Audit Log Types
ShiftLabs provides two audit log views:- System Audit Logs: All API operations (cluster changes, pipeline runs, deployments, etc.)
- IAM Audit Logs: Identity and access management activities (user invites, role assignments, permission checks)
How to View Audit Logs
System Audit Logs: Go to Audit & Compliance → Audit Logs IAM Audit Logs: Go to Audit & Compliance → IAM Audit LogsHow to Filter Audit Logs
Use the filter panel to narrow down results:- Search: Filter by user email or endpoint
- Project: Filter by specific project (System Audit only)
- Status: Show only successful or failed operations
- Date Range: Specify start and end dates
- User Email: Filter by specific user
- Action: Filter by action type (e.g., CREATE, DELETE, LOGIN)
How to View Log Details
Click on any log entry to expand and see:- Full timestamp
- User information
- IP address and user agent
- Request details (HTTP method, endpoint)
- Duration
- Error message (if failed)
Common Actions
System Audit Actions:CREATE,READ,UPDATE,DELETE- CRUD operationsLOGIN,LOGOUT,LOGIN_FAILED- Authentication eventsCLUSTER_CREATE,CLUSTER_DELETE- Cluster operationsPIPELINE_RUN,DEPLOY,ROLLBACK- CI/CD operationsSECRET_CREATE,SECRET_READ- Vault operations
user_invited,user_removed- User managementrole_assigned,role_revoked- Role changesgroup_member_added,group_member_removed- Group changespermission_check- Permission verifications
Troubleshooting
Cannot find a specific action
Cannot find a specific action
- Check the date range - logs may be outside your filter
- Try the search field with user email or endpoint
- Clear all filters and browse chronologically
Audit logs not appearing
Audit logs not appearing
- Verify you have permission to view audit logs
- Check if you’re filtering by the correct project
- Some internal system operations may not be logged
Need logs older than displayed
Need logs older than displayed
Audit logs are retained based on your plan. Contact support for extended retention or log exports.
FAQ
How long are audit logs retained?
How long are audit logs retained?
Retention period depends on your plan. Contact support for specific details or extended retention.
Can I export audit logs?
Can I export audit logs?
Export functionality may be available depending on your plan. Contact support for bulk exports.
Are failed login attempts logged?
Are failed login attempts logged?
Yes. Failed logins appear with
LOGIN_FAILED action and status “Failed”.What's the difference between System and IAM audit logs?
What's the difference between System and IAM audit logs?
System logs track all API operations. IAM logs specifically track identity and access changes (users, roles, groups, permissions).
Can I see who changed a user's roles?
Can I see who changed a user's roles?
Yes. Check IAM Audit Logs and filter by action
role_assigned or search for the user’s email.