Skip to main content
Track and audit all user actions and system events in Agent Platform, including logins, role changes, model updates, and workflow tool activities. Use audit logs to identify patterns in user activity, detect anomalies, spot unauthorized usage, and ensure compliance with internal policies and regulations. Navigation: Go to SettingsMonitoringAudit Logs.

Audit Log Dashboard

Each audit log entry captures the following information:
ColumnDescription
Event NameThe specific event or action that occurred.
CategoryThe module or entity affected by the event.
User NameThe user who performed the action or triggered the event.
Date and TimeWhen the event occurred.
DescriptionDetailed information about what was done.
User ID, Role ID, Model ID, Tool ID, Guardrail ID, Integration ID, and Experiment ID are the unique identifiers for the respective module entities in the system.
IP Address is fetched from the user’s current network.

Filter Audit Logs

Select the Filter icon to narrow down logs by category, event, or user using Is Equal To or Is Not Equal To operators. Combine multiple filters using AND (all conditions must be met) or OR (any one condition must be met) — operators cannot be mixed in the same filter set.

Export Audit Logs

Select the Export icon on the Audit Logs page to download a CSV file containing all audit log entries, including date and time, event name, category, description, user or app name, and IP address.

Audit log Event Reference

The tables below list all tracked events by category.

Account-level events

The User ID and IP Address are shown for audit log entries across all modules, in addition to module and category-specific metadata listed below.
Metadata: Email ID is shown for all events in this category.
EventDescriptionAdditional Metadata
LoginTracks account login activity.Login method
LogoutTracks account logout activity.
Metadata: Role ID is shown for all events except Role Changed.
EventDescriptionAdditional Metadata
Role editedTracks edits to a custom role.
Role createdTracks the creation of custom roles.Role Type
Role deletedTracks the deletion of custom roles.Role Type
Role changedTracks role changes for member users, including bulk changes.
Metadata: IP Address and User ID are shown for all events.
EventDescription
App API Key createdTracks the creation of an App API key.
App API key deletedTracks the deletion of an App API key.
Metadata: App ID, IP Address, and User ID are shown for all events.
EventDescription
API App createdTracks the creation of an API app.
API App deletedTracks the deletion of an API app.
API App updatedTracks updates or changes to an API app.
Metadata: IP Address, Integration Name, Integration ID, Integration Type, and User ID are shown for all events.
EventDescription
Integration addedTracks integrations added to the account.
Integration deletedTracks integration deletions.
Integration disabledTracks the disabling of an integration.
Integration editedTracks modifications to an integration’s configuration.
Metadata:
  • IP Address, User ID, Model ID, and Model Name are shown for all Model events.
  • Model Type is also shown for: Model Added, Model Deleted, API Key Created, API Key Deleted, Model Fine-tuning, Model Deployed, and Model Undeployed.
  • Hardware Type is shown for: Model Fine-tuning, Model Deployed, and Model Undeployed.
EventDescriptionAdditional Metadata
Model addedTracks the addition of models to the account.Deployment Name (open-source/fine-tuned models), Connection Name (commercial models)
Model deletedTracks the deletion of models from the account.Deployment Name (open-source/fine-tuned models), Connection Name (commercial models)
API Key createdTracks API key creation for a model.
API Key deletedTracks API key deletion for a model.
Model fine-tuningTracks the fine-tuning process for models.Training method, No. of epochs, Batch size, Learning rate, Training dataset, Test dataset, Weights and Biases
Model deployedTracks open-source model deployments.Temperature, Max length, Top p, Top k, Stop sequence, Inference batch size, Min replicas, Max replicas, Scale up delay, Scale down delay
Model undeployedTracks open-source model undeployments.Hours of usage, Temperature, Max length, Top p, Top k, Stop sequence, Inference batch size, Min replicas, Max replicas, Scale up delay, Scale down delay
Metadata: Tool ID and Tool Name are shown for all events.
EventDescriptionAdditional Metadata
Tool createdTracks the creation of a tool.
Tool deletedTracks the deletion of a tool.Model ID, Model Name, Model Type
Metadata: User ID, IP Address, Agent ID, Node name, Node ID, and Node Type are shown for all events.
EventDescription
Connection addedTracks the creation of a connection for an integration node.
Connection modifiedTracks the change of the selected connection for an integration node.
Action addedTracks the addition of an action for the selected connection and its configuration.
Action changedTracks the change of the selected action.
Action editedTracks the modification of action parameters for the defined action.
EventDescriptionAdditional Metadata
User invitedTracks the invitation of new users to the account.Added User IDs, Role Name, Role ID
User deletedTracks the deletion of existing users from the account.Removed User IDs
Metadata:
  • Prompt ID is shown for all Prompts events.
  • Prompt Name is shown for: Prompt Created, Versions Committed, Versions Restored, Prompt Shared, Endpoint Copied, and API Key Created.
EventDescriptionAdditional Metadata
Prompt createdTracks the creation of a prompt.
Prompt deletedTracks the deletion of a prompt.
Versions committedTracks prompt versions committed.Version Name
Version restoredTracks the prompt version restored.Version Name
Prompt sharedTracks prompts shared with other users.
Endpoint copiedTracks the prompt endpoint copy.
Endpoint consumedTracks the prompt endpoint consumed externally.
API Key createdTracks API key creation for a prompt endpoint.
Generated test dataTracks the generation of test data.Model name, Model ID, Tokens consumed
Generated promptTracks prompt generation by the account user.Model name, Model ID, Tokens consumed
EventDescriptionAdditional Metadata
Dataset uploadedTracks dataset uploads in the account.File type (extension)
Metadata: User ID, User Name, IP Address, and Custom Script Name are shown for all events.
EventDescription
Custom script saved as draftTracks a custom script saved as a draft.
Custom script deployedTracks custom script deployment.
Custom script undeployedTracks custom script undeployment.
Custom script re-deployedTracks custom script redeployment.
Custom script deletedTracks custom script deletion.
Custom script exportedTracks custom script export.
Metadata: Guardrail Name, Guardrail ID, and Hardware Type are shown for all events.
EventDescriptionAdditional Metadata
Guardrails deployedTracks guardrails deployment.
Guardrails undeployedTracks guardrails undeployment.Time of usage
Metadata: User ID, User Name, IP Address, Agent ID, Node name, Node ID, and Node Type are shown for all events.
EventDescription
Write CodeTracks the user’s selection to write a custom script.
Custom FunctionTracks the user’s selection to execute a custom function.
EventDescriptionAdditional Metadata
Default Role ConfiguredTracks changes made by admins to the workspace-level default role for new users.The status message: Default role for new users changed from ‘X’ to ‘Y’.

