Activity Log
If you have Tableau Cloud with Advanced Management, you can use Activity Log to analyse and audit tenant and site events. Depending on the event you want to review, accessing your data requires additional configuration steps or using API calls.
With the Activity Log, you can:
View and analyse event data: Access detailed event data for Tableau Cloud, capturing compliance information and tracking activities on your tenants and sites. All events include a timestamp and the ID of the actor and, if relevant, the ID of the affected content.
Audit permission changes: Track and audit permission changes, such as adding or removing users from a group, moving content between projects and explicitly changing content permissions. This is essential for implementing robust controls for compliance purposes.
Supplement Admin Insights: Enhance the information provided by Admin Insights and Admin Views to track site activity and usage metrics. You can integrate Activity Log data with monitoring tools, such as Splunk or Amazon EventBridge, to query log fields and answer questions such as the last ten actions taken by a user, who last performed an event on content and what the last action on content was.
Accessing Activity Log events
Before you jump into Activity Log, it’s important to understand the different event types in Tableau Cloud and how to access them.
Tenant events
Tenant events record changes that occur within Tableau Cloud Manager tenants. These include activities like assigning users access and roles on a site, changing site role capacity limits and monitoring licence consumption across multiple sites. Tenant events are accessed using the Tableau Cloud Manager REST API(Link opens in a new window) by users with a cloud administrator role. For more information, see List tenant activity log paths(Link opens in a new window) and Batch generate tenant activity log download URLs(Link opens in a new window) methods in Tableau Cloud Manager REST API Help.
For a full list of Activity Log tenant events, see Activity Log Tenant Event Type Reference.
Site events
Site events record changes that occur within Tableau sites. These include activities like login successes and failures, permission changes and user interactions with content. Site events are accessed by configuring the Activity Log to send log data to Amazon Simple Storage Service (S3) for analysis. For more information, see Set Up Activity Log.
For a full list of Activity Log site events, see Activity Log Site Event Type Reference.
Event update frequency and data retention
Depending on the type of Activity Log event, there are different values for log update frequency and data retention.
| Tenant events | Site events | |
|---|---|---|
| Access method | Tableau Cloud Manager REST API | Customer-managed Amazon Simple Storage Service (S3) Bucket |
| Update frequency | 15 minutes | 15 minutes |
| Data retention | 365 days | Data retention is determined based on the S3 Lifecycle configuration of your bucket. For more information, see Setting an S3 Lifecycle configuration on a bucket(Link opens in a new window) in AWS Help. |