> ## Documentation Index > Fetch the complete documentation index at: https://docs.lovable.dev/llms.txt > Use this file to discover all available pages before exploring further. # Audit logs > Monitor workspace activity with Enterprise audit logs. Filter by action, member, resource, or time range to review events such as membership changes, project actions, authentication events, and workspace settings or configuration changes. Audit logs provide a searchable audit trail of activity in your workspace. They show who performed an action, when it happened, what changed, and which resource was affected. Use audit logs to review workspace settings and configuration changes, track access updates, and investigate unexpected behavior. Audit logs can also support security and compliance workflows when needed. * **Available on:** Enterprise plans * **Access:** Workspace admins and owners * **Location:** [Audit logs](https://lovable.dev/settings/audit-logs) (**Settings → Security → Audit logs**) ## Audit log events Workspace audit logs include events across categories such as: | **Category** | **Example events** | | :--------------------------- | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **Workspace membership** | | | **Workspace management** | | | **Workspace groups** | | | **Identity and access** | | | **Secrets and integrations** | | | **Projects** | | | **Lovable Cloud** | | | **Authentication** | | This table shows common examples. The **All actions** filter on the audit logs page lists the full set of event types recorded for your workspace. ## Audit log table By default, the page shows logs for **All actions**, **All actors**, and the **Last 90 days**. The total number of matching logs appears in the top right of the table. The table is organized into four columns: | Column | Description | | ------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **Timestamp** | When the event occurred, such as `4 minutes ago` or `about 11 hours ago`. Hover to see the exact date and time. | | **Actor** | The member who performed the action. Clicking the member’s name opens a popover showing their `Email`, `User ID`, `IP Address`, and `User Agent`. From this popover, you can copy these details or filter the table by that user. | | **Action** | The type of activity, displayed as a label such as `Prompt sent`, `Workspace updated`, `Member added`, or `Project created`. | | **Resource** | The affected object, such as a project, workspace, or user. Some resources are clickable. For example, clicking a project name opens that project. | Click any row to expand it and see structured JSON details describing the event. This includes the metadata associated with that action, such as message IDs for prompt activity or specific fields that were updated in a workspace setting. Events triggered through the Lovable API are also attributed to the access token that made the request. The expanded JSON details include an `api_key_id` field alongside the acting user, so you can trace which token drove a given change. ## Filtering audit logs You can combine the filters to focus on specific activity: * **All actions** lets you select one or more action types, such as `Member added`, `Member removed`, `Workspace updated`, `Project created`, or `Prompt sent`. The dropdown is searchable. * **All actors** lets you select one or more workspace members using the searchable picker. * **Resources** lets you search for projects and people and show only events that affected them. * **Time range** includes presets for **Last 7 days**, **Last 30 days**, **Last 90 days**, **This month**, and **Last month**. ## How to use audit logs A typical workflow: 1. Set a relevant **time range**. 2. Filter by **actor** to review activity from a specific member. 3. Filter by **action type** to narrow results to a specific kind of change. 4. Expand entries to inspect the full JSON details. 5. Open affected projects or jump to related messages to review context. 6. Use the actor popover to copy details such as email, user ID, IP address, or user agent if needed. ## Exporting audit logs Click **Export** in the top right of the page, then click **Start new export**. Lovable generates a JSONL file (one JSON event per line) of the audit logs matching your active action, actor, and time range filters. Finished exports stay available for download for 7 days, and each export is itself recorded in the audit log. Export is not available while a resource filter is active. Clear the **Resources** filter first. ## Audit log data retention Logs are retained for 13 weeks, or approximately 90 days. Events older than that are automatically removed. Logs before February 26, 2026 may be incomplete. ## FAQ Audit logs are available on Enterprise plans and are visible to workspace owners and admins. Audit logs are retained for 13 weeks, or approximately 90 days. Events older than that are automatically removed. Yes. Click **Export** in the top right of the audit logs page to download audit logs as a JSONL file. The export respects your active filters, and finished exports stay available for download for 7 days. If you need to integrate audit logs with a SIEM or external monitoring system, contact your account team to discuss enterprise integration options. If audit logs are not available or do not appear as expected: * Confirm your workspace is on an Enterprise plan. * Confirm your role includes permission to view audit logs. You must be a workspace admin or owner. * Clear filters and try a broader time range.