About Global Logs
Note: This page covers instance-level administration in App management. It is used by Global Administrators.
Use App management > Logs to review instance-scope log views across an AlloyScan deployment.
Global logs are different from Site logs. Site logs answer "what happened in this Site?" Global logs answer "what happened at the instance level, or across Sites when all-site visibility is enabled?"
Menu path
Admin Center > App management > Logs
The global log group includes:
- Notifications
- Change log
- Security log
Scope comparison
| Surface | Scope | Typical use |
|---|---|---|
| Admin Center > Logs | One current Site | Diagnose audit, scan, notification, change, and security activity for one Site |
| App management > Logs | Whole instance | Review global events or all-site log visibility for Global Administrators |
Global Notifications log
The global Notifications log records notification-delivery events at instance scope. Deployments that expose all-site visibility can show site notification logs in the global grid and add a Site column.
Use this view when an issue spans multiple Sites or when a Global Administrator needs to find which Site produced a notification event.
Global Change log
The global Change log records instance-scope configuration changes and, where enabled, can include all-site visibility for configuration events.
Use this view to audit cross-tenant changes such as Site, global template, license, or global resource updates.
Global Security log
The global Security log records security events across the AlloyScan instance.
Use this view to review user sign-ins and sign-outs, Audit Service connections, and API client authentication failures. For an Audit Agent from a deleted site, look for Lost agent uninstall delivered to confirm that AlloyScan delivered the uninstall command.
Constraints
- Global logs are available to Global Administrators.
- The Security log is retained for 90 days. Other log types are retained for 30 days.