Audit Logs

Audit logs record every significant action taken in your AlertifyPro account — essential for security reviews, compliance audits, and incident investigations.

What's logged

Category	Events logged
Authentication	Login, logout, login failures, MFA events
Monitors	Created, updated, deleted, paused, resumed
Alerts	Triggered, acknowledged, resolved
Team	Member invited, role changed, removed
API keys	Created, revoked, used (with endpoint)
Integrations	Added, updated, deleted
Status pages	Created, incidents posted, published
Billing	Plan changes, payment method updates
Settings	SSO configured, security settings changed

Viewing logs

Go to Settings → Audit Logs. Filter by:

• Time range — Last 7 days, 30 days, 90 days, or custom
• Actor — Specific team member or API key
• Event type — Authentication, monitors, alerts, etc.
• Resource — Search by monitor name, user email, etc.

Log format

{
  "id": "evt_abc123",
  "timestamp": "2026-03-02T14:23:00Z",
  "event": "monitor.deleted",
  "actor": {
    "type": "user",
    "id": "usr_xyz",
    "email": "[email protected]",
    "ip": "203.0.113.42"
  },
  "resource": {
    "type": "monitor",
    "id": "mon_abc123",
    "name": "Production API"
  },
  "metadata": {
    "reason": "Decommissioned service"
  }
}

Exporting logs

Export logs as CSV or JSON for SIEM and compliance tools:

1. Apply your filters
2. Click "Export"
3. Choose format and date range

Log retention

Plan	Retention
Free	7 days
Starter	30 days
Professional	90 days
Enterprise	1 year (configurable up to 7 years)

Streaming to SIEM

Enterprise plans can stream audit logs in real-time to external SIEM systems:

audit_log_streaming:
  destination: splunk
  endpoint: "https://splunk.yourco.com:8088/services/collector"
  token: "{{secrets.SPLUNK_HEC_TOKEN}}"

Supported: Splunk, Datadog, Elastic, custom webhook.