Audit Log Overview
The Audit Logs page provides a complete, tamper-proof record of every significant action taken across your GitSec account by users, administrators, and the system itself.
How is this different from the Activity? The Activity answers the question "Is my backup job running, and did it succeed?" It focuses on the operational status of backup and restore jobs. Audit Logs answer a different question entirely: "Who did what, and when?" While a backup failure will appear on the Activity page as a failed job, the Audit Logs record who triggered it or from which IP address. If a user's role was changed, a storage provider was removed, or someone attempted to log in and failed, those events only appear in Audit Logs, never in Activity.
Audit Logs Page
Navigate to Audit Logs in the sidebar to view a complete chronological list of all recorded events. Each row in the table represents a single logged action and includes the following columns:
| Column | Description |
|---|---|
| Actor | The user or system component that performed the action. Automated or system-triggered events show a dash (—) in this column. |
| Category | The functional area the event belongs to, such as Auth, Backup, Repository, or Schedule. |
| Action | The specific action that occurred, such as Logged In, Backup Failed, or Triggered By Timer. |
| Description | A short human-readable summary of the event, including relevant identifiers like repository names or usernames. |
| IP Address | The IP address of the actor at the time of the event. System-triggered events display a dash. |
| Region | The geographic region resolved from the actor's IP address (e.g., Istanbul). |
| Timestamp | The exact date and time the event was recorded, shown in UTC along with a relative time label (e.g., 1 day ago). |
Filtering by Category
Use the + Category button in the top-left corner to filter the log by one or more event categories. Each category in the list shows the total number of records it has, so you can see at a glance where activity is concentrated. This is particularly useful when you want to focus on a specific area. For example, viewing only Auth events during a security review, or only Backup and Repository events when troubleshooting a failed backup run.
Exporting Audit Logs
Click the Export button in the top-right corner to download a copy of the current log view. Exports are available in CSV format for use in spreadsheet tools and JSON format for programmatic processing.