> ## Documentation Index
> Fetch the complete documentation index at: https://private-7c7dfe99-vortex-format.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Console audit log

> This page describes how you can review the cloud audit log

export const Image = ({img, alt, size = "lg", background}) => {
  const normalizedSize = ["sm", "md", "lg"].includes(size) ? size : "lg";
  const backgroundColor = background === "white" ? "white" : background === "black" ? "rgb(31 31 28)" : undefined;
  return <div className={`ch-image-${normalizedSize}`}>
      <Frame>
        <img src={img} alt={alt} style={{
    backgroundColor
  }} />
      </Frame>
    </div>;
};

Console activities are recorded in the audit log. Users with access can review the log and integrate it with their logging systems. Access to the audit log is controlled by the **View audit logs** permission (`control-plane:organization:view-activities`):

* Users with the Admin organization role have access by default.
* Other console users need organization access plus a [custom role](/products/cloud/guides/security/cloud-access-management/manage-custom-roles) that includes the **View audit logs** permission.
* API keys need a role that includes the same permission.

For a description of all permissions, see [Console roles and permissions](/products/cloud/reference/security/console-roles).

<h2 id="console-audit-log-ui">
  Access the console log via the user interface
</h2>

<Steps>
  <Step title="Select organization" id="select-org">
    In ClickHouse Cloud, navigate to your organization details.

    <Image img="https://mintcdn.com/private-7c7dfe99-vortex-format/0Bwb4z8TuZiplPdq/images/cloud/security/activity_log1.webp?fit=max&auto=format&n=0Bwb4z8TuZiplPdq&q=85&s=666ddfacc40aa3ac69b2e6963c3e7998" size="md" alt="ClickHouse Cloud activity tab" border width="843" height="616" data-path="images/cloud/security/activity_log1.webp" />

    <br />
  </Step>

  <Step title="Select audit" id="select-audit">
    Select the **Audit** tab on the left menu to see what changes have been made to your ClickHouse Cloud organization - including who made the change and when it occurred.

    The **Activity** page displays a table containing a list of events logged about your organization. By default, this list is sorted in a reverse-chronological order (most-recent event at the top). Change the order of the table by clicking on the columns headers. Each item of the table contains the following fields:

    * **Activity:** A text snippet describing the event
    * **User:** The user that initiated the event
    * **IP Address:** When applicable, this flied lists the IP Address of the user that initiated the event
    * **Time:** The timestamp of the event

    <Image img="https://mintcdn.com/private-7c7dfe99-vortex-format/0Bwb4z8TuZiplPdq/images/cloud/security/activity_log2.webp?fit=max&auto=format&n=0Bwb4z8TuZiplPdq&q=85&s=9ec4ff7c9479a1d52487f0ec19b734d5" size="md" alt="ClickHouse Cloud Activity Table" border width="3034" height="2440" data-path="images/cloud/security/activity_log2.webp" />

    <br />
  </Step>

  <Step title="Use the search bar" id="use-search-bar">
    You can use the search bar provided to isolate events based on some criteria like for example service name or IP address. You can also export this information in a CSV format for distribution or analysis in an external tool.
  </Step>
</Steps>

<div class="eighty-percent">
  <Image img="https://mintcdn.com/private-7c7dfe99-vortex-format/0Bwb4z8TuZiplPdq/images/cloud/security/activity_log3.webp?fit=max&auto=format&n=0Bwb4z8TuZiplPdq&q=85&s=0fa7cbda26fe656b974884d5492467ec" size="lg" alt="ClickHouse Cloud Activity CSV export" border width="776" height="94" data-path="images/cloud/security/activity_log3.webp" />
</div>

<h2 id="console-audit-log-api">
  Access the console audit log via the API
</h2>

You can use the ClickHouse Cloud API `activity` endpoint to obtain an export
of audit events. Further details can be found in the [API reference](/products/cloud/api-reference/organization/get-list-of-available-organizations).

<h2 id="log-integrations">
  Log integrations
</h2>

You can use the API to integrate with a logging platform of their choice. The following have supported out-of-the-box connectors:

* [ClickHouse Cloud Audit add-on for Splunk](/integrations/connectors/data-integrations/integrations/splunk)