For AI agents: the complete documentation index is available at https://www.jumpserver.com/docs/llms.txt, the full documentation bundle is available at https://www.jumpserver.com/docs/llms-full.txt, and this page is available as Markdown at https://www.jumpserver.com/docs/features/audits/activities/operate-logs.md.
🎉 JumpServer v5.1.1 is available. See what's new →
  • v5

    • Operate Logs

    Operate Logs records administrative changes made on the JumpServer platform, such as creating users, updating assets, changing authorizations, or deleting resources. Use it to answer who changed what and when, and to see the exact fields that changed.

    Open the page from Audits > Activities > Operate Logs.

    Overview

    Each row shows the operator, resource, remote address, date, action, resource type, and an action to open the change detail. The list is read-only and keeps a historical record of platform changes.

    Prerequisites

    • Sign in with an account that has the audits.view_operatelog permission, such as a system administrator or auditor.
    • At least one auditable resource change must have been performed.

    Inspect a change

    1

    Set the date range, or search for a user or resource.

    2

    Click View in the row actions.

    3

    In the detail dialog, compare the Before change and After changes values for each Change field.

    Figure 1: Operate Logs list with user, resource, remote address, date, action, and resource type.

    The change dialog lists one row per changed field:

    ColumnDescription
    Change fieldName of the field that changed.
    Before changeValue before the operation.
    After changesValue after the operation.

    Figure 2: Operate log change detail with before-and-after values.

    Note

    Sensitive values are masked when the log is written, so the change detail may show an asterisk pattern instead of the original secret. The audit record never exposes stored passwords or keys.

    Customize columns and export

    Open List preferences, select the columns to display, and click Confirm. Extra columns include ID, organization ID, and organization name. Restore defaults resets the list.

    Click Export, choose CSV or Excel, select Export all, Export selected, or Export search results, and click Confirm.

    Field reference

    FieldDescription
    UserOperator who performed the action.
    ResourceResource that was changed.
    Remote addressSource address of the operator.
    DateWhen the operation happened.
    ActionOperation type, for example create, update, delete, or view.
    Resource typeType of the changed resource.
    ActionsView opens the change detail for the row.

    Notes

    Tip

    When operation logs are stored in Elasticsearch, use the search box to query large volumes of records. Storage is configured in Storage.