Activity log events

The user actions that CosmicAC records on the Activities settings page, and the details that each entry records.

This page lists the user actions that CosmicAC records on the Settings > Activities page, and the details that each entry records. CosmicAC records sign-ins, job actions, account changes, API key actions, and team changes.

Team leads see the entries for their active team. Platform administrators see the entries for every team. To find out which roles can open the page, see Settings pages and access.

CosmicAC records an entry for a failed action as well as for a successful one. The Outcome column shows whether the action succeeded.

In the message tables on this page, uppercase words such as NAME and EMAIL are placeholders for values that CosmicAC fills in.

Entry columns

Column	Description
When	The time of the action.
Who	The name and email address of the account that the entry belongs to. This account is the user who performed the action, except for the entries in Entries recorded for the affected account.
Team	The user's active team at the time of the action. Only platform administrators see this column.
Type	The activity type, which is Auth, Job, User, API key, or Team. To show the entries of one type, use the type filter.
Message	A description of the action. The following sections list each message.
Outcome	Success or Failure.
Detail	More information for some entries, such as the IP address of a sign-in or the number of jobs that a user stopped.
IP	The IP address that sent the request.

Auth entries

Message	Recorded when
`User logged in`	A user signs in with an email address and password.
`User logged in via Google OAuth`	A user signs in with Google.
`User signed up via Google OAuth`	A user signs in with Google for the first time, which creates the account.
`Google OAuth login rejected: REASON`	CosmicAC rejects a sign-in with Google.
`User logged in via Passkey`	A user signs in with a passkey.
`Login failed`	Someone enters the wrong password for an existing account. The entry records the email address of the account and the IP address of the attempt. A failed sign-in with an email address that doesn't belong to an account creates no entry.
`CLI login approved`	A user approves a CLI sign-in in the browser. The entry records the team that the CLI uses.

Job entries

Each job entry records the job ID. Each replica entry also records the replica ID.

Message	Recorded when
`Job created.`	A user creates a job.
`Job(s) started by user.`	A user starts one or more jobs. The Detail column shows the number of jobs.
`Job(s) manually stopped by user.`	A user stops one or more jobs. The Detail column shows the number of jobs.
`Job restarted.`	A user restarts a job.
`Job deleted.`	A user deletes a job.
`Replica restarted.`	A user restarts a replica of a job.
`Replica deleted.`	A user deletes a replica of a job.

When a job action fails, the message reports the failure. For example, a failed deletion records Job delete failed., and a failed creation records Job creation failed.

User entries

Message	Recorded when
`Team member role changed.`	A team lead or platform administrator changes the role of a member. The entry records the previous role and the new role.
`Team member suspended.`	A team lead or platform administrator suspends a member.
`Team member reactivated.`	A team lead or platform administrator reactivates a suspended member.
`Account deactivated`	An operator deactivates an account for the whole deployment.
`Account reactivated`	An operator reactivates a deactivated account.
`User profile updated successfully.`	A user updates their profile. The Detail column lists the fields that changed.
`User password changed successfully.`	A user changes their password.

When one change sets both the role and the status of a member, CosmicAC records a single entry with the status message. That entry also records the previous role and the new role.

API key entries

Message	Recorded when
`API key "NAME" created`	A user creates an API key.
`API key viewed`	A user opens the details of an API key.
`API keys listed`	A user opens the list of API keys.
`API key updated to "NAME"`	A user renames an API key.
`API key revoked`	A user revokes an API key.

Team entries

Message	Recorded when
`Team "NAME" created`	A platform administrator creates a team.
`Team updated`	A team lead or platform administrator edits a team.
`Team archived`	A team lead or platform administrator archives a team.
`Invited EMAIL as ROLE`	A team lead or platform administrator invites someone to a team.
`Joined team "NAME" as ROLE`	A user accepts an invitation. The Detail column shows the IP address.
`Added EMAIL as ROLE`	A platform administrator adds an existing user to a team.
`Team member removed`	A team lead or platform administrator removes a member from a team.
`Reserved COUNT node(s) for team`	A platform administrator reserves nodes for a team.

Entries recorded for the affected account

For the following entries, the Who column shows the affected account instead of the person who performed the action.

Login failed
Account deactivated
Account reactivated