Monitoring account activity with the audit log

The audit log keeps track of events related to your Fastly account, users, and services. You can use the audit log to determine which changes were made and by whom. For example, you can use the audit log to review:

  • when API tokens were created
  • who logged in to your account via the web interface
  • what types of changes may have been made to service configuration settings
  • when users make changes to their account security settings

You can use the Fastly web interface and API to view the audit log.

TIP

For information on monitoring events related to a service, see our guide on the event log. For information on monitoring the data that passes through Fastly, see our guide on Fastly's real-time log streaming features.

Accessing the audit log via the Fastly web interface

You must be assigned the role of superuser to view the audit log. You can filter audit log events by event type, token ID, service ID, user ID, and date directly in the Fastly web interface.

Follow these instructions to access the audit log for your account:

  1. Log in to the Fastly web interface and select Account from the account menu. Your account information appears.
  2. Click Audit log.

    Audit log example

NOTE

As of June 22, 2021, audit log data is retained for a period of one year (365 days).

Accessing the audit log via the Fastly API

The /events API endpoint can be used to retrieve the audit log for a Fastly account. For example, you could make the following API call in a terminal application to retrieve a filtered view of all recent audit log events:

$ curl -g -H "Fastly-Key: FASTLY_API_TOKEN" "https://api.fastly.com/events?filter[customer_id]=x4xCwxxJxGCx123Rx5xTx&page[number]=1&page[size]=1"

The response will look like this:

1{
2 "data": [
3 {
4 "attributes": {
5 "admin": false,
6 "created_at": "2016-06-06T20:05:10Z",
7 "customer_id": "x4xCwxxJxGCx123Rx5xTx",
8 "description": "Version 2 was activated",
9 "event_type": "version.activate",
10 "ip": "127.0.0.0",
11 "metadata": {
12 "version_number": 2
13 },
14 "service_id": "SU1Z0isxPaozGVKXdv0eY",
15 "user_id": "x9KzsrACXZv8tPwlEDsKb6"
16 },
17 "id": "5IH1QmNSV1Qi7jXc4oIZlZc",
18 "type": "event"
19 }
20 ],
21 "links": {
22 "last": "https://api.fastly.com/events?filter[customer_id]=x4xCwxxJxGCx123Rx5xTx&page[number]=1&page[size]=1"
23 }
24}

Check out the Fastly API documentation for more information.

Was this guide helpful?

Do not use this form to send sensitive information. If you need assistance, contact support. This form is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.