Audit Logging

Track key actions across your account to support visibility and compliance.

Upstat maintains an internal audit log to record significant actions taken by users across your account and projects. This helps you understand what happened, when, and by whom—critical for compliance, security reviews, and internal investigations.


What’s Tracked in the Audit Log

Audit logs record events such as:

  • User logins (success/failure)
  • Role or permission changes
  • Project membership updates
  • Incident creation, edits, and status changes
  • Monitor configuration changes
  • Automation updates
  • Account setting changes
  • 2FA enablement/disablement

Each log entry includes:

  • Timestamp (UTC)
  • User who performed the action
  • Action type
  • Target (e.g., project, user, monitor)
  • Metadata/details (if available)

Where to Access Audit Logs

Audit logs are accessible by:

  • Account Owners
  • Administrators

To view logs:

  1. Go to Account Settings → Audit Logs
  2. Use filters to narrow results by date, user, action type, or project
  3. Export as CSV (coming soon)

Logs are read-only and cannot be modified by any user.


Retention Period

  • Basic Plan: 90 days of audit history
  • Professional Plan: 1 year of audit history
  • Business Plan: Custom retention available on request

Retention limits may be adjusted based on compliance requirements in the future.


Why Audit Logs Matter

Audit logs help you:

  • Investigate incidents or access issues
  • Track permission changes and user activity
  • Support compliance with internal policies or external frameworks
  • Maintain transparency in operational decisions

Summary

  • Upstat records key user and system activity automatically
  • Audit logs are viewable by Owners and Admins only
  • Retention varies by plan tier
  • Export and advanced filtering are available or coming soon

Learn more