28:null 29:["$","title",null,{"children":"Workspace Audit Logs | Observable | Observable"}] 2e:T40f,And here is a brief description of what each log captures: - **log**: this log has the history of each activity with timestamps, as well as specifies activity type, any associated activity data, what type of entity was used (`audit` or `notebook`) along with any entity id, the workspace id of the workspace being used, user id of the active user, and ip address the user was utilizing for the activity. - **users**: this log lists the users that were active and includes their id, login username, and full name, as well as an indicator of whether the user is a team member in the workspace. - **members**: similar to the users log, this log shows what members of the workspace were active including their id, login username, full name, and a number of other attributes. - **notebooks**: this log shows users information about each notebook that has seen activity, including the id, the slug (custom url) if there is one, the title of the notebook, the access status such as being live or private, and whether it is a team-shared notebook.2f:T402,Activity types (${bgSpan("activityType", "#DCDCDC")}): - ${bgSpanBld('create', "#DCDCDC")}: Notebook is created. - ${bgSpanBld('edit', "#DCDCDC")}: Notebook is edited. - ${bgSpanBld('fork', "#DCDCDC")}: Notebook is forked. - ${bgSpanBld('private', "#DCDCDC")}: Notebook is made private. - ${bgSpanBld('public', "#DCDCDC")}: Notebook is made public. - ${bgSpanBld('read', "#DCDCDC")}: Notebook is read. - ${bgSpanBld('shared', "#DCDCDC")}: Notebook is shared. - ${bgSpanBld('activityData?', "#DCDCDC")} object includes: - ${bgSpanBld('assigned', "#DCDCDC")}: shared members - ${bgSpanBld('removed', "#DCDCDC")}: removed members - ${bgSpanBld('transfer_out', "#DCDCDC")}: Notebook is transferred out of one workspace. - ${bgSpanBld('transfer_in', "#DCDCDC")}: Notebook is transferred into one workspace. - ${bgSpanBld('trash', "#DCDCDC")}: Notebook is moved to trash. - ${bgSpanBld('public_unlisted', "#DCDCDC")}: Notebook is made public unlisted. - ${bgSpanBld('untrash', "#DCDCDC")}: Notebook is removed from trash.30:T63a,jsonExample = ({ "log": [ { "activity_time": "2023-05-10T17:16:32.414Z", "activity_type": "read", "activity_data": null, "entity_type": "notebook", "entity_id": "72c492de9bffb5b0", "workspace_id": "01cffcdc81f661d7", "user_id": "081d04d67e52e476", "ip_address": null }, { "activity_time": "2023-05-10T17:17:04.871Z", "activity_type": "read", "activity_data": null, "entity_type": "notebook", "entity_id": "72c492de9bffb5b0", "workspace_id": "01cffcdc81f661d7", "user_id": "081d04d67e52e476", "ip_address": null } ], "users": [ { "id": "081d04d67e52e400", "login": "frank", "name": "Frank Gold", team_member: false }, { "id": "081d04d67e52e476", "login": "alice", "name": "Alice Silver", team_member: true } ], "members": [ { "id": "081d04d67e52e476", "login": "alice", "name": "Alice Silver", email: "alice@gmail.com", role: "owner", provider_name : "google", provider_org: "wonderland.com", provider_email: "alice@wonderland.com", provider_create_time: new Date("2023-01-02"), provider_update_time: new Date("2023-05-20") } ], "notebooks": [ { "id": "0eb9f96dba7d226e", "slug": "mission", "title": "Our Mission", access: "live", team_shared: true }, { "id": "72c492de9bffb5b0", "slug": null, "title": "Strategy", access: "private", team_shared: false } ] })31:[{"id":"f83c27ec1d3b862c48e69527a939e4d468a9241a2fc476a357f736c54fc71e154825fa6d2a6e731fe82b38e8b6845c75b01301dfc72de648aebdd1dc333f6a4b","href":"https://static.observableusercontent.com/files/f83c27ec1d3b862c48e69527a939e4d468a9241a2fc476a357f736c54fc71e154825fa6d2a6e731fe82b38e8b6845c75b01301dfc72de648aebdd1dc333f6a4b","name":"settings-audit-log (1).png","type":"image/png","lastModified":1685053326741.762,"size":54916}] 2c:{"id":"90213557042586d2","slug":"audit-logs","title":"Workspace Audit Logs","thumbnail":"e5b0dbfbdcd93cacb059ed44ec87066c2a7948b31c1d1829ccc9c683ff54d652","access_level":"unlisted","create_time":"$D2023-05-16T21:18:11.367Z","update_time":"$D2023-06-06T21:21:22.755Z","view_time":null,"first_public_time":"$D2023-05-26T14:49:22.025Z","has_unpublished_edits":null,"fork":false,"stars":0,"starred":false,"owner":{"type":"team","id":"f35c755083683fe5","login":"observablehq","name":"Observable","avatar_url":"https://avatars-next.observableusercontent.com/424c6c1f7794371c9915a160519bdfb34cf34e50069fcd6def38a1a04d4e9702","tier":"enterprise_2024"},"version":274,"publish_version":null,"role":null,"authored":false,"authors":[{"type":"individual","id":"e062c3bee8f0e045","login":"timmerman","name":"Grant