# Audit Logs

Retrieves activity audit log events from Workato workspaces, tracking user activities, recipe modifications, and account changes.

**Sync Type: Incremental**

## Requirements

Before you connect Monad to Workato, you need an API Token and the correct Base URL for your region:

1. **Create an API Client and Token**

   - Navigate to **Workspace admin → API clients** in your Workato account
   - Create a client role with appropriate permissions (see Permissions section below)
   - Click **Create API Client** and assign the client role you created
   - Save the generated API token securely (it will only be displayed once)

2. **Determine Your Base URL**
   - Identify which Workato data center region your workspace uses
   - Use the corresponding base URL from the table below

### Required Permissions

Your API client role must have access to the **Environment Management** endpoints, specifically:

- **GET /api/activity_logs** - Required to retrieve activity audit logs

To configure this:

1. When creating a client role, select the appropriate API endpoints
2. Ensure the role includes access to Environment Management resources
3. Assign the role to your API client before generating the token

Refer to [Workato's API Client Management documentation](https://docs.workato.com/api-mgmt/api-client-mgmt.html) for detailed instructions on creating client roles and API clients.

## Regional Base URLs

Workato operates in multiple data centers. Use the base URL that corresponds to your workspace region:

For more information about regional base URLs, see [Workato API Base URL documentation](https://docs.workato.com/en/workato-api.html#base-url).

## Configuration

The following configuration defines the input parameters. Each field's specifications, such as type, requirements, and descriptions, are detailed below.

### Settings

| Setting             | Type   | Required | Description                                                                                                                           |
| ------------------- | ------ | -------- | ------------------------------------------------------------------------------------------------------------------------------------- |
| Base URL            | string | Yes      | The base URL of your Workato instance. This varies by region (see Regional Base URLs table above). Default: `https://www.workato.com` |
| Backfill Start Time | string | No | The date to start fetching data from. If not specified, no past records will be fetched. |
| API Rate Limit | object | No | Optional limit on the connector's outbound request rate to the source API. Leave blank to use the connector's default behavior. See [API Rate Limiting](../../../guides/rate-limiting) for the field format, limits, and how to choose a value. |

### Secrets

| Secret    | Type   | Required | Description                                            |
| --------- | ------ | -------- | ------------------------------------------------------ |
| API Token | string | Yes      | The API token for authenticating with the Workato API. |

## Connector Limitations

1. **Rate Limits**: This connector is restricted by Workato's 60 requests per minute rate limit for environment management endpoints
2. **Pagination Limit**: Maximum page size is 100 records per request
3. **API Client Permissions**: The API token must have explicit access to the Environment Management endpoints
4. **Retention**: Audit log retention depends on your Workato plan; older logs may not be available for backfill

## Troubleshooting

### Common Issues

#### Authentication Failed

**Error**: `401 Unauthorized` or `403 Forbidden`

**Resolution**:

- Verify your API token is correct and hasn't expired
- Ensure the API client role has permissions for `GET /api/activity_logs`
- Check that the token is from the correct Workato workspace
- If using a multi-environment setup, ensure you created API clients for each environment

#### No Data Returned

**Error**: Empty results despite expecting audit logs

**Resolution**:

- Verify your backfill start time isn't set too far in the past (check your plan's retention limits)
- Ensure you're using the correct base URL for your region
- Check that your workspace has audit logging enabled
- Confirm there are actually activities in the specified time range

#### Rate Limit Exceeded

**Error**: `429 Too Many Requests`

**Resolution**:

- The connector already implements rate limiting
- If you see this error, you may have other applications accessing the same API
- Workato's limit is 60 requests per minute across all environment management endpoints
- Wait a minute and retry, or reduce concurrent API usage

#### Invalid Base URL

**Error**: Connection timeout or DNS resolution errors

**Resolution**:

- Verify you're using the correct regional base URL from the Regional Base URLs table
- Ensure the URL includes the protocol (`https://`) and doesn't have a trailing slash
- Test the URL format: `https://www.workato.com` (US) or `https://app.eu.workato.com` (EU)

## Related Articles

- [Workato API Introduction](https://docs.workato.com/workato-api.html)
- [Workato Environment Management API](https://docs.workato.com/workato-api/environment-management.html)
- [Workato Activity Audit Log Reference](https://docs.workato.com/workato-api/activity-reference.html)
- [Workato API Client Management](https://docs.workato.com/api-mgmt/api-client-mgmt.html)
- [Workato Data Center Overview](https://docs.workato.com/datacenter/datacenter-overview.html)

## Sample Record

```json
{
  "id": 656541,
  "timestamp": "2025-12-18 10:13:40 UTC",
  "event_type": "connector_released",
  "workspace": {
    "id": 2100003309,
    "name": "ACME Inc's workspace",
    "email": "john.doe+workato@monad.com",
    "environment": "dev"
  },
  "user": {
    "id": 2100003309,
    "name": "John Doe",
    "email": "john.doe+workato@monad.com"
  },
  "details": {
    "request": {
      "ip_address": "183.83.147.66",
      "user_agent": "Mozilla/5.0, AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/111.11"
    }
  },
  "resource": {
    "id": 108,
    "name": "CustomerSupport",
    "type": "CustomAdapter",
    "version_no": 1
  }
}
```