Skip to content

Latest commit

 

History

History
64 lines (52 loc) · 5.13 KB

about-the-audit-log-for-your-enterprise.md

File metadata and controls

64 lines (52 loc) · 5.13 KB
title intro shortTitle redirect_from versions type topics
About the audit log for your enterprise
To support debugging and internal and external compliance, {% data variables.product.github %} provides logs of audited{% ifversion ghes %} system,{% endif %} user, organization, and repository events.
About audit logs
/enterprise/admin/articles/audit-logging
/enterprise/admin/installation/audit-logging
/enterprise/admin/user-management/audit-logging
/admin/user-management/audit-logging
/admin/user-management/monitoring-activity-in-your-enterprise/audit-logging
/github/setting-up-and-managing-your-enterprise/managing-your-enterprise-users-with-your-identity-provider/auditing-activity-in-your-enterprise
/admin/authentication/managing-your-enterprise-users-with-your-identity-provider/auditing-activity-in-your-enterprise
/admin/identity-and-access-management/managing-iam-with-enterprise-managed-users/auditing-activity-in-your-enterprise
ghes ghec
*
*
overview
Auditing
Enterprise
Logging
Security

About audit logs

Note

{% data reusables.webhooks.webhooks-as-audit-log-alternative %}

{% data reusables.audit_log.retention-periods %}

{% data reusables.audit_log.audit-log-search-list-info-about-action %}

{% ifversion ghes %}Site administrators can review the audit log for an instance, which contains a wider range of events including system administrative events. To access the instance-level audit log:

{% data reusables.enterprise_site_admin_settings.access-settings %}

  1. In the left menu, click Audit log.{% endif %}

In addition to viewing your audit log, you can monitor activity in your enterprise in other ways, such as {% ifversion ghes %}viewing push logs and {% endif %}managing global webhooks. For more information, see AUTOTITLE. You can also use the audit log, and other tools, to monitor the actions taken in response to security alerts. For more information, see AUTOTITLE.

Using your audit logs

As an enterprise owner{% ifversion ghes %} or site administrator{% endif %}, you can interact with the audit log data for your enterprise in several ways:

  • You can view the audit log for your enterprise. For more information, see AUTOTITLE.
  • You can search the audit log for specific events{% ifversion ghec %} and export audit log data{% endif %}. For more information, see AUTOTITLE{% ifversion ghec %} and AUTOTITLE{% endif %}.
  • You can identify all events that were performed by a specific access token. For more information, see AUTOTITLE.{% ifversion ghes %}
  • You can configure settings, such as the retention period for audit log events and whether Git events are included. For more information, see AUTOTITLE.{% endif %} {%- ifversion enterprise-audit-log-ip-addresses %}
  • You can display the IP address associated with events in the audit log. For more information, see AUTOTITLE. {%- endif %}
  • You can stream audit and Git events data from {% data variables.product.prodname_dotcom %} to an external data management system. For more information, see AUTOTITLE. {%- ifversion ghes %}
  • You can forward audit and system logs, from your enterprise to an third-party hosted monitoring system. For more information, see AUTOTITLE. {%- endif %}
  • You can use the Audit log API to view actions performed in your enterprise. For more information, see AUTOTITLE.

For a full list of audit log actions that may appear in your enterprise audit log, see AUTOTITLE.

Further reading