":"POSTGRES_DB_DC"},"integrationType":{"oldValue":null,"newValue":"DB"},"integrationName":{"oldValue":null,"newValue":"Sample Data"},"status":{"oldValue":null,"newValue":"CONNECTING"}}"
2024-06-15T20:57:15Z,DatasourceIntegrationEntity updated,{},UPDATE,DatasourceIntegrationEntity,80c26810-e468-4e50-9b84-922f9e7c14c1,"{"serviceProvider":{"oldValue":null,"newValue":"POSTGRES_DB_DC"},"integrationType":{"oldValue":null,"newValue":"DB"},"integrationName":{"oldValue":null,"newValue":"Sample Data"},"status":{"oldValue":null,"newValue":"CONNECTING"}}"
2024-06-15T21:39:27Z,Execution created,"{"firstName":"John","lastName":"Smith","id":"78f6c152-bf62-5626-c318-g74439b77c43","type":"User","email":"[email protected]"}",CREATE,Execution,c7f75b9f-1082-4c4e-b6b3-99c1ce76cd23,"{"assignedToUserId":{"oldValue":null,"newValue":null},"assignedToGroupId":{"oldValue":null,"newValue":null},"createdAt":{"oldValue":null,"newValue":"2024-06-15T21:39:26.860Z"},"completedAt":{"oldValue":null,"newValue":null},"runId":{"oldValue":null,"newValue":null},"id":{"oldValue":null,"newValue":"c7f75b9f-1082-4c4e-b6b3-99c1ce76cd23"},"version":{"oldValue":null,"newValue":1},"workflowId":{"oldValue":null,"newValue":"6daa65a3-f70a-4c43-ae4f-32a80ee7ef85"},"initiatedBy":{"oldValue":null,"newValue":"78f6c152-bf62-5626-c318-g74439b77c43"},"status":{"oldValue":null,"newValue":"RUNNING"},"updatedAt":{"oldValue":null,"newValue":"2024-06-15T21:39:26.860Z"}}"
2024-05-27T15:37:46Z,Step logic rule created,"{"firstName":"Alice","lastName":"Brown","id":"34f5e6d7-c8b9-0a12-3456-789012345678","type":"User","email":"[email protected]"}",CREATE,LogicRule,3e6432bc-1279-4b08-8766-0a8bc46d02fb,"{"createdAt":{"oldValue":null,"newValue":"2024-05-27T15:37:45.922Z"},"deletedAt":{"oldValue":null,"newValue":null},"name":{"oldValue":null,"newValue":"Rule 1 "},"stepId":{"oldValue":null,"newValue":"753b373a-f7a8-4a30-a6c1-b4d5f3f56694"},"step":{"oldValue":null,"newValue":null},"id":{"oldValue":null,"newValue":"3e6432bc-1279-4b08-8766-0a8bc46d02fb"},"type":{"oldValue":null,"newValue":"BRANCHING"},"ruleConditions":{"oldValue":null,"newValue":null},"stepLogicRule":{"oldValue":null,"newValue":"{\"step\":{\"id\":\"14dc7c04-ae54-41f8-928d-07fedffa15a8\",\"description\":\"Rule 1 \",\"type\":\"rule\",\"version\":1,\"workflowId\":\"c236e918-0b66-4f48-b6b4-708901018d05\",\"organizationId\":\"63a07d66-1165-11f0-81d3-0efac543e13f\",\"userId\":\"34f5e6d7-c8b9-0a12-3456-789012345678\",\"createdAt\":\"2024-05-27T15:37:45.938Z\",\"updatedAt\":\"2024-05-27T15:37:45.938Z\",\"deletedAt\":null}}"},"updatedAt":{"oldValue":null,"newValue":"2024-05-27T15:37:45.922Z"}}"
2024-05-23T20:27:35Z,Organization Security Policy Updated,"{"firstName":"John","lastName":"Smith","id":"78f6c152-bf62-5626-c318-g74439b77c43","sessionId":"60014982-f2c6-4fef-ae6b-46a476047214","type":"User","email":"[email protected]"}",UPDATE,Organization,63a07d66-1165-11f0-81d3-0efac543e13f,"{"enforceTwoFactorAuth":{"oldValue":false,"newValue":true},"passwordMinimumLength":{"oldValue":8,"newValue":12}}"
