Skip to content

DOC-11808 Docs for Audit Logs Page for Customers #19428

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 9 commits into
base: main
Choose a base branch
from
Open

Conversation

florence-crl
Copy link
Contributor

@florence-crl florence-crl commented Mar 7, 2025

Fixes DOC-11808

Added organization-audit-logs-in-cloud-console.md.
In cloud-deployments.json, added link to organization-audit-logs-in-cloud-console.md.
In cloud.md, added release note for feature.

Rendered preview

Copy link

github-actions bot commented Mar 7, 2025

Files changed:

Copy link

netlify bot commented Mar 7, 2025

Deploy Preview for cockroachdb-interactivetutorials-docs canceled.

Name Link
🔨 Latest commit 5305a68
🔍 Latest deploy log https://app.netlify.com/sites/cockroachdb-interactivetutorials-docs/deploys/67fd1c62fcd4930008ba746f

Copy link

netlify bot commented Mar 7, 2025

Deploy Preview for cockroachdb-api-docs canceled.

Name Link
🔨 Latest commit 5305a68
🔍 Latest deploy log https://app.netlify.com/sites/cockroachdb-api-docs/deploys/67fd1c62d819f400083cb04a

Copy link

netlify bot commented Mar 7, 2025

Netlify Preview

Name Link
🔨 Latest commit
🔍 Latest deploy log https://app.netlify.com/sites/cockroachdb-docs/deploys/67fd2c30908be39440abdd2e
😎 Deploy Preview https://deploy-preview-19428--cockroachdb-docs.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

@florence-crl florence-crl requested a review from kteehan March 7, 2025 20:36
@florence-crl florence-crl requested review from kteehan and jaiayu March 28, 2025 19:15
Copy link

@jaiayu jaiayu left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Minor potential typo - rest looks great!

@florence-crl florence-crl requested a review from mikeCRL April 14, 2025 15:07
Copy link
Contributor

@mikeCRL mikeCRL left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks great. Made some suggestions.

Thank you again for taking this.

## View audit logs

1. Navigate to the [CockroachDB {{ site.data.products.cloud }} Console](https://cockroachlabs.cloud/) and log in as a user with the [Organization Admin role]({% link cockroachcloud/authorization.md %}#org-administrator).
1. In the top navigation bar, select **Organization**, then choose **Audit Logs** from the dropdown menu. This will bring you to the **Audit Logs** page, which shows a (possibly empty) list of audit logs.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
1. In the top navigation bar, select **Organization**, then choose **Audit Logs** from the dropdown menu. This will bring you to the **Audit Logs** page, which shows a (possibly empty) list of audit logs.
1. In the top navigation bar, open the **Organization** menu and select **Audit Logs**.
  • There are many possible ways to say this. Here's one concise style that I like. (I prefer to avoid drop-down in the context of describing the UI of the menu. Just my 2c.) If you were matching common patterns in the docs, feel free to leave as-is for consistency.
  • I lean toward dropping the mention that the list may be empty. On a very new org, perhaps this is the case, but the Org Admin would presumably know that they haven't yet had any of the 'loggable' events we mention above.

CockroachDB {{ site.data.products.cloud }} captures audit logs when many types of events occur, such as when a cluster is created or when a user is added to or removed from an organization.

## View audit logs

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
To access the **Audit Logs** page:

Sets the stage/goal and lets us avoid adding it to the last step.

1. In the top navigation bar, select **Organization**, then choose **Audit Logs** from the dropdown menu. This will bring you to the **Audit Logs** page, which shows a (possibly empty) list of audit logs.

## Filter audit logs
Filter the audit logs by the following fields:
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
Filter the audit logs by the following fields:
You can filter audit logs by the following fields:


- **Time Range (UTC)**:
- Default: Last 48 hours.
- To set the time range, select **Start date** or **End date**. Select your desired time range in the calendar dropdown or type in your desired dates and times.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
- To set the time range, select **Start date** or **End date**. Select your desired time range in the calendar dropdown or type in your desired dates and times.
- To set the time range, click the **Time Range (UTC)** field. You can select a **Start date** and **End date** from the displayed calendar or manually enter dates and times for the range.

- Default: Last 48 hours.
- To set the time range, select **Start date** or **End date**. Select your desired time range in the calendar dropdown or type in your desired dates and times.
- **User email**: Select one or more email addresses from the list of [organization members]({% link cockroachcloud/managing-access.md %}#manage-an-organizations-users) (optional).
- **Action name**: Select one or more predefined auditable actions (optional).
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm going to create a follow up issue for us to define these. (I found them here.)


Click on a log row in the audit logs table to open an **Action details** right sidebar displaying event information, including the full payload in the **Details** section.

## URL Query Parameters
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
## URL Query Parameters
## URL query parameters

https://cockroachlabs.cloud/audit-logs?startingFrom=2025-03-04T19%3A51%3A36.590Z&endingAt=2025-03-07T19%3A51%3A36.000-05%3A00&logId=78d55b3c-424e-45fa-bbce-03f2ed738897
```

## Examples
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
## Examples
## Example use cases

- Verifying cluster deletions
- Example: To ensure cluster deletions were intentional, filter by the action `DELETE_CLUSTER`.
- Diagnosing performance issues
- Example: To track configuration changes affecting performance, filter by the action `UPDATE_CLUSTER`
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
- Example: To track configuration changes affecting performance, filter by the action `UPDATE_CLUSTER`
- Example: To track configuration changes affecting performance, filter by the action `UPDATE_CLUSTER`.

- Reviewing maintenance schedule changes
- Example: To track modifications to maintenance windows, filter by the actions `SET_CLUSTER_MAINTENANCE_WINDOW` and `DELETE_CLUSTER_MAINTENANCE_WINDOW`.

## See also
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
## See also
## See also

I like having the line break. More common, and helps markdown readability. However, I don't think we have a defined style, and this format is supported as-is.

@@ -38,6 +38,10 @@ CockroachDB v25.1 is now generally available for select CockroachDB Cloud {{ sit
- [CockroachDB (pay-as-you-go)](https://console.cloud.google.com/marketplace/product/cockroachlabs/cockroachdb-pay-as-you-go) on the Google Cloud Marketplace.
- [Subscribe through the Google Cloud Marketplace]({% link cockroachcloud/billing-management.md %}?filters=gcp#subscribe-through-aws-marketplace) in the CockroachDB {{ site.data.products.cloud }} documentation.

## December 3, 2024

You can now use the CockroachDB {{ site.data.products.cloud }} Console to [view and filter organization-level audit logs]({% link cockroachcloud/organization-audit-logs-in-cloud-console.md %}), providing greater visibility into user activity across your organization.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
You can now use the CockroachDB {{ site.data.products.cloud }} Console to [view and filter organization-level audit logs]({% link cockroachcloud/organization-audit-logs-in-cloud-console.md %}), providing greater visibility into user activity across your organization.
You can now use the CockroachDB {{ site.data.products.cloud }} Console to [view and filter audit logs]({% link cockroachcloud/organization-audit-logs-in-cloud-console.md %}), providing greater visibility into user activity across your CockroachDB {{ site.data.products.cloud }} organization.

Could've been misinterpreted to mean activity affecting the whole org. This edit may be sufficient.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants