Activity Log

If you have Tableau Cloud with Advanced Management, you can use Activity Log to analyze and audit tenant and site events. Depending on the event you want to review, accessing your data requires additional configuration steps or using API calls.

With the Activity Log, you can:

  • View and analyze event data: Access detailed event data for Tableau Cloud, capturing compliance information and tracking activities on your tenants and sites. All events include a timestamp and the ID of the actor, and if relevant, the ID of the affected content.

  • Audit permissions changes: Track and audit permissions changes, such as adding or removing users from a group, moving content between projects, and explicitly changing content permissions. This is essential for implementing robust controls for compliance purposes.

  • Supplement Admin Insights: Enhance the information provided by Admin Insights and Admin Views to track site activity and usage metrics. You can integrate Activity Log data with monitoring tools, such as Splunk or Amazon EventBridge to query log fields and answer questions like the last 10 actions taken by a user, who last performed an event on content, and what the last action on content was. Activity Log data can also be imported to cloud data warehouses for analysis, such as Snowflake, Data Bridge, Google BigQuery.

Accessing Activity Log events

Before you jump into Activity Log, it’s important to understand the different event types in Tableau Cloud and how to access them.

Tenant events

Tenant events record changes that occur within Tableau Cloud Manager tenants. These include activities like assigning users access and roles on a site, changing site role capacity limits, and monitoring license consumption across multiple sites. Tenant events are accessed using the Tableau Cloud Manager REST API(Link opens in a new window) by users with a cloud administrator role. For more information, see List tenant activity log paths(Link opens in a new window) and Batch generate tenant activity log download urls(Link opens in a new window) methods in Tableau Cloud Manager REST API Help.

Site events

Site events record changes that occur within Tableau sites. These include activities like login successes and failures, permission changes, and user interactions with content. Site events are accessed by configuring the Activity Log to send log data to Amazon Simple Storage Service (S3) for analysis. For more information, see Set Up Activity Log.

Event update frequency and data retention

Depending on the type of Activity Log event, there are different values for log update frequency and data retention.

  Tenant events Site events
     
Access method Tableau Cloud Manager REST API

Customer-managed Amazon Simple Storage Service (S3) Bucket

     
Update frequency 15 minutes 15 minutes
     
Data retention 365 days Data retention is determined based on the S3 Lifecycle configuration of your bucket. For more information, see Setting an S3 Lifecycle configuration on a bucket(Link opens in a new window) in AWS Help.