Audit log

The audit log lists everything that happened in Monopam: sign-ins, connections, reveals, policy changes, approvals, database statements, Kubernetes API calls and the actions of machines and AI assistants.

Applies to

Who can do this

Monopam v2026.10

Users with permission to see audits.

Search the audit log

  1. Open Audits. The newest events are on top.

  2. Type in the search box (1), for example a resource or vault item name. Use the column filters such as Event (2), and the Time range (3), to narrow the list.

  3. The Description shows details such as the reason given when connecting (4). Click Details (6) for the full record.

    Audit list filtered to web-01

    Figure 1. Audit events for one resource.

A single session leaves a trail: Connected with the reason, Disconnected with the duration, and Session Exited. Revealing or copying a secret leaves Vault Revealed / Copied. Schedule (5) subscribes you to a recurring audit report, and List shows your subscriptions.

Event details

Audit Details with actor, target and event

Figure 2. The details of a Connected event.

Details shows the Actor (who, from which IP address and browser), the Target (the resource, the gateway and the account used, each linked) and the Event.

  • Recordings and session notes

  • Dashboard and live sessions