Audit logs for Looker core (private IP) admin activities.

[RM_Ajay]

We are using a Looker core private IP instance. As an admin, we are performing multiple operations like looker settings, user/group management, access (permissions, model sets, roles, content) management, SMTP setup, SAML configuration, etc. We are not getting any audit logs for these admin activities.

As a start, we are mainly expecting audit logs for user/group management and access management. Like, create, update, delete operations on users/groups, access, etc.

We did check with the support team, but they asked us to raise a feature request. 

Thanks!

[sam8]

There aren't official audit logs to my knowledge, but you can get some of this information using the Events explore in System Activity.

[MarcoSol · Accepted solution]

Hi Ajay, 

The out of the box system activities reports can be a bit limiting. You can build reports specific to your needs. The Event documentation also does not have all fields documented. But there is a lot of information under the hood. Try to play around with the Event Attribute Name and the Event Category. Eg below filters and fields to get started with for user-related log reports.

Note that you can also extract the system activity logs via the API. We've helped some customers with that for compliance purposes as they logs are kept for maximum 1 year.