The audit log is the Bloomreach Engagement record of who did what, when and where, kept as append-only, gzipped JSON Lines files in a Google Cloud Storage bucket in the region where the activity happened. Each record names the actor (a user, an API key or public access), the method and path called, and for some actions the resource ID, such as a customer, scenario, banner or experiment; records share a `requestID` per user action and a `sessionID` per login. Files stay downloadable for at least 60 days, then move to archive storage where they can no longer be fetched. There is no viewer in the app: the files are built for import into a SIEM such as Splunk or Elastic.
Category
Bloomreach Infrastructure, Data Governance
Also known as
audit logs; activity log; security log
In practice
Set up the download job in the first month, not after the first incident. By the time a GDPR question arrives, the relevant hour may already be past the 60-day window.
Related
Something out of date?