Audit Log
Mixpanel’s Audit Log tracks activity within your organization and projects, providing visibility into who made changes, when they occurred, and what was modified. Audit log helps teams maintain security, troubleshoot issues, and meet compliance requirements.
Audit log is available on all plans. Free and Growth plans retain logs for 90 days. Enterprise plans retain logs for 2 years. See our pricing page for more details.
Accessing Audit Log
Audit log can be accessed at two levels:
- Organization-level logs — Found in Organization Settings. Accessible to organization admins and owners, these log all events across the organization, including user authentication, service account management, and more.
- Project-level logs — Found in Project Settings. Accessible to project admins and owners, these logs include project-specific events like report creation and data exports.
Some events are tracked only at the organization level, while most are available in both organization and project logs.
- Navigate to Organization Settings or Project Settings by clicking the gear icon in the bottom left navigation > Settings.
- Select Audit Log from the sidebar menu.
- View the activity log showing recent events, who performed them, and when they occurred.

Tracked Events
The current audit logging contains only actions made within the Mixpanel UI. Each line in the UI will contain information on the Date and Time, User, Action, IP and Project or Org if available. Clicking on each log item you’ll be able to see a raw view with additional information.
Mixpanel tracks the following events in your Audit Log. The “Available Since” column indicates when audit logging began for each event type:
Alerts
| Event Type | Display Name | Description | Available Since |
|---|---|---|---|
alert.created | Alert Created | A new alert was created on a report | February 1, 2026 |
alert.deleted | Alert Deleted | An alert was removed | February 1, 2026 |
alert.triggered | Alert Triggered | An alert condition was met and triggered | February 7, 2026 |
alert.updated | Alert Modified | An existing alert’s settings were changed | February 1, 2026 |
Boards
| Event Type | Display Name | Description | Available Since |
|---|---|---|---|
board.created | Board Created | A new board was created | April 5, 2026 |
board.deleted | Board Deleted | A board was permanently removed | April 5, 2026 |
board.duplicated | Board Duplicated | A copy of an existing board was created | April 5, 2026 |
board.exported | Board Exported | Board data was exported | April 5, 2026 |
board.public_access_updated | Public Board Access Updated | Public sharing settings for a board were changed | April 5, 2026 |
board.shared | Board Shared | A board was shared with users or teams | April 5, 2026 |
board.unshared | Board Unshared | Sharing access to a board was revoked | April 5, 2026 |
board.updated | Board Updated | Board settings or content were modified | April 5, 2026 |
Board Subscriptions
| Event Type | Display Name | Description | Available Since |
|---|---|---|---|
board_subscription.created | Board Subscription Created | A scheduled board email subscription was set up | April 5, 2026 |
board_subscription.deleted | Board Subscription Deleted | A board subscription was removed | April 5, 2026 |
Reports
| Event Type | Display Name | Description | Available Since |
|---|---|---|---|
bookmark.created | Report Created | A new saved report was created | April 5, 2026 |
bookmark.deleted | Report Deleted | A saved report was removed | April 5, 2026 |
bookmark.moved | Report Moved | A saved report was moved to a different location | May 20, 2026 |
bookmark.screenshot_downloaded | Report Screenshot Downloaded | A screenshot of a report was downloaded | May 20, 2026 |
bookmark.updated | Report Updated | A saved report’s configuration was changed | April 5, 2026 |
Cohorts
| Event Type | Display Name | Description | Available Since |
|---|---|---|---|
cohort.created | Cohort Created | A new cohort was created | April 5, 2026 |
cohort.deleted | Cohort Deleted | A cohort was removed | April 5, 2026 |
cohort.shared | Cohort Shared | A cohort was shared with users or teams | April 5, 2026 |
cohort.unshared | Cohort Unshared | Sharing access to a cohort was revoked | April 5, 2026 |
cohort.updated | Cohort Updated | Cohort criteria or settings were modified | April 5, 2026 |
Cohort Syncs
| Event Type | Display Name | Description | Available Since |
|---|---|---|---|
cohort_sync.created | Cohort Sync Created | A new cohort sync integration was configured | May 20, 2026 |
cohort_sync.updated | Cohort Sync Updated | Cohort sync settings were modified | May 20, 2026 |
Data Pipelines
| Event Type | Display Name | Description | Available Since |
|---|---|---|---|
data_pipeline.created | Data Pipeline Created | A new data pipeline integration was set up | April 5, 2026 |
data_pipeline.deleted | Data Pipeline Deleted | A data pipeline was removed | April 5, 2026 |
data_pipeline.updated | Data Pipeline Updated | Data pipeline configuration was modified | April 5, 2026 |
Warehouse Sources
| Event Type | Display Name | Description | Available Since |
|---|---|---|---|
warehouse_source.created | Warehouse Source Created | A new warehouse data source was connected | April 5, 2026 |
warehouse_source.deleted | Warehouse Source Deleted | A warehouse source connection was removed | April 5, 2026 |
warehouse_source.updated | Warehouse Source Updated | Warehouse source configuration was changed | April 5, 2026 |
warehouse_source_sync.created | Warehouse Source Sync Created | A warehouse source sync job was created | May 20, 2026 |
warehouse_source_sync.deleted | Warehouse Source Sync Deleted | A warehouse source sync job was deleted | May 20, 2026 |
