Administration Guide > Server maintenance

Audit logs

Audit logs record security and administrative events so workspace administrators can review important changes and access-related activity.

Audit protection

Audit entries are encrypted and protected against unnoticed tampering. This helps administrators review whether important security or administrative events happened as expected.

Events

  • Login failures, lockouts, and rate-limit events.
  • Security checks that fail during connection setup.
  • Administrative changes to users, groups, roles, and workspace settings.
  • File operations, exports, and deletion or wipe actions.
  • Backup, alert, and administrative activity for cloud-hosted deployments.

Review

Workspace administrators can review audit events through the administrative views available for their deployment type.