Audit Logs
Learn how to track and analyze your team members' activities.Audit logs help you track and analyze your team members' activity. They can be accessed by team members with the owner role, and are available to customers on enterprise plans.
To export and download audit logs:
- Go to Team Settings > Security > Audit Log
- Select a timeframe to export a Comma Separated Value (CSV) file containing all events occurred during that time period
- Click the Export CSV button to download the file
The team owner requesting an export will then receive an email with a link containing the report. This link is used to access the report and is valid for 24 hours.
Note that reports can be generated for the last 90 days (three months) and will not impact your billing.
The CSV file can be opened using any spreadsheet-compatible software, and includes the following fields:
Property | Description |
|---|---|
timestamp | Time and date at which the event occurred |
action | Name for the specific event. E.g, project.created, team.member.left, project.transfer_out.completed, auditlog.export.downloaded, auditlog.export.requested, etc. Learn more about it here. |
actor_vercel_id | User ID of the team member responsible for an event |
actor_name | Account responsible for the action. For example, username of the team member |
actor_email | Email address of the team member responsible for a specific event |
location | IP address from where the action was performed |
user_agent | Details about the application, operating system, vendor, and/or browser version used by the team member |
previous | Custom metadata (JSON object) showing the object's previous state |
next | Custom metadata (JSON object) showing the object's updated state |
Vercel logs the following list of actions performed by team members.
Maps a custom domain or subdomain to a specific deployment or URL of a project. To learn more, see the vercel alias docs.
Action Name | Description |
|---|---|
alias.created | Indicates that a new alias was created |
alias.deleted | Indicates that an alias was deleted |
Refers to the audit logs of your Vercel team account.
Action Name | Description |
|---|---|
auditlog.export.downloaded | Indicates that an export of the audit logs was downloaded |
auditlog.export.requested | Indicates that an export of the audit logs was requested |
A digital certificate to manage SSL/TLS certificates for your custom domains through the vercel certs command. It is used to authenticate the identity of a server and establish a secure connection.
Action Name | Description |
|---|---|
cert.created | Indicates that a new certificate was created |
cert.deleted | Indicates that a new certificate was deleted |
cert.renewed | Indicates that a new certificate was renewed |
Create URLs that accept HTTP POST requests to trigger deployments and rerun the build step. To learn more, see the Deploy Hooks docs.
Action Name | Description |
|---|---|
deploy_hook.deduped | A deploy hook is de-duplicated which means that multiple instances of the same hook have been combined into one |
Refers to a successful build of your application. To learn more, see the deployment docs.
Action Name | Description |
|---|---|
deployment.deleted | Indicates that a deployment was deleted |
deployment.job.errored | Indicates that a job in a deployment has failed with an error |
A unique name that identifies your website. To learn more, see the domains docs.
Action Name | Description |
|---|---|
domain.auto_renew.changed | Indicates that the auto-renew setting for a domain was changed |
domain.buy | Indicates that a domain was purchased |
domain.created | Indicates that a new domain was created |
domain.delegated | Indicates that a domain was delegated to another account |
domain.deleted | Indicates that a domain was deleted |
domain.move_out.requested | Indicates that a request was made to move a domain out of the current account |
domain.moved_in | Indicates that a domain was moved into the current account |
domain.moved_out | Indicates that a domain was moved out of the current account |
domain.record.created | Indicates that a new domain record was created |
domain.record.deleted | Indicates that a new domain record was deleted |
domain.record.updated | Indicates that a new domain record was updated |
domain.transfer_in | Indicates that a request was made to transfer a domain into the current account |
domain.transfer_in.canceled | Indicates that a request to transfer a domain into the current account was canceled |
domain.transfer_in.completed | Indicates that a domain was transferred into the current account |
A key-value data store associated with your Vercel account that enables you to read data at the edge without querying an external database. To learn more, see the Edge Config docs.
Action Name | Description |
|---|---|
edge_config.created | Indicates that a new edge configuration was created |
edge_config.deleted | Indicates that a new edge configuration was deleted |
edge_config.updated | Indicates that a new edge configuration was updated |
Helps you pair Vercel's functionality with a third-party service to streamline installation, reduce configuration, and increase productivity. To learn more, see the integrations docs.
