> For clean Markdown of any page, append .md to the page URL. > For a complete documentation index, see https://help.sigmacomputing.com/llms.txt. > For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://help.sigmacomputing.com/_mcp/server. # Access and explore audit logs Sigma provides audit logs with a Sigma-managed connection that provides data related to user-initiated events that occur within your Sigma organization. Access the audit log to troubleshoot issues or monitor user activity for security and compliance purposes. You can also explore the audit log in a workbook to analyze how users across your organization use Sigma. This is a premium feature. To enable it for your Sigma organization, contact your Sigma Account Executive. This document explains how to access the *Sigma Audit Logs* connection and open the data in a workbook. For more information about audit logging with Sigma, see the following: * [Enable or disable audit logging](/docs/enable-audit-logging) * [Audit log events and metadata](/docs/audit-log-events-and-metadata) * [Create an audit logs storage integration](/docs/manage-an-audit-logs-storage-integration) * [Export audit log data to cloud storage](/docs/export-audit-log-data-to-cloud-storage) [Audit log events](/docs/audit-log-events-and-metadata) are not intended to be compared with usage data. Audit logs are designed for security, compliance, and governance use cases and provide a detailed, immutable record of who did what and when in your Sigma organization. [Usage data](/docs/usage-overview) contains aggregate data about workbook queries performed in your Sigma organization and is not intended for auditing purposes. ## User requirements By default, the *Sigma Audit Logs* connection is accessible to **Admin** users only. If you're assigned a different account type, you or your team must be granted access to the **Sigma Audit Logs** connection. See [Manage access to data and connections](/docs/manage-data-permissions) for instructions. ## Access and explore the audit log 1. Go to your **Home** page. 2. In the navigation menu, select the *Sigma Audit Logs* connection. If your organization has more than three connections, Sigma consolidates them in a **Connections** page. In the navigation menu, first click **Connections** to open the page, then select the *Sigma Audit Logs* connection. ![Connections list showing Ask Sigma Usage, a Corporate Database connection, a Starburst Galaxy connection, Redshift, and the Sigma Audit Logs connection with a Sigma crane logo.](https://files.buildwithfern.com/sigma.docs.buildwithfern.com/412c101c6fc38eddffaed06ab96e94a6b141e2a9185fa4704c971ac798b58a19/assets/docs-images/65bb695432438bc39abbc4f812de8e8e850db85623b12b56fd8fb2c41005ca28-connections.png) 3. In the connection browser, select the *AUDIT\_LOGS* table or the *SIGMA\_SHARED* schema and tables to view all audit log entries. For a complete list of tables and schemas, see [Audit log events and metadata](/docs/audit-log-events-and-metadata). Events can take can take up to 2 hours to appear in the audit log. The following screenshot obscures sensitive data available in the audit logs. ![Sigma Audit Logs connection with the Audit Logs table selected and showing example data for organization ID, Sigma URL, Request time and ID, Schema version, and more.](https://files.buildwithfern.com/sigma.docs.buildwithfern.com/54c0c264d394c6115cc32c26be8f8869fc0e890771aafdbbe551ec04ac74e479/assets/docs-images/7ebe2bd8272e3ab5671ed338db63e780db18e6ba6620b3c686bcf709804fbbc7-audit-logs.png) 4. To open the audit log data in a workbook, click **Explore**. A new workbook opens with an *AUDIT\_LOGS* table containing all entries and metadata. You can now explore, analyze, and share audit log data as needed. ## Service level indicators * **Freshness**: Fresh event data is available within an hour 99.9% of the time. * **Delivery**: New audit log events are available at least once 99.9% of the time. ## Data availability The audit log begins logging event entries when the **Sigma Audit Log** connection is enabled for your organization. Entries are then stored for 30 days. Data from before the date that the **Sigma Audit Log** connection is enabled is not available. If you want to store more than 30 days of audit log data, Sigma recommends saving the **AUDIT\_LOGS** table as a workbook and scheduling exports to a cloud-based storage service. When you do, select the checkbox to **Prefix file name with the current date and time** to ensure each point-in-time record is saved as a new file. For more details about exporting your audit log data, see [Export audit log data to cloud storage](/docs/export-audit-log-data-to-cloud-storage) or the section about Exporting Audit Log Data in the Audit Logging QuickStart. ## Related resources * [Audit log events and metadata](/docs/audit-log-events-and-metadata)