Share feedback
Answers are generated based on the documentation.

Activity logs

Subscription: Team Business
For: Administrators

Activity logs show a chronological list of organization and repository changes in Docker Home. Use them to see what changed, when it changed, and who made the change.

Organization owners and members with a custom role that includes the View activity logs permission can open the activity log.

Tip

Use activity logs for an admin audit trail of your organization and repositories, including AI Governance policy and settings changes. For enforcement events, such as policy decisions and sandbox sessions, see AI Governance Audit Logs.

Access activity logs

  1. Sign in to Docker Home and select your organization.
  2. Select Activity.

To query activity logs programmatically, use the Audit logs endpoints in the Docker Hub API. The API returns events from the last 3 months, up to 31 days per request.

Filter by date

By default, the Activity page shows events from the last 7 days. Docker Home keeps activity logs for 90 days, and you can query up to 30 days at a time.

  1. On the Activity page, select the Date range field.
  2. Select a preset such as Today, Yesterday, This week, This month, Last 7 days, or Last 30 days, or type a start date and an end date.

On the calendar, you can select dates in the 30 days leading up to the end date. To view an earlier period within the 90-day retention window, type the start date and the end date in the field.

The log updates to show only the activities that occurred during that period.

Filter by type

To show only one category of events:

  1. On the Activity page, open the All activities drop-down and select a category:
    • Organization: Organization management events
    • Repository: Events from repositories for every repository that belongs to the organization
    • Enterprise: Configuration events for company settings
    • Billing: Subscription change events
    • OIDC: OIDC setup events
    • Offload: Docker Offload usage
    • Governance: Admin configuration events for AI Governance
  2. Optional. From the All Actions drop-down, select a specific event type within that category.

Export

To download activity logs as a CSV file from the Activity page:

  1. Optional. Apply a date range or activity type filter. The export includes only the events that match your current filters.
  2. Select the export icon next to the date range.

Activity log events reference

The following table lists organization events that cover teams, members, SSO domains, access tokens, and custom roles.

EventDescription
Team CreatedTeam was created
Team UpdatedTeam was modified
Team DeletedTeam was deleted
Team Member AddedMember was added to a team
Team Member RemovedMember was removed from a team
Org Member InvitedMember was invited to the organization
Organization Member AddedMember was added to the organization
Organization Member RemovedMember was removed from the organization
Member Role ChangedMember's role in the organization was changed
Organization CreatedOrganization was created
Organization Settings UpdatedOrganization setting was updated
Registry Access Management enabledRegistry Access Management was enabled
Registry Access Management disabledRegistry Access Management was disabled
Registry Access Management registry addedRegistry was added
Registry Access Management registry removedRegistry was removed
Registry Access Management registry updatedRegistry was updated
Single Sign-On domain addedSSO domain was added
Single Sign-On domain deletedSSO domain was removed
Single Sign-On domain verifiedSSO domain was verified
Organization Auto-Provisioning ToggledAuto-provisioning was turned on or off for a domain
Access token createdAccess token was created
Access token updatedAccess token was updated
Access token revokedAccess token was revoked
Access token deletedAccess token was deleted
Custom role createdCustom role was created
Custom role updatedCustom role was updated
Custom role deletedCustom role was deleted

The following table lists enterprise events that cover settings policies and company-level SSO and SCIM connections.

EventDescription
Policy createdSettings policy was added
Policy updatedSettings policy was updated
Policy deletedSettings policy was deleted
Policy transferredSettings policy was transferred to another owner
Create SSO ConnectionOrganization or company SSO connection was created
Update SSO ConnectionOrganization or company SSO connection was updated
Delete SSO ConnectionOrganization or company SSO connection was deleted
Enforce SSOSSO enforcement was toggled on a connection
Enforce SCIMSCIM was toggled on a connection
Refresh SCIM TokenSCIM token was refreshed
Change SSO Connection TypeConnection type was changed
Toggle JIT provisioningJIT provisioning was toggled on a connection

The following table lists repository events that cover create, delete, privacy, tags, and related repository changes.

Note

Event descriptions that include a user action can refer to a Docker username, personal access token (PAT), or organization access token (OAT). For example, if a user pushes a tag, the description may show: <user-access-token> pushed the tag to the repository.

EventDescription
Repository CreatedRepository was created
Repository DeletedRepository was deleted
Repository UpdatedRepository description, full description, or status was updated
Privacy ChangedRepository privacy settings were updated
Tag PushedTags were pushed
Tag DeletedTags were deleted
Categories updatedRepository categories were set or updated
Tag immutability updatedTag immutability was updated

The following table lists billing events that cover plan changes, seats, and license assignment.

EventDescription
Plan UpgradedBilling plan was upgraded
Plan DowngradedBilling plan was downgraded
Seat AddedSeat was added to the billing plan
Seat RemovedSeat was removed from the billing plan
Billing Cycle ChangedBilling cycle interval was changed
Plan Downgrade CanceledScheduled plan downgrade was canceled
Seat Removal CanceledScheduled seat removal was canceled
Plan Upgrade RequestedUser requested a plan upgrade
Plan Downgrade RequestedUser requested a plan downgrade
Seat Addition RequestedUser requested additional seats
Seat Removal RequestedUser requested fewer seats
Billing Cycle Change RequestedUser requested a billing cycle change
Plan Downgrade Cancellation RequestedUser requested cancellation of a scheduled plan downgrade
Seat Removal Cancellation RequestedUser requested cancellation of a scheduled seat removal
Billing Product ChangedSubscribed product was changed
License AssignedProduct license was assigned to a user
License RemovedProduct license was removed from a user
Auto-assign rule createdAutomatic license assignment rule was created
Auto-assign rule removedAutomatic license assignment rule was removed
Automatic License Assignment EnabledAutomatic license assignment was turned on for a product
Automatic License Assignment DisabledAutomatic license assignment was turned off for a product
Licenses ExpiredLicenses expired

The following table lists OIDC events that cover creating, updating, and deleting OIDC connections.

EventDescription
OIDC connection createdOIDC connection was created
OIDC connection updatedOIDC connection was updated
OIDC connection deletedOIDC connection was deleted

The following table lists Offload events that cover lease start and end.

Note

Event descriptions show the Docker username of the actor and details about the lease.

EventDescription
Offload lease startOffload lease started
Offload lease endOffload lease ended

The following table lists governance events that cover the AI Governance admin audit trail, such as policy and settings changes. For enforcement events, such as policy decisions and sandbox sessions, see AI Governance Audit Logs.

EventDescription
AI Governance Policy createdAI governance policy was created
AI Governance Policy updatedAI governance policy was updated
AI Governance Policy deletedAI governance policy was deleted
AI Governance Settings updatedAI governance settings were updated

Next steps