View audit logs

Audit logs give you a detailed record of every significant action taken within your organisation. They help you monitor user activity, investigate security incidents, and maintain compliance by showing who did what, when, and from where.

Prerequisites

• You must have the Admin role to access audit logs.

Access audit logs

On the Tekst platform, click Settings in the bottom navigation menu. Then select the Audit Logs tab to open the audit log overview.

You will see a paginated table showing the most recent audit events, with the newest entries displayed first.

Understanding the audit log table

The audit log table displays four columns:

• Actor - The name of the user who performed the action, along with their IP address.
• Action - The specific action that was performed (for example, user_create or flow_publish).
• Type - The type of resource that was affected (for example, user, flow, or integration).
• Date and time - The exact date and time the action occurred.

The table shows 10 entries per page. Use the pagination controls at the bottom of the table to navigate between pages. You can also change the number of entries per page by selecting 10, 25, 50, or 100 from the page size dropdown.

Filter audit logs

You can narrow down the audit log results using two filters located above the table. Filtered views are reflected in the URL, so you can bookmark or share a specific filtered view.

Filter by date range

Click the date filter button (calendar icon) to open the date range picker. Select a start date and end date to view events within that period. You can optionally set a specific time for more precise filtering. Click Apply to update the results, or Clear to remove the date filter.

Filter by action type

Click the action filter button to open a searchable dropdown of all available action types. Type to search for a specific action, then select it to filter the table. Only one action type can be selected at a time. To remove the filter, select All Actions.

View audit log details

Click any row in the table to open a detail panel on the right side of the screen. The detail panel contains two tabs:

Details tab

• Actor - The name, user ID, and IP address of the person who performed the action.
• Action - The action name and CRUD operation type (created, read, updated, or deleted).
• Target - The type, name, and ID of the resource that was affected.
• Date and time - Both the event creation time and the server insertion time.
• Status - If the action was performed anonymously or if it failed, a status badge is displayed.
• Description - A human-readable summary of what happened.

Raw JSON tab

This tab displays the complete audit log entry as raw JSON data, useful for technical investigation or when sharing details with your development team.

Tracked events

Tekst tracks a wide range of events across your organisation. For a complete list of every event type that appears in audit logs, see the "Audit log events reference" article.

If you have any questions or need help investigating a specific event, don't hesitate to contact our support team - we're here to help.