Monitoring account activity with the audit log

The audit log keeps track of events related to your Fastly account, users, and services. You can use the audit log to determine which changes were made and by whom. For example, you can use the audit log to review:

• when API tokens were created
• who logged in to your account via the web interface
• what types of changes may have been made to your service configuration settings and by whom (e.g., a user assigned to your account, a Fastly user acting on your behalf)
• when users make changes to their account security settings

You can use the Fastly web interface and API to view the audit log.

Accessing the audit log via the Fastly web interface

You must be assigned the role of superuser to view the audit log. You can filter audit log events by event type, token ID, service ID, user ID, and date directly in the Fastly web interface.

Follow these instructions to access the audit log for your account:

1. Log in to the Fastly web interface.

2. Go to Account > Audit log.

   

Accessing the audit log via the Fastly API

The /events API endpoint can be used to retrieve the audit log for a Fastly account. For example, you could make the following API call in a terminal application to retrieve a filtered view of all recent audit log events:

$ curl -g -H "Fastly-Key: FASTLY_API_TOKEN" "https://api.fastly.com/events?filter[customer_id]=x4xCwxxJxGCx123Rx5xTx&page[number]=1&page[size]=1"

The response will look like this:

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24

{
  "data": [
      {
          "attributes": {
              "admin": false,
              "created_at": "2016-06-06T20:05:10Z",
              "customer_id": "x4xCwxxJxGCx123Rx5xTx",
              "description": "Version 2 was activated",
              "event_type": "version.activate",
              "ip": "127.0.0.0",
              "metadata": {
                  "version_number": 2
              },
              "service_id": "SU1Z0isxPaozGVKXdv0eY",
              "user_id": "x9KzsrACXZv8tPwlEDsKb6"
          },
          "id": "5IH1QmNSV1Qi7jXc4oIZlZc",
          "type": "event"
      }
  ],
  "links": {
    "last": "https://api.fastly.com/events?filter[customer_id]=x4xCwxxJxGCx123Rx5xTx&page[number]=1&page[size]=1"
  }
}

Check out the Fastly API documentation for more information.