Security & Compliance

Audit

The Audit Logs page gives you a searchable activity trail of user and system actions in your workspace. It is designed for compliance evidence, operational traceability, and incident investigation.


Accessing Audit Logs

  1. 1Open Settings in the CyfroSec portal.
  2. 2Select Audit Logs.

Audit Logs are available to:

  1. 1Organization Admin
  2. 2Account Group Admin

Standard users without settings access are redirected to the dashboard.

What You Can See

The table shows one row per activity event with the following columns:

ColumnDescription
TimestampWhen the action occurred (local browser time format)
UserDisplay name of the actor (or user ID / System)
DescriptionNatural language activity description (a fallback of this would be the action type if enough details are not available)
StatusHTTP response status badge (2xx, 4xx, 5xx, or N/A)
DurationRequest execution time in milliseconds

Status Badge Semantics

Status rangeBadge meaning
200-299Success
400-499Client-side issue / rejected request
500+Server-side failure
Missing statusNot available (N/A)

Search and Filtering

The Audit Logs page supports both full-text search and structured filters.

Use the search input to match:

  1. 1User display name (or user ID)
  2. 2Activity description

Search is debounced to reduce request volume while typing.

Available Filters

Click Filters to open advanced filtering controls:

FilterExample
Action Typeapi_request
Resource Typeuser, scan, agent
Endpoint/api/v1/users
IP Address192.168.1.10
Status Code200, 404, 500
Start DateLower bound (datetime)
End DateUpper bound (datetime)

The page also scopes results to the currently selected account group when applicable.

Use Clear All to remove every active filter.

Refresh and Pagination

Use Refresh to request the newest log data.

Results are paginated with:

  1. 120 rows per page
  2. 2Previous/Next controls
  3. 3Footer count: "Showing X of Y logs"

Empty and Error States

Empty State

You may see No Audit Logs Found when:

  1. 1There are no events yet
  2. 2Current filters/search return zero matches

Error State

If loading fails, an error card appears with:

  1. 1Error summary
  2. 2Retry action

Frequently Asked Questions

Why do I see fewer rows than expected after searching?

Search is applied to the current page dataset after loading. Move through pages and/or refine structured filters to locate additional events.

Can non-admin users open Audit Logs?

No. Access is limited to Organization Admin and Account Group Admin roles.

Is the timestamp in UTC?

The UI renders timestamps in your browser locale/timezone for readability.

Can I filter by account group?

Yes. Audit queries are scoped by your current account-group context when present.