Export your audit log

The audit log records every sign-in, setting change, connector change and role change in your workspace, along with who did it and when. It also records each question that was asked and which sources were opened to answer it, but not the text of the answer.

Entries are kept for 13 months. Owners and admins can read the log, and an owner can export it. The log is read-only; nobody, including us, can edit an entry.

Export a date range

1. Open Settings, then Security, and choose Audit log.

2. Use the filters to pick a date range, and optionally a person or an event type.

3. Select Export and choose CSV or JSON.

4. Wait for the email with the download link. Large exports can take a few minutes, and the link works for 24 hours.

To stream events as they happen, choose Log streaming on the same page and add the webhook URL of your SIEM. Events arrive as JSON within a minute, signed with a secret you can rotate at any time.