Audit logs

Audit logs are available on Postman Enterprise plans.

Audit logs display events related to your team, users, and billing. Team Admins can review audit logs to get information about:

• When users were added to, removed from, or invited to your team
• Which user performed a specific action and when they did so

Postman offers audit logs for 180 days to users on Enterprise plans.

Audit logs are visible to Team Admins and Super Admins on Postman Enterprise teams.

View audit logs in the dashboard

To view audit logs, select Team > Audit Logs in the Postman header.

Audit logs offer information about actions taken by members of your team. Each event includes the user, the user's email address, the event name and a description of the event, the user's IP address, and the date and time of the action, including the user's timezone.

You can use filters to view actions by date range, event type, and user.

Export audit logs from the dashboard

You can export audit logs as CSV files. By default, Postman will export all data in your audit logs from the last seven days. To start the export process, select Export Audit Logs.

To export specific data, filter your results by selecting a time range, event, and user. Then select Export Audit Logs and Postman will generate the export using those parameters.

You will receive an email with a link to the exported audit logs. The link in the email is active for one hour.

Access audit logs with the Postman API

You can also access audit logs with the Postman API, allowing you to integrate Postman's audit logs with your security information and event management (SIEM) tools.

Each audit log event has the following attributes:

Name	Description
id	A numeric value representing the unique identifier of an audit event.
ip	The IP address of the actor who performed the action.
userAgent	A string with the user-agent of the actor.
action	A string with an action or event performed by the actor.
timestamp	The date and time when the action or event was performed. The time is represented using the ISO 8601 date and time format.
message	A description of the audit event.
data	An object that holds the actor, user, team, and variables objects.
actor	An object with information about the actor who performed this action.
user	An object with information about the user who performed this action.
team	An object with information about the user's or actor's team.
nextCursor	A string that represents the cursor of the next page.

To get started, go to the Postman API and open the Audit Logs folder to view the GET request and example responses.

You must generate a Postman API key to access the Postman API.

Logged events

Postman logs events related to your team, users, and billing. You can find descriptions of each event in the Audit Logs dashboard. Some examples are listed here.

Team event examples

Event	Description
Updated Team Name	User name changed your team's name to team name.
Added Team Member	User name joined the team.
SCIM provisioning enabled	Postman Internal System enabled SCIM provisioning.

User event examples

Event	Description
Added Team Member	User name joined the team.
Team Member Removed	User name removed user User name (inactive) (id: id number, email: email address ) from the team.
Sent Team Invite	User name invited email address to the team.

Billing event examples

Event	Description
Upgraded to Paid Plan	User name upgraded your team's plan to Enterprise.
Updated Billing Operation Allow Overages	User name enabled the overages for Mock Servers
Increased Team Size	User name increased team size by 1.