Audit logs

Learn how to query an account's audit logs using the platform API

🚧 Only available in API versions 2025-07 and later

The audit logs in monday.com provide a detailed record of an account’s security-related activities, including login attempts, board data exports, and more. Access to these logs is restricted to account admins on the Enterprise plan.

Account admins with access can also retrieve audit log data via the platform API. Users without the correct permissions will receive an error when querying the audit_logs object.

Queries

  • Returns an object containing metadata about audit logs
  • Can only query audit_logs directly at the root
query {
  audit_logs(user_id: 1234567890, events: ["login", "logout"], limit: 100) {
    logs {
      timestamp
      event
      user_agent
      user {
        id
        name
        email
      }
      ip_address
    }
    pagination {
      has_more_pages
      next_page_number
    }
  }
}

Arguments

You can use the following argument(s) to reduce the number of results returned in your audit_logs query.

ArgumentDescription
end_time ISO8601DateTimeFilters for logs up to this date and time.
events [String!]The specific event(s) to return logs for. You can view a list of supported events by querying the audit_event_catalogue object.
ip_address StringThe specific IP address to return logs for.
limit IntThe number of logs per page
page IntThe page number to get. Starts at 1.
start_time ISO8601DateTimeFilters for logs from this date and time.
user_id IDThe specified user to return logs for. This ID can be retrieved from the users object.

Fields

You can use the following field(s) to specify what information your audit_logs query will return. Some fields will have their own fields.

FieldDescriptionSupported fields
logs [AuditLogEntry!]A paginated list of audit log entries.account_id String
activity_metadata JSON
client_name String
client_version String
device_name String
device_type String
event String
ip_address String
os_name String
os_version String
slug String
timestamp String
user User
user_agent String
pagination PaginationDetails about the object's pagination. has_more_pages Boolean
next_page_number Int
page Int
page_size Int