Get early access
In this section (15)

Review the audit log

See who changed which setting and when, and who opened which ticket.

1 min read

ChaosDesk keeps three records of who did what:

  • the admin audit log: every configuration change;
  • the access log: which staff opened which ticket;
  • each ticket’s events: every change to the ticket.

The admin audit log

  1. Open Admin Center, Security & compliance, Compliance and choose the Admin audit log tab.
  2. Search by name or actor, and filter by type and action (Created, Updated, Deleted, Ran, Requested, Approved, Rejected).
  3. Open an entry to see what changed, field by field. Secret values show as “value hidden”.

It covers rules, roles, groups, fields, brands, templates, SLA policies, webhooks, API tokens and compliance settings. Changes made by ChaosDesk support during a support session are recorded under their name.

Who opened a ticket

On a ticket, choose Compliance. Viewed by lists the staff who opened it, one entry per person per 15 minutes.

Export and stream the log

Requires Enterprise. This is in beta: there is no screen for it yet, but admins can use the API to:

  • download the admin audit log and the access log for a period, as CSV or JSON lines;
  • page through events from a security tool (SIEM);
  • set up streams that push new events to your SIEM.

Was this article helpful?