Workspace audit logs

Learn how to access and use audit logs to track workspace activity in NocoDB.

This article covers workspace-level audit logs. For record-level logs (e.g., changes to individual records), refer to the record audit section.
Workspace audit logs are available on NocoDB Cloud (Scale plan and above) and licensed self-hosted deployments (Scale plan and above).

The Audit Logs feature in NocoDB provides a comprehensive, time-stamped record of user activity across your workspace. It enables workspace owners to monitor key actions, ensuring transparency, traceability, and accountability.

Accessing audit logs

Only workspace owners can access audit logs.

To view them:

  1. Click Admin in the workspace sidebar.
  2. Open the Audits sub-tab.

image


Audit log details

The audit list displays the following columns:

  • User: Name and email of the user who performed the action
  • Timestamp: Time of the event (e.g., “3h ago”)
  • Base: Name and ID of the base involved
  • Event: Type of action performed (e.g., View Field Update, Table Create)
  • IP Address: IP of the user who performed the action

Click a log entry to view the Audit Details panel, which includes the performer, IP address, OS and browser info, base, event type, and the full event payload in JSON format.

image


Logged events

CategoryEvents
DataInsert, Update, Delete, Bulk Insert/Update/Delete/All Delete/All Update, Cascade Update, Link, Unlink, Import, Export
User & AuthSign Up, Sign In, Sign In Failed, Sign Out, Invite, Email Verify, Profile Update, Password Change/Reset/Forgot
WorkspaceCreate, Update, Delete, Rename, Member Invite/Update/Remove, Team Invite/Update/Remove
BaseCreate, Update, Delete, Rename, Duplicate, Member Invite/Update/Resend, Team Invite/Update/Remove, Shared Base Create/Delete
TableCreate, Update, Delete, Rename, Duplicate
FieldCreate, Update, Rename, Delete, Duplicate, Form Field Update, View Field Create/Update
ViewCreate, Update, Delete, Rename, Duplicate, Filter Create/Update/Delete, Sort Create/Update/Delete
Shared ViewCreate, Update, Delete
WebhookCreate, Update, Delete, Filter Create/Update/Delete
SourceCreate, Update, Delete, Rename
IntegrationCreate, Update, Delete
DashboardCreate, Update, Delete, Duplicate, Shared Dashboard Create/Update/Delete
WidgetCreate, Update, Delete, Duplicate, Filter Create/Update/Delete
ScriptCreate, Update, Delete, Duplicate
WorkflowCreate, Update, Delete, Duplicate
Document (NocoDocs)Create, Update, Delete, Comment Create/Update/Delete
PermissionCreate, Update, Delete
RLSPolicy Create, Update, Delete
Record TemplateCreate, Update, Delete, Use
Date DependencyUpdate, Delete
API TokenCreate, Update, Delete
SnapshotCreate, Delete, Restore
TeamCreate, Update, Delete, Move, Member Add/Update/Remove
SCIM (Enterprise)User Provision, Update, Deactivate, Reactivate, Delete
Airtable ImportImport, Import Error
Org Users (Self-hosted)Invite, Resend Invite

Filtering logs

Use the filter bar at the top of the Audits sub-tab to narrow results. Each filter is searchable and defaults to showing everything.

User — limit the log to actions performed by a specific workspace member.

Filter audit logs by user

Base — limit the log to events within a single base.

Filter audit logs by base

Event — limit the log to a category of activity, such as Data, Field, View, Table, Base, or Source.

Filter audit logs by event

Range — limit the log to All Time, Last 24H, Past Week, Past Month, Past Year, or a Custom Date Range.

Filter audit logs by date range