Audit Log
View the immutable log of all organization-level actions taken in your Koalr account.
Overview
The Audit Log provides an immutable, append-only record of all security-relevant and administrative actions taken within your organization. Use it to investigate access changes, track integration activity, and satisfy compliance requirements.
Navigate to Settings > Audit Log to view recent events.
What is logged
Koalr records actions across the following categories:
| Action | Description |
|---|---|
user.invited | A new member was invited to the organization |
user.removed | A member was removed from the organization |
integration.connected | An integration (GitHub, Jira, Slack, etc.) was connected |
integration.disconnected | An integration was disconnected |
agreement.created | A working agreement was created |
api_key.created | A new API key was generated |
api_key.revoked | An API key was revoked |
Additional action types are logged as the platform records all mutating requests through the global audit interceptor.
Log columns
Each audit entry includes:
- Action -- the event type, displayed as a color-coded badge
- Resource -- the resource type and a truncated resource ID (e.g.,
api_key:cm3x...) - Actor -- the name or email of the user who performed the action
- IP Address -- the IP address the request originated from
- When -- the timestamp of the event
Retention
The audit log page displays the most recent 100 events. Full audit history is retained according to your plan's data retention policy and can be exported via the API for long-term archival.
Compliance
The audit log is append-only and cannot be modified or deleted by any user, including organization owners. This design supports SOC 2 Type II, ISO 27001, and GDPR audit trail requirements.
Access
Only organization Admins and Owners can view the audit log. Members and Viewers do not have access to this page.