Action Name | Description |
|---|---|
integration.deleted | Indicates that an integration was deleted |
integration.installed | Indicates that an integration was installed |
integration.updated | Indicates that an integration was updated |
Password Protection allows visitors to access preview deployments with a password to manage team-wide access.
Action Name | Description |
|---|---|
password_protection.disabled | Indicates that password protection was disabled |
password_protection.enabled | Indicates that password protection was enabled |
Customize the appearance of your preview deployment URLs by adding a valid suffix. To learn more, see the preview deployment suffix docs.
Action Name | Description |
|---|---|
preview_deployment_suffix.disabled | Indicates that the preview deployment suffix was disabled |
preview_deployment_suffix.enabled | Indicates that the preview deployment suffix was enabled |
preview_deployment_suffix.updated | Indicates that the preview deployment suffix was updated |
Refers to actions performed on your Vercel projects.
Action Name | Description |
|---|---|
project.analytics.disabled | Indicates that analytics were disabled for the project |
project.analytics.enabled | Indicates that analytics were enabled for the project |
project.deleted | Indicates that a project was deleted |
project.env_variable | This field refers to an environment variable within a project |
project.env_variable.created | Indicates that a new environment variable was created for the project |
project.env_variable.deleted | Indicates that a new environment variable was deleted for the project |
project.env_variable.updated | Indicates that a new environment variable was updated for the project |
Refers to the password protection settings for a project.
Action Name | Description |
|---|---|
project.password_protection.disabled | Indicates that password protection was disabled for the project |
project.password_protection.enabled | Indicates that password protection was enabled for the project |
project.password_protection.updated | Indicates that password protection was updated for the project |
Refers to the Single Sign-On (SSO) protection settings for a project.
Action Name | Description |
|---|---|
project.sso_protection.disabled | Indicates that SSO protection was disabled for the project |
project.sso_protection.enabled | Indicates that SSO protection was enabled for the project |
project.sso_protection.updated | Indicates that SSO protection was updated for the project |
Refers to the transfer of a project between Vercel accounts.
Action Name | Description |
|---|---|
project.transfer_in.completed | Indicates that a project transfer into the current account was completed successfully |
project.transfer_in.failed | Indicates that a project transfer into the current account was failed |
project.transfer_out.completed | Indicates that a project transfer out of the current account was completed successfully |
project.transfer_out.failed | Indicates that a project transfer out of the current account was |
project.transfer.started | Indicates that a project transfer was initiated |
Refers to the generation of web analytics for a Vercel project.
Action Name | Description |
|---|---|
project.web-analytics.disabled | Indicates that web analytics were disabled for the project |
project.web-analytics.enabled | Indicates that web analytics were enabled for the project |
Helps you list, add, remove, and manage vercel secrets used in environment variables from the command line. To learn more see the secrets docs.
Action Name | Description |
|---|---|
secret.created | Indicates that a new secret was created |
secret.deleted | Indicates that a new secret was deleted |
secret.name.updated | Indicates that the name of a secret was updated |
Refers to environment variables defined at the team level. To learn more, see the shared environment variables docs.
Action Name | Description |
|---|---|
shared_env_variable.created | Indicates that a new shared environment variable was created |
shared_env_variable.decrypted | Indicates that a new shared environment variable was decrypted |
shared_env_variable.deleted | Indicates that a new shared environment variable was deleted |
shared_env_variable.updated | Indicates that a new shared environment variable was updated |
Refers to actions performed by members of a Vercel team.
Action Name | Description |
|---|---|
team.avatar.updated | Indicates that the avatar (profile picture) associated with the team was updated |
team.created | Indicates that a new team was created |
team.deleted | Indicates that a new team was deleted |
team.name.updated | Indicates that the name of the team was updated |
team.slug.updated | Indicates that the team's unique identifier, or "slug," was updated |
Refers to actions performed by any team member.
Action Name | Description |
|---|---|
team.member.access_request.confirmed | Indicates that an access request by a team member was confirmed |
team.member.access_request.declined | Indicates that an access request by a team member was declined |
team.member.access_request.requested | Indicates that a team member has requested access to the team |
team.member.added | Indicates that a new member was added to the team |
team.member.deleted | Indicates that a member was removed from the team |
team.member.joined | Indicates that a member has joined the team |
team.member.left | Indicates that a new member has left the team |
team.member.role.updated | Indicates that the role of a team member was updated |
Was this helpful?