Audit Logs

​

Overview

​

Accessing Audit Logs

​

Logged Events

​

User Actions

• Login/Logout - Authentication events
• Queries - All search queries
• Document Access - Which documents accessed
• Settings Changes - Configuration modifications

​

Administrative Actions

• Member Invited/Removed - Team changes
• Role Changes - Permission modifications
• Integration Added/Removed - Connection changes
• Billing Updates - Subscription changes

​

System Events

• Document Indexed - New documents added
• Document Updated - Content changed
• Sync Completed - Integration sync finished
• API Calls - All API requests

​

Log Format

{
  "id": "log_abc123",
  "timestamp": "2024-01-15T10:30:00Z",
  "user_id": "user_123",
  "user_email": "john@company.com",
  "action": "query.completed",
  "resource_type": "document",
  "resource_id": "doc_abc",
  "details": {
    "question": "What's our vacation policy?",
    "sources_used": 3,
    "confidence": 0.95
  },
  "ip_address": "192.168.1.1",
  "user_agent": "Mozilla/5.0..."
}

​

Filtering Logs

• Date Range - Specific time period
• User - Specific team member
• Action Type - Event category
• Resource - Specific document/integration

​

Exporting Logs

• CSV - Spreadsheet analysis
• JSON - Programmatic processing
• PDF - Compliance reports

# API export
curl https://api.sorcia.ai/api/audit-logs?start=2024-01-01&end=2024-01-31 \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Accept: application/json"

​

Retention

​

Compliance

• SOC 2 - Access logging requirements
• GDPR - Data access records
• HIPAA - Healthcare audit trails

​

Alerts

• Failed login attempts
• Unusual access patterns
• Bulk data exports
• Permission changes

​

Next Steps