About exports of audit log and Git events data
You can export the audit log by downloading a JSON or CSV file from your enterprise on GitHub Enterprise Cloud. When you export audit log events, you can query by one or more of these supported qualifiers to filter for specific log events to export. See "Searching the audit log for your enterprise."
The audit log lists events triggered by activities that affect your enterprise within the last 180 days. The audit log retains Git events for seven days.
You can export Git events data by downloading a JSON file from your enterprise audit log. Unlike audit log data, you cannot query for specific Git events to filter and export in the audit log user interface.
Note: When you export Git events, events that were initiated via the web browser or the REST or GraphQL APIs are not included. For example, when a user merges a pull request in the web browser, changes are pushed to the base branch, but the Git event for that push is not included in the export.
After you export the log, you'll see the following keys and values in the resulting file.
| Key | Example value |
|---|---|
action | team.create |
actor | octocat |
user | codertocat |
actor_location.country_code | US |
org | octo-org |
repo | octo-org/documentation |
created_at | 1429548104000 (Timestamp shows the time since Epoch with milliseconds.) |
data.email | octocat@nowhere.com |
data.hook_id | 245 |
data.events | ["issues", "issue_comment", "pull_request", "pull_request_review_comment"] |
data.events_were | ["push", "pull_request", "issues"] |
data.target_login | octocat |
data.old_user | hubot |
data.team | octo-org/engineering |
As an alternative to exporting log events, you can use the API to retrieve audit log events, or set up GitHub Enterprise Cloud to stream audit data as events are logged. For more information, see "Using the audit log API for your enterprise" and "Streaming the audit log for your enterprise."
Exporting audit log data
- In the top-right corner of GitHub, click your profile photo.
- Depending on your environment, click Your enterprise, or click Your enterprises then click the enterprise you want to view.
- On the left side of the page, in the enterprise account sidebar, click Settings.
- Under " Settings", click Audit log.
- Optionally, to only export filtered results, search by one or more supported qualifiers or log filters.
- Select the Export dropdown menu, and click a file format.
Exporting Git events data
You can also export Git events data by date range. The data is exported as a compressed, newline-delimited JSON file.
-
In the top-right corner of GitHub, click your profile photo.
-
Depending on your environment, click Your enterprise, or click Your enterprises then click the enterprise you want to view.
-
On the left side of the page, in the enterprise account sidebar, click Settings.
-
Under " Settings", click Audit log.
-
Select the Export Git Events dropdown menu and choose a date range to export log events for.
-
Click Download Results.
-
To extract the JSON data, uncompress the file using an archive utility client or command. For example:
gunzip export-avocado-corp-1642896556.json.gz