# Activity Logs

Track and monitor all user actions and system events across your organization

Source: https://docs.eugo.io/docs/platform/activity-logs/

---

Monitor and audit all user actions and system events across your organization with comprehensive activity tracking.

## Overview

Activity logs provide a complete audit trail of all actions performed within your organization. Every action—from workspace deployments to user changes—is automatically recorded with detailed context about who performed the action, when it happened, and what changed.

The activity logs system helps you:
- **Maintain compliance** with detailed audit trails for security reviews
- **Debug issues** by tracking recent changes and their impact
- **Monitor usage patterns** across your organization
- **Track accountability** by identifying who made specific changes

Activity logs are accessible at both the organization level and globally for administrators, with automatic filtering based on your role and permissions.

## How it Works

Activity logs automatically capture events across all platform features including:

- **Workspace Operations**: Create, update, deploy, terminate, suspend, and resume actions
- **User Management**: User creation, updates, role changes, and deletions
- **Organization Changes**: Organization settings and configuration updates
- **Billing Events**: Payment processing, invoice generation, and subscription changes
- **Administrative Actions**: System-wide changes and administrative operations

Each log entry includes:

- **Timestamp**: When the action occurred
- **Type**: The category of action (Workspace, Users, Organization, etc.)
- **Action**: The specific operation performed (Create, Update, Delete, etc.)
- **User**: Who performed the action
- **Organization**: Which organization the action affects
- **Workspace**: The specific workspace involved (if applicable)
- **Identifier**: A human-readable identifier for the affected resource
- **Old Value**: The previous state (for update operations)
- **New Value**: The new state (for create/update operations)

## The Activity Logs Interface

The Activity Logs page displays a comprehensive table with all recorded activities. The interface includes:

### Table Columns

The activity logs table contains the following information:

| Column | Description |
|--------|-------------|
| **Time** | When the activity occurred, displayed in your local timezone |
| **Type** | The category of the activity (e.g., Workspace, Users, Organization) |
| **Action** | The specific operation performed (e.g., Create, Update, Fetch) |
| **User** | The name of the user who performed the action |
| **Organization** | The organization affected by the activity |
| **Workspace** | The workspace involved (if applicable) |
| **Identifier** | A human-readable identifier for the affected resource |
| **Old Value** | The previous state before the change (for updates) |
| **New Value** | The new state after the change (for creates/updates) |

### Controls and Features

- **Refresh Button**: Manually refresh the activity logs to see the latest entries
- **Pagination**: Navigate through pages of activities with customizable page sizes (25, 50, or 100 records per page)
- **Sortable Columns**: Columns are automatically sorted by time (newest first)
- **Resizable Columns**: Adjust column widths to view more detail as needed

<!-- ![Activity Logs Interface](/images/activity-logs-interface.png) -->

## Accessing Activity Logs

### Organization Activity Logs

Navigate to your organization's activity logs to see all actions within that organization:

1. From your organization dashboard, click **Activity Logs** in the left sidebar
2. View the chronologically ordered list of all activities
3. Use the pagination controls to browse historical activities
4. Click the **Refresh** button to update the log with the latest activities

The URL format for organization activity logs is:
```
/organizations/{organization_id}/activity-logs
```

### Global Activity Logs

Administrators can view system-wide activity logs:

1. Access the main **Activity Logs** section from the global navigation
2. See activities across all organizations in the system
3. Filter and search through comprehensive system-wide audit trails

Global administrators see all activities across the platform, making it useful for system-wide monitoring and security audits.

## Activity Types and Actions

The platform automatically tracks a comprehensive range of activities across all major features. Each activity is categorized by **Type** (the resource or feature) and **Action** (the operation performed).

