> For the complete documentation index, see [llms.txt](https://learn.heeler.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://learn.heeler.com/tenant-admin-guide/access/audit-log.md).

# Audit Log

## Reviewing Tenant Administrative Activity

The **Audit Log** is an immutable record of administrative actions taken in your Heeler tenant — user invites and role changes, integration and connection changes, SLO and policy edits, API-key creation, and other Tenant-Admin-level activity.

### Where to find it

Administration → **Access** → **Audit Log** in the left sidebar.

URL: `https://app.heeler.com/administration/access/audit_log`

### Quick start

The Audit Log is read-only — there's nothing to configure. Use the search and filter controls to find specific events:

* Search by user email or action name.
* Filter by date range, user, or action type.

For compliance evidence collection, you can export filtered audit-log results.

### Reference

#### What's recorded

The Audit Log records actions that change tenant configuration or sensitive data, including (but not limited to):

* User invitations, role changes, deactivations
* SAML/SCIM configuration changes
* API key creation and revocation
* Integration and connection additions, edits, and removals
* SLO, License Policy, and Remediation configuration changes
* Workflow and Guardrail changes
* Data exports

Read-only actions (browsing dashboards, viewing findings) are *not* in the audit log — those don't change state and the log would be noisy.

#### Visibility

Only **Tenant Admins** can view the Audit Log. Standard Users cannot see it.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://learn.heeler.com/tenant-admin-guide/access/audit-log.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.