Thread
#prefect-community
    Jeffery Newburn

    Jeffery Newburn

    9 months ago
    We are using prefect cloud. We are curious how to get audit logs out of the server to push them to our monitoring system? Is there something we can use that comes with the system for exporting. Is there any documentation on this?
    Kevin Kho

    Kevin Kho

    9 months ago
    Hey @Jeffery Newburn, what do you mean by audit logs? Monitoring of agent health of Flow logs?
    Jeffery Newburn

    Jeffery Newburn

    9 months ago
    More if I log into the system and start deleting jobs our security group would want to know that they should yell at me.
    bobby.ryterski.lc

    bobby.ryterski.lc

    9 months ago
    (👋 I work with Jeff) more specifically, the audit trail on the Enterprise tier. we see the
    audit_log
    ,
    audit_event
    , etc endpoints in the API but not much else -- no mentions in the docs
    Kevin Kho

    Kevin Kho

    9 months ago
    Ah ok let me look into it
    So we do not have any docs on this, it would just be the GraphQL documentation:
    query {
      audit_log {
        id
        name
        message
        tenant_id
        info
      }
    }
    bobby.ryterski.lc

    bobby.ryterski.lc

    9 months ago
    thanks @Kevin Kho. I poked at
    audit_log
    bit. any idea what's up with
    audit_event
    ?
    query {
      audit_event {
      	id
      }
    }
    # error message: field "audit_event" not found in type: 'query_root'
    I'm not adept at graphql, but the API docs on the side (and autocomplete in the editor) both show that event endpoint under query... but it sounds like it's not really there?
    I think log is probably enough for what we need, but I'd like to know what events look like at least
    Kevin Kho

    Kevin Kho

    9 months ago
    Will ask and get back to you on that
    audit_events
    is old and was for an old feature
    bobby.ryterski.lc

    bobby.ryterski.lc

    9 months ago
    ah, ok. so don't use that and only audit_log 👍
    Kevin Kho

    Kevin Kho

    9 months ago
    Yes exactly we may remove it