Skip to main content
Audit logs record who did what in your Arize AX account: login attempts, operations by signed-in users, and data exports. They give you the record you need for security monitoring, compliance reviews, and investigating suspicious activity, such as finding out who exported a dataset or whose login failed repeatedly. You query them through the GraphQL API under account. Querying requires the Account Admin role.

Log types

operationName is supplied by the client. The Arize AX UI sets it consistently, but other clients can set any value, so do not rely on it alone for security decisions. Export logs are written only when an export returns data. Exports of demo models are not logged.

Query

All three logs take the same arguments. first sets the number of records per page, startTime and endTime are ISO 8601 timestamps that default to 30 days ago and now, and after is a pagination cursor.
Each response includes pageInfo.hasNextPage and pageInfo.endCursor. Pass endCursor as after to fetch the next page, and stop when hasNextPage is false.