DocsAccess SecurityAudit Log

Audit Log

Mixpanel’s Audit Log tracks activity within your organization and projects, providing visibility into who made changes, when they occurred, and what was modified. Audit log helps teams maintain security, troubleshoot issues, and meet compliance requirements.

Audit log is available on all plans. Free and Growth plans retain logs for 90 days. Enterprise plans retain logs for 2 years. See our pricing page for more details.

Accessing Audit Log

Audit log can be accessed at two levels:

  • Organization-level logs — Found in Organization Settings. Accessible to organization admins and owners, these log all events across the organization, including user authentication, service account management, and more.
  • Project-level logs — Found in Project Settings. Accessible to project admins and owners, these logs include project-specific events like report creation and data exports.

Some events are tracked only at the organization level, while most are available in both organization and project logs.

  1. Navigate to Organization Settings or Project Settings by clicking the gear icon in the bottom left navigation > Settings.
  2. Select Audit Log from the sidebar menu.
  3. View the activity log showing recent events, who performed them, and when they occurred.

image

Tracked Events

The current audit logging contains only actions made within the Mixpanel UI. Each line in the UI will contain information on the Date and Time, User, Action, IP and Project or Org if available. Clicking on each log item you’ll be able to see a raw view with additional information.

Mixpanel tracks the following events in your Audit Log. The “Available Since” column indicates when audit logging began for each event type:

Alerts

Event TypeDisplay NameDescriptionAvailable Since
alert.createdAlert CreatedA new alert was created on a reportFebruary 1, 2026
alert.deletedAlert DeletedAn alert was removedFebruary 1, 2026
alert.triggeredAlert TriggeredAn alert condition was met and triggeredFebruary 7, 2026
alert.updatedAlert ModifiedAn existing alert’s settings were changedFebruary 1, 2026

Boards

Event TypeDisplay NameDescriptionAvailable Since
board.createdBoard CreatedA new board was createdApril 5, 2026
board.deletedBoard DeletedA board was permanently removedApril 5, 2026
board.duplicatedBoard DuplicatedA copy of an existing board was createdApril 5, 2026
board.exportedBoard ExportedBoard data was exportedApril 5, 2026
board.public_access_updatedPublic Board Access UpdatedPublic sharing settings for a board were changedApril 5, 2026
board.sharedBoard SharedA board was shared with users or teamsApril 5, 2026
board.unsharedBoard UnsharedSharing access to a board was revokedApril 5, 2026
board.updatedBoard UpdatedBoard settings or content were modifiedApril 5, 2026

Board Subscriptions

Event TypeDisplay NameDescriptionAvailable Since
board_subscription.createdBoard Subscription CreatedA scheduled board email subscription was set upApril 5, 2026
board_subscription.deletedBoard Subscription DeletedA board subscription was removedApril 5, 2026

Reports

Event TypeDisplay NameDescriptionAvailable Since
bookmark.createdReport CreatedA new saved report was createdApril 5, 2026
bookmark.deletedReport DeletedA saved report was removedApril 5, 2026
bookmark.movedReport MovedA saved report was moved to a different locationMay 20, 2026
bookmark.screenshot_downloadedReport Screenshot DownloadedA screenshot of a report was downloadedMay 20, 2026
bookmark.updatedReport UpdatedA saved report’s configuration was changedApril 5, 2026

Cohorts

Event TypeDisplay NameDescriptionAvailable Since
cohort.createdCohort CreatedA new cohort was createdApril 5, 2026
cohort.deletedCohort DeletedA cohort was removedApril 5, 2026
cohort.sharedCohort SharedA cohort was shared with users or teamsApril 5, 2026
cohort.unsharedCohort UnsharedSharing access to a cohort was revokedApril 5, 2026
cohort.updatedCohort UpdatedCohort criteria or settings were modifiedApril 5, 2026

Cohort Syncs

Event TypeDisplay NameDescriptionAvailable Since
cohort_sync.createdCohort Sync CreatedA new cohort sync integration was configuredMay 20, 2026
cohort_sync.updatedCohort Sync UpdatedCohort sync settings were modifiedMay 20, 2026

Data Pipelines

Event TypeDisplay NameDescriptionAvailable Since
data_pipeline.createdData Pipeline CreatedA new data pipeline integration was set upApril 5, 2026
data_pipeline.deletedData Pipeline DeletedA data pipeline was removedApril 5, 2026
data_pipeline.updatedData Pipeline UpdatedData pipeline configuration was modifiedApril 5, 2026

Warehouse Sources

Event TypeDisplay NameDescriptionAvailable Since
warehouse_source.createdWarehouse Source CreatedA new warehouse data source was connectedApril 5, 2026
warehouse_source.deletedWarehouse Source DeletedA warehouse source connection was removedApril 5, 2026
warehouse_source.updatedWarehouse Source UpdatedWarehouse source configuration was changedApril 5, 2026
warehouse_source_sync.createdWarehouse Source Sync CreatedA warehouse source sync job was createdMay 20, 2026
warehouse_source_sync.deletedWarehouse Source Sync DeletedA warehouse source sync job was deletedMay 20, 2026
warehouse_source_sync.updatedWarehouse Source Sync UpdatedWarehouse source sync configuration was modifiedMay 20, 2026

