Audit logs

Audit logs record what people did in the portal and what the platform reported as errors, warnings, or info. They live on this portal only. They are not a SIEM, a trace store, or an export feed.

The subtitle is View activity and system logs. Two tabs: Activity logs and System logs. Times use the portal timezone (set under Configuration → General).

Activity logs

Rows are user actions. Empty state: “Activity will appear here as users interact with the portal.”

Columns:

• User — name and email. A dash if the actor is not a portal user.
• Action — the recorded action name.
• Resource — type, or type and id (for example configuration:users). A dash if none was stored.
• Details — truncated text. Click it to open Activity Details (pretty-printed when the text is JSON). Copy puts the text on the clipboard. Escape or the close control dismisses the dialog.
• IP — client address when one was stored.
• Time — when the row was written.

Toolbar:

• Search by user email...
• Filter by action...
• Refresh
• Clear activity logs — permanently deletes every activity row for this portal. Confirm in Clear activity logs. This cannot be undone.

The footer shows how many rows are on the page and Previous / Next when there is more than one page.

System logs

Rows are platform events, not user clicks. Empty state: “System events will appear here when they are recorded.”

Columns:

• Level — Error, Warning, or Info.
• Message — the event text. A stack trace appears under the message when one was stored.
• Code — an optional short code. A dash if none.
• Time — when the row was written.

Toolbar:

• Level filter — All levels, Error, Warning, or Info.
• Refresh
• Clear system logs — permanently deletes every system row for this portal. Confirm in Clear system logs. This cannot be undone.