### Workspace Activities

Workspace activities track the entire lifecycle of compute environments:

- **Create**: New workspace provisioned and configured
- **Update**: Workspace settings, resources, or configuration modified
- **Deploy**: Workspace deployed from a new build or image
- **Terminate**: Workspace permanently deleted
- **Suspend**: Workspace temporarily paused to save costs
- **Resume**: Previously suspended workspace reactivated
- **Fetch**: Workspace details retrieved or viewed
- **Fetch All**: List of workspaces queried
- **Status**: Workspace health or status checked
- **Download**: Workspace data or artifacts downloaded
- **Upgrade**: Workspace upgraded to a new plan or configuration

### User Management

User activities track team member lifecycle and access:

- **Create**: New user invited or account created
- **Update**: User profile, email, or permissions modified
- **Delete**: User account removed from organization
- **Fetch**: Individual user details accessed
- **Fetch All**: User list retrieved

### Organization Management

Organization activities track high-level organizational changes:

- **Create**: New organization established
- **Update**: Organization name, settings, or configuration changed
- **Fetch**: Organization details accessed
- **Fetch All**: Organization list retrieved

Organization updates include changes to:
- Organization name
- Plan tier (e.g., Standard → Premium → Enterprise)
- Organization settings and preferences
- Credit allocations

### Plans

Plan activities track subscription and pricing operations:

- **Create**: New plan created (admin only)
- **Update**: Plan pricing or features modified (admin only)
- **Fetch All**: Available plans list retrieved

### Invitations

Invitation activities track user invitation responses:

- **Response**: User invitation accepted or declined

### Billing & Invoices

Billing activities track when you view invoice information:

- **Fetch**: Invoice details accessed
- **Fetch All**: Invoice list retrieved

### Administrative Operations

Administrative activities track system-level changes (admin users only):

- **AdminUpdates**: System configuration changes and release management
- **AdminUsers**: Administrative user account management
- **AdminRoles**: System role definitions modified
- **AdminRolePermissions**: Role permission assignments modified
- **AdminAccounts**: Organization or account administrative actions

### Activity Logs Meta-Activities

The system tracks access to activity logs themselves:

- **Fetch**: Activity log details viewed
- **Fetch All**: Activity logs list accessed

This provides an audit trail of who is reviewing audit logs, ensuring complete accountability.

## Permissions and Access Control

Activity log access is automatically filtered based on your role and organizational membership. The platform ensures you only see activities relevant to your access level.

### Access Rules

**Organization Members:**
- View all activities within organizations they belong to
- See activities performed by other members of their organization
- Access workspace activities for workspaces they can view
- Cannot see activities from other organizations

**Regular Users:**
- View activities they personally performed across all organizations
- See activities affecting resources they have explicit access to
- Automatically filtered to show only relevant activities

**Administrators:**
- View all activities across the entire platform
- Access system-wide audit trails
- See administrative operations and system changes
- No filtering applied - complete visibility

### What You See

The activity logs you see are automatically filtered based on your role:

- **Non-admin users**: You'll only see activities from organizations you're a member of, or activities you personally performed
- **Admin users**: You'll see all logs across the entire platform
- **Organization pages**: When viewing logs from an organization page, you'll only see activities for that specific organization

This automatic filtering ensures you see relevant activities without needing to manually filter the results.

## Data Retention

Activity logs are permanently retained to provide a complete audit trail throughout the lifecycle of your organization.

### Retention Policy

- **No expiration**: Activity logs do not expire or get deleted automatically
- **Historical access**: All logs remain accessible indefinitely for compliance and auditing
- **Storage**: Activity log storage does not count against your organization's quotas
- **Deletion**: Activity logs are only removed if the entire organization is deleted

This permanent retention ensures you always have access to complete audit trails for compliance, security, and troubleshooting purposes.

## Understanding Activity Log Data

### Interpreting Old and New Values

Activity logs capture the state before and after changes, helping you understand exactly what changed:

**For Create Operations:**
- **Old Value**: Empty (resource didn't exist before)
- **New Value**: Shows the complete initial state of the created resource

**For Update Operations:**
- **Old Value**: Shows what the setting or field was before the change
- **New Value**: Shows what it changed to
- Simple changes display as plain text (e.g., "Premium" → "Enterprise")
- Complex changes show detailed information about all modified fields

**For Delete Operations:**
- **Old Value**: Shows the state of the resource before it was deleted
- **New Value**: Empty or shows deletion confirmation

**For Fetch Operations:**
- Both **Old Value** and **New Value** are empty
- These entries track when someone viewed or accessed data for audit purposes

### Timestamps and Timezone

All timestamps in the activity logs are automatically displayed in your local timezone, so you can easily understand when events occurred relative to your location.

