Get started
1
Open organization settings
Click your organization name in the top left, then select Settings from the dropdown menu.
2
Select Audit log
Click Audit log in the left sidebar.
The audit log requires the organization admin role. Members and guests cannot view audit events.
What gets logged
Ravenna records admin actions that change the configuration of your organization or workspaces. Each event captures the actor, target resource, action, timestamp, and a structured snapshot of the inputs.Events are recorded for areas including:- Integrations — connecting, configuring, or removing third-party integrations.
- Knowledge bases — creating, updating, syncing, or deleting knowledge sources.
- Request types and forms — publishing, editing, archiving, or deleting forms and fields.
- Agent models — selecting or updating the LLM provider and model used by agents.
- Agents — creating, updating, or deleting agents.
- Rules — creating, updating, or deleting agent rules that govern automated behavior.
- Workflows — creating, updating, deleting, activating, or deactivating workflows.
- SLAs — creating, updating, or deleting service level agreements.
- Applications — creating, updating, deleting, archiving, or unarchiving applications, including bulk actions and workspace assignment changes.
- Access and roles — changes to admin roles and permission policies.
- Members — adding or removing workspace members, updating organization or workspace member roles, and changes to user profiles.
The audit log captures admin configuration changes. Day-to-day ticket activity (comments, status changes, assignments) is recorded on individual tickets, not in the audit log.
Review events
The audit log displays each event as a row with the actor, action, resource, and timestamp.Filter events
Use the filter bar above the table to narrow results:- Actor — the user who performed the action.
- Resource type — the kind of object changed (for example, integration, knowledge base, form, agent, rule, workflow).
- Resource — a specific resource by name.
- Event name — the action performed (for example, Integration created, Form updated).
- Date range — restrict events to a specific time window.
- Outcome — show only successful or failed actions.
AND logic. Inline text filters save automatically when you click outside the input.Inspect an event
Click any row to open the detail panel. The panel shows:- Summary — actor, action, resource, and outcome.
- Inputs — the request payload submitted with the action, with sensitive values redacted.
- Context — the originating IP address, user agent, and request ID.
- Errors — the error message and code, when an action failed.
Export events
Export a filtered view of the audit log for offline review or to share with auditors.1
Apply filters
Narrow the audit log to the events you want to export. The export respects your active filters.
2
Open the export menu
Click Export in the top right of the audit log page.
3
Download the file
Ravenna generates a CSV file containing the filtered events and downloads it to your browser.
Exports are scoped to the events visible to you. Events older than your organization’s retention window are not included.
Common use cases
- Investigate an unexpected change — filter by resource and date range to find the actor and action that produced the change.
- Review admin activity for a user — filter by actor to see every configuration change a specific admin has made.
- Provide evidence for compliance — export events for a defined window and share the CSV with auditors.
- Detect failed admin actions — filter by outcome
failedto identify permission errors or misconfigurations.