Logs

The Logs area has two tabs.

Audit log

A record of security-relevant actions with the acting user, IP address, and timestamp. Use it for accountability and incident review. Recorded actions include:

• successful and failed logins, and logouts
• user and role changes
• password changes, and password reset-link creation and use
• configuration changes

For user, role, and password changes the audit entry is written in the same database transaction as the change itself, so the change and its audit entry cannot diverge.

Credential-like values — passwords, tokens, secrets, API keys — are never stored in the audit log: they appear as <redacted> in entry details and in exports. The password portion of RTSP URLs is masked as well.

System log

Operational log entries from the server and its background workers, useful for troubleshooting. For lower-level detail on a host install, follow the service journal:

journalctl -u altavms -f

Both tabs support filtering and the standard page-size selector (10 / 25 / 50 / 100).

Export

The Export button downloads the audit log as CSV, applying the current audit filters — the export covers all matching entries, not only the visible page. The button exports audit data regardless of which tab is active: the system log has no CSV export — use the service journal above instead. In the exported file, IP and email addresses are partially masked, and cells beginning with =, +, -, or @ are prefixed with an apostrophe so spreadsheet applications treat them as text rather than formulas.