Timmerman","avatar_url":"https://avatars-next.observableusercontent.com/fca29f10f4f55b45b61ab33617a31f629ea6360b3fe862bf26dd15627b8d0ee4","tier":null}],"members":[{"type":"team","id":"f35c755083683fe5","login":"observablehq","name":"Observable","avatar_url":"https://avatars-next.observableusercontent.com/424c6c1f7794371c9915a160519bdfb34cf34e50069fcd6def38a1a04d4e9702","tier":"enterprise_2024","role":"editor"}],"comments":[],"custom_thumbnail":true,"trashed":false,"lapsed":null,"subscribed":null,"forks":4,"collection":{"id":"85235b2bd50e0438","slug":"accounts-and-workspaces","title":"Accounts and Workspaces","owner":{"id":"f35c755083683fe5","login":"observablehq","name":"Observable"}},"type":"notebook","body":{"title":"Workspace Audit Logs","cells":[{"id":59,"value":"# Workspace Audit Logs \n${enterprise()}","pinned":false,"hidden":false,"mode":"md","author":"$undefined","summary":"$undefined","output":"","database":"$undefined"},{"id":0,"value":"\n\nWorkspace audit logs enable administrators of Enterprise teams with a comprehensive record of activities, including changes to notebooks and member interactions. This feature enables administrators to track and answer important questions such as \"who did what, where, and when?\" within their workspace, which ultimately promotes transparency and accountability.\n\n","pinned":false,"hidden":false,"mode":"md","author":"$undefined","summary":"$undefined","output":"","database":"$undefined"},{"id":46,"value":"### Enable Audit Logs\n\nTo enable audit logs for your workspace, go to team **Settings** and access the **Permissions** tab. Within the **Permissions** tab, you will find the option to enable audit logs. By selecting this option, you activate the Workspace Audit Log feature. This will start recording and storing all activities and changes within your workspace.","pinned":false,"hidden":false,"mode":"md","author":"$undefined","summary":"$undefined","output":"","database":"$undefined"},{"id":151,"value":"html`\n

\n \n

The Audit logs setting.

\n\n`","pinned":false,"hidden":false,"mode":"ojs","author":"$undefined","summary":"$undefined","output":"$undefined","database":"$undefined"},{"id":35,"value":"### Ongoing Audit Log Events\n\nOnce activated, all activities within the workspace will be logged and stored as a continuously updated list of audit log events, with a retention period of 180 days. This extended timeframe ensures that administrators have access to historical data for retrospective analysis and investigations.","pinned":false,"hidden":false,"mode":"md","author":"$undefined","summary":"$undefined","output":"","database":"$undefined"},{"id":253,"value":"Here is an example showing the logs that are captured:","pinned":false,"hidden":false,"mode":"md","author":"$undefined","summary":"$undefined","output":"","database":"$undefined"},{"id":252,"value":"viewof selectedLog = Inputs.select([\"log\", \"users\", \"members\", \"notebooks\"], {label: \"Select a log to view\", value: \"log\"})","pinned":false,"hidden":false,"mode":"ojs","author":"$undefined","summary":"$undefined","output":"$undefined","database":"$undefined"},{"id":251,"value":"showLog","pinned":false,"hidden":false,"mode":"ojs","author":"$undefined","summary":"$undefined","output":"","database":"$undefined"},{"id":272,"value":"$2e","pinned":false,"hidden":false,"mode":"md","author":"$undefined","summary":"$undefined","output":"","database":"$undefined"},{"id":49,"value":"### Download Audit Log Data\n\nThe audit log data can be conveniently downloaded in CSV or JSON format, allowing administrators to analyze the information using their preferred tools and techniques. This flexibility empowers administrators to perform in-depth reviews, identify patterns, and extract valuable insights from the audit logs.","pinned":false,"hidden":false,"mode":"md","author":"$undefined","summary":"$undefined","output":"","database":"$undefined"},{"id":113,"value":"#### Logs in CSV format","pinned":false,"hidden":false,"mode":"md","author":"$undefined","summary":"$undefined","output":"","database":"$undefined"},{"id":115,"value":"When you download a workspace audit log in CSV, it will download as a `tgz` zip file containing four different CSV files: _log.csv_, _users.csv_, _members.csv_, and _notebooks.csv_. Open any of these up in a CSV editor for better formatting and easier visibility. The file _log.csv_ will have the