mirror of
https://github.com/coder/coder.git
synced 2026-06-07 15:08:20 +00:00
Kira Pilot
8282e46813
* added test for stopping a workspace build * formatted sfriendly string; added tests * logging unmarshal error in auditLogDescription * prettier * got rid of extra workspace word * PR feedback * fixed mistake; wrote tests in penance * fix be
37 lines
1.3 KiB
Markdown
37 lines
1.3 KiB
Markdown
# Audit Logs
|
|
|
|
Audit Logs allows **Auditors** to monitor user operations in
|
|
their deployment.
|
|
|
|
## Tracked Events
|
|
|
|
We track **create, update and delete** events for the following resources:
|
|
|
|
- GitSSHKey
|
|
- Template
|
|
- TemplateVersion
|
|
- Workspace
|
|
- Workspace start/stop
|
|
- User
|
|
- Group
|
|
|
|
## Filtering logs
|
|
|
|
In the Coder UI you can filter your audit logs using the pre-defined filter or by using the Coder's filter query like the examples below:
|
|
|
|
- `resource_type:workspace action:delete` to find deleted workspaces
|
|
- `resource_type:template action:create` to find created templates
|
|
|
|
The supported filters are:
|
|
|
|
- `resource_type` - The type of the resource. It can be a workspace, template, user, etc. You can [find here](https://pkg.go.dev/github.com/coder/coder@main/codersdk#ResourceType) all the resource types that are supported.
|
|
- `resource_id` - The ID of the resource.
|
|
- `resource_target` - The name of the resource. Can be used instead of `resource_id`.
|
|
- `action`- The action applied to a resource. You can [find here](https://pkg.go.dev/github.com/coder/coder@main/codersdk#AuditAction) all the actions that are supported.
|
|
- `username` - The username of the user who triggered the action.
|
|
- `email` - The email of the user who triggered the action.
|
|
|
|
## Enabling this feature
|
|
|
|
This feature is only available with an enterprise license. [Learn more](../enterprise.md)
|