What are audit logs?
참고
Webhooks might be a good alternative to the audit log or API polling for certain use cases. Webhooks are a way for GitHub to notify your server when specific events occur for a repository, organization, or enterprise. Compared to the API or searching the audit log, webhooks can be more efficient if you just want to learn and possibly log when certain events occur on your enterprise, organization, or repository. See 웹후크 설명서.
The audit log lists events triggered by activities that affect your enterprise within the last 180 days. The audit log retains Git events for seven days.
By default, only events from the past three months are displayed. To view older events, you must specify a date range with the created parameter. See 검색 구문 이해.
The name for each audit log entry is composed of a category of events, followed by an operation type. For example, the repo.create entry refers to the create operation on the repo category.
Each audit log entry shows applicable information about an event, such as:
- The enterprise or organization an action was performed in
- The user (actor) who performed the action
- The user affected by the action
- Which repository an action was performed in
- The action that was performed
- Which country the action took place in
- The date and time the action occurred
- The SAML SSO and SCIM identity of the user (actor) who performed the action
- For actions outside of the web UI, how the user (actor) authenticated
- Optionally, the source IP address for the user (actor) who performed the action
In addition to viewing your audit log, you can monitor activity in your enterprise in other ways, such as managing global webhooks. For more information, see 엔터프라이즈에서 사용자 작업 탐색. You can also use the audit log, and other tools, to monitor the actions taken in response to security alerts. For more information, see 보안 경고 감사.
How to use audit logs
As an enterprise owner, you can interact with the audit log data for your enterprise in several ways:
- You can view the audit log for your enterprise. For more information, see 엔터프라이즈의 감사 로그에 액세스.
- You can search the audit log for specific events and export audit log data. For more information, see 엔터프라이즈에 대한 감사 로그 검색 and 엔터프라이즈에 대한 감사 로그 작업 내보내기.
- You can identify all events that were performed by a specific access token. For more information, see 액세스 토큰에 의해 수행되는 감사 로그 이벤트 식별.
- You can display the IP address associated with events in the audit log. For more information, see 엔터프라이즈의 감사 로그에 IP 주소 표시.
- You can stream audit and Git events data from GitHub to an external data management system. For more information, see 엔터프라이즈에 대한 감사 로그 스트리밍.
- You can use the Audit log API to view actions performed in your enterprise. For more information, see 엔터프라이즈의 감사 로그 API 사용.
For a full list of audit log actions that may appear in your enterprise audit log, see 귀하의 엔터프라이즈를 위한 감사 로그 이벤트.