> ## Documentation Index
> Fetch the complete documentation index at: https://private-7c7dfe99-fix-nav-issues.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Console audit log

> This page describes how you can review the cloud audit log

export const Image = ({img, alt, size}) => {
  return <Frame>
      <img src={img} alt={alt} />
    </Frame>;
};

Console activities are recorded in the audit log. If you have the Admin or Developer organization role, you can review the log and integrate it with your logging systems.

<h2 id="console-audit-log-ui">
  Access the console log via the user interface
</h2>

<Steps>
  <Step>
    <h2 id="select-org">
      Select organization
    </h2>

    In ClickHouse Cloud, navigate to your organization details.

    <Image img="https://mintcdn.com/private-7c7dfe99-fix-nav-issues/zVOJwOIIMQy6wc9n/images/cloud/security/activity_log1.png?fit=max&auto=format&n=zVOJwOIIMQy6wc9n&q=85&s=8df51fd4ad72f02c4faf69fdbdd743eb" size="md" alt="ClickHouse Cloud activity tab" border width="843" height="616" data-path="images/cloud/security/activity_log1.png" />

    <br />
  </Step>

  <Step>
    <h2 id="select-audit">
      Select audit
    </h2>

    Select the **Audit** tab on the left menu to see what changes have been made to your ClickHouse Cloud organization - including who made the change and when it occurred.

    The **Activity** page displays a table containing a list of events logged about your organization. By default, this list is sorted in a reverse-chronological order (most-recent event at the top). Change the order of the table by clicking on the columns headers. Each item of the table contains the following fields:

    * **Activity:** A text snippet describing the event
    * **User:** The user that initiated the event
    * **IP Address:** When applicable, this flied lists the IP Address of the user that initiated the event
    * **Time:** The timestamp of the event

    <Image img="https://mintcdn.com/private-7c7dfe99-fix-nav-issues/zVOJwOIIMQy6wc9n/images/cloud/security/activity_log2.png?fit=max&auto=format&n=zVOJwOIIMQy6wc9n&q=85&s=ade6ab3bab1f3c977f8c99494fcecbe6" size="md" alt="ClickHouse Cloud Activity Table" border width="3034" height="2440" data-path="images/cloud/security/activity_log2.png" />

    <br />
  </Step>

  <Step>
    <h2 id="use-search-bar">
      Use the search bar
    </h2>

    You can use the search bar provided to isolate events based on some criteria like for example service name or IP address. You can also export this information in a CSV format for distribution or analysis in an external tool.
  </Step>
</Steps>

<div class="eighty-percent">
  <Image img="https://mintcdn.com/private-7c7dfe99-fix-nav-issues/zVOJwOIIMQy6wc9n/images/cloud/security/activity_log3.png?fit=max&auto=format&n=zVOJwOIIMQy6wc9n&q=85&s=70d904b4485234b4c8abe5b2655b35d7" size="lg" alt="ClickHouse Cloud Activity CSV export" border width="776" height="94" data-path="images/cloud/security/activity_log3.png" />
</div>

<h2 id="console-audit-log-api">
  Access the console audit log via the API
</h2>

You can use the ClickHouse Cloud API `activity` endpoint to obtain an export
of audit events. Further details can be found in the [API reference](/api-reference/organization/get-list-of-available-organizations).

<h2 id="log-integrations">
  Log integrations
</h2>

You can use the API to integrate with a logging platform of their choice. The following have supported out-of-the-box connectors:

* [ClickHouse Cloud Audit add-on for Splunk](/integrations/connectors/data-integrations/integrations/splunk)