2024-04-13T20:44:47Z,Project created,"{"firstName":"Emma","lastName":"Wilson","id":"45h6i789-jk01-2345-6789-abcdef012345","type":"User","email":"[email protected]"}",CREATE,Project,10de96b9-a601-4ab2-8dd4-4cf102f3d470,"{"organizationId":{"oldValue":null,"newValue":"63a07d66-1165-11f0-81d3-0efac543e13f"},"createdAt":{"oldValue":null,"newValue":"2024-04-13T20:44:47.003Z"},"deletedAt":{"oldValue":null,"newValue":null},"workflow":{"oldValue":null,"newValue":null},"name":{"oldValue":null,"newValue":"Customer Onboarding"},"description":{"oldValue":null,"newValue":"Automated customer onboarding workflow"},"id":{"oldValue":null,"newValue":"10de96b9-a601-4ab2-8dd4-4cf102f3d470"},"stars":{"oldValue":null,"newValue":null},"type":{"oldValue":null,"newValue":"customer-onboarding"},"userId":{"oldValue":null,"newValue":"45h6i789-jk01-2345-6789-abcdef012345"},"updatedAt":{"oldValue":null,"newValue":"2024-04-13T20:44:47.003Z"}}"
2024-04-15T21:12:37Z,UserAddedToProject,"{"firstName":"John","lastName":"Smith","id":"78f6c152-bf62-5626-c318-g74439b77c43","sessionId":"b847c4f2-cbe4-4189-b5be-9cb205a785c3","type":"User","email":"[email protected]"}",UPDATE,Project,f7a6625b-8e5c-4615-9d61-e51d65256499,"{"userId":{"oldValue":null,"newValue":"78f6c152-bf62-5626-c318-g74439b77c43"}}"
2024-05-06T14:32:54Z,Project soft deleted,"{"firstName":"Alice","lastName":"Brown","id":"34f5e6d7-c8b9-0a12-3456-789012345678","type":"User","email":"[email protected]"}",DELETE,Project,e781b6b0-d08a-4121-bfed-2d77891c9117,"{"id":{"oldValue":"e781b6b0-d08a-4121-bfed-2d77891c9117","newValue":null}}"
2024-04-15T21:26:57Z,SearchEntity created,"{"firstName":"John","lastName":"Smith","id":"78f6c152-bf62-5626-c318-g74439b77c43","sessionId":"b847c4f2-cbe4-4189-b5be-9cb205a785c3","type":"User","email":"[email protected]"}",CREATE,Search,63a07d66-1165-11f0-81d3-0efac543e13f,"{"organizationId":{"oldValue":null,"newValue":"63a07d66-1165-11f0-81d3-0efac543e13f"},"id":{"oldValue":null,"newValue":"2bbe6fb8-e555-4c5c-8004-7eda8693ec7b"}}"
2024-05-12T13:50:49Z,BuilderTemplate created,"{"firstName":"Lisa","lastName":"Garcia","id":"56j7k890-lm12-3456-7890-bcdef1234567","sessionId":"0cdca4af-0ee4-439d-81a5-ae63432785ac","type":"User","email":"[email protected]"}",CREATE,SignBuilderDocument,84c680ad-a06f-4f1f-9aa1-9c2b673f8e37,"{"name":{"oldValue":null,"newValue":"New Document"},"pageCount":{"oldValue":null,"newValue":0},"id":{"oldValue":null,"newValue":"84c680ad-a06f-4f1f-9aa1-9c2b673f8e37"}}"
2024-05-15T18:34:39Z,BuilderTemplate updated,"{"firstName":"Alice","lastName":"Brown","id":"34f5e6d7-c8b9-0a12-3456-789012345678","sessionId":"8edf8a56-fd51-4003-839d-a4a555169f55","type":"User","email":"[email protected]"}",UPDATE,SignBuilderDocument,97ec6fa1-13d5-4164-bcec-2ba2ad91e852,"{"pageCount":{"oldValue":0,"newValue":1}}"
2024-05-15T18:34:44Z,BuilderField created,"{"firstName":"Alice","lastName":"Brown","id":"34f5e6d7-c8b9-0a12-3456-789012345678","sessionId":"8edf8a56-fd51-4003-839d-a4a555169f55","type":"User","email":"[email protected]"}",CREATE,SignBuilderDocumentField,3d1ab041-36f5-49db-8cae-f88dcc2e548b,"{"xPosition":{"oldValue":null,"newValue":6.542056},"isRequired":{"oldValue":null,"newValue":false},"pageNumber":{"oldValue":null,"newValue":1},"yPosition":{"oldValue":null,"newValue":42.057762},"width":{"oldValue":null,"newValue":11.915888},"fontSize":{"oldValue":null,"newValue":14.0},"id":{"oldValue":null,"newValue":"3d1ab041-36f5-49db-8cae-f88dcc2e548b"},"fieldType":{"oldValue":null,"newValue":"SIGNATURE"},"wrapText":{"oldValue":null,"newValue":false},"height":{"oldValue":null,"newValue":3.7906137}}"
