Observability and logs

Package logs

Package logs show a record of package-based events in the Cloudsmith web app. You can see when packages are deleted, updated, or modified, providing a clear audit trail of what happened and when.

How it works

To view package logs, go to the Logs tab of the Cloudsmith web app and click Package logs:

Each log entry diplays a timestamp, an action, the actor who performed it, and the affected package and version. Click an entry to expand and view detailed metadata such as package size and actor IP address.

Cloudsmith creates package logs for the following actions:

ActionDescription
COPYA package was copied from one repository to another.
DELETEA package was deleted.
HARD DELETEA package was hard deleted from Recently deleted packages.
MOVEA package was moved from one repository to another.
POLICY VIOLATIONA package has violated an active policy.
QUARANTINEA package was quarantined.
RESTOREA previously-deleted package was restored from Recently deleted packages.
RESYNCA package was resynchronized.
SYNCA package was synchronized for the first time.
TAGS CHANGEDTags were added, removed, or updated for a package.

COPY and MOVE package logs

When you copy or move a package from one repository to another, a package log is created for the destination repository only.

HARD DELETE package logs

A HARD DELETE log is only generated when you explicitly hard delete a package from the recycle bin via the Cloudsmith API or web app (https://app.cloudsmith.com).

There are other scenarios in which Cloudsmith hard deletes a package that either generate a DELETE log, or no log at all. For example, when packages are automatically deleted from Recently deleted packages after 1 week, no log is generated.

For more information about package actions, see Package actions.

Filters

You can filter package logs by action, target, and actor.

  • Action: Filter by action, for example, DELETE or QUARANTINE.
  • Target: Filter by package name, format, and repository.
  • Actor: Filter by actor and actor kind.
    • Actor: The name of the user or service that performed the action.
    • Actor kind: The kind of actor that performed the action - either User or Service.

Known limitations

  • Deleting a user: Deleting a user removes their info from package logs, including any identifying log information for actions they performed.
  • Deleting a repository: Deleting a repository also deletes all associated package logs for that repository.