Skip to main content

Audit Log

Lumio has two audit views in the web dashboard: My Activity for your own security history and Account Audit Log for account-wide operational events. Both views are read-only, show timestamps in your selected timezone, and use the same table controls for filtering, pagination, and row details.

For the backend readers and event catalog behind these pages, see the Audit Log feature reference.

Where to find it​

ViewSidebar pathURLWho can open it
My ActivitySettings → You → Security → Activity/dashboard/settings/security/activityAny signed-in user
Account Audit LogSettings → Channel → Control → Audit log/dashboard/settings/channel/audit-logAccount members with audit-log:read

My Activity is self-only. It does not use account RBAC and it does not show other members' activity, even when you are an Owner or Administrator.

Account Audit Log is account-scoped. It is the Audit log tab of the channel settings; the tab is visible only to members whose active account role grants audit-log:read, and the tab's route is protected by the same permission. Owner and Administrator hold it by default; Moderator does not.

My Activity​

The My Activity page shows personal security events tied to your Lumio user:

  • Sign-ins and failed sign-ins.
  • OAuth grants.
  • Personal API-key lifecycle: creating or revoking one of your own lm_usr_* API keys.
  • Two-factor setup, authenticator app and passkey additions/removals, recovery-code use and changes, password and sign-in-method changes, data exports, and deletion requests.

Rows are keyed to your user identity, not to the active account. Switching accounts does not turn this into an account-wide log, and a popout, overlay, widget, or extension token cannot read it.

Account Audit Log​

The Account Audit Log page shows tenant-level events for the active account:

  • Role creation, updates, deletion, and permission changes.
  • Member role assignments, with the acting user shown in the Actor column.
  • Channel connections added or removed.
  • GDPR erasure rows written for account-scoped data cleanup.

The page never shows another account's rows. If you belong to multiple accounts, use the account switcher first, then open Settings → Channel → Audit log for the account you want to inspect.

Filtering​

Both pages have a filter panel above the table:

FilterEffect
Event typeNarrows the table to one exact event type. The list only contains event types that belong to the current view's scope.
FromShows events on or after the selected day in your timezone.
ToShows events on or before the selected day in your timezone.

Changing a filter applies it immediately and returns the table to the first page.

Table​

Events are shown newest first. Each row includes:

  • Time - the event timestamp in your selected timezone; expanded details also show UTC.
  • Event - a readable label for the audit event type.
  • Actor - account view only; the acting user's ID prefix when the row has an actor.
  • IP address - the captured client IP; shows Unknown ("Unbekannt" in German) when none was captured.
  • Device - the device, browser and operating system read from the captured user agent (e.g. "Chrome 141 · macOS"), as text without an icon. It never shows a raw or bogus value and never guesses: a user agent it cannot read - absent, a non-browser client, or junk - shows Unknown, and a known browser with an unreadable operating system still shows the browser (e.g. "Chrome 141 · Unknown").
  • Location - city and country when GeoIP enrichment is enabled and resolved.
  • Details - expands the row.

Click a row to expand its actor, session, involved channels, exact UTC time, raw JSON (with Copy), and user-agent. In Streamer Mode the IP is partly covered, the location shows as ••••••••, the user-agent is hidden, and raw JSON starts closed; each row has its own Eye to reveal the IP and the location. Rows older than 12 months are labelled Anonymized; rows older than 24 months are deleted (GDPR-erasure records after 36 months).

Select rows across pages to Export selection, or export the current filter or all rows as CSV or JSON. The account export requires audit-log:read; the personal export is self-only. CSV values are escaped for spreadsheet use. A selected export accepts at most 1,000 event IDs.

Pagination​

Each page loads 50 events. Use Previous and Next below the table to move through older or newer pages. The footer shows the current page number and the total number of matching events for the active filter.