{"article":{"id":6514515710107,"url":"https://celigosuccess.zendesk.com/api/v2/help_center/en-us/articles/6514515710107.json","html_url":"https://docs.celigo.com/hc/en-us/articles/6514515710107-View-or-download-your-audit-logs","author_id":417756103851,"comments_disabled":false,"draft":false,"promoted":false,"position":8,"vote_sum":0,"vote_count":0,"upvote_count":0,"downvote_count":0,"section_id":24220435887003,"created_at":"2022-06-10T14:51:08Z","updated_at":"2026-10-27T20:41:25Z","name":"View or download your audit logs","title":"View or download your audit logs","source_locale":"en-us","locale":"en-us","outdated":false,"outdated_locales":[],"edited_at":"2026-10-27T20:41:25Z","user_segment_id":null,"permission_group_id":728112,"content_tag_ids":[],"label_names":["Audit Logs","audit log dashboard","audit log","audit log tab","audit logs","where to find audit logs","audit log parameters","download audit logs","help logs","logs","where are audit logs","how to use audit logs","audit","audit data"],"body":"<div class=\"section top-level-topic zd-article original-topic\" dir=\"ltr\" lang=\"en\">\n<p>Audit logs maintain a record of specific activities in your flows, including the fields that were changed, the type of change, and who's responsible for the change. You can view your audit logs at a flow or integration level.</p>\n<p class=\"important\"><span class=\"important_header\">Important:</span> In audit logs, pageProcessors and pageGenerators represent imports and exports, respectively. This is a system naming convention only and does not affect your integrations or flows.</p>\n<div class=\"mediaobject screenshot-frame\"><img src=\"https://docs.celigo.com/hc/article_attachments/53341073698331\" alt=\"8630457702683-All_audit_logs.png\"></div>\n<p><em><span class=\"emphasis\">Audit logs</span></em></p>\n<p>These logs show high-level data for all your logs. To narrow down the information to integration audit logs, use <a href=\"#h_01M00FDD98RES79A5PDB8XF3T5\" title=\"Resource Type\">Select resource type</a>, <a href=\"#h_01M00FDD98ENW2VN2T6PTTAR1X\" title=\"User\">user</a>, and <a href=\"#h_01M00FDD981B37W91E9E4N06E6\" title=\"Source\">source</a>.</p>\n<div class=\"section top-level-topic sub-topic internal\" dir=\"ltr\">\n<div class=\"titlepage\"><h2 class=\"title\" id=\"h_01M00FDD98S83S1VSY081J7RHK\">\n<a id=\"UUID-f1e196d2-0114-0f5c-844f-2752240ad1b9_id_6514515710107_id_Download\" data-zd-article=\"UUID-f1e196d2-0114-0f5c-844f-2752240ad1b9\"></a>Download audit logs</h2></div>\n<p>integrator.io keeps audit logs for a minimum of a year. For example, you can view audit logs from the same date one year ago through today. If you download logs to a CSV file or use the <a href=\"https://developer.celigo.com/api/api-reference/monitoring/audit-logs\">audit API endpoint</a> , you can download up to 20,000 records simultaneously. If, for example, you've generated 30,000 records in the last 24 hours, you can download the records in parts by adjusting the <strong>Custom</strong> date/time range. You can also filter the logs by <a href=\"#h_01M00FDD98RES79A5PDB8XF3T5\">resource type</a> , <a href=\"#h_01M00FDD98ENW2VN2T6PTTAR1X\">user</a>, <a href=\"#h_01M00FDD981B37W91E9E4N06E6\">source</a>, or <a href=\"#h_01M00FDD99NY60V880EXJZHQNN\">action</a> and then download the filtered list of records.</p>\n<p>To retain audit logs for a longer period, you can <a href=\"https://docs.celigo.com/hc/en-us/articles/25920760918171\">upgrade your subscription plan</a>.