Audit Log¶
The Audit Log page corresponds to the /connector-audit route.
It lists connector operations recorded by the application and lets you inspect each entry in detail.
What the page shows¶
Filter entries by connector, capability, agent run id, or a since/until time range, then sort them newest-first or oldest-first. The list loads additional entries in pages. The Clear button resets the agent run id filter and both time filters, but leaves the connector and capability filters as they are.
Each audit entry can include:
- connector name
- operation id
- time of execution
- capability level such as read, write, or destructive
- agent run id or approval id when present
- rollback or undo verdict
Detail drawer¶
Click an entry to open the detail drawer.
The drawer shows:
- identity fields such as entry id and capability
- redacted or plain parameters
- undo-state details
- rollback verdict details
When an entry is eligible for undo, the drawer exposes the undo action and refreshes the audit state after the request succeeds. A rejected undo shows the recorded failure mode.
When an entry carries an agent run id, the drawer also offers a "Filter by this run" button. Clicking it sets the run id filter to that entry's run and closes the drawer, so you land back on a list scoped to everything that run touched.
Exporting entries¶
Use the Export CSV and Export JSON buttons in the page header to download the entries matching your current filters, not just the page of rows currently loaded on screen. Both buttons are disabled when the filtered list is empty.
The export applies the connector, capability, agent run id, and time-range filters, but not the newest-first / oldest-first sort control: exported rows are always in the order they were recorded, oldest first.
JSON export contains the full entry records. CSV export is a flattened summary with these columns: id, occurredAt, connectorName, operationId, capability, agentRunId, approvalId, correlationId, outcome, verdict. Parameters, undo state, and redaction metadata are available in the JSON export only.
A single export covers at most 25,000 entries. If your filters match more than that, the export fails with a message asking you to narrow it rather than downloading a partial file, because an audit export that quietly drops rows is worse than one that refuses. Use the connector, capability, agent run id, or time-range filters to reduce the range and try again. The default retention policy keeps 10,000 entries, so this only comes up on installations that have widened retention or preserved a large number of entries.
The downloaded file is named connector-audit-export-<timestamp>.csv or .json. Exported audit data leaves the application's redaction boundary, so handle it with the same care as the audit log itself.
Why this page matters¶
Use Audit Log when you need to:
- review what a connector did
- confirm whether an action can be undone
- inspect approval-linked activity
- debug connector-based workflows without reading raw logs first