Audit Logs

Audit logs record who did what and when across your clariBI organization. Use them for security monitoring, compliance, and troubleshooting.

What Is Logged

clariBI records these event types:

• Authentication: login, logout, failed login attempts, MFA events
• User management: invitations, role changes, user removal
• Data sources: connections created, modified, deleted, sync events
• Content: dashboard/report creation, editing, deletion, sharing
• AI usage: queries run, reports generated, credits consumed
• Settings: security settings changes, billing changes, API key management

Viewing Your Activity Log

Every user can view their own personal activity log from Settings > Account. The activity log shows important account activity like logins, billing events, settings changes, and significant usage.

The log viewer supports filtering by:

• Time range: Last 7 Days, Last 30 Days, or Last 90 Days
• Event type: authentication events (login, logout, MFA), settings changes (profile, API keys), and data events (data access, exports, dashboard creation, report generation)

Log Retention

Exporting Logs (Enterprise)

On Enterprise plans, you can export audit logs for external analysis or compliance archives. Export formats include CSV and JSON. Go to Audit Logs and click Export.

Security Monitoring

Key events to watch for:

• Failed login attempts — multiple failures for the same user may indicate a brute-force attack
• Unusual access patterns — logins from unexpected locations or times
• Role escalation — users being promoted to higher roles
• Data source changes — unexpected new connections or credential modifications
• Public link creation — data being shared externally

Related

• Security Overview
• Role-Based Access Control