Monitoring account activity with the audit log

The audit log keeps track of events related to your account, users, and services. You can use the audit log to determine which changes were made and by whom. For example, you can use the audit log to review:

• when API tokens were created
• who logged in to your account via the web interface
• what types of changes may have been made to service configuration settings
• when users make changes to their account security settings

You can use the web interface and the Fastly API to view the audit log.

Accessing the audit log via the web interface

You must be assigned the role of superuser to view the audit log. You can filter audit log events by event type, token ID, service ID, user ID, and date directly in the web interface.

Follow these instructions to access the audit log for your account:

1. Log in to the Fastly web interface and click the Account link from the user menu. Your account information appears.

2. Click the Audit log link. The Audit log page appears.

   

Accessing the audit log via the API

The /events API endpoint can be used to retrieve an account's audit log. For example, you could make the following API call in a terminal application to retrieve a filtered view of all recent audit log events:

$ curl -g -H "Fastly-Key: FASTLY_API_TOKEN" "https://api.fastly.com/events?filter[customer_id]=x4xCwxxJxGCx123Rx5xTx&page[number]=1&page[size]=1"

The response will look like this:

1{
2  "data": [
3      {
4          "attributes": {
5              "admin": false,
6              "created_at": "2016-06-06T20:05:10Z",
7              "customer_id": "x4xCwxxJxGCx123Rx5xTx",
8              "description": "Version 2 was activated",
9              "event_type": "version.activate",
10              "ip": "127.0.0.0",
11              "metadata": {
12                  "version_number": 2
13              },
14              "service_id": "SU1Z0isxPaozGVKXdv0eY",
15              "user_id": "x9KzsrACXZv8tPwlEDsKb6"
16          },
17          "id": "5IH1QmNSV1Qi7jXc4oIZlZc",
18          "type": "event"
19      }
20  ],
21  "links": {
22    "last": "https://api.fastly.com/events?filter[customer_id]=x4xCwxxJxGCx123Rx5xTx&page[number]=1&page[size]=1"
23  }
24}

Check out the API documentation for more information.