# Does log data include the actioning user

**URL:** <https://community.auth0.com/t/does-log-data-include-the-actioning-user/37084>\
**Category:** Get Help\
**Created:** [January 30, 2020, 10:31am UTC](https://community.auth0.com/t/does-log-data-include-the-actioning-user/37084 "2020-01-30T10:31:33Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![abartlett36](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/abartlett36/32/12751_2.png) [@abartlett36](https://community.auth0.com/u/abartlett36)\
**Post date:** [January 30, 2020, 10:31am UTC](https://community.auth0.com/t/does-log-data-include-the-actioning-user/37084/1 "2020-01-30T10:31:33Z")

</div>

Hello,  
When Auth0 logs administration actions taken through the DAE/Dashboard/Management API, does the log data include the user that performed the action? For example, if User X creates user Y, I can see that the log entry refers to user Y but does it also include User X?

---

<div class="post-metadata">

**Author:** ![konrad.sopala](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/konrad.sopala/32/13516_2.png) [@konrad.sopala](https://community.auth0.com/u/konrad.sopala)\
**Post date:** [January 30, 2020, 11:57am UTC](https://community.auth0.com/t/does-log-data-include-the-actioning-user/37084/3 "2020-01-30T11:57:23Z")

</div>

Hey there @abartlett36!

Welcome in our community!

Let me check that for you and get back here with the info soon!

---

<div class="post-metadata">

**Author:** ![konrad.sopala](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/konrad.sopala/32/13516_2.png) [@konrad.sopala](https://community.auth0.com/u/konrad.sopala)\
**Post date:** [February 6, 2020, 10:49am UTC](https://community.auth0.com/t/does-log-data-include-the-actioning-user/37084/4 "2020-02-06T10:49:58Z")

</div>

Hey there!

Sorry for the delay. I was told that in some cases both sides will be visible but not in all.

Using the [Dashboard](https://manage.auth0.com/#/logs) or the [Management API logs endpoint](https://auth0.com/docs/api/v2#!/Logs/get_logs), **you can pull log data on actions performed by administrators using the Dashboard, operations performed via the Management API, and authentications made by your users.**

---

<div class="post-metadata">

**Author:** ![abartlett36](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/abartlett36/32/12751_2.png) [@abartlett36](https://community.auth0.com/u/abartlett36)\
**Post date:** [February 10, 2020, 1:19pm UTC](https://community.auth0.com/t/does-log-data-include-the-actioning-user/37084/5 "2020-02-10T13:19:32Z")

</div>

Thanks Konrad. A couple of follow-up questions:

- Is there a list available of which cases will/will not have both sides visible?
- For any given log item, does the Dashboard always show all the log data that is available?

---

<div class="post-metadata">

**Author:** ![abartlett36](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/abartlett36/32/12751_2.png) [@abartlett36](https://community.auth0.com/u/abartlett36)\
**Post date:** [February 19, 2020, 10:54am UTC](https://community.auth0.com/t/does-log-data-include-the-actioning-user/37084/6 "2020-02-19T10:54:33Z")

</div>

Hi @konrad.sopala,

Do you have any thoughts on my follow-up questions?

Regarding the question about which cases will/will not have both sides visible, it looks like actions taken through the Delegated Admin Extenstion never have the actioning user recorded in the logs. Is that correct? If so, would I be right in thinking that this would apply to any action taken through the Management API?

Thanks  
Andy

---

<div class="post-metadata">

**Author:** ![konrad.sopala](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/konrad.sopala/32/13516_2.png) [@konrad.sopala](https://community.auth0.com/u/konrad.sopala)\
**Post date:** [March 18, 2020, 5:27pm UTC](https://community.auth0.com/t/does-log-data-include-the-actioning-user/37084/7 "2020-03-18T17:27:51Z")

</div>

Hey there!

Sorry for the delay in response but I got trapped in all the incoming questions.

Getting back to your first question. I just created a user and checked the logs.

- So i performed a Management API operation to be precise. Created a user

 ![Screenshot 2020-03-18 at 18.21.14](https://global.discourse-cdn.com/auth0/original/3X/e/b/eb49226cb382a3e76b42086acb925bf2e51ce453.png)

- When I check the overall summary of the log I can that user was created but I have no idea if it wasn’t me who created that user

 ![Screenshot 2020-03-18 at 18.21.28](https://global.discourse-cdn.com/auth0/original/3X/2/1/210b612cc673fec940cf9f276708e5a30284526b.png)

- In order to check that you need to go to the raw format of the log which is down there and scroll down until you see this, which is the person that performed the action (who - did - what pattern):

![Screenshot 2020-03-18 at 18.21.54](https://global.discourse-cdn.com/auth0/original/3X/6/d/6de62b1f7ee6a88c49d280b1650a0ec3dd3cd7f4.png)

There isn’t a list of cases that will / will not have both sides available. I would say it’s more of a situation where in some cases you will see both sides in the summary and in other you will need to inspect the raw file in JSON format.

Regarding your last message with above screenshots I proved that it’s a wrong assumption cause for creating the user behind the scenes the Management API was used and both sides are visible but you need to inspect raw JSON available below the summary of certain log.

For more on logs you can visit that doc:

> **[Logs](https://auth0.com/docs/deploy-monitor/logs)**
>
> Understand how tenant and operations event logs work in Auth0.

---

<div class="post-metadata">

**Author:** ![konrad.sopala](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/konrad.sopala/32/13516_2.png) [@konrad.sopala](https://community.auth0.com/u/konrad.sopala)\
**Post date:** [March 25, 2020, 3:34pm UTC](https://community.auth0.com/t/does-log-data-include-the-actioning-user/37084/8 "2020-03-25T15:34:29Z")

</div>