Tool-level events

The User ID, IP Address, and Tool ID are shown for audit log entries across all modules, in addition to module and category-specific metadata listed below.
EventDescription
Role changedTracks the change of a tool role for an account user.
Invited usersTracks the invitation of one or more users at the tool level.
Removed usersTracks the removal of one or more users at the tool level.
Metadata for deployment events: Tool version, API mode, sync/async, and URL are shown for Tool Deployed and Tool Undeployed events.
EventDescriptionAdditional Metadata
Tool deployedTracks tool deployments.
Tool undeployedTracks tool undeployments.
Metadata for version and configuration events: Version ID is shown for the events below.
EventDescriptionAdditional Metadata
Version createdTracks tool version creation.
Version deletedTracks tool version deletion.
API Key createdTracks tool API key creation.
API Key deletedTracks tool API key deletion.
Tool description updatedTracks tool description updates.
Tool name updatedTracks tool name updates.
Tool exportedTracks tool export.
API sync timeout updatedTracks synchronous timeout updates.
API async enabledTracks enabling of asynchronous mode.URL, Access token, Timeout (yes/no), Timeout value (if yes)
API async updatedTracks updates to asynchronous mode configuration.URL, Access token, Timeout (yes/no), Timeout value (if yes)
API async disabledTracks disabling of asynchronous mode.
Environment variable addedTracks the addition of an environment variable.
Environment variable deletedTracks the deletion of an environment variable.
Environment variable editedTracks the modification of an environment variable.
EventDescription
Input scanner addedTracks the addition of an input scanner.
Input scanner editedTracks the modification of an input scanner.
Input scanner removedTracks the deletion of an input scanner.
Output scanner addedTracks the addition of an output scanner.
Output scanner editedTracks the modification of an output scanner.
Output scanner removedTracks the deletion of an output scanner.