{ "componentChunkName": "component---src-templates-doc-jsx", "path": "/docs/administration/audit-logs/", "result": {"data":{"markdownRemark":{"html":"
\n

Audit logs are available on Postman Professional and Enterprise plans.

\n
\n

Audit logs display events related to your team, users, and billing. Team admins can review audit logs to determine:

\n\n
\n

Audit logs are visible to all team admins on Postman Professional and Enterprise plans, including super admins on Enterprise teams.

\n
\n

Contents

\n\n

Viewing audit logs in the dashboard

\n

You can view audit logs in Postman by selecting Team in the upper-right corner, then Audit Logs.

\n\"Team\n

Audit logs allow you to view team actions by user, event name, event description, and date.

\n\"Audit\n

Accessing audit logs via the Postman API

\n

You can also access audit logs via the Postman API, allowing you to integrate Postman's audit logs with your security information and event management (SIEM) tools.

\n

Each audit log event contains the following attributes:

\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Name
Description
idA numeric value representing the unique identifier of an audit event.
ipThe IP address of the actor who performed the action.
userAgentA string with the user-agent of the actor.
actionA string with an action or event performed by the actor.
timestampThe date and time when the action or event was performed. The time is represented using the ISO 8601 date and time format.
actorAn object with information about the actor who performed this action.
messageA description of the audit event.
nextCursorA string that represents the cursor of the next page.
\n

To get started, navigate to the Postman API and open the Audit Logs folder to view the GET request and example responses.

\n
\n

You must generate a Postman API key to access the Postman API.

\n
\n

Logged Events

\n

Postman logs events related to your team, users, and billing.

\n

Team

\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
ActionDescription
Team Name UpdatedYour team's name was changed.
Team URL UpdatedYour team’s URL was changed.
Updated Team DiscoveryA user updated your team's discoverability status.
Added Domain for Domain CaptureA team admin added a domain for domain capture.
Verified Domain for Domain CaptureThe domain added for domain capture has been verified.
Enabled Domain Team ManagementA team admin enabled domain team management.
User Joined via Domain CaptureA user joined through team domain management.
Disabled Domain Team ManagementA team admin disabled domain team management.
Deleted Domain for Domain CaptureA team admin deleted a domain for domain capture.
Added Custom DomainA custom domain was added to your team.
Updated Custom Domain Verification StatusThe verification status of your domain was updated.
Deleted Custom DomainA custom domain was deleted from your team.
Custom Auth Scheme EnabledAn SSO scheme was enabled.
Custom Auth Scheme UpdatedAn SSO scheme was updated.
Custom Auth Scheme DisabledAn SSO scheme was disabled.
Custom Auth Scheme RemovedAn SSO scheme was removed.
Created SCIM KeyA user created a new SCIM key.
Activated SCIM KeyA user activated a SCIM key.
Regenerated SCIM KeyA user regenerated a SCIM key.
Revoked SCIM KeyA user revoked a SCIM key.
Deleted SCIM KeyA user deleted a SCIM key.
SCIM User ProvisionedThe SCIM admin provisioned a new user.
SCIM User De-provisionedThe SCIM admin de-provisioned a user.
Exported DataA user requested an export of their data.
Downloaded Exported DataA user downloaded an export of their data.
Added Custom AlertA new custom token alert was created for your team.
Edited Custom AlertA custom token alert's name or regex pattern was changed, or the alert was turned on or off.
Deleted Custom Token AlertA custom token alert was deleted.
\n

Users

\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
ActionDescription
Added Team MemberA user joined your team.
Removed Team MemberA team member was removed.
Sent Team InviteAn invitation was sent to a user to join your team.
Approved Team InviteAn admin approved an email invitation.
Rejected Team InviteAn admin rejected an email invitation.
Cancelled Team InviteAn invitation for a user was cancelled.
Approved Team Join RequestAn admin approved a request to join your team.
Rejected Team Join RequestA user rejected a request to join your team.
Updated User RoleA user updated a user role.
Updated User RolesRoles were updated for some users in your team.
Created GroupA user created a new group.
Updated GroupA user updated a group.
Added Group MemberA user joined a group.
Added Group RoleA role was added to a group.
Removed Group RoleA role was removed from a group.
Removed Group MemberA user was removed from a group.
Deleted GroupA user deleted a group.
Successful Login via PasswordA user logged in successfully via Password.
Successful Login via GoogleA user logged in successfully via Google.
Successful Login via SSOA user logged in successfully via SSO.
Reset PasswordA user reset their password.
Changed PasswordA user changed their password.
User Session RevokedA user revoked their session(s).
User LogoutA user logged out.
\n

Billing

\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
ActionDescription
Changed PlanA user changed your team plan.
Increased Team SizeAdditional licenses were added to your team.
Decreased Team SizeExtra licenses were removed from your team.
Updated Monitoring Block CountA user updated monitoring block count.
Set Instructions for Next Billing CycleInstructions for the next billing cycle were added.
Updated Billing EmailA user changed your team's billing email address.
Updated Invoice DetailsA user updated invoice details.
Added Payment MethodA user added a payment method.
Changed Default Payment MethodA user changed the default payment method.
Deleted Payment MethodA user deleted a payment method.
Successfully Retried InvoiceAn invoice for your team was paid.
Cancelled InvoiceA user cancelled an invoice for your team.
Cancelled PlanA user cancelled your team’s subscription.
","frontmatter":{"title":"Utilizing audit logs","contextual_links":[{"type":"section","name":"Prerequisites","url":null,"blog_tag":null},{"type":"link","name":"Managing your team","url":"/docs/administration/managing-your-team/managing-your-team/","blog_tag":null}]},"fields":{"slug":"/docs/administration/audit-logs/","lastModifiedDate":"2022/03/15\n"}}},"pageContext":{"slug":"/docs/administration/audit-logs/"}}, "staticQueryHashes": ["3840739351","63159454"]}