Skip to content
Trails

Who did what, and when. Queryable with SQL.

Trails is your organization’s audit log. Every change across EZGH Cloud is recorded as an event with who made it, from where and what it touched. Look events up, or query them with SQL.

Terminal
$ ezgh trails query run \  "SELECT event_name, count() AS n FROM trails \   WHERE error_code = 'access_denied' \   GROUP BY event_name ORDER BY n DESC" --from 30d

What you get

Every product, one format

Each event names its source, operation, identity, organization and resources, in the same shape everywhere.

Refusals too

Denied calls are recorded with the error the caller got, so you can see who tried what.

Trails Query

Run SQL over your events from the console, the CLI or the API, and download the results as CSV or NDJSON.

No secrets in the log

Tokens, cookies and secret values are never recorded.

Event history and Trails QueryNo charge

At a glance

Events kept
30 days
Query results kept
7 days
API
trails.ezghcloud.com

Built on the platform

Governed like every other product, from the first call.