Audit Log

Overview

The Audit Log records every significant action taken by members of your organisation. Use it to investigate incidents, meet compliance requirements, or simply understand what changed and when. Audit Log is available on the Enterprise S plan and above.

What gets logged

• member.invited — someone was invited to the organisation
• member.removed — a member was removed
• member.role_changed — a member's role was updated
• project.created — a new project was created
• project.updated — project settings were changed (retention, name, PII masking)
• project.deleted — a project was deleted
• alert.created — an alert was created
• alert.updated — an alert was modified
• alert.deleted — an alert was deleted

Each entry records the actor's email, IP address, resource name, and any relevant metadata.

Viewing the Audit Log

Go to Admin → Audit Log in the sidebar. You can filter by action type using the chip filters at the top, and page through the full history 50 entries at a time.

Querying via API

# List audit events (most recent first)
curl https://api.getlogflow.com/v1/audit \
  -H "Authorization: Bearer lf_YOUR_API_KEY"

# Filter by action type
curl "https://api.getlogflow.com/v1/audit?action=member.invited" \
  -H "Authorization: Bearer lf_YOUR_API_KEY"

# Paginate
curl "https://api.getlogflow.com/v1/audit?limit=50&offset=50" \
  -H "Authorization: Bearer lf_YOUR_API_KEY"

Response format

{
  "logs": [
    {
      "id": "clx...",
      "action": "member.invited",
      "resourceType": "invitation",
      "resourceName": "colleague@example.com",
      "actorEmail": "owner@example.com",
      "actorName": "Alex",
      "metadata": { "role": "member" },
      "ipAddress": "1.2.3.4",
      "createdAt": "2026-06-15T10:00:00.000Z"
    }
  ],
  "total": 142,
  "limit": 50,
  "offset": 0
}