--- source_url: https://www.pubnub.com/docs/portal/audit-log title: Audit Log updated_at: 2026-06-12T11:24:13.298Z --- > Documentation Index > For a curated overview of PubNub documentation, see: https://www.pubnub.com/docs/llms.txt > For the full list of all documentation pages, see: https://www.pubnub.com/docs/llms-full.txt # Audit Log The **Audit Log** in [Admin Portal](https://admin.pubnub.com/) tracks actions performed across your PubNub organization and gives you visibility into who did what and when. Use it to monitor changes to apps, keysets, user roles, Service Integrations, and account settings. The Audit Log helps you: * Identify who made a change and when it happened * Track actions performed through the Admin Portal UI, the [Admin API](https://www.pubnub.com/docs/admin-api), or [MCP](https://www.pubnub.com/docs/ai/pubnub-mcp-server) OAuth integrations * Support compliance and enterprise auditing requirements * Investigate unexpected configuration changes :::note Availability Audit Log is available on **Starter** and **Contract** plans only. ::: ## View the Audit Log To access the Audit Log: 1. Log in to the Admin Portal. 2. Click your email in the top-right corner to open the account menu. 3. Select Organization settings. 4. Click Audit Log. The Audit Log page shows a table of events sorted by date, from most recent to oldest. Each row includes the date, the initiator, the event type, and any relevant labels. ![Audit Log page showing a table of recent events with Date, Initiator, Event Type, and Labels columns](https://www.pubnub.com/assets/images/audit-log-overview-90925d28560f470b7229e141fc29b301.png) ## Log entry details Each row in the log includes: | Column | Description | | --- | --- | | **Date** | Timestamp of the event. Click the column header to change the sort order. | | **Initiator** | The user or Service Integration that performed the action. For portal users, this shows the email address and user ID. For Service Integrations, this shows the integration name and ID. | | **Event Type** | The specific action that occurred, for example `KeysetConfigChanged` or `UserRoleAdded`. | | **Labels** | Contextual tags that identify the affected resources, such as keyset ID or application ID. | Click a row to expand it and view the full event payload. The payload is a JSON object that contains the complete details of the change. ![Audit Log with an expanded row showing the full JSON event payload](https://www.pubnub.com/assets/images/audit-log-event-detail-ce03c43636c0147c55a8fcc3c6dc7754.png) ## Filter events Use the filter controls above the log table to narrow down results. ### Filter by event type 1. Click the Event type dropdown. 2. Select one or more event types from the list. 3. Click Apply. The counter next to the dropdown (for example, "2/15 filters used") shows how many filters are active. ![Audit Log with the Event type filter dropdown open, showing checkboxes for each event type](https://www.pubnub.com/assets/images/audit-log-filters-46e4dfea7d72824fcd217e0366f6364c.png) ### Filter by time range 1. Click Select time range. 2. Choose a start and end date. The log updates to show only events within the selected period. To clear filters, open the **Event type** dropdown and deselect all options, or remove the time range. ## Event types The Audit Log captures events across several categories. The table below lists all available event types, what they represent, and whether they can be triggered through the Admin Portal UI, the Admin API, or both. ### User activity | Event type | Description | Portal UI | Admin API | | --- | --- | --- | --- | | `UserRoleAdded` | A role was assigned to a user. | Yes | N/A | | `UserRoleRevoked` | A role was removed from a user. | Yes | N/A | | `UserAccountAccessGranted` | A user was granted access to the account. | Yes | N/A | | `UserAccountAccessRevoked` | A user's access to the account was revoked. | Yes | N/A | | `UserAcceptedInvitation` | A user accepted an invitation to join the account. | Yes | N/A | ### App management | Event type | Description | Portal UI | Admin API | | --- | --- | --- | --- | | `AppCreated` | A new app was created. | No | Yes | | `AppRenamed` | An app was renamed. | No | Yes | | `AppDisabled` | An app was disabled. | No | Yes | | `AppChanged` | An app attribute was changed (catch-all for changes not covered by other app events). | No | Yes | ### Keyset management | Event type | Description | Portal UI | Admin API | | --- | --- | --- | --- | | `KeysetCreated` | A new keyset was created. | No | Yes | | `KeysetRenamed` | A keyset was renamed. | No | Yes | | `KeysetDisabled` | A keyset was disabled. | No | Yes | | `KeysetEnabled` | A keyset was enabled. | No | Yes | | `KeysetTypeChanged` | A keyset type was changed between testing and production. | Yes | Yes | | `KeysetConfigChanged` | A keyset configuration was updated (for example, enabling Access Manager or changing persistence settings). | Yes | Yes | ### Secret key | Event type | Description | Portal UI | Admin API | | --- | --- | --- | --- | | `SecretKeyRotated` | A keyset's [secret key](https://www.pubnub.com/docs/portal/keysets#secret-key-rotation) was rotated. Secret key values are redacted in the payload. | No | Yes | ### Service Integrations | Event type | Description | Portal UI | Admin API | | --- | --- | --- | --- | | `ServiceIntegrationCreated` | A new [Service Integration](https://www.pubnub.com/docs/portal/service-integrations) was created. | Yes | N/A | | `ServiceIntegrationUpdated` | A Service Integration was updated. | Yes | N/A | | `ServiceIntegrationDeleted` | A Service Integration was deleted. | Yes | N/A | | `ApiKeyCreated` | An API key was created for a Service Integration. | Yes | N/A | | `ApiKeyRevoked` | An API key for a Service Integration was revoked. | Yes | N/A | ### Partner (OEM) | Event type | Description | Portal UI | Admin API | | --- | --- | --- | --- | | `OemCustomerCreated` | A [partner customer](https://www.pubnub.com/docs/portal/partner-portal) was created. | No | Yes | | `OemCustomerUpdated` | A partner customer was updated. | No | Yes | | `OemCustomerKeysetsAssigned` | Keysets were assigned to a partner customer. | No | Yes | ### Account settings | Event type | Description | Portal UI | Admin API | | --- | --- | --- | --- | | `AccountAuthSettingsUpdated` | Account authentication settings were changed (for example, MCP access). | Yes | N/A | | `VersionPinned` | A server version was pinned. | Yes | N/A | ## Terms in this document * **PubNub** - PubNub is a real-time messaging platform that provides APIs and SDKs for building scalable applications. It handles the complex infrastructure of real-time communication, including: Message delivery and persistence, Presence detection, Access control, Push notifications, File sharing, Serverless processing with Functions and Events & Actions, Analytics and monitoring with BizOps Workspace, AI-powered insights with Illuminate.