</p>\n<div class=\"glossary-definitions\" style=\"display: none!important;\"></div>\n</div>\n<div class=\"section top-level-topic sub-topic internal\" dir=\"ltr\">\n<div class=\"titlepage\"><h2 class=\"title\" id=\"h_01M00FDD98R4XTEXYHV259MV9V\">\n<a id=\"UUID-f1e196d2-0114-0f5c-844f-2752240ad1b9_id_6514515710107_id_Practical\" data-zd-article=\"UUID-f1e196d2-0114-0f5c-844f-2752240ad1b9\"></a>Practical uses for audit logs</h2></div>\n<p>Use your audit logs to troubleshoot flow errors and pinpoint changes that created issues with your integration or flow. You can also determine who changed account permissions. For example, if someone changed an import field and caused an error, you can use audit logs to review the changes. Then, use <a href=\"https://docs.celigo.com/hc/en-us/articles/5349100943003\">Integration Lifecycle Management</a> to revert your changes.</p>\n<div class=\"glossary-definitions\" style=\"display: none!important;\"></div>\n</div>\n<div class=\"section top-level-topic sub-topic internal\" dir=\"ltr\">\n<div class=\"titlepage\"><h2 class=\"title\" id=\"h_01M00FDD98YZM1NWDWJ6257XTC\">\n<a id=\"UUID-f1e196d2-0114-0f5c-844f-2752240ad1b9_id_6514515710107_id_Parameters\" data-zd-article=\"UUID-f1e196d2-0114-0f5c-844f-2752240ad1b9\"></a>Parameters</h2></div>\n<p>Audit logs record every action or change you've made to your flow or integration. The logs record nine (9) parameters for each change:</p>\n<h5 id=\"h_01M00FDD98YWGKBEMP3SBSGJV1\">\n<a id=\"UUID-f1e196d2-0114-0f5c-844f-2752240ad1b9_bridgehead-idm4534591880444834329020134304\"></a>Time</h5>\n<p>You can <a href=\"https://docs.celigo.com/hc/en-us/articles/227054148\">configure your account profile to display timestamps</a> in any date/time format. If you've set your account to relative time, the timestamp is displayed as the length of time between the started date and time and the current date and time (1 day ago, 3 hours ago).</p>\n<h5 id=\"h_01M00FDD98ENW2VN2T6PTTAR1X\">\n<a id=\"UUID-f1e196d2-0114-0f5c-844f-2752240ad1b9_bridgehead-idm4534591903731234329021710568\"></a>User</h5>\n<p>The user responsible for the changes. In cases where the account is shared by multiple people with the same password, the only username is something similar to \"Account Owner\" or your company name.</p>\n<p class=\"tip\"><span class=\"tip_header\">Tip:</span> If you're an account owner or administrator you can <a href=\"https://docs.celigo.com/hc/en-us/articles/360053966912\">invite new users (or remove old users) to your account</a>.</p>\n<h5 id=\"h_01M00FDD981B37W91E9E4N06E6\">\n<a id=\"UUID-f1e196d2-0114-0f5c-844f-2752240ad1b9_bridgehead-idm4498309470756834329024162061\"></a>Source</h5>\n<p>The Source field in audit logs records which client or surface was used to make the change. Possible values are:</p>\n<ul>\n<li class=\"listitem\" data-list-item-id=\"e0344b72ed2b352caa7d50e995c7f2bde\">\n<span class=\"bold\"><strong>UI</strong></span> – Changes were made from the user interface.</li>\n<li class=\"listitem\" data-list-item-id=\"e65b56a9be07bcc6617109b7130df2679\">\n<span class=\"bold\"><strong>API</strong></span> – Changes were made directly through the API. This is also the recorded value when the source cannot be determined.</li>\n<li class=\"listitem\" data-list-item-id=\"e537363a02388f68c4de1ee5725ab0229\">\n<span class=\"bold\"><strong>Stack</strong></span> – Changes were made from the stack.</li>\n<li class=\"listitem\" data-list-item-id=\"e311f1c538e2838973bd506df09760d5e\">\n<span class=\"bold\"><strong>System</strong></span> – Any change made to a resource by integrator.io backend logic or a system process.</li>\n<li class=\"listitem\" data-list-item-id=\"ecc7a950177f57b454b4e7fbd4792dbba\">\n<span class=\"bold\"><strong>Integration app</strong></span> – Changes were made by the integration app.</li>\n<li class=\"listitem\" data-list-item-id=\"ec293528bc2e1bb066cc09f34de8b3c2e\">\n<span class=\"bold\"><strong>Ora</strong></span> – Changes were made through the Ora AI assistant.