The Audit Logs page gives you a searchable activity trail of user and system actions in your workspace. It is designed for compliance evidence, operational traceability, and incident investigation.
Accessing Audit Logs
- Open Settings in the CyfroSec portal.
- Select Audit Logs.
Audit Logs are available to Organization Admin and Account Group Admin roles. Standard users without settings access are redirected to the dashboard.
What You Can See
The table shows one row per activity event with the following columns:
| Column | Description |
|---|---|
| Timestamp | When the action occurred (local browser time format) |
| User | Display name of the actor (or user ID / System) |
| Description | Natural language activity description (or the action type when more detail is not available) |
| Status | HTTP response status badge (2xx, 4xx, 5xx, or N/A) |
| Duration | Request execution time in milliseconds |
Status Badge Semantics
| Status range | Badge meaning |
|---|---|
| 200-299 | Success |
| 400-499 | Client-side issue / rejected request |
| 500+ | Server-side failure |
| Missing status | Not available (N/A) |
Search and Filtering
The Audit Logs page supports both full-text search and structured filters.
Search
Use the search input to match:
- User display name (or user ID)
- Activity description
Search is debounced to reduce request volume while typing.
Available Filters
Click Filters to open advanced filtering controls:
| Filter | Example |
|---|---|
| Action Type | api_request |
| Resource Type | user, scan, agent |
| Endpoint | /users |
| IP Address | 192.168.1.10 |
| Status Code | 200, 404, 500 |
| Start Date | Lower bound (datetime) |
| End Date | Upper bound (datetime) |
The page also scopes results to the currently selected account group when applicable. Use Clear All to remove every active filter.
Refresh and Pagination
Use Refresh to request the newest log data. Results are paginated with:
- 20 rows per page
- Previous/Next controls
- Footer count: "Showing X of Y logs"
Empty and Error States
Empty State
You may see No Audit Logs Found when:
- There are no events yet
- Current filters/search return zero matches
Error State
If loading fails, an error card appears with:
- Error summary
- Retry action
Frequently Asked Questions
Why do I see fewer rows than expected after searching? Search is applied to the current page dataset after loading. Move through pages and/or refine structured filters to locate additional events.
Can non-admin users open Audit Logs? No. Access is limited to Organization Admin and Account Group Admin roles.
Is the timestamp in UTC? The UI renders timestamps in your browser locale/timezone for readability.
Can I filter by account group? Yes. Audit queries are scoped by your current account-group context when present.