Today, we are very excited to announce the release of Audit Log, a new capability that provides the administrators of Docker Team subscription accounts with a chronological report of their team activities. The Audit Log is an unbiased system of record, displaying all the status changes for Docker organizations, teams, repos and tags. As a tracking tool for all the team activities, it creates a central historical repository of actionable insights to diagnose incidents, provide a record of app lifecycle milestones and changes, and provides a view into events creating audit trails for regulatory compliance reviews. The Audit Log is available for Team subscription accounts, and at this point, is not included with Free or Pro subscriptions.
Some typical scenarios where Audit Log will play a key role include:
- When several team members are collaborating on delivering a project, Audit Log creates a list of activities that becomes a ‘source of truth’ to validate which tags got deleted and which tags got pushed into repos, when these activities happened and which team members triggered them.
- Audit Log provides knowledge base continuity, delivering information on projects completed earlier when new team members need to familiarize themselves with work done by people that have already moved on to their new challenges.
- For security audits, Audit Log provides a clear demarcation timestamp, indicating when private repos become public or public repos become private. And, it provides evidence for organizations that go through routine regulatory compliance audits.
How to get the activity insights from Docker
The feature is now available today for every Docker Team account. We will report on the activities that happen after the feature release. Docker will store the activity data for up to 6 months, and the log will not report on activities that were generated before that time. To view the Audit Log, select your Organization View and click on the Activity Tab.
By default, the Activity tab displays all the activities that occur during the current day. At this point, use the calendar option to select the desired date range for your log report.
Once you decide on the date range, the log will show you the list of all the activities that occur during that time period.
Now that we have selected a date range, let’s select which activities you want to review. The left side of the tab has a dropdown, with the default selection set to display All Activities. The drop-down allows two filtering options –to view only Organization or Repository level activities. Selecting the Organization filter shows another drop-down that lists all the organization level activities. Similarly, selecting the Repository filter provides a list of repository level activities.
Organization level activities include these events:
|Team Created||Shows username of the person creating the team, team name and timestamp for when the team was created|
|Team Deleted||Shows username of the person deleting the team, team name and timestamp for when the team was deleted|
|Team Member Added||Shows username of the person adding the team member, username of the member added to the team, team name and timestamp for when the team member was added|
|Team Member Removed||Shows username of the person removing the team member, username of the member removed from the team, team name and timestamp for when the team member was removed|
|Team Member Invited||Shows username of the person inviting the team member, username of the member invited to the team, team name and the timestamp for when the team member was invited|
|Organization Member Removed||Shows username of the person removing organization member, username of the member being removed, organization name and the timestamp of the removal|
|Organization Created||Shows username of the person creating organization, organization name and timestamp for when the team was created|
Repository level activities include these events:
|Repository Created||Shows username of the person creating repository, indication if repository is public or private, repository name and timestamp for when the repo was created|
|Repository Deleted||Shows username of the person deleting repository, indication if repository is public or private, repository name and timestamp for when the repo was deleted|
|Privacy Changed||Shows username of the person making privacy changes, repository name, status that privacy setting is changed to and timestamp for when the change was made|
|Tag Pushed||Shows username of the person pushing the tag, tag name, tag digest, repository where tag is pushed to and timestamp for the tag push|
|Tag Deleted||Shows username of the person deleting the tag, tag name, repository where tag is deleted from and timestamp for tag deletion|
Selecting a specific Activity shows a list of all the selected activities that occur during the selected date range.
At the Organization level, you can view all the activities occurring at the organization level. Once you have selected the Activity filters, you can view all the selected activities that happened during the selected range. Or, you can view only activities within a specific repo by clicking on the Activity Tab within that repo.
If you already have a Docker Team subscription, take a look at all the activities that your team has accomplished today. The feature is included with all Docker Team subscriptions; no other action is necessary on your part.
Not a Docker Team subscriber? Upgrade or Sign up for a Docker Team subscription and begin taking advantage of this new team-focused feature. You can get more information about Docker subscriptions on the Pricing Page.