</li>\n<li class=\"listitem\" data-list-item-id=\"ebe81c097ebc56a2fdd0532951046f076\">\n<span class=\"bold\"><strong>CLI</strong></span> – Changes were made through the Celigo command-line interface.</li>\n<li class=\"listitem\" data-list-item-id=\"e252cbf75b7f949a048c5bc21b7562b2b\">\n<span class=\"bold\"><strong>MCP</strong></span> – Changes were made through the Platform MCP server.</li>\n</ul>\n<p>The source is determined server-side from the request signal. It cannot be set or overridden by the client.</p>\n<p class=\"note\"><span class=\"note_header\">Note:</span> Audit log entries created before Ora, CLI, and MCP source values were introduced show <span class=\"bold\"><strong>API</strong></span> for activity performed through those clients. Historical entries are not updated retroactively.</p>\n<h5 id=\"h_01M00FDD98RES79A5PDB8XF3T5\">\n<a id=\"UUID-f1e196d2-0114-0f5c-844f-2752240ad1b9_bridgehead-idm449830933789763432902635903\"></a>Resource type</h5>\n<p>Shows you the resource that was updated. The following resources are monitored for changes:</p>\n<div class=\"informaltable table-responsive\"><figure class=\"wysiwyg-table\"><table class=\"table-classic\" style=\"margin-left: 0px; margin-right: auto;\">\n<thead><tr>\n<th>Resource Type</th>\n<th>Description</th>\n</tr></thead>\n<tbody>\n<tr>\n<td>API</td>\n<td>Logs your <a href=\"https://docs.celigo.com/hc/en-us/articles/29494547815579\">API-level</a> updates.</td>\n</tr>\n<tr>\n<td>Integration</td>\n<td>Logs your <a href=\"https://docs.celigo.com/hc/en-us/articles/360025642872\">integration-level</a> updates. This includes name changes.</td>\n</tr>\n<tr>\n<td>Flow</td>\n<td>Logs your <a href=\"https://docs.celigo.com/hc/en-us/articles/360025919171\">flow-level</a> updates. In integration-level audit logs, this is displayed as an update to the flow, with a specific field name (pageProcessors/Imports or pageGenerators/Exports) and changes available to view.</td>\n</tr>\n<tr>\n<td>Export</td>\n<td>Logs your <a href=\"https://docs.celigo.com/hc/en-us/articles/226934107\">export-level</a> updates. This includes name, operation, and other export settings changes.</td>\n</tr>\n<tr>\n<td>Import</td>\n<td>Logs your <a href=\"https://docs.celigo.com/hc/en-us/articles/226933887\">import-level</a> updates. This includes name, operation, and other import settings changes.</td>\n</tr>\n<tr>\n<td>Connection</td>\n<td>Logs your connection-level updates. This includes name and authentication changes.</td>\n</tr>\n<tr>\n<td>Lookup caches</td>\n<td>Logs changes to name, description, and any downloads or cloning of <a href=\"https://docs.celigo.com/hc/en-us/sections/31714969650587-Use-lookup-caches-to-store-data\">lookup caches</a>.</td>\n</tr>\n<tr>\n<td>Stack</td>\n<td>Logs your <a href=\"https://docs.celigo.com/hc/en-us/articles/227055868\">changes to a stack</a>.</td>\n</tr>\n<tr>\n<td>Async helper</td>\n<td>If certain data is unavailable, an <a href=\"https://docs.celigo.com/hc/en-us/articles/360004872932\">async helper has the app's API ping integrator.io when the info is available</a>. The flow will be paused until the data is received. This logs all modifications to your async helpers.</td>\n</tr>\n<tr>\n<td>File definitions</td>\n<td>Logs all modifications to the rules that define how integrator.io should parse or generate <a href=\"https://docs.celigo.com/hc/en-us/articles/26129831927067\">EDI or fixed-width files</a>.