Docs
Audit log
The audit log records who changed what in your workspace. It lives under Settings → Audit.
What gets recorded
| Event | When it's written |
|---|---|
| Connection created / updated / deleted | Changes through the connection form. |
| Connection tested | Every test run — pass or fail. |
| Agent created / updated / deleted | Agent changes, which apply in Snowflake. |
| Bot created / updated / deleted | Bot lifecycle and bot info edits. |
| Bot credentials saved | Saving Slack tokens from the setup card. The tokens themselves are never recorded. |
| Bot activated / deactivated | Runtime toggles from the bot page. |
| Member added / role updated / removed | Team membership changes. |
| Invitation created / updated / canceled | Invites sent, accepted, rejected, or withdrawn. Accepts and rejects appear as Invitation updated with the outcome in the details column. |
| Impersonation started / stopped | Platform admin impersonation sessions — see Administration. |
Event details hold small, non-secret context only (a name, a role, an email). Credentials, ciphertext, and decrypted secrets are never written to the log.
Who can see it
Workspace owners and admins. Members opening Settings → Auditsee an "Owners and admins only" notice instead, and the underlying API enforces the same split.
The log is per workspace. There's no cross-organization audit view — switch workspaces to see another log.
Reading the log
Newest events first, 50 at a time, with a Load more button for older pages. Columns:
- Time — when it happened, in your local timezone.
- Actor — who did it (name and email), or System when no actor was recorded.
- Action — what happened, in plain words.
- Entity — what it happened to, with a shortened id (hover for the full value).
- Details— the event's metadata as a compact one-liner.
Actor attribution
Most events record the signed-in user who performed the action. There's one known gap, inherited from the auth library's hooks:
- Member role changes and removals record the affected member, not the acting admin. The event shows who was changed or removed, with no actor attached.
- Invitation events (created, accepted, rejected, canceled) do record the actor correctly.