This article is auto-synced from its in-app version in Tai.
Company admins only. This page is visible to users with the Company Admin role.
Audit logs record every security-relevant action in your account — logins, user changes, agent operations, and more — with a timestamp, actor, and resource.
When you'd use this
Use Audit logs to investigate what happened and who did it. For example: check which user deleted a connector yesterday, or confirm that a new team member's invitation was accepted.
Steps
Browse audit logs
In the Workbench sidebar, click Audit logs (under the Monitoring section).
The table shows log entries newest-first — action, actor, company, resource type, resource ID, timestamp, and IP address.
Click the Timestamp column header to toggle between newest-first and oldest-first order.
Search and filter
Type in the search bar to find entries by actor email, resource ID, or other text fields.
Use the Action filter chip to narrow to a specific action type — for example
LOGIN_SUCCESS,USER_INVITED, orAGENT_DELETED.Use the Resource type filter chip to show only entries for a particular kind of resource — for example
user,agent, orconnector.Combine search and filters freely. The active filter count badge shows how many filters are applied.
Click Clear all to reset search and filters at once.
See when Nezasa administered your account
Nezasa staff can enter your account to help you configure it — set up a connector, fix a schedule, look into a problem you reported. Every visit is recorded in your own audit log, showing who it was.
Visits made before this was introduced were recorded in Nezasa's internal log rather than yours, so your own record starts at the oldest administration entry you can see.
Use the Administration scope filter chip.
Pick All administration events for the full history of arrivals and departures, or Entered / Exited on their own.
Arrivals show as
ADMIN_SCOPE_ENTEREDand departures asADMIN_SCOPE_EXITED, with the Nezasa person's email address in the Actor column, plus the timestamp and their IP address. The actions they took while they were in your account appear as ordinary entries in between, under the same email.
Load more entries
Scroll to the bottom of the table.
Click Load more to fetch the next page of results.
Tips and limits
Audit logs are append-only and cannot be deleted or edited.
The search matches on actor email, resource ID, and related text fields — it does not search the full action name (use the Action filter chip for that).
Entries are retained according to your account's data-retention policy. Contact support if you need older records.
The IP address column shows the client address at the time of the action. It may be blank for system-generated events.
Arrivals are always recorded. The matching Exited entry is written when the person leaves your account, moves on to another one, or signs out. It is not written if their session simply stops being used — so an entry with no matching exit means the visit was left rather than closed, not that someone is still in your account.
Administering your account does not let Nezasa staff run agents or read what agents produce. That needs a separate grant that only you can give — see Data access by Nezasa.
Related