Data Management

Event TypeDisplay NameDescriptionAvailable Since
event_definition.createdEvent Definition CreatedA new event definition was createdMay 20, 2026
event_definition.deletedEvent Definition DeletedAn event definition was deletedMay 20, 2026
event_definition.updatedEvent Definition UpdatedAn event definition was modifiedMay 20, 2026
event_deletion.canceledEvent Deletion CanceledA pending event deletion request was canceledApril 5, 2026
event_deletion.createdEvent Deletion RequestedA request to delete events was submittedApril 5, 2026
profile.batch_deletedProfile DeletedA batch of user profiles were removedMay 20, 2026
profile.batch_updatedProfile UpdatedA batch of user profiles were updatedMay 20, 2026
profile.deletedProfile DeletedA user profile was removedMay 20, 2026
profile.updatedProfile UpdatedA user profile was updatedMay 20, 2026
property_definition.createdProperty Definition CreatedA new property definition was createdMay 20, 2026
property_definition.updatedProperty Definition UpdatedA property definition was modifiedMay 20, 2026
user_data_deletion.canceledUser Data Deletion CanceledA pending user data deletion request was canceledApril 5, 2026
user_data_deletion.createdUser Data Deletion RequestedA request to delete user profile data was submittedApril 5, 2026

Note: Profile updates (profile.deleted, profile.updated) are only tracked when initiated through the Mixpanel web application. API calls and direct updates using the Mixpanel SDK are not currently logged in the audit log.

Data Exports

Event TypeDisplay NameDescriptionAvailable Since
audit_log_export.createdAudit Log Export CreatedAn audit log export was initiatedApril 5, 2026
audit_log_export.downloadedAudit Log Export DownloadedAn audit log export file was downloadedApril 5, 2026
event_export.downloadedEvents ExportedEvent data was exported from the projectApril 5, 2026
profile_export.downloadedProfile Data ExportedUser profile data was exportedApril 5, 2026
raw_event_export.requestedRaw Event Export RequestedA raw event export was requestedMay 20, 2026
user_data_export.createdUser Data Export RequestedA user data export request was submittedApril 5, 2026

Service Accounts

Event TypeDisplay NameDescriptionScopeAvailable Since
service_account.added_to_projectService Account Added to ProjectA service account was granted access to a projectBothApril 5, 2026
service_account.createdService Account CreatedA new service account was createdOrganization onlyApril 5, 2026
service_account.deletedService Account DeletedA service account was removedOrganization onlyApril 5, 2026
service_account.removed_from_projectService Account Removed from ProjectA service account’s project access was revokedBothApril 5, 2026
service_account.role_changedService Account Role ChangedA service account’s role or permissions were modifiedBothApril 5, 2026

User Authentication

Event TypeDisplay NameDescriptionScopeAvailable Since
session.logged_inUser Logged InA user successfully logged into the organizationOrganization onlyApril 5, 2026
session.logged_outUser Logged OutA user logged out of the organizationOrganization onlyApril 5, 2026
session.login_failedUser Login FailedA user login attempt failedOrganization onlyMay 20, 2026
user.twofactor_enabledUser Enabled Two-Factor AuthA user activated two-factor authenticationOrganization onlyApril 5, 2026

Billing Info

Event TypeDisplay NameDescriptionScopeAvailable Since
billing_info.payment_info_updatedBilling Payment Information UpdatedBilling payment information was modifiedOrganization onlyMay 20, 2026
billing_info.receipt_preferences_updatedBilling Invoice Preferences UpdatedBilling invoice preferences were updatedOrganization onlyMay 20, 2026
billing_info.tax_info_updatedBilling Tax Information UpdatedBilling tax information was modifiedOrganization onlyMay 20, 2026

Experiments

Event TypeDisplay NameDescriptionAvailable Since
experiment.archivedExperiment ArchivedAn experiment was archivedMay 20, 2026
experiment.concludedExperiment ConcludedAn experiment was concludedMay 20, 2026
experiment.createdExperiment CreatedA new experiment was createdMay 20, 2026
experiment.decidedExperiment Decision RecordedA decision was made on an experimentMay 20, 2026
experiment.deletedExperiment DeletedAn experiment was deletedMay 20, 2026
experiment.duplicatedExperiment DuplicatedAn experiment was duplicatedMay 20, 2026
experiment.launchedExperiment LaunchedAn experiment was launchedMay 20, 2026
experiment.restoredExperiment RestoredAn archived experiment was restoredMay 20, 2026
experiment.updatedExperiment UpdatedExperiment settings were modifiedMay 20, 2026

