Skip to main content

Audit Trails


With Audit Trail in Harness, you can view and track changes to your Harness resources within your Harness account.

The audit data retention period is 2 years. Harness reserves the right to delete audit data after 2 years. You can request a longer retention period by contacting Harness. For example, if you require audit data for legal discoveries, etc, contact Harness and we can help.

IDP Events in Audit Trail

To access the Audit Trail, in your Harness project, navigate to Account Settings > Audit Trail. Follow the steps mentioned in platform docs for more details.

The Account Audit Trail includes the following IDP events:

ResourcesAudit Trail Events
App ConfigsCreate, Update
Environment VariablesCreate, Update
Host URL / IP Address DetailsCreate, Update
ScorecardsCreate, Update, Delete
ChecksCreate, Update, Delete
Access ControlUpdate
Catalog ConnectorCreate, Update
Oauth ConfigCreate, Update
URL Allow ListCreate, Update
PluginEnable, Disable
Software ComponentsCreate, Delete

The audit trails on Plugins is dependant on other services latest version, which are yet to be released, so it might take a week or two to make this available for our users.

In addition to above any changes to the catalog entities due to system refresh calls are being captured and tracked as audit events.

Each event in the Account Audit Trail list provides the following details:

  1. Action: Describes the specific activity, such as logging in or deleting.
  2. Resource name and Type: Identifies the resource type and its name where the event occurred. For example, monitored service, agent, or user.
  3. Organization and Project: Name of the organization and the project in which the event occurred.

When you click on a resource name, you will be directed to the corresponding event page. For instance, clicking on an Check resource will take you to the Checks listing page, while clicking on a Catalog Connector resource will redirect you to the Connectors page.

To see more information about a particular event, select the messaging icon next to it. The Event Summary page appears, displaying the following information:

  1. Date and time when the event occurred.
  2. Username associated with the event.
  3. Details of the activity. For example, an update.
  4. Type and name of the resource.

You can also see a snapshot of changes in YAML format by expanding YAML Difference.