Unexpected Usage of the Log Endpoint /api/v2/logs

Overview

This article explains the cause of an unexpectedly high number of requests to the Auth0 Management API /api/v2/logs endpoint. This activity may be observed when there is no known system or service configured to make these calls.

Applies To

  • Management dashboard
  • Tenant logs
  • Monitoring logs
  • Log events
  • Logs live mode

Cause

This situation occurs when tenant logs are viewed in the Auth0 Management Dashboard with Live Mode enabled. The Live Mode feature triggers periodic polling of the /api/v2/logs endpoint in the background to display real-time log updates. This polling continues automatically as long as the logs page remains open with Live Mode active.

Solution

To prevent the automated calls, disable Live Mode when viewing tenant logs in the Management Dashboard.