Skip to navigation
GovernanceAudit Records and API Logs

Audit logging

Track and monitor account activity with enterprise audit logging

Available to Enterprise Plan customers only.

Audit logging records actions performed by team members through the Zep web dashboard. This feature helps enterprises meet compliance requirements, investigate security incidents, and maintain visibility into team activity.

Audit logs track member actions in the web application only. API requests and SDK calls made by your applications are not included in audit logs. For API activity, see API logging.

What events are logged

Zep records the following verified dashboard and administration events when audit logging is enabled:

CategoryEvents
MembersInvitations sent and members removed
API KeysKeys created or revoked, ABAC mode changes, and role changes
ProjectsProjects created, updated, or deleted
Access ControlRBAC bindings created or deleted, permission denied events
Data operationsUsers, threads, and graphs created, deleted, or viewed through audited dashboard paths
SettingsAudited settings changes

The maintained event list describes events with verified emitters. The list does not imply that every dashboard read or mutation produces an event.

Viewing audit logs

Access audit logs from your account settings:

  1. Navigate to Account Settings in the Zep dashboard
  2. Select Audit Logs from the sidebar
  3. Browse the chronological list of events

Each log entry displays:

  • Timestamp - When the event occurred (with relative and absolute time)
  • Actor - The team member who performed the action
  • Action - The type of event that occurred
  • Resource - The affected resource (project, user, thread, etc.)

Click any row to expand it and view additional details including request ID, IP address, and user agent.

Filtering and searching

Use the filter controls to narrow down audit logs:

  • Time range - Filter by predefined ranges (1 hour, 24 hours, 7 days, 30 days) or set a custom range
  • Actor - Filter by the team member who performed the action
  • Action - Filter by specific event types
  • Resource type - Filter by the type of resource affected

Filters can be combined to locate specific events. The results update automatically as you apply filters.

Event details

Each audit event captures:

FieldDescription
timestampWhen the event occurred (millisecond precision)
actor_emailEmail of the user who performed the action
actor_roleRole of the actor at the time of the event
principal_typeType of actor (typically member for team member actions)
actionThe specific action performed
resource_typeType of resource affected
resource_idUnique identifier of the affected resource
project_uuidProject context (if applicable)
request_idUnique identifier for the request
client_ipIP address of the client
user_agentClient user agent string

Audit Logs cover dashboard activity. Use API Logs for recorded SDK and API request activity.