Audit Logs

Audit Logs

Track who changed what and when

Flipswitch logs all changes to flags, rules, and configuration. See who did what, when, and what changed.

What's Logged

Every significant action creates an audit log entry. Logged entity types:

Entity TypeExample Actions
FlagCreated, updated, deleted
FlagRulesFlag enabled/disabled, targeting rules changed, rollout updated
EnvironmentCreated, updated, deleted
SegmentCreated, updated, deleted
ApiKeyCreated (auto-created with environment), rotated, rotation aborted, rotation completed
ProjectCreated, updated, deleted
OrganizationUpdated

Each entry captures before and after values, so you can see exactly what changed.

Viewing Audit Logs

Navigate to Project > Audit Log to see all changes for a project.

Each entry shows:

  • Timestamp - When the change happened
  • User - Who made the change
  • Action - Create, Update, or Delete
  • Entity type - Flag, FlagRules, Environment, Segment, ApiKey, Project, or Organization
  • Before/After values - The state before and after the change

Filtering

Filter audit logs by:

  • Date range - Last 24 hours, 7 days, 30 days, or custom
  • User - See all changes by a specific user
  • Flag - See all changes to a specific flag
  • Action type - Only show flag toggles, rule changes, etc.

Entry Details

Click on an audit log entry to see full details:

{
  "id": 123,
  "timestamp": "2024-01-15T10:30:42Z",
  "user": {
    "firstName": "Alice",
    "lastName": "Smith",
    "email": "alice@company.com"
  },
  "action": "Update",
  "entityType": "FlagRules",
  "entityId": 789,
  "beforeValue": "{\"enabled\": false}",
  "afterValue": "{\"enabled\": true}"
}

The beforeValue and afterValue fields contain JSON-encoded snapshots showing the state before and after the change.

Use Cases

Debugging. Something changed and broke production? Check the audit log to see what was modified and by whom.

Compliance. Need to demonstrate who has access to production flag changes? Export audit logs for compliance reports.

Accountability. Know who enabled that flag at 2am on Saturday.

Retention

Audit logs are retained for:

  • Standard plans: 90 days
  • Enterprise plans: 1 year+

Contact support if you need longer retention or log exports for compliance requirements.

Best Practices

Check before major changes. Before enabling a flag in production, review recent changes to understand current state.

Set up alerts. Use the API to monitor for unexpected changes and alert your team.

Regular reviews. Periodically review audit logs to ensure access patterns are appropriate.

On this page