Audit Logs

Track every action, configuration change, and deployment event across your organization. Immutable, exportable, and SIEM-ready.

Action: Deployment × Status: Success ×
Event ID Timestamp (UTC) Actor Action Resource Status IP Address
evt_8x92kLm1 2025-03-20 14:32:09
AK
admin@core.io
DEPLOY_TRIGGERED prod/api-gateway Success 192.168.4.22
evt_7p41nQz3 2025-03-20 14:18:45
DR
dev-ops@core.io
WEBHOOK_UPDATED hooks/github/pr-merge Info 10.0.0.14
evt_2m58vWx9 2025-03-20 13:55:12
SL
sarah@core.io
PERMISSION_CHANGED roles/admin Warning 172.16.5.8
evt_9k12pRt4 2025-03-20 13:20:01
CI
system@core.io
BUILD_FAILED feat/auth-rollback Failed 127.0.0.1
evt_4h67jNq2 2025-03-20 12:44:33
MK
m.k@core.io
BRANCH_MERGED main Success 192.168.1.105
evt_1w39bCs8 2025-03-20 11:09:17
AK
admin@core.io
USER_LOGIN account/admin Success 192.168.4.22

🔒 Immutable & Secure

Audit logs are written to append-only storage. No user, including admins, can alter or delete historical entries.

  • End-to-end encryption at rest
  • Zero-knowledge architecture
  • Hardware security key support

📊 Compliance Ready

Built to meet SOC 2 Type II, ISO 27001, and GDPR audit requirements out of the box.

  • 2-year mandatory retention
  • Automatic PII masking
  • Export to CSV/JSON/Parquet

🔗 SIEM Integration

Stream audit events in real-time to your security stack without polling or delays.

  • Native Splunk & Datadog webhooks
  • Syslog RFC5424 support
  • Custom HTTP destinations

Query via REST API

# Fetch audit logs for the last 24 hours curl -X GET https://api.git.dev/v1/audit/logs \\ -H "Authorization: Bearer $GIT_TOKEN" \\ -H "Content-Type: application/json" \\ --data '{ "action": "DEPLOY_TRIGGERED", "date_from": "2025-03-19T00:00:00Z", "limit": 25, "sort": "timestamp_desc" }'