Skip to content

Logs

Logs are the primary way to understand Anchor activity after the fact. They answer who acted, what was targeted, what changed, and what the platform observed.

Useful categories include authentication, resource changes, policy changes, job execution, connect sessions, errors, and administrative settings changes.

Operators can filter by resource, scope, actor, operation, status, and time range when investigating activity.

Retention requirements vary by organization. Plan retention before production deployment so logs remain useful for audits and incident review.