Audit Logs

The Audit Logs page provides an audit trail of the activities performed on your MFT Gateway account. It records,

  • User login and logout
  • Station, partner, certificate and tenant create, update and delete actions
  • Message actions such as sending, deleting, downloading and retrying messages
  • Updates to integrations (Webhook, AWS S3, EDIG, SFTP and API tokens)
  • User creation
  • Archiving and unarchiving of audit logs

Audit logs are retained for 90 days.

Only organization admin and management users can view the audit logs.

Click ‘Audit Logs’ from the left side menu to open the Audit Logs page.

Audit Logs Page
Audit Logs Page

Audit Logs Table

The table is sorted by the timestamp by default, showing the most recent activity first. Each record contains the following columns.

ColumnDescription
SubjectThe area of the application the activity relates to (e.g. Login, Station, Partner, Message)
UserEmail address of the user who performed the activity
TypeThe log level of the activity
TimestampThe time the activity was performed
Audit MessageA short description of the activity
ObjectDetails of the database record affected by the activity (see Object)

Object

The Object column contains,

  • Creations - the object that was added
  • Modifications - the changed attributes, with the old value and the new value of each attribute
  • Deletions - the object that was deleted

The object is truncated in the table view by default. Click the object cell of a record to expand and view the full object. You can also copy the object to the clipboard from the expanded view.

Any passwords included in the object are redacted and shown as "Password": "redacted".

Log Levels

Each audit log is assigned one of the following log levels, shown in the ‘Type’ column.

Log LevelDescription
InfoGeneral information about an activity, such as a user logging in or out, or a certificate being created
DebugAn activity has been started (e.g. Creating station…). It is followed by a Success or Error log
SuccessAn activity completed successfully (e.g. Created station…)
WarnAn activity could not be performed due to a restriction, such as a plan limit or a disabled integration
ErrorAn activity failed (e.g. Failed to create station…)

Toolbar

The toolbar at the top of the page contains the following actions.

ActionDescription
Reload Fetches the latest audit logs. Any applied filters are retained.
Archive / Unarchive Archives the selected logs (or unarchives them when viewing archived logs).
Filters Opens the Filter Audit Logs dialog.
SearchSearches the logs by user email.
View Archived LogsToggles between the Audit Logs and the Archived Audit Logs views.

Searching Audit Logs

Type a user email into the ‘Search on: User Email’ box at the top right corner of the page to view only the logs of activities performed by that user.

Filtering Audit Logs

Click the ‘Filters’ button to open the ‘Filter Audit Logs’ dialog.

Filter Audit Logs
Filter Audit Logs

Logs can be filtered by,

  • Subject - show only the logs of the selected subject (e.g. Login, Station, Partner)
  • User Email - show only the logs of activities performed by the selected user
  • Severity Level - show only the logs of the selected log level

The filters can be used individually or in any combination. Click ‘Apply’ to apply the selected filters, or ‘Reset’ to clear all filters and view all logs.

Archiving Audit Logs

Archiving lets you move logs you no longer need to review out of the main Audit Logs view, without deleting them.

  • To archive a single log, click the archive icon on the right side of the record.
  • To archive multiple logs, select them using the check boxes on the left and click the archive button in the toolbar. Use the check box in the table header to select all logs in the current page.

To view the archived logs, turn on the ‘View Archived Logs’ toggle. In this view, the same buttons can be used to unarchive logs and move them back to the Audit Logs view.

Archiving and unarchiving logs is itself recorded as an audit log under the ‘Audit Logs’ subject.

Audit Log Scenarios

The following table lists the scenarios recorded in the audit logs for each subject. A scenario may produce multiple logs at different log levels, e.g. a Debug log when the activity starts, followed by a Success or an Error log.

SubjectScenario
LoginLogin
LogoutLogout
StationCreate station
 Update station
 Delete station
 Station limit of the subscription plan exceeded
 Block / unblock outbound traffic
 Pause / resume inbound traffic
PartnerCreate partner
 Update partner
 Delete partner
 Block / unblock outbound traffic
 Pause / resume inbound traffic
MessageSend / queue message
 Delete message (single / bulk)
 Mark message as read / unread
 Download attachment, attachments zip, raw message, raw MDN or headers
 Manual retry (single / bulk)
 Stop auto-retry
 Re-trigger MDN / acknowledgement
TenantUpdate tenant
UserCreate user
CertificateCreate certificate
 Renew certificate
 Delete certificate
 Bulk delete certificates
Tenant RegistrationRegister tenant
 Verify tenant email
Webhook IntegrationCreate / integrate Webhook
 Enable / disable Webhook integration
 Update Webhook integration
 Download Webhook certificate
S3 IntegrationEnable S3 integration
 Disable S3 integration
 Update S3 integration (regenerate access keys)
EDIG IntegrationCreate / integrate EDIG
 Verify EDIG
 Enable / disable EDIG integration
 Update EDIG integration
SFTP IntegrationEnable SFTP integration
 Disable SFTP integration
API IntegrationCreate API token
 API token limit reached
 Enable / disable API token
 Delete API token
ServiceUpdate services for tenant
 Service update blocked by a dependency conflict
SubscriptionAdd external subscription for tenant
 Subscription created / updated
Tenant DeleteDelete tenant
IntegrationsEnable / disable integrations for tenant
Extend TrialExtend trial for tenant
Auto ExpirationEnable / disable auto expiration for tenant
Audit LogsArchive / unarchive audit logs