Overview — what it does
Administration ▸ Audit is the viewer for the append-only audit log (infr_audit_log) that records every destructive/security action. Coverage includes block/restore/rule changes, asset CRUD (instances, hardware, storage, inventory), and admin changes (users, API keys, reputation, adapter keys).
Layout · how to use
- The actor is joined from InfraGuard's
infr_user(login + name), not the legacyusers. - Filters (query / action / target_type / user / date) + facets + KPIs. Expand a row to see the
metaJSON (before/after values).
Data sources
infr_audit_log(user_id · action · target_type · target_id · meta · ip · created_at) — written byInfrAuditLog::record()
Access
level≥10 (admin), read-only.
Related