</td>\n</tr>\n<tr>\n<td>Revision</td>\n<td>Logs all your <a href=\"https://docs.celigo.com/hc/en-us/articles/5349100943003\">version management revisions</a>, including <a href=\"https://docs.celigo.com/hc/en-us/articles/6685420081307\">clones</a>, <a href=\"https://docs.celigo.com/hc/en-us/articles/6685876051099\">pulls</a>, <a href=\"https://docs.celigo.com/hc/en-us/articles/6767143777179\">merges</a>, and <a href=\"https://docs.celigo.com/hc/en-us/articles/6682560246299\">snapshots</a>.</td>\n</tr>\n<tr>\n<td>Scripts</td>\n<td>Logs all modifications to your <a class=\"ext-link\" href=\"https://developer.celigo.com/api/api-reference/scripts-and-stacks/scripts\" target=\"_blank\" rel=\"noopener noreferrer\">scripts</a>.</td>\n</tr>\n<tr>\n<td>Notification</td>\n<td>Logs all notifications when a resource is created or deleted.</td>\n</tr>\n</tbody>\n</table></figure></div>\n<p>There are also <strong>account-specific resources</strong>, including user status changes, deletions by each user and IP address, agent and agent group changes, and single sign-on logs.</p>\n<p>To find these resources, select your profile in the upper right, and then select <strong>Account</strong> &gt; <strong>Audit log</strong>.</p>\n<div class=\"informaltable table-responsive\"><figure class=\"wysiwyg-table\"><table class=\"table-classic\" style=\"margin-left: 0px; margin-right: auto;\">\n<thead><tr>\n<th>Account-specific Resource type</th>\n<th>Description</th>\n</tr></thead>\n<tbody>\n<tr>\n<td>User</td>\n<td>Logs <a href=\"https://docs.celigo.com/hc/en-us/articles/115003929872\">account, permission, IP address, notification, and updates</a> by user. It also logs sign-ins and account switches that a network policy denies, as <code>signinDenied</code> events.</td>\n</tr>\n<tr>\n<td>Agent</td>\n<td>Logs modifications to your <a href=\"https://docs.celigo.com/hc/en-us/articles/6851018128795\">secure on-premise or cloud tunnels</a> to integrator.io.</td>\n</tr>\n<tr>\n<td>Agent group</td>\n<td>Logs when an <a href=\"https://docs.celigo.com/hc/en-us/articles/6851018128795\">agent group</a> is created, changed, or deleted, including changes to the agents in the group.</td>\n</tr>\n<tr>\n<td>SSO client</td>\n<td>Logs all changes to your <a href=\"https://docs.celigo.com/hc/en-us/articles/360060937871\">single sign-on</a> configurations. integrator.io does not display your client secret. Multiple layers of protection are in place, including AES 256 encryption, to keep your client secret safe. When editing this form later, you must enter this value again.</td>\n</tr>\n<tr>\n<td>API tokens</td>\n<td>Logs all <a href=\"https://docs.celigo.com/hc/en-us/articles/360019782431\">API token modifications.</a> integrator.io does not display your API tokens. Multiple layers of protection are in place, including AES 256 encryption, to keep your API token safe. When editing this form later, you must enter this value again.</td>\n</tr>\n<tr>\n<td>Network policy</td>\n<td>Logs the creation, editing, and deletion of <a href=\"https://docs.celigo.com/hc/en-us/articles/55838040737691\">network policies</a>.</td>\n</tr>\n<tr>\n<td>APIs</td>\n<td>Logs all modifications to build APIs using <a href=\"https://docs.celigo.com/hc/en-us/articles/29494547815579\">API builder</a> and <a href=\"https://docs.celigo.com/hc/en-us/articles/360047267771\">JavaScript APIs</a>.</td>\n</tr>\n</tbody>\n</table></figure></div>\n<h5 id=\"h_01M00FDD997XYBTM55K21PRBZ0\">\n<a id=\"UUID-f1e196d2-0114-0f5c-844f-2752240ad1b9_bridgehead-idm4498309463233634329032245757\"></a>Resource name</h5>\n<p>The name or identifier of your updated resource. Resources with IDs instead of names have been deleted, which is why they're only available by the ID they were given when they were created.