Retrieves the audit log events for a specific board, providing a detailed history of actions performed.

View-Specific Information

SELECT

The connector uses the Monday API to process some of the filters. The connector processes other filters client-side within the connector. For example, the following queries are processed server side.

• Timestamp supports the '=, >, >=, <, <=' operators.
• UserId supports the '=' operator.
• IpAddress supports the '=' operator.
• Event supports the '=, IN' operators.

All available values for the event filter are listed and explained below:

• export-board-activity-log: Logs board Activity Log export by users.
• export-account-data: Logs account data export by admins.
• download-attachment: Logs file downloads by users.
• export-board: Logs board exports by users.
• export-dashboard: Logs dashboard exports by users.
• export-content-directory: Logs content directory exports by admins.
• login: Logs users' logins to the system.
• forgot-password: Logs users' "Forgot password?" clicks from the login page.
• logout: Logs users' logouts from the system.
• failed-login: Logs users' failed login attempts.
• user-reactivated: Logs users' reactivation by admins.
• user-deactivated: Logs users' deactivation by admins.
• user-details-deleted: Logs users' deletion by admins.
• user-invite: Logs users' invite from within the system.
• cancel-user-invite: Logs cancelled users' invite from within the system.
• user-role-change: Logs users' type change by admins.
• delete-board: Logs board deletion by users.
• delete-workspace: Logs workspace deletion by users.
• create-team: Logs team creation by users.
• delete-team: Logs team deletion by users.
• security-settings-change: Logs security settings changes by admins.
• board-broadcast-enabled: Logs board broadcast enablement by users.
• add-user-to-team: Logs users' addition to teams by users.
• remove-user-from-team: Logs users' removal from teams by users.
• add-user-to-product: Logs users' addition to Work OS Products.
• remove-user-from-product: Logs users' removal from Work OS Products.
• add-team-to-product: Logs teams' addition to Work OS Products.
• remove-team-from-product: Logs teams' removal from Work OS Products.
• api-complexity-breach-over-time: Logs API calls reaching the account limit.

The following queries are executed server-side:

SELECT * FROM AuditLogs WHERE Timestamp >= '2022-01-01T07:30:00Z' AND Timestamp <= '2022-01-02T07:30:00Z'
SELECT * FROM AuditLogs WHERE Event IN ('export-board-activity-log', 'delete-board')
SELECT * FROM AuditLogs WHERE Timestamp >= '2022-01-01T07:30:00Z' AND Timestamp <= '2022-01-02T07:30:00Z' AND Event = 'delete-board' AND UserId = 27 AND IpAddress = '123.123'

Columns

Name	Type	References	Description
Timestamp	Datetime		The date and time when the event occurred, recorded in a standard datetime format.
AccountId	String		The unique identifier of the account that initiated the event, used to track account-level activity.
UserId	Int		The unique identifier of the user who initiated the event, enabling user-specific auditing.
Event	String		The specific action or operation that was performed, such as 'Login', 'Update', or 'Delete'. The allowed values are export-board-activity-log, export-account-data, download-attachment, export-board, export-dashboard, export-content-directory, login, forgot-password, logout, failed-login, user-reactivated, user-deactivated, user-details-deleted, user-invite, cancel-user-invite, user-role-change, delete-board, delete-workspace, create-workspace, workspace-change-name, create-team, delete-team, approve-request-to-join-team, decline-request-to-join-team, security-settings-change, board-broadcast-enabled, add-user-to-team, remove-user-from-team, add-user-to-product, remove-user-from-product, add-team-to-product, remove-team-from-product, api-complexity-breach-over-time, account-role-permission-changed, workspace-role-permission-changed.
Slug	String		A human-readable identifier for the event, often used for categorization or reference.
IpAddress	String		The IP address from which the event was initiated, useful for tracking geographic location or security purposes.
UserAgent	String		The user agent string of the client initiating the event, providing details about the browser or application used.
ClientName	String		The name of the software client used to initiate the event, such as 'Chrome', 'Postman', or 'CustomApp'.
ClientVersion	String		The version number of the software client, used to identify the specific release or build of the application.
OsName	String		The name of the operating system on the client device, such as 'Windows', 'macOS', or 'Linux'.
OsVersion	String		The version number of the operating system running on the client device, such as 'Windows 10' or 'Ubuntu 22.04'.
DeviceName	String		The name of the device from which the event originated, such as 'John's Laptop' or 'Workstation01'.
DeviceType	String		The type of device used, such as 'Desktop', 'Laptop', 'Tablet', or 'Smartphone'.
ActivityMetadata	String		Additional metadata or contextual information related to the event, providing further details about the activity.