App Event and Audit Logs
App Events and Audit logs can be streamed from Airkit to AWS S3 buckets. These events and logs help provide insight into your Airkit apps and logs within your Airkit Organization.


Streaming App Events or Audit Logs to S3
This guides walks through how to set up your S3 bucket to receive App Event logs from Airkit. The following steps are the same for System Audit Logs.
- Create your S3 Bucket in AWS. When creating the bucket, select
ACLs disabled
.


- After creating your S3 Bucket, provide Airkit permission to your S3 bucket via the following AWS IAM policy, assuming
{{BUCKET-NAME}}
is the name of the S3 bucket you created:
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AirkitWritePermission",
"Effect": "Allow",
"Principal": {
"AWS": "arn:aws:iam::113997530994:root"
},
"Action": [
"s3:PutObject"
],
"Resource": [
"arn:aws:s3:::{{BUCKET-NAME}}/*"
]
}
]
}
- In Airkit Console,visit Settings > Logs and App Notifiers. The UI will look as follows:


Under App Event Logs > S3 bucket, click edit to set an new S3 bucket, and then insert the S3 bucket name you created previously into the pop-up window that appears:


Click Verify. Airkit will write a test file named airkit-verify-test-{{timestamp}}
- Once configured, every few minutes, Airkit will send relevant Events in a new file to the S3 bucket.
Audit Log Events
Events |
---|
portal_page_view |
deployment_changed |
new_adapter |
deleted_api_key |
deleted_encryption_key |
modified_notifier |
new_saml |
invite_sent |
new_encryption_key |
user_support_scope_assigned |
deleted_resource |
user_role_removed |
deleted_notifier |
clone_datastore |
invalid_login |
saml_assertion_received |
user_created |
user_logout |
deleted_domain_certificate |
new_embed |
user_root_scope_assigned |
deleted_adapter |
modified_datastore |
deleted_datastore |
user_login |
app_deployed |
new_resource |
new_api_key |
modified_adapter |
modified_api_key |
data_migration |
org_created |
new_domain_certificate |
modified_domain_certificate |
new_notifier |
backup_datastore |
new_datastore |
password_change |
modified_embed |
user_locked |
deleted_embed |
app_undeployed |
app_created |
user_role_added |
request_state |
Updated 15 days ago