Audit Logs

RocketFlag provides detailed Audit Logs to help you track changes, debug issues, and maintain compliance.

What is Recorded?

An audit entry is created for significant actions across flags and organisation management:

• Flag Activity: Creating, updating (including name, description, traffic percentage, or cohort overrides), toggling, or deleting flags.
• Organisation & Team Changes: Organisation creation, deletion, inviting members, updating member roles, and removing members.
• Changes made with an API token: The author shows as token:<id> together with the token’s name, and a key avatar that links to the token’s page.
• Token lifecycle: When audit logs are on, the organisation feed records a token being created, rotated, revoked or denied.
• Audience changes: Editing an audience is recorded as an audience update, including when the edit changes the flags that use it.

Viewing Audit Logs

Flag-Level Logs

To see the history of a specific flag:

1. Navigate to the project containing the flag.
2. Click on the flag name in the table to open the slide-over Flag Inspector drawer.
3. Select the Telemetry & SDK Snippet tab to view the Activity feed.
4. A list of all historical changes for that flag will be displayed, including the action, the data changed, the timestamp, and the author. Expanding an entry shows a highlighted diff: removed values in red, added values in green, and unchanged fields dimmed out.

Organisation-Level Logs (Enterprise Tier)

Organisations on the Enterprise tier have access to a global audit feed. This allows Owners and Admins to monitor activity across the entire workspace.

• Access: Found in the main navigation bar under Audit Logs.
• Diff View: Expanding any log entry shows a highlighted diff of changes, making it easy to spot additions, deletions, and moves.
• Filtering: You can filter the logs by Project, Author (email), and Date Range.
• Export: Audit logs can be viewed in the dashboard to maintain a complete trail of all configuration changes.

Retention and Account Deletion

When a user deletes their RocketFlag account, their past entries in organisation audit logs are retained to maintain an unbroken compliance trail, but personal information is scrubbed: author and target IDs are replaced with anonymous identifiers (deleted-user-...), author names display as “Deleted user”, and personal details (such as email addresses) are purged from diffs. When an organisation is deleted, all of its audit logs are cascade-deleted.

Why Use Audit Logs?

• Accountability: Know exactly who changed a flag’s state and when.
• Debugging: If a feature suddenly stops working or behaves unexpectedly, check the audit logs to see if a flag toggle or traffic change coincided with the issue.
• Compliance: Maintain a record of all feature releases and configuration changes for security audits.