Skip to main content

Audit Logs

Retrieves audit events from your Buildkite organization for security monitoring, compliance, and operational visibility across your CI/CD pipeline activities.

Sync Type: Incremental

Requirements​

  • A Buildkite organization with audit log access
  • An API token with the required permissions to access audit events via GraphQL API
  • Organization slug/identifier

Creating an API Token​

To create an API token for accessing Buildkite audit logs:

  1. Navigate to Personal Settings in your Buildkite account
  2. Go to API Access Token section
  3. Click New API Access token
  4. Fill in a description for the token (e.g., "Monad Audit Logs")
  5. Select your organization from the dropdown menu
  6. Check the GraphQL API checkbox to grant GraphQL access permissions
  7. Press Create New API token
  8. Copy the generated token and use it in the configuration

Note: Store the token securely as it won't be shown again once you leave the page.

Details​

The Buildkite Audit Logs input collects comprehensive audit trail information from your Buildkite organization. It tracks all significant activities including user actions, pipeline changes, agent management, security events, and administrative activities. This input provides detailed information about who performed what actions, when they occurred, and the context in which they happened.

The input uses Buildkite's GraphQL API to retrieve audit events and implements incremental syncing to efficiently collect only new events since the last run. Each audit event includes detailed information about the actor (who), subject (what), type of event, timestamp, and additional contextual data.

Configuration​

The following configuration defines the input parameters. Each field's specifications, such as type, requirements, and descriptions, are detailed below.

Settings​

SettingTypeRequiredDescription
Organization SlugstringYesThe URL slug of your Buildkite organizations
Backfill Start TimestringNoThe date to start fetching data from. If not specified, no past records will be fetched.

Secrets​

SecretTypeRequiredDescription
API TokenstringYesBuildkite API token with permissions to read audit events via GraphQL API