Skip to content

Audit Logs

The Audit Logs section provides a complete record of all gateway activity for security monitoring and compliance.

Navigate to Audit Logs in the sidebar to see the activity log:

ColumnDescription
TimestampWhen the event occurred
UserWho performed the action
ActionWhat was done
ResourceWhat was affected
StatusSuccess or failure
IP AddressOrigin of the request

Use the filter panel to narrow results:

Filter by user, resource, or action text.

  • Authentication
  • Convox API
  • User Management
  • Token Management
  • Success
  • Failed
  • Blocked
  • App
  • Rack
  • Env
  • Secret
  • Process
  • System
  • API Token
  • User
  • Auth
  • Admin
  • Last 15 minutes, 1 hour, 24 hours, 7 days, 30 days
  • Custom range

Click any log entry to see full details:

{
"timestamp": "2024-01-15T14:30:00.123Z",
"user_email": "alice@example.com",
"action_type": "convox",
"action": "deploy.create",
"resource_type": "app",
"resource": "myapp",
"status": "success",
"http_status": 200,
"response_time_ms": 1250,
"ip_address": "192.168.1.100",
"user_agent": "rack-gateway-cli/1.2.0",
"event_count": 1
}
  1. Apply desired filters

  2. Click Export

  3. Download the CSV file

Logs include cryptographic chain hashes. Any tampering is detectable:

Chain verification: ✓ Valid
Entries: 1,234,567
First entry: 2024-01-01T00:00:00Z
Last entry: 2024-01-15T14:30:00Z

Logs are retained according to your configuration:

  • Default: 400 days (SOC 2 compliance)
  • Financial: 7 years (SOX/FINRA)

If configured, hourly anchors are written to S3 Object Lock storage for immutability.

For live monitoring:

  1. Set filter to “Last 5 minutes”
  2. Enable Auto-refresh
  3. Watch for new entries