majority of the pertinent activity information.","pinned":false,"hidden":false,"mode":"md","author":"$undefined","summary":"$undefined","output":"","database":"$undefined"},{"id":100,"value":"#### Logs in JSON format\n\nHere is an example of how a workspace audit log breaks down in JSON using a code editor for formatting:","pinned":false,"hidden":false,"mode":"md","author":"$undefined","summary":"$undefined","output":"","database":"$undefined"},{"id":109,"value":"Here, what were four separate logs (log, users, members, notebooks) when downloaded in CSV are instead four top level objects:","pinned":false,"hidden":false,"mode":"md","author":"$undefined","summary":"$undefined","output":"","database":"$undefined"},{"id":139,"value":"jsonExample","pinned":false,"hidden":false,"mode":"ojs","author":"$undefined","summary":"$undefined","output":"$undefined","database":"$undefined"},{"id":6,"value":"## Types of Audit Log Events\n\nThere are 2 ${bgSpan(\"entityType\", \"#DCDCDC\")}s\n\n${bgSpan(\"entityType\", \"#DCDCDC\")}s: ${bgSpanBld(\"audit\", \"#DCDCDC\")}, ${bgSpanBld(\"notebook\", \"#DCDCDC\")}\n\n### Entity ${bgSpan(\"audit\", \"#DCDCDC\")} Events\n\nEvent Properties:\n\n- ${bgSpanBld(\"entityType\", \"#DCDCDC\")}: ${bgSpan('\"audit\"', \"#DCDCDC\")}\n- ${bgSpanBld(\"workspaceId\", \"#DCDCDC\")}: The workspace ID\n\nActivity types (${bgSpan(\"activityType\", \"#DCDCDC\")}):\n\n- ${bgSpanBld(\"activityType\", \"#DCDCDC\")}: ${bgSpan(\"started\", \"#DCDCDC\")} | ${bgSpan(\"stopped\", \"#DCDCDC\")}\n - (When a workspace enables or disables audit logs)\n\n\n\n\n","pinned":false,"hidden":false,"mode":"md","author":"$undefined","summary":"$undefined","output":"","database":"$undefined"},{"id":89,"value":"### Entity ${bgSpan(\"notebook\", \"#DCDCDC\")} Events\nProperties:\n\n- ${bgSpanBld(\"entityType\", \"#DCDCDC\")}: ${bgSpan('\"notebook\"', \"#DCDCDC\")}\n- ${bgSpanBld(\"activityType\", \"#DCDCDC\")}: ${bgSpan('\"create\"', \"#DCDCDC\")} | ${bgSpan('\"edit\"', \"#DCDCDC\")} | ${bgSpan('\"fork\"', \"#DCDCDC\")} | ${bgSpan('\"private\"', \"#DCDCDC\")} | ${bgSpan('\"public\"', \"#DCDCDC\")} | ${bgSpan('\"read\"', \"#DCDCDC\")} | ${bgSpan('\"shared\"', \"#DCDCDC\")} | ${bgSpan('\"transfer_out\"', \"#DCDCDC\")} | ${bgSpan('\"transfer_in\"', \"#DCDCDC\")} | ${bgSpan('\"trash\"', \"#DCDCDC\")} | ${bgSpan('\"public_unlisted\"', \"#DCDCDC\")} | ${bgSpan('\"untrash\"', \"#DCDCDC\")}\n- ${bgSpanBld(\"activityData?\", \"#DCDCDC\")}: Optional activity data\n- ${bgSpanBld(\"entityId?\", \"#DCDCDC\")}: The notebook ID\n- ${bgSpanBld(\"workspaceId\", \"#DCDCDC\")}: The workspace ID\n","pinned":false,"hidden":false,"mode":"md","author":"$undefined","summary":"$undefined","output":"","database":"$undefined"},{"id":91,"value":"note(htl.html`Note: Properties with a ? at the end are optional and may therefore sometimes be NULL.`)","pinned":false,"hidden":false,"mode":"ojs","author":"$undefined","summary":"$undefined","output":"$undefined","database":"$undefined"},{"id":82,"value":"$2f","pinned":false,"hidden":false,"mode":"md","author":"$undefined","summary":"$undefined","output":"","database":"$undefined"},{"id":37,"value":"---","pinned":false,"hidden":false,"mode":"md","author":"$undefined","summary":"$undefined","output":"","database":"$undefined"},{"id":55,"value":"import {free, pro, enterprise} from \"@observablehq/pro-tag\"","pinned":false,"hidden":false,"mode":"ojs","author":"$undefined","summary":"$undefined","output":"$undefined","database":"$undefined"},{"id":86,"value":"import {note} from \"@observablehq/callout-boxes\"","pinned":false,"hidden":false,"mode":"ojs","author":"$undefined","summary":"$undefined","output":"$undefined","database":"$undefined"},{"id":174,"value":"bgSpan = (text, color) => {\n return `${text}`\n}","pinned":false,"hidden":false,"mode":"ojs","author":"$undefined","summary":"$undefined","output":"$undefined","database":"$undefined"},{"id":131,"value":"$30","pinned":false,"hidden":false,"mode":"ojs","author":"$undefined","summary":"$undefined","output":"$undefined","database":"$undefined"},{"id":250,"value":"showLog = jsonExample[selectedLog]","pinned":false,"hidden":false,"mode":"ojs","author":"$undefined","summary":"$undefined","output":"$undefined","database":"$undefined"},{"id":188,"value":"bgSpanBld = (text, color) => {\n return `${text}`\n}","pinned":false,"hidden":false,"mode":"ojs","author":"$undefined","summary":"$undefined","output":"$undefined","database":"$undefined"}],"files":"$W31","stdlib":"1","titling":"auto"}} 2d:"$2c:body"