</p>\n<h5 id=\"h_01M00FDD99NY60V880EXJZHQNN\">\n<a id=\"UUID-f1e196d2-0114-0f5c-844f-2752240ad1b9_bridgehead-idm4611006661752034329033239242\"></a>Action</h5>\n<p>The action that was taken. Actions include:</p>\n<ul>\n<li class=\"listitem\" data-list-item-id=\"eaaae66cc8c010cf51056cfc601167859\">Create</li>\n<li class=\"listitem\" data-list-item-id=\"ee43dd233a8ad34fb20b9d50817e26673\">Update</li>\n<li class=\"listitem\" data-list-item-id=\"e30ce17f3d268e4d8d0fb7396dab02c7f\">Delete</li>\n<li class=\"listitem\" data-list-item-id=\"ec5775dee2a3d4d7911111701ca61d48f\">Sign in</li>\n<li class=\"listitem\" data-list-item-id=\"e5e91cd236fa1d70d5fc4104fc80ddc73\">Sign out</li>\n<li class=\"listitem\" data-list-item-id=\"e3b5bcc325541e0ad7037b668925a33d5\">View</li>\n<li class=\"listitem\" data-list-item-id=\"eaf102c65fae17acbb20883dbcae7b040\">Restore</li>\n<li class=\"listitem\" data-list-item-id=\"e3af16246e5f07a7e709bcfa1e1f2648a\">Purge</li>\n</ul>\n<p>The most common action is Update, while Create and Delete are reserved for creating/deleting a flow or another significant event. The Sign in and Sign out actions are reserved for the User resource.</p>\n<h5 id=\"h_01M00FDD99AZ1VP6FJ282JYE5G\">\n<a id=\"UUID-f1e196d2-0114-0f5c-844f-2752240ad1b9_bridgehead-idm4611006618729634329034364551\"></a>Field</h5>\n<p>The Field column gives you an idea of what's been changed. It can display things like pageProcessors, connections, and names.</p>\n<h5 id=\"h_01M00FDD99DM26SCP5HXBJJ67Y\">\n<a id=\"UUID-f1e196d2-0114-0f5c-844f-2752240ad1b9_bridgehead-idm4534591860566434329035366737\"></a>Old and new values</h5>\n<p>The field values before and after the change.</p>\n<p>In the <strong>Old</strong> and <strong>New value</strong> fields, you have options including <strong>Click to view edits</strong>, dates and times a token was updated, and secure connection details. integrator.io never displays secure connection details, such as keys, tokens, or passwords, in audit logs, because those details are encoded.</p>\n<div class=\"wysiwyg-text-align-center mediaobject screenshot-frame image-center\"><img class=\"wysiwyg-image-resized\" style=\"width: 400px;\" src=\"https://docs.celigo.com/hc/article_attachments/53341069384475\" alt=\"7674780118427-old_and_new_values.png\"></div>\n<p>When you use <span class=\"bold\"><strong>Click to view</strong></span>, old and new edits are displayed side-by-side in a popup diff screen. This is a feature of the flow audit log that's also available in the integration logs. It drills down and shows you the exact changes you made, including any mapping changes.</p>\n<div class=\"wysiwyg-text-align-center mediaobject image-center\"><img class=\"wysiwyg-image-resized\" style=\"width: 600px;\" src=\"https://docs.celigo.com/hc/article_attachments/53341095881499\" alt=\"7674789537819-pageprocessor_example.png\"></div>\n<div class=\"glossary-definitions\" style=\"display: none!important;\"></div>\n</div>\n<div class=\"simplesect\" dir=\"ltr\">\n<div class=\"titlepage\"><h3 class=\"title\" id=\"h_01M00FDD99RWRSN7YS2J5VRTTD\">\n<a id=\"id5098\"></a>Related articles</h3></div>\n<ul>\n<li class=\"listitem\" data-list-item-id=\"ee9f40985981ad4aa98470ef7321a2213\"><a class=\"ext-link\" href=\"https://developer.celigo.com/api/api-reference/monitoring/audit-logs\" target=\"_blank\" rel=\"noopener noreferrer\">Audit log API endpoint</a></li>\n<li class=\"listitem\" data-list-item-id=\"eb038967e1b48eb20f849701e04e0df9b\"><a href=\"https://docs.celigo.com/hc/en-us/articles/5349100943003\">Integration Lifecycle Management</a></li>\n<li class=\"listitem\" data-list-item-id=\"e75c61b3aaac0e0f8764110e6948b1ff5\"><a href=\"https://docs.celigo.com/hc/en-us/articles/360053966912\">Invite and manage users in your account</a></li>\n</ul>\n</div>\n<div class=\"glossary-definitions\" style=\"display: none!important;\"></div>\n</div>","user_segment_ids":[]}}