[Filters] Add filters to Browse - Audit Log

[cmarteepants]

View

Browse - Audit Log

View

Browse – Audit Log

Filters to Add

• Filter by Timestamp Range
  ↪ Investigate events that occurred during a known incident window

• Filter by Event Type
  ↪ Focus on a specific type of change, like config updates, triggers, or deletions

• Filter by User
  ↪ Identify who initiated a given change or audit action

• Filter by Extra
  ↪ Surface entries with specific metadata payloads, like modified fields or context (e.g., asset ID)
  ↪ Use a key/value text input pair similar to conf filters
  ↪ Allow partial match for both key and value

• Filter by DAG ID
  ↪ Narrow logs to a specific workflow

• Filter by Task ID
  ↪ Investigate operator-level changes or task retries

• Filter by Run ID
  ↪ Debug changes affecting a particular DAG run

• Filter by Map Index
  ↪ Examine audit events for specific mapped task slices

• Filter by Try Number
  ↪ Surface retries or manual interventions on specific attempts

API Support

⚠️ Partial

• Audit log API includes relevant fields, but many are not exposed via query parameters
• Filtering by time, task, and run-level metadata would need backend support or indexing enhancements

UI Impact

• Add filter panel to the top of the audit log screen
• Support multiple entries with an “Add Filter” button or + icon
• Would significantly improve investigation workflows and compliance monitoring

Notes

• Enables faster triage and auditability, especially in regulated environments

[pierrejeambrun]

@BrianLii Can you comment on this issue please, weirdly, I can't assign you yet.

[vatsrahul1001]

I would like to take it up.

[BrianLii]

@pierrejeambrun Sorry, I missed the comment. I can work on other issues. Thanks!

[pierrejeambrun]

@BrianLii, @vatsrahul1001 is working on it. If you want there is #53053 which is unassigned and up for a grab in case you want to work on it. You can comment there directly so I can assign you.

[BrianLii]

Please assign #53053 to me, thanks!