# Audit Logs

Retrieves audit log events from CaptivateIQ to track user actions, configuration changes, and system activity across your organization.

**Sync Type: Incremental**

## Requirements

Before configuring this input, you need:

1. **CaptivateIQ Account** — An active CaptivateIQ organization
2. **API Token** — [Generate an API token in CaptivateIQ](https://developers.captivateiq.com/docs/getting-started-with-captivateiq#generating-an-auth-token)
   - From the CaptivateIQ app, navigate to your user profile settings
   - On the API Tokens tab, enter a label for your token and hit the Create button
   - Save the token value somewhere safe. It will never be shown again.
3. **API Access** — Ensure your account has API access enabled

## Configuration

The following configuration defines the input parameters. Each field's specifications, such as type, requirements, and descriptions, are detailed below.

### Settings

| Setting             | Type   | Required | Description                                                                                                                                                                                  |
| ------------------- | ------ | -------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| backfill_start_time | string | No       | The date to start fetching data from. If not specified, no past records will be fetched. |
| API Rate Limit | object | No | Optional limit on the connector's outbound request rate to the source API. Leave blank to use the connector's default behavior. See [API Rate Limiting](../../../guides/rate-limiting) for the field format, limits, and how to choose a value. |

### Secrets

| Secret    | Type   | Required | Description                                                                                                      |
| --------- | ------ | -------- | ---------------------------------------------------------------------------------------------------------------- |
| api_token | string | Yes      | The API token for authenticating with the CaptivateIQ API. Generate this from your CaptivateIQ account settings. |

## Troubleshooting

### Authentication Errors

**Issue**: "Invalid API Token" or "Authentication Failed"

**Solutions**:

- Verify your API token is correct and hasn't expired
- Ensure the token was copied completely (no extra spaces)
- Generate a new token if the current one is compromised
- Confirm API access is enabled in your CaptivateIQ account

### Rate Limit Errors

**Issue**: "429 Too Many Requests" errors during sync

**Solutions**:

- The input automatically handles rate limiting with exponential backoff
- If errors persist, reduce the frequency of manual syncs
- Contact CaptivateIQ support if you need higher rate limits for your use case

### No Data Returned

**Issue**: Sync completes but no audit logs are retrieved

**Solutions**:

- Verify your backfill_start_time is before the date of the first audit events
- Check that audit logging is enabled in your CaptivateIQ account
- Ensure the date range contains activity in your organization
- Verify the API token has sufficient permissions

### Connection Issues

**Issue**: "Connection timeout" or "Unable to reach API"

**Solutions**:

- Check if CaptivateIQ's API is experiencing downtime
- Contact Monad support if the issue persists

## Related Articles

- [CaptivateIQ API Documentation](https://developers.captivateiq.com/reference/pagination)
- [CaptivateIQ Help Center](https://support.captivateiq.com)

## Sample Record

```json
{
  "id": "550e8400-e29b-41d4-a716-446655440000",
  "object": "audit_log",
  "organization_id": "org_123456",
  "organization_name": "Acme Corp",
  "user_id": "user_001",
  "user_name": "John Smith",
  "user_email": "john.smith@example.com",
  "logged_in_user_id": "admin_001",
  "logged_in_user_name": "Jane Admin",
  "logged_in_user_email": "jane.admin@example.com",
  "ip_address": "203.0.113.45",
  "created_at": "2025-02-23T14:30:00Z",
  "event_type": "user.login",
  "version": 0,
  "object_id": "obj_789012",
  "object_name": "Sales Dashboard",
  "object_type": "report",
  "parent_objects": []
}
```