Audit Logs

NoteDocumentation for Posit Connect Administrators

The information on this page is for Connect users with the Administrator role.

Overview

Posit Connect tracks when users or system processes make changes to the system, and records these changes as audited events.

Connect users with the Administrator role can access audited event information from the Audit Logs tab. To open it, click System in the top menu bar, then click Audit Logs under Monitor.

A screenshot of the Audit Logs tab on the Connect UI.

The Audit Logs tab on the System page

For more details on the information Connect audits, see the Auditing and Audited Events sections of the Connect Admin Guide.

Searching audit logs

The Audit Logs tab includes a search bar to help you quickly find specific events.

A screenshot of the Audit Logs tab with the search bar outlined.

You can search for:

  • User names
  • Specific actions
  • Dates in yyyy-mm-dd format
  • Any other text that appears in the audit log entries

To clear a search, click the X in the right-hand side of the search bar. This will also clear any filter options you have applied.

Filtering audit logs

The Audit Logs tab includes filters, available below the search bar, to help you narrow down audited events. Filtering options include users, actions, and time and date ranges.

You can use filters on their own (without using the search bar), or enter a search query and narrow those results using the Filter options dropdowns. You can apply multiple filters simultaneously. As you apply filters, the audit log entries displayed will update in real-time to match your criteria.

Users

The Users filter allows you to view audit logs for specific users in your Connect system. To use this filter:

  1. Click the Users dropdown filter.

    A screenshot of the Audit Logs tab with the Users filter open, showing the Find a user search box, the list of users with checkboxes, and the Clear filter button.

  2. Browse through the available users or enter a user name in the Find a user field to search for specific names.

  3. Select one or more users from the dropdown by clicking the checkbox next to a user name.

To clear the Users filter, do any of the following:

  • Uncheck the box next to the user name you want to remove
  • Click the X in the search bar
  • Click Clear filter in the dropdown

Actions

The Actions filter helps you focus on specific types of events that have been recorded in the audit logs. Filtering by action type is useful when you need to audit specific activities, such as all content deployments or all permission changes within a given period.

To use this filter:

  1. Click the Actions dropdown filter.

    A screenshot of the Audit Logs tab with the Actions filter open, showing the Find an action type search box, the list of action types with checkboxes, and the Clear filter button.

  2. Browse through the available action types or enter text in the Find an action type field to search for specific actions.

  3. Select one or more action types from the dropdown by clicking the checkbox next to an action type.

To clear the Actions filter, do any of the following:

  • Uncheck the box next to the action you want to remove
  • Click the X in the search bar
  • Click Clear filter in the dropdown

Time and date ranges

The time and date range filters (From and To) allow you to narrow down audit logs to a specific time period. You can set:

  • Only a From date to see all events after a certain point
  • Only a To date to see all events before a certain point
  • Both From and To dates to view events within a specific time frame

All times displayed on the Audit Logs tab are shown in your local time zone.

To use this filter:

  1. Click either the From or To dropdown filter.

    A screenshot of the Audit Logs tab with the From dropdown open, showing the calendar, time selector, and Clear Date button.

  2. Use the calendar to select a date and adjust the time using the time selector, if needed.

To clear a date filter, do either of the following:

  • Click the X in the search bar
  • Click Clear Date in the dropdown calendar