Skip to main content

Audit log

The audit log records every configuration change in your workspace: agents, skillsets, skills, and skillset configurations — created, updated, deleted, rolled back, or switched active/inactive. It also records activating or deactivating a tool, and knowledge sources that re-sync with changed content (shown as Automatic sync). Each entry says who did it (a person, or “system” for automated changes), when, and what changed. Find it at Settings → Audit log. It’s visible to the Admin and Owner roles.

Reading the log

Entries are newest-first. Each row shows the timestamp, the actor, an action pill, the entity’s type and name, and a one-line summary of the change. Rows with a recorded difference expand inline to a before/after view, field by field — so “updated” is never a mystery.

Finding what you need

  • Filter by type — agent, skillset, skill, or skillset configuration — and by action — created, updated, deleted, rolled back, status changed.
  • Date range — from/to dates to bound an investigation.
  • Search — by the entity’s name.
The log loads 50 entries at a time; keep loading to go as far back as you need.

What it’s for

  • Change forensics — “the agent behaved differently on Tuesday; what changed Monday night?”
  • Accountability — every privileged and destructive configuration action is attributable to a person.
  • Review — pair it with Conversations & tracing: the trace shows what an agent did, the audit log shows how it was configured at the time.
  • Tests — Tests dashboards show the same changes since a test run.
Actions taken by agents in external systems are separately audited on the integration side — see Integrations overview.