Managed Audit Logs in Tesseral

Audit logs are a common feature in B2B SaaS products. They allow your customer’s security team to track what employees are doing in your product. When you use Tesseral, most of the work of having audit logs support is done for you.

What are managed audit logs?

B2B SaaS buyers often expect audit logs from their vendors. These audit logs are typically consumed by your customer’s security team, and it allows them to monitor employee activity and SaaS product usage.

With Tesseral, most of the work for audit logs is done for you. Tesseral’s managed audit logs are audit logs that your customers can use to see what’s going on in their Organization in your product.

Tesseral handles automatically collecting audit logs for activity like logins, logouts, inviting other users, modifying login settings, and more. These auto-collected events cover the bulk of the generic security-related activity that B2B SaaS buyers expect from their vendors. You do not need to write any code for these authentication-related events.

You can publish your own audit log events on top of the Tesseral-produced events.

Tesseral provides a user interface your customers can use to view, search, and export their audit logs. This functionality appears in the Self-Serve Organization Settings. You do not need to write any code to give your customers a UI for managing audit logs.

Publishing custom audit log events

Tesseral’s managed audit log events automatically collect many security-related events on your behalf. You can augment these events with additional events that are specific to your product.

To publish a custom audit log event, you’ll use the Tesseral Backend API’s CreateAuditLogEvent endpoint.

1
import { TesseralClient } from "@tesseral/tesseral-node";
2
3
const tesseralClient = new TesseralClient();

1
// actions.ts
2
import { auth } from "@tesseral/tesseral-nextjs/serverside";
3
4
export async function POST(request: Request) {
5
  const { credentials } = await auth({ or: "throw" });
6
7
  // ...
8
9
  tesseralClient.auditLogEvents.createAuditLogEvent({
10
    auditLogEvent: {
11
      credentials: credentials,
12
      eventName: "acme.expense_reports.approve",
13
      eventDetails: {
14
        "expenseReportId": "expense_report_123",
15
      }
16
    }
17
  })
18
19
  // ...
20
}

Auto-collected audit logs

Tesseral’s managed audit logs automatically collect many security-related events on your behalf. You can also publish your own audit log events on top of the set of auto-collected events.

The following table lists the auto-collected audit log events that Tesseral produces.