2024-05-19T18:55:33Z,BuilderField created,{},CREATE,SignBuilderDocumentField,d769b6f6-5ffb-415d-b779-198777bbf0ec,"{"xPosition":{"oldValue":null,"newValue":0.0},"isRequired":{"oldValue":null,"newValue":false},"pageNumber":{"oldValue":null,"newValue":0},"mappedFieldId":{"oldValue":null,"newValue":"22457.first"},"yPosition":{"oldValue":null,"newValue":0.0},"width":{"oldValue":null,"newValue":0.0},"fontSize":{"oldValue":null,"newValue":0.0},"id":{"oldValue":null,"newValue":"d769b6f6-5ffb-415d-b779-198777bbf0ec"},"fieldType":{"oldValue":null,"newValue":"FORM_FIELD"},"wrapText":{"oldValue":null,"newValue":false},"height":{"oldValue":null,"newValue":0.0}}"
2024-05-12T13:50:48Z,BuilderEnvelope created,"{"firstName":"Lisa","lastName":"Garcia","id":"56j7k890-lm12-3456-7890-bcdef1234567","sessionId":"0cdca4af-0ee4-439d-81a5-ae63432785ac","type":"User","email":"[email protected]"}",CREATE,SignBuilderEnvelope,389fc747-ab9e-44d2-a236-f50aa66b0ae9,"{"type":{"oldValue":null,"newValue":"DYNAMIC"},"id":{"oldValue":null,"newValue":"389fc747-ab9e-44d2-a236-f50aa66b0ae9"},"status":{"oldValue":null,"newValue":"OPERATIONAL"}}"
2024-05-12T13:50:48Z,BuilderParticipant created,"{"firstName":"Lisa","lastName":"Garcia","id":"56j7k890-lm12-3456-7890-bcdef1234567","sessionId":"0cdca4af-0ee4-439d-81a5-ae63432785ac","type":"User","email":"[email protected]"}",CREATE,SignBuilderEnvelopeParticipant,ccd2cd01-f4f4-431c-904e-58f903ca49f5,"{"signingOrder":{"oldValue":null,"newValue":1},"name":{"oldValue":null,"newValue":"Signer 1"},"role":{"oldValue":null,"newValue":"Signer"},"id":{"oldValue":null,"newValue":"ccd2cd01-f4f4-431c-904e-58f903ca49f5"}}"
2024-04-15T21:12:32Z,Workflow created,"{"firstName":"John","lastName":"Smith","id":"78f6c152-bf62-5626-c318-g74439b77c43","type":"User","email":"[email protected]"}",CREATE,Workflow,6daa65a3-f70a-4c43-ae4f-32a80ee7ef85,"{"organizationId":{"oldValue":null,"newValue":"63a07d66-1165-11f0-81d3-0efac543e13f"},"createdAt":{"oldValue":null,"newValue":"2024-04-15T21:12:32.077Z"},"deletedAt":{"oldValue":null,"newValue":null},"name":{"oldValue":null,"newValue":"Sample Project"},"description":{"oldValue":null,"newValue":""},"id":{"oldValue":null,"newValue":"6daa65a3-f70a-4c43-ae4f-32a80ee7ef85"},"projectId":{"oldValue":null,"newValue":"f7a6625b-8e5c-4615-9d61-e51d65256499"},"version":{"oldValue":null,"newValue":1},"userId":{"oldValue":null,"newValue":"78f6c152-bf62-5626-c318-g74439b77c43"},"updatedAt":{"oldValue":null,"newValue":"2024-04-15T21:12:32.077Z"}}"

Note: This endpoint streams data in real-time, so the actual response will be delivered in chunks as the server processes the audit log data. The CSV format includes all audit events with timestamps, user information, actions performed, and relevant details.

Updated 25 days ago