Audit Logs

Audit Logs
Enterprise

Audit Logs

Audit Logs allows Auditors to monitor user operations in their deployment.

We track the following resources:

Resource

APIKey
login, logout, register, create, delete

Group
create, write, delete

GitSSHKey
create

License
create, delete

Template
write, delete

Field	Tracked
active_version_id	true
allow_user_autostart	true
allow_user_autostop	true
allow_user_cancel_workspace_jobs	true
created_at	false
created_by	true
default_ttl	true
deleted	false
description	true
display_name	true
failure_ttl	true
group_acl	true
icon	true
id	true
inactivity_ttl	true
max_ttl	true
name	true
organization_id	false
provisioner	true
updated_at	false
user_acl	true

TemplateVersion
create, write

User
create, write, delete

Workspace
create, write, delete

WorkspaceBuild
start, stop

WorkspaceProxy

In the Coder UI you can filter your audit logs using the pre-defined filter or by using the Coder's filter query like the examples below:

The supported filters are:

resource_type - The type of the resource. It can be a workspace, template, user, etc. You can find here all the resource types that are supported.
resource_id - The ID of the resource.
resource_target - The name of the resource. Can be used instead of resource_id.
action- The action applied to a resource. You can find here all the actions that are supported.
username - The username of the user who triggered the action.
email - The email of the user who triggered the action.
date_from - The inclusive start date with format YYYY-MM-DD.
date_to - The inclusive end date with format YYYY-MM-DD.
build_reason - To be used with resource_type:workspace_build, the initiator behind the build start or stop.

This feature is only available with an enterprise license. Learn more

See an opportunity to improve our docs? Make an edit.

On this page