Unload audit logs
For your information
Only the Account Owner, a user with the member role in the Account access scope, and a user with the audit_logs.admin.
You can unload audit logs in CSV or JSON format. The maximum number of rows in an unload is 1000.
You can export audit logs via the Control Panel or Audit Logs API; learn more in the Configure audit log export via API for integration with any SIEM system.
- In the control panel, on the top menu, click IAM.
- Go to the Audit Logs section.
- Click Unload logs.
- Select a report period. You can select a period within the last 90 days.
- Optional: to unload audit logs for specific projects, select the required projects. If no projects are selected, audit logs will be unloaded for all projects.
- Optional: to unload audit logs for specific services, select the required services. If no services are selected, audit logs will be unloaded for all services.
- Optional: to unload audit logs for specific events, select the required events. If no events are selected, audit logs will be unloaded for all events. If no events are selected, but services are selected, audit logs will be unloaded for all events of the selected services.
- Select a report format.
- Click Unload logs. Once the unload is generated, it will be downloaded automatically, and a notification will appear in the control panel.