warehouse_source_sync.updated | Warehouse Source Sync Updated | Warehouse source sync configuration was modified | May 20, 2026 |
Data Management
| Event Type | Display Name | Description | Available Since |
|---|---|---|---|
event_definition.created | Event Definition Created | A new event definition was created | May 20, 2026 |
event_definition.deleted | Event Definition Deleted | An event definition was deleted | May 20, 2026 |
event_definition.updated | Event Definition Updated | An event definition was modified | May 20, 2026 |
event_deletion.canceled | Event Deletion Canceled | A pending event deletion request was canceled | April 5, 2026 |
event_deletion.created | Event Deletion Requested | A request to delete events was submitted | April 5, 2026 |
profile.batch_deleted | Profile Deleted | A batch of user profiles were removed | May 20, 2026 |
profile.batch_updated | Profile Updated | A batch of user profiles were updated | May 20, 2026 |
profile.deleted | Profile Deleted | A user profile was removed | May 20, 2026 |
profile.updated | Profile Updated | A user profile was updated | May 20, 2026 |
property_definition.created | Property Definition Created | A new property definition was created | May 20, 2026 |
property_definition.updated | Property Definition Updated | A property definition was modified | May 20, 2026 |
user_data_deletion.canceled | User Data Deletion Canceled | A pending user data deletion request was canceled | April 5, 2026 |
user_data_deletion.created | User Data Deletion Requested | A request to delete user profile data was submitted | April 5, 2026 |
Note: Profile updates (
profile.deleted,profile.updated) are only tracked when initiated through the Mixpanel web application. API calls and direct updates using the Mixpanel SDK are not currently logged in the audit log.
Data Exports
| Event Type | Display Name | Description | Available Since |
|---|---|---|---|
audit_log_export.created | Audit Log Export Created | An audit log export was initiated | April 5, 2026 |
audit_log_export.downloaded | Audit Log Export Downloaded | An audit log export file was downloaded | April 5, 2026 |
event_export.downloaded | Events Exported | Event data was exported from the project | April 5, 2026 |
profile_export.downloaded | Profile Data Exported | User profile data was exported | April 5, 2026 |
raw_event_export.requested | Raw Event Export Requested | A raw event export was requested | May 20, 2026 |
user_data_export.created | User Data Export Requested | A user data export request was submitted | April 5, 2026 |
Service Accounts
| Event Type | Display Name | Description | Scope | Available Since |
|---|---|---|---|---|
service_account.added_to_project | Service Account Added to Project | A service account was granted access to a project | Both | April 5, 2026 |
service_account.created | Service Account Created | A new service account was created | Organization only | April 5, 2026 |
service_account.deleted | Service Account Deleted | A service account was removed | Organization only | April 5, 2026 |
service_account.removed_from_project | Service Account Removed from Project | A service account’s project access was revoked | Both | April 5, 2026 |
service_account.role_changed | Service Account Role Changed | A service account’s role or permissions were modified | Both | April 5, 2026 |
User Authentication
| Event Type | Display Name | Description | Scope | Available Since |
|---|---|---|---|---|
session.logged_in | User Logged In | A user successfully logged into the organization | Organization only | April 5, 2026 |
session.logged_out | User Logged Out | A user logged out of the organization | Organization only | April 5, 2026 |
session.login_failed | User Login Failed | A user login attempt failed | Organization only | May 20, 2026 |
user.twofactor_enabled | User Enabled Two-Factor Auth | A user activated two-factor authentication | Organization only | April 5, 2026 |
Billing Info
| Event Type | Display Name | Description | Scope | Available Since |
|---|---|---|---|---|
billing_info.payment_info_updated | Billing Payment Information Updated | Billing payment information was modified | Organization only | May 20, 2026 |
billing_info.receipt_preferences_updated | Billing Invoice Preferences Updated | Billing invoice preferences were updated | Organization only | May 20, 2026 |
billing_info.tax_info_updated | Billing Tax Information Updated | Billing tax information was modified | Organization only | May 20, 2026 |
Experiments
| Event Type | Display Name | Description | Available Since |
|---|---|---|---|
experiment.archived | Experiment Archived | An experiment was archived | May 20, 2026 |
experiment.concluded | Experiment Concluded | An experiment was concluded | May 20, 2026 |
experiment.created | Experiment Created | A new experiment was created | May 20, 2026 |
experiment.decided | Experiment Decision Recorded | A decision was made on an experiment | May 20, 2026 |
experiment.deleted | Experiment Deleted | An experiment was deleted | May 20, 2026 |
experiment.duplicated | Experiment Duplicated | An experiment was duplicated | May 20, 2026 |
experiment.launched | Experiment Launched | An experiment was launched | May 20, 2026 |
experiment.restored | Experiment Restored | An archived experiment was restored | May 20, 2026 |
experiment.updated | Experiment Updated | Experiment settings were modified | May 20, 2026 |
Feature Flags
| Event Type | Display Name | Description | Available Since |
|---|---|---|---|
feature_flag.archived | Feature Flag Archived | A feature flag was archived | May 20, 2026 |
feature_flag.created | Feature Flag Created | A new feature flag was created | May 20, 2026 |
