Activity Log
Monitor and audit all security and administrative activities across your organization
Activity Log
The Activity Log provides IPMHub administrators with a comprehensive, real-time record of all activities that occur within the application. Every administrative action, security event, and system operation is captured and surfaced here, giving you a clear picture of who did what, when, and how. Use the Activity Log to support security auditing, investigate anomalies, and maintain administrative oversight across your organization.
Accessing the Activity Log
The Activity Log can be reached in two ways:
From the organization Dashboard:
Select the activity widget or activity section on your organization Dashboard to navigate directly to the Activity Log.
Via Settings:
- Navigate to your organization in IPMHub.
- Click Settings in the left-hand navigation menu.
- Select Activity from the Settings menu.
Resource-Level Activity Logs
In addition to the organization-wide Activity page, activity is now available directly on resource detail pages:
- Package version detail: Activity for the selected package version
- Tracked Workspace detail: Activity for that workspace
- Group detail: Activity for that group
- Client Secret detail:
- Activity: actions performed on the client secret
- Operations: actions performed by the client secret
This helps you investigate events in context without switching back to organization-wide filters.
Overview
The Activity Log page presents a unified view of all recorded activities for your organization. The page is composed of a free-text search bar at the top, a row of filter controls below it, and an activity table that displays paginated results. All filters and the search bar work in combination — narrowing the table in real time as you adjust them.
Click the image to enlarge
Search and Filters
IPMHub provides a search bar and four filters that can be used independently or together to locate specific activity records quickly.
Search Bar
The search bar supports free-text, partial-match searching across the following fields:
- Subject names — the name of the entity the activity relates to
- Action descriptions — the description of what occurred
- Actor names — the name of the user or service that performed the action
- Correlation IDs — unique identifiers used to correlate related events
Searching uses wildcard/partial matching, so you do not need to provide an exact value. Results update automatically as you type, with a 500 ms debounce delay to avoid unnecessary requests during rapid input.
Click the image to enlarge
Category Filter
The Category filter restricts results to activities belonging to a specific functional category. The available options are:
- All (default) — no category restriction applied
- Administrative — organizational and configuration changes
- Security — access control, authentication, and permission events
- Operation — routine operational actions
- Identity — identity and membership-related events
- System — automated or platform-level system events
Severity Filter
The Severity filter restricts results by the importance or urgency level assigned to each activity. The available options are:
- All (default) — no severity restriction applied
- Info — routine informational events
- Warning — events that may require attention
- Error — events where something did not complete successfully
- Critical — high-priority events requiring immediate review
Subject Type Filter
The Subject Type filter restricts results to activities that relate to a specific type of entity within your organization. This filter is cascading: selecting a subject type other than All will reveal a second Subject dropdown populated with the relevant entities of that type.
The available subject types are:
-
All (default) — no subject type restriction applied
-
organization — activities relating to the organization itself
-
organizationMember — reveals a dropdown listing organization members
-
ClientSecret — reveals a dropdown listing active client secrets
-
TrackedWorkspace — reveals a dropdown listing tracked workspaces
-
Group — reveals a dropdown listing security groups
-
Package — reveals a dropdown listing organization packages
Click the image to enlarge
Click the image to enlarge
Subject Filter
The Subject filter appears automatically when you select a specific subject type (any option other than All). It is populated with the entities that exist for the selected type — for example, a list of members when organizationMember is selected, or a list of packages when Package is selected.
Use this filter alongside the Subject Type filter to drill down into activity related to a single, specific entity.
Activity Table
The activity table displays all records that match the current search and filter criteria. Each row represents a single recorded activity and shows the following columns:
- Timestamp — the date and time the activity was recorded
- Severity — the severity level of the activity (Info, Warning, Error, Critical)
- Category — the functional category of the activity
- Subject Type — the type of entity the activity relates to
- Action — a description of what occurred
- Actor — the user or service that performed the action
The table is sorted by timestamp with the newest records shown first by default. You can adjust the number of records displayed per page using the pagination control at the bottom of the table. The available page size options are 10, 25, 50, and 100 records per page, with 25 selected by default. All filtering and searching is processed server-side, ensuring good performance even for organizations with large volumes of activity data. Changing any filter or search value automatically reloads the table results.
Activity Details
Clicking any row in the activity table opens a details panel for that record. The panel provides the full context for the selected activity, organised into the following sections:
-
Basic information — the activity ID, timestamp, correlation ID, severity, and category
-
Subject details — the subject type, subject name, reference ID, and the action that was performed on the subject
-
Actor information — the actor type, actor name, and display name of the user or service that triggered the activity
-
Metadata / changes — where applicable, additional detail about what changed, such as before/after values or supplementary context captured at the time of the event
Click the image to enlarge
Actions
Clear Filters
The Clear Filters button resets all active search and filter criteria back to their defaults in a single click. This includes the free-text search bar, the Category filter, the Severity filter, the Subject Type filter, and the Subject filter. Use this button to return to a full, unfiltered view of the activity log after investigating a specific set of events.
Regular use of the Activity Log is strongly recommended as part of your organization’s security and compliance practice. Review it periodically to stay aware of administrative changes, monitor for unexpected access patterns, and investigate any anomalies promptly. The combination of search, filters, and detailed event records makes it straightforward to reconstruct exactly what happened and when.