## Common Use Cases

### Troubleshooting Recent Changes

When a workspace or feature stops working:

1. Navigate to Activity Logs for your organization
2. Sort by time (newest first) to see recent activities
3. Look for Update, Deploy, or Terminate actions on the affected resource
4. Check the "User" column to identify who made the change
5. Review old/new values to understand what changed

**Example scenario**: A workspace suddenly fails to start. Check activity logs for recent "Update" or "Deploy" actions on that workspace to identify configuration changes.

### Auditing User Permissions

Track who has been granted or revoked access:

1. Filter or search for "Users" type activities
2. Look for "Update" actions which may indicate permission changes
3. Review the old/new values to see exactly what permissions changed
4. Note the timestamp and who made the change

### Monitoring Billing Changes

Keep track of organization spending and plan changes:

1. Focus on "Organization" type activities with "Update" actions
2. Look for plan tier changes (Standard → Premium → Enterprise)
3. Monitor "Invoices" type activities to track billing events
4. Track credit additions and modifications

### Security Audits

Maintain compliance with security audit trails:

1. Review all "AdminUpdates" and administrative activities
2. Track "Fetch All" operations to monitor data access patterns
3. Identify unusual activity patterns or unauthorized access attempts
4. Document activities for security reviews and compliance reporting

## Pagination and Performance

The activity logs interface supports efficient browsing of large audit trails:

### Page Size Options

Choose from three page size options based on your needs:
- **25 records**: Best for quick scanning and real-time monitoring
- **50 records**: Balanced view for general browsing
- **100 records**: Comprehensive view for detailed audits

The page size persists during your session, so you don't need to re-select it.

### Navigation

- Use the numbered page buttons to jump to specific pages
- Click the "..." indicator to access pages further in the sequence
- The interface shows your current position (e.g., "Showing 1-25 of 412 items")
- Activity logs are always sorted chronologically (newest first)

### Performance Tips

- **Narrow your scope**: When possible, view logs from a specific organization page rather than global logs
- **Use pagination**: Don't try to load all logs at once - use pagination to browse efficiently
- **Refresh sparingly**: The refresh button is useful, but activity logs update automatically when you navigate
- **Consider time ranges**: For very large organizations, focus on recent activities first

## Best Practices

### Regular Monitoring

Establish a routine for reviewing activity logs:

- **Daily**: Quick scan of recent activities for anomalies
- **Weekly**: Review user management and permission changes
- **Monthly**: Comprehensive audit of billing and organizational changes
- **As-needed**: Investigate specific issues or troubleshoot problems

### Critical Activities to Monitor

Pay special attention to these high-impact activities:

- **Workspace Terminate**: Permanent deletion of resources
- **Organization Update**: Changes to plan tiers or critical settings
- **User Delete**: Removal of team members
- **AdminUpdates**: System-wide configuration changes

### Using Activity Logs for Compliance

Maintain audit trails for compliance and governance:

- **Track access**: Monitor Fetch and Fetch All operations to ensure proper data access
- **Document changes**: Use activity logs as evidence of who changed what and when
- **Review permissions**: Regularly audit user permission changes
- **Maintain retention**: Activity logs serve as permanent audit trails for your compliance needs

### Collaborative Debugging

When working with teams to resolve issues:

1. Share specific activity log entries with team members
2. Reference timestamps and identifiers to discuss specific events
3. Use old/new value comparisons to understand the impact of changes
4. Track the sequence of events leading to an issue

## Dashboard Integration

Recent activities are also displayed on your organization's [Dashboard](./dashboard.md) for quick visibility:

- The Dashboard shows the **6 most recent activities**
- Activities are displayed in a compact format with Type, Action, User, and Time
- Click "Show more" on the Dashboard to navigate to the full Activity Logs page
- Dashboard activities update automatically when you access the dashboard

This provides at-a-glance visibility into recent organizational changes without navigating to the dedicated Activity Logs page.

:::warning
Activity logs contain sensitive information about your organization's operations, including user actions, configuration changes, and access patterns. Ensure appropriate access controls are in place and only share logs with authorized personnel.
:::

## Related Resources

- [Dashboard](./dashboard.md) - View recent activities alongside other organization metrics
- [Organizations](./organizations.md) - Understand organization management and settings
- [Workspaces](./workspaces.md) - Learn about workspace operations tracked in activity logs
- [User Management](./user-management.md) - Manage team members and understand user-related activities
- [Billing](./billing.md) - Track billing events and invoice activities