A clearer audit overview

An audit log you cannot scan is just storage. The environment audit dashboard now leads with richer summary cards, a clearer event-comparison view, and navigation that gets you from a trend into the activity list.

This is the longer note behind the January 25 changelog entry.

How it works

The audit overview groups the catalog you already emit (eventTypes / EVENT_TYPE_TO_CATEGORY) into summary cards and comparison charts. Cards surface volume by category and type. The comparison visualization lines events up so you can see how sign-in, user, and administration activity sit next to each other in the selected window.

From a card or series you can move into the activity table with filters (category, type, location, provider, browser) already in mind. Demo environments use a fixed catalog sample so the layout is visible without live traffic.

This release is the dashboard layout and navigation. It does not add new event types by itself. Later catalog expansions (user lifecycle, MCP runtime, and others) reuse the same overview.

Set it up

In the console, open Audit:

1. Pick a time range.
2. Read the summary cards for the categories you care about.
3. Use the comparison view, then drill into activity.

Subscribe or export from the same audit module if you already forward events.

Trust boundaries

Cards count ingested events in the selected window. A quiet chart is not proof an action never happened — ingestion delay or a filter can hide rows.

Organization audit and environment audit stay separate streams.

Try it

Open Audit, change the range, and follow a card into the activity table. Setup notes are in the audit logs guide. The original release note is in the changelog.