feature_flag.deleted | Feature Flag Deleted | A feature flag was deleted | May 20, 2026 |
feature_flag.duplicated | Feature Flag Duplicated | A feature flag was duplicated | May 20, 2026 |
feature_flag.restored | Feature Flag Restored | An archived feature flag was restored | May 20, 2026 |
feature_flag.updated | Feature Flag Updated | Feature flag settings were modified | May 20, 2026 |
Organization Settings
| Event Type | Display Name | Description | Scope | Available Since |
|---|---|---|---|---|
organization_access_security.twofactor_disabled | Organization Two-Factor Auth Disabled | Organization-wide two-factor authentication was disabled | Organization only | May 20, 2026 |
organization_access_security.twofactor_enabled | Organization Two-Factor Auth Enabled | Organization-wide two-factor authentication was enabled | Organization only | May 20, 2026 |
organization_setting.updated | Organization Settings Changed | Organization settings were modified | Organization only | May 20, 2026 |
organization_spark_setting.updated | Organization AI Settings Changed | Organization AI settings were updated | Organization only | May 20, 2026 |
Project Settings
| Event Type | Display Name | Description | Available Since |
|---|---|---|---|
project.transferred | Project Transferred | A project was transferred to a different organization or owner | May 20, 2026 |
Teams
| Event Type | Display Name | Description | Scope | Available Since |
|---|---|---|---|---|
team.created | Team Created | A new team was created | Organization only | May 20, 2026 |
team.deleted | Team Deleted | A team was deleted | Organization only | May 20, 2026 |
team.service_account_added | Service Account Added to Team | A service account was added to a team | Organization only | May 20, 2026 |
team.service_account_removed | Service Account Removed from Team | A service account was removed from a team | Organization only | May 20, 2026 |
team.updated | Team Updated | Team settings were modified | Organization only | May 20, 2026 |
team.user_added | User Added to Team | A user was added to a team | Organization only | May 20, 2026 |
team.user_removed | User Removed from Team | A user was removed from a team | Organization only | May 20, 2026 |
User Management
| Event Type | Display Name | Description | Scope | Available Since |
|---|---|---|---|---|
invitation.accepted | Accepted Invitation | A user accepted an invitation to the organization | Organization only | May 20, 2026 |
invitation.sent | Invited User to Organization | An invitation was sent to a new user | Organization only | May 20, 2026 |
organization.user_added | User Added to Organization | A user was added to the organization | Organization only | May 20, 2026 |
organization.user_removed | User Removed from Organization | A user was removed from the organization | Organization only | May 20, 2026 |
project.default_access_granted | Default Project Access Granted | Default access for all users to a project was granted | Both | May 20, 2026 |
project.default_access_revoked | Default Project Access Revoked | Default access for all users to a project was revoked | Both | May 20, 2026 |
project.team_added | Team Added to Project | A team was granted access to a project | Both | May 20, 2026 |
project.team_removed | Team Removed from Project | A team’s project access was revoked | Both | May 20, 2026 |
project.user_added | User Added to Project | A user was granted access to a project | Both | May 20, 2026 |
project.user_removed | User Removed from Project | A user’s project access was revoked | Both | May 20, 2026 |
user.role_changed | User Role Changed | A user’s role or permissions were modified | Both | May 20, 2026 |
Workspaces
| Event Type | Display Name | Description | Available Since |
|---|---|---|---|
workspace.team_added | Team Added to Data View | A team was granted access to a data view | May 20, 2026 |
workspace.team_removed | Team Removed from Data View | A team’s data view access was revoked | May 20, 2026 |
workspace.user_added | User Added to Data View | A user was granted access to a data view | May 20, 2026 |
workspace.user_removed | User Removed from Data View | A user’s data view access was revoked | May 20, 2026 |
Exporting Audit Log
You can export your audit log info to CSV format for further analysis or archival purposes. The export will contain the raw data information for each event.
- Navigate to the Audit Log page in Organization Settings or Project Settings.
- Click the CSV Export button to download the current view of Audit Log.
- The export includes all visible events within the selected time range.
Limitations
- Retention periods vary by plan:
- Free & Growth plans: 90 days
- Enterprise plans: 2 years
- Organization-only events (service account management, login/logout, two-factor auth) are only visible in Organization Settings, not Project Settings.
FAQ
Who can access Audit Log?
Only users with Admin or Owner roles in an organization or project can view the audit log for that organization or project. Custom roles can be configured to include audit log access as well.
Can I filter Audit Log by event type or user?
Yes, the Audit Log interface provides filtering options to help you find specific events or actions by particular users.
What’s the difference between organization and project Audit Log?
Most events appear in both places. Organization Audit Log contains additional organization-wide events like user authentication and service account creation. Project Audit Log is limited to project-specific events. The tables with a scope field say which audit log will contain the event. If there is not scope column in a table, the event should show up in both organization and project audit logs.
Was this page useful?