> ## Documentation Index
> Fetch the complete documentation index at: https://basedash.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Audit logs

> Search and export a record of sign-ins, permission changes, queries, exports, and AI actions in your organization

export const details_0 = "Only admins can view audit logs."

Audit logs are a searchable record of who did what in your Basedash organization, from sign-ins and role changes to queries, exports, and actions taken by AI.

<Info>
  Available on the [Enterprise plan](/docs/administration/pricing). {details_0}
</Info>

## Overview

Basedash records two kinds of events:

* **Management events**, like sign-ins, member and group changes, sharing changes, and data source changes. These are recorded for every organization, on every plan, so your history is already there when you upgrade.
* **Data access events**, like queries, data exports, and tool calls made by AI. These are recorded only on the Enterprise plan.

On plans without audit logs, the page shows **Unlock your audit logs** instead of the event list.

## View audit logs

Open **Settings → Audit logs**. Events are listed newest first, 50 per page, with these columns:

* **Time**: when the event happened.
* **Action**: what happened, for example `member.role_changed`.
* **Actor**: who did it. This can be a person, an API key, SCIM, or Basedash itself.
* **Details**: the target and a short summary. Click **View details** to see the full event metadata.

## Filter events

Use the filters at the top of the page, then click **Apply**:

* **Search**: match an actor's email, an action, or a target's name or ID.
* **Category**: show one category of events.
* **Source**: show events from one place, such as the web app or the public API.
* **Start date** and **End date**: limit events to a time range.

Click **Clear** to reset the filters.

### Categories

| Category | Examples |
| - | - |
| Authentication | Sign-ins and sign-outs |
| Members | Invites, joins, role changes, removals |
| Access control | Groups, group membership, and sharing grants |
| Data sources | Data sources added, changed, synced, or credentials viewed |
| Queries | Queries run against your data, including approved write queries |
| Exports | Chart data exports |
| AI | Tool calls made by AI, changes to global AI context and skills |
| Organization | Organization settings, domains, API keys, SCIM tokens, JWT secret |
| Content | Dashboards and automations created, deleted, restored, or made public |
| Integrations | MCP connector changes and changes made through the public API |

### Sources

Events can come from the **Web app**, the **Public API**, **SCIM**, **Slack**, the **MCP** server, **Public dashboards**, or **System** jobs run by Basedash.

## Export to CSV

Click **Export CSV** to download the events that match your current filters as `basedash-audit-logs-YYYY-MM-DD.csv`. The file includes the event ID, time, action, category, actor details, source, IP address, user agent, target, and metadata for each event.

## Send events to your SIEM

To stream audit events into a SIEM or other tool, poll the [audit log API](/docs/api-reference/organizations/list-audit-log-events) with an admin's API key. It supports the same filters as the app: action, actor, category, source, target type, search, and a date range. Results are newest first and paginated with a cursor.

## Retention

Audit events are kept for 90 days by default. Contact support if you need a different retention period.

## FAQ

<AccordionGroup>
  <Accordion title="Are queries made by AI logged?">
    Yes, on the Enterprise plan. Queries run by chat, automations, and other AI
    features are recorded in the **Queries** category, and each tool call the AI
    makes is recorded in the **AI** category.
  </Accordion>

  <Accordion title="Are views of dashboards logged?">
    There's no separate page view event. Opening a dashboard runs its charts'
    queries, and on the Enterprise plan those queries are recorded in the
    **Queries** category.
  </Accordion>

  <Accordion title="Can members see audit logs?">
    No. Only admins can open **Settings → Audit logs** or use the audit log API.
  </Accordion>
</AccordionGroup>

## Related

<CardGroup cols={2}>
  <Card title="Security and compliance" icon="shield" href="/docs/administration/security">
    How Basedash protects your data.
  </Card>

  <Card title="Members and roles" icon="user-gear" href="/docs/administration/members-and-roles">
    Manage who's in your organization.
  </Card>

  <Card title="API overview" icon="code" href="/docs/api-reference/overview">
    Authenticate and call the public API.
  </Card>
</CardGroup>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.