Audit Logs

Audit logs provide a comprehensive record of all actions and events in your Cubewire organization. They enable compliance reporting, security monitoring, and operational troubleshooting.

What are Audit Logs?

Audit logs capture:

  • Transaction Events — Every stage of transaction processing
  • User Actions — Login, configuration changes, approvals
  • System Events — Automated processes, background jobs
  • Security Events — Authentication, authorization, policy violations

Audit Log Properties

FieldTypeDescription
idUUIDUnique audit log identifier
timestampdatetimeWhen the event occurred (ISO 8601, UTC)
servicestringOriginating service (e.g., cw-transaction-orch)
eventstringEvent type identifier (e.g., TRANSACTION_CREATED)
messagestringHuman-readable description of the event
workflowIdstringAssociated workflow ID (for transaction events)
entityTypestringType of entity (Transaction, User, Vault)
entityIdstringID of the related entity
userIdstringUser who performed the action (null for system events)
clientInfoobjectClient metadata (IP address, user agent)
detailsobjectEvent-specific metadata and context
transactionIdUUIDRelated transaction ID (for transaction events)

Event Types

Transaction Events

EventDescription
TRANSACTION_RECEIVEDTransaction request received by the system
TRANSACTION_CREATEDTransaction workflow initiated
TRANSACTION_VALIDATEDTransaction passed validation checks
TRANSACTION_SIGNEDTransaction signed by vault
TRANSACTION_SUBMITTEDTransaction broadcast to blockchain
TRANSACTION_CONFIRMEDTransaction confirmed on-chain
TRANSACTION_FAILEDTransaction failed (with error details)
TRANSACTION_DENIEDTransaction blocked by policy
TRANSACTION_CANCELLEDTransaction cancelled by user
TRANSACTION_REPLACEDTransaction replaced (speed-up or cancel)

Approval Events

EventDescription
APPROVAL_REQUIREDTransaction requires approval
APPROVAL_GRANTEDApproval threshold met
APPROVAL_REJECTEDApprover rejected the transaction
APPROVAL_TIMEOUTApproval request expired

Policy Events

EventDescription
POLICY_EVALUATION_STARTEDPolicy evaluation began
POLICY_EVALUATION_COMPLETEDPolicy evaluation finished

Compliance Events

EventDescription
SCREENING_COMPLETEDAML/sanctions screening completed

Inbound Transaction Events

EventDescription
INBOUND_TRANSACTION_DETECTEDExternal transfer detected
INBOUND_TRANSACTION_CONFIRMEDExternal transfer confirmed on-chain

User & System Events

EventDescription
USER_ACTIONUser performed an action
SYSTEM_EVENTSystem-initiated event

Event Flow

Filtering & Querying

Filter Parameters

ParameterTypeDescription
eventstringFilter by event type (e.g., TRANSACTION_CREATED)
entityTypestringFilter by entity type (e.g., Transaction, User)
entityIdstringFilter by specific entity ID
userIdstringFilter by user who performed the action
workflowIdstringFilter by workflow ID
startDatestringStart of date range (ISO 8601)
endDatestringEnd of date range (ISO 8601)

Pagination

ParameterTypeDefaultDescription
pagenumber1Page number
limitnumber50Items per page (max 100)

Compliance Reporting

Generate compliance reports for regulatory requirements:

  • Date Range — Specify reporting period
  • Event Categories — Filter by transaction, user, or security events
  • Export Formats — JSON for programmatic access

Report Contents

SectionDescription
SummaryTotal events, breakdown by type
Transaction EventsAll transaction-related audit entries
User ActivityUser actions during the period
Security EventsAuthentication and authorization events

User Activity Timeline

Track individual user activity across the platform:

  • Login/logout events
  • Transaction initiations
  • Approval votes
  • Configuration changes

Common Use Cases

Security Monitoring

Monitor for suspicious activity:

  • Failed authentication attempts
  • Unusual transaction patterns
  • Policy violations

Compliance Audits

Prepare for regulatory audits:

  • Generate date-range reports
  • Export transaction history
  • Document approval workflows

Troubleshooting

Debug transaction issues:

  • Follow transaction workflow events
  • Identify failure points
  • Review policy evaluation details

Best Practices

Retention

PracticeDescription
Regular exportsExport logs periodically for archival
Compliance requirementsMaintain logs per regulatory requirements

Monitoring

PracticeDescription
Set up alertsMonitor for security events
Review regularlyPeriodic review of user activity
Track failuresMonitor transaction failure patterns

API Reference

For complete API documentation including endpoints, request/response examples, and code samples: