Skip to main content
Calico Cloud documentation

Audit logs

Big picture​

Calico Cloud audit logs provide security teams and auditors historical data of all changes to resources over time.

Concepts​

Resources used in audit logs​

Calico Cloud audit logs are enabled by default for the following resources:

  • Global networkpolicies
  • Network policies
  • Staged global networkpolicies
  • Staged networkpolicies
  • Staged Kubernetes network policies
  • Global network sets
  • Network sets
  • Tiers
  • Host endpoints

Audit logs in the web console​

Calico Cloud audit logs are displayed in the Timeline dashboard in the web console. You can filter logs, and export data in .json or .yaml formats.

audit-logs

Required next step​

Kubernetes resources are also used in audit-related features, but they are not enabled by default. You must enable Kubernetes resources through the Kubernetes API server. If you miss this step, audit trails will not provide a complete view to your security team.