Activity Logging | NOC.org Support

NOC maintains a detailed audit trail of actions performed on your account. Activity logging helps you track configuration changes, investigate unauthorized access, and maintain compliance with security policies.

What Gets Logged

The following events are recorded in your activity log:

Authentication Events

• Successful and failed login attempts (including IP address and user agent).
• Password changes and resets.
• Two-factor authentication enable/disable events.
• API key creation, usage, and revocation.
• Session creation and logout events.

Configuration Changes

• Site additions and deletions.
• CDN setting changes (origin IP, cache rules, SSL configuration).
• WAF rule modifications (enabling/disabling rules, IP blocks).
• DNS record creation, modification, and deletion.
• Monitoring endpoint additions and changes.
• Alert channel configuration.

Administrative Actions

• Team member invitations and role changes.
• Billing updates and plan changes.
• Cache purge operations.
• Account settings modifications.

How to View Activity Logs

1. Log in to the NOC Dashboard.
2. Click your account name in the top-right corner and select Account Settings.
3. Click the Activity Log tab.
4. You will see a chronological list of events with the following details:
   • Timestamp — when the action occurred (displayed in your local timezone).
   • User — who performed the action (email address or "API" for API-triggered events).
   • Action — what was done (e.g., "Updated WAF rule", "Added DNS record").
   • Resource — which site, domain, or setting was affected.
   • IP Address — the source IP of the request.

Filtering and Searching Logs

Use the filter controls at the top of the activity log to narrow down results:

• Date Range — select a start and end date to view activity within a specific period.
• User — filter by a specific team member or "API" for API-initiated actions.
• Action Type — filter by category (e.g., Authentication, DNS, CDN, WAF, Monitoring).
• Resource — filter by a specific site or domain.

Exporting Logs

You can export activity logs for external analysis or compliance records:

1. Apply any desired filters.
2. Click the Export button in the top-right corner of the log table.
3. Choose CSV or JSON format.
4. The download will include all events matching your current filter criteria.

Log Retention

• Standard plans: Activity logs are retained for 90 days.
• Business plans: Activity logs are retained for 1 year.
• Enterprise plans: Custom retention periods are available. Contact your account manager for details.

Logs older than the retention period are permanently deleted and cannot be recovered. Export logs regularly if you need long-term records.

Security Recommendations

• Review your activity log at least weekly to catch any unauthorized changes.
• Set up Slack integration to receive real-time notifications for critical events.
• If you see unrecognized login attempts, change your password immediately and review your 2FA settings.