Skip to main content

Audit Log

Lumio has two audit views in the web dashboard: My Activity for your own security history and Account Audit Log for account-wide operational events. Both views are read-only, show timestamps in UTC, and use the same table controls for filtering, pagination, and row details.

For the backend readers and event catalog behind these pages, see the Audit Log feature reference.

Where to find it​

ViewSidebar pathURLWho can open it
My ActivityAccount → My Activity/account/activityAny signed-in user
Account Audit LogManage → Audit Log/dashboard/audit-logAccount members with audit-log:read

My Activity is self-only. It does not use account RBAC and it does not show other members' activity, even when you are an Owner or Administrator.

Account Audit Log is account-scoped. The navigation item is visible only to members whose active account role grants audit-log:read, and the page route is protected by the same permission. Owner and Administrator hold it by default; Moderator and Viewer do not.

My Activity​

The My Activity page shows personal security events tied to your Lumio user:

  • Sign-ins and failed sign-ins.
  • OAuth grants.
  • Personal API-key lifecycle: creating or revoking one of your own lm_usr_* API keys.
  • A filterable catalog value for MFA lifecycle events. The product does not currently write MFA rows, so they appear only if an internal writer records them.

Rows are keyed to your user identity, not to the active account. Switching accounts does not turn this into an account-wide log, and a popout, overlay, widget, or extension token cannot read it.

Account Audit Log​

The Account Audit Log page shows tenant-level events for the active account:

  • Role creation, updates, deletion, and permission changes.
  • Member role assignments, with the acting user shown in the Actor column.
  • Channel connections added or removed.
  • GDPR erasure rows written for account-scoped data cleanup.

The page never shows another account's rows. If you belong to multiple accounts, use the account switcher first, then open Manage → Audit Log for the account you want to inspect.

Filtering​

Both pages have a filter panel above the table:

FilterEffect
Event typeNarrows the table to one exact event type. The list only contains event types that belong to the current view's scope.
FromShows events on or after the selected UTC date boundary.
ToShows events on or before the selected UTC date boundary.

Click Apply to run the filter. Changing filters returns the table to the first page.

Table​

Events are shown newest first. Each row includes:

  • Time (UTC) — the event timestamp, rendered in UTC.
  • Event — a readable label for the audit event type.
  • Actor — account view only; the acting user's ID prefix when the row has an actor.
  • IP address — the captured client IP when available.
  • Location — city and country when GeoIP enrichment is enabled and resolved.
  • Details — expands the row.

The expanded details row shows the event metadata JSON when present and the full user-agent string when it was captured. Use this for security reviews where the compact table row is not enough.

Pagination​

Each page loads 50 events. Use Previous and Next below the table to move through older or newer pages. The footer shows the current page number and the total number of matching events for the active filter.