Audit Logs
The audit log is the immutable record of who did what, when, and to which object inside GC Surge. It exists for governance, support, and post-incident traceability. This page covers what is logged, the record format, and how to search and export the log. Covers: What Gets Logged, Record Format, Immutability and Retention.
What Gets Logged
The audit log captures every significant platform action, allowing reviewers to reconstruct events across the platform's core categories:
- Accounts & Authentication: User sign-ins, system access, and management of users, roles, or tenant profiles (Tenant Users).
- Sites & Devices: Site creation, single or multiple device registrations, configuration adjustments, and bulk device imports (Device Bulk Import).
- Analytics & Reports: Event overview views, volume insights, alarm distributions, camera health checks (Analytics Events Noisy Cameras Viewed), and email report configurations.
- Billing & Subscriptions: Subscription updates, invoice generations, payment method adjustments, and financial transaction history reviews.
Record Format
Each audit entry includes the following structured columns:
- Date & Time: The exact timestamp when the action occurred (rendered in UTC).
- User: The email address of the account or operator who performed the action.
- Category: The high-level module associated with the action (e.g., Billing, Device, Analytics, Site).
- Sub Category: The specific functional sub-grouping (e.g., Package, Events, Transactions, Payment Methods).
- Action: The explicit function executed by the user (e.g., Transaction History Viewed, Devices Listed, Analytics Events Overview Viewed).
- Action Status: The execution outcome, labeled in green as Success upon completion.
- Source Entity: The target database object or record affected (e.g., Invoice, PaymentMethod).
- Log: A human-readable text summary confirming the exact event context.
Searching and Filtering the Audit Log
The audit log UI supports precise dropdown-based filtering to streamline incident investigations and routine governance checks. Users can narrow down the paginated results using three main filter menus:
- Category: Filter by major platform modules. Options include: Accounts, Analytics, Authentication, Billing, Device, Device Bulk Import, Reports, Site, Subscription, Tenant, Tenant Users.
- Sub Category: Context-dependent sub-filters that update based on your selected Category. For example, selecting Billing allows you to filter further by Invoicing, Payment Methods, or Transactions.
- Action: Granular event-type filters to isolate exact platform actions, such as Device Counters Viewed, Bulk Import Processing Started, Delete device, or NOVA99x Setting Updated.
Immutability and Retention
- Write-Once Security: Audit records are strictly immutable. They cannot be edited, overwritten, or deleted by any user, including system administrators.
- 1-Year Retention: All audit compliance data is safely retained and accessible for a minimum of 12 months.