Feature Flags

Event TypeDisplay NameDescriptionAvailable Since
feature_flag.archivedFeature Flag ArchivedA feature flag was archivedMay 20, 2026
feature_flag.createdFeature Flag CreatedA new feature flag was createdMay 20, 2026
feature_flag.deletedFeature Flag DeletedA feature flag was deletedMay 20, 2026
feature_flag.duplicatedFeature Flag DuplicatedA feature flag was duplicatedMay 20, 2026
feature_flag.restoredFeature Flag RestoredAn archived feature flag was restoredMay 20, 2026
feature_flag.updatedFeature Flag UpdatedFeature flag settings were modifiedMay 20, 2026

Organization Settings

Event TypeDisplay NameDescriptionScopeAvailable Since
organization_access_security.twofactor_disabledOrganization Two-Factor Auth DisabledOrganization-wide two-factor authentication was disabledOrganization onlyMay 20, 2026
organization_access_security.twofactor_enabledOrganization Two-Factor Auth EnabledOrganization-wide two-factor authentication was enabledOrganization onlyMay 20, 2026
organization_setting.updatedOrganization Settings ChangedOrganization settings were modifiedOrganization onlyMay 20, 2026
organization_spark_setting.updatedOrganization AI Settings ChangedOrganization AI settings were updatedOrganization onlyMay 20, 2026

Project Settings

Event TypeDisplay NameDescriptionAvailable Since
project.transferredProject TransferredA project was transferred to a different organization or ownerMay 20, 2026

Teams

Event TypeDisplay NameDescriptionScopeAvailable Since
team.createdTeam CreatedA new team was createdOrganization onlyMay 20, 2026
team.deletedTeam DeletedA team was deletedOrganization onlyMay 20, 2026
team.service_account_addedService Account Added to TeamA service account was added to a teamOrganization onlyMay 20, 2026
team.service_account_removedService Account Removed from TeamA service account was removed from a teamOrganization onlyMay 20, 2026
team.updatedTeam UpdatedTeam settings were modifiedOrganization onlyMay 20, 2026
team.user_addedUser Added to TeamA user was added to a teamOrganization onlyMay 20, 2026
team.user_removedUser Removed from TeamA user was removed from a teamOrganization onlyMay 20, 2026

User Management

Event TypeDisplay NameDescriptionScopeAvailable Since
invitation.acceptedAccepted InvitationA user accepted an invitation to the organizationOrganization onlyMay 20, 2026
invitation.sentInvited User to OrganizationAn invitation was sent to a new userOrganization onlyMay 20, 2026
organization.user_addedUser Added to OrganizationA user was added to the organizationOrganization onlyMay 20, 2026
organization.user_removedUser Removed from OrganizationA user was removed from the organizationOrganization onlyMay 20, 2026
project.default_access_grantedDefault Project Access GrantedDefault access for all users to a project was grantedBothMay 20, 2026
project.default_access_revokedDefault Project Access RevokedDefault access for all users to a project was revokedBothMay 20, 2026
project.team_addedTeam Added to ProjectA team was granted access to a projectBothMay 20, 2026
project.team_removedTeam Removed from ProjectA team’s project access was revokedBothMay 20, 2026
project.user_addedUser Added to ProjectA user was granted access to a projectBothMay 20, 2026
project.user_removedUser Removed from ProjectA user’s project access was revokedBothMay 20, 2026
user.role_changedUser Role ChangedA user’s role or permissions were modifiedBothMay 20, 2026

Workspaces

Event TypeDisplay NameDescriptionAvailable Since
workspace.team_addedTeam Added to Data ViewA team was granted access to a data viewMay 20, 2026
workspace.team_removedTeam Removed from Data ViewA team’s data view access was revokedMay 20, 2026
workspace.user_addedUser Added to Data ViewA user was granted access to a data viewMay 20, 2026
workspace.user_removedUser Removed from Data ViewA user’s data view access was revokedMay 20, 2026

Exporting Audit Log

You can export your audit log info to CSV format for further analysis or archival purposes. The export will contain the raw data information for each event.

  1. Navigate to the Audit Log page in Organization Settings or Project Settings.
  2. Click the CSV Export button to download the current view of Audit Log.
  3. The export includes all visible events within the selected time range.

Limitations

  • Retention periods vary by plan:
    • Free & Growth plans: 90 days
    • Enterprise plans: 2 years
  • Organization-only events (service account management, login/logout, two-factor auth) are only visible in Organization Settings, not Project Settings.

FAQ

Who can access Audit Log?

Only users with Admin or Owner roles in an organization or project can view the audit log for that organization or project. Custom roles can be configured to include audit log access as well.

Can I filter Audit Log by event type or user?

Yes, the Audit Log interface provides filtering options to help you find specific events or actions by particular users.

What’s the difference between organization and project Audit Log?

Most events appear in both places. Organization Audit Log contains additional organization-wide events like user authentication and service account creation. Project Audit Log is limited to project-specific events. The tables with a scope field say which audit log will contain the event. If there is not scope column in a table, the event should show up in both organization and project audit logs.

Was this page useful?