Overview
The Audit log records every action that changes state in your Niro organization — deployments applied, secrets created, remediations approved, members invited, and more. Use it to answer “who did what and when” across your fleet.What is logged
The audit log covers three categories of actor:
Every entry records:
- When — timestamp of the action
- Who — the email or identifier of the actor
- What — the action taken (e.g.
deployment.apply,remediation.approve) - Target — the resource type and ID affected
- Cluster — which cluster the action affected (if applicable)
- Result — success or failure
Accessing the audit log
Go to Audit in the sidebar. The log loads the most recent entries first.Filtering entries
Use the filter fields at the top of the page to narrow entries:
The log refreshes automatically every 30 seconds.
Using the audit log
Incident review — after a production incident, use the audit log to see what changed in the minutes before it started: which deployments were applied, which configs were modified, and by whom. Remediation tracking — every approved or rejected remediation appears in the audit log, showing who made the decision and whether the action succeeded. Access review — track member invitations and role changes to maintain visibility over who has access to your clusters.Related
Remediations
Approval-gated fixes — all logged in the audit trail.
Manage Secrets and ConfigMaps
Config changes that appear in the audit log.
Multi-tenancy
Member management and org settings.
Deploy an App
Deployment applies are recorded in the audit log.