MATIH Platform is in active MVP development. Documentation reflects current implementation status.
15. Workbench Architecture
Control Plane UI
Audit Log

Audit Log

The Audit Log page provides a searchable, filterable timeline of all platform events for compliance monitoring and security investigation. It displays events from the Audit Service with support for advanced filtering, full-text search, event detail views, and export capabilities.


Audit Event Display

The audit log page (AuditLogPage.tsx) presents events in a chronological timeline with the following columns:

ColumnDescriptionSortable
TimestampEvent occurrence timeYes
ActorUser or service that triggered the eventYes
ActionEvent type (create, update, delete, login)Yes
ResourceTarget resource type and identifierYes
StatusSuccess or failureYes
DetailsExpandable event metadataNo

Event Categories

CategoryEventsSource
AuthenticationLogin, logout, MFA, password changeIAM Service
User ManagementUser create, update, role change, deactivateIAM Service
TenantTenant create, configure, suspendTenant Service
Data AccessQuery execution, dashboard view, exportAI Service, Query Engine
Model LifecycleTrain, deploy, promote, retireML Service
ConfigurationSettings change, feature flag toggleConfig Service
InfrastructureDeployment, scaling, restartInfrastructure Service
BillingPlan change, payment, invoiceBilling Service

Filtering

The audit log supports multiple filter dimensions:

interface AuditFilter {
  date_from?: string;
  date_to?: string;
  actor?: string;
  action?: string;
  resource_type?: string;
  status?: 'success' | 'failure';
  tenant_id?: string;
  search?: string;  // Full-text search across all fields
}

Quick Filters

FilterOptions
Time rangeLast hour, Last 24h, Last 7d, Last 30d, Custom
Action typeAll, Create, Update, Delete, Login, Access
StatusAll, Success, Failure
ResourceUsers, Tenants, Models, Queries, Dashboards

Event Detail View

Clicking an event expands a detail panel showing:

FieldDescription
Full timestampPrecise event time with timezone
Actor detailsUser ID, name, IP address, user agent
Resource detailsResource type, ID, name
ChangesBefore/after values for update events
Request metadataAPI endpoint, HTTP method, correlation ID
Related eventsLinked events in the same workflow

Export

Audit logs can be exported for external analysis or compliance reporting:

FormatDescription
CSVComma-separated values with all fields
JSONStructured JSON with full event details
PDFFormatted report for compliance documentation

Retention

TierRetention Period
Standard90 days
Enterprise1 year
Compliance7 years (configurable)

Real-Time Streaming

The audit log page supports real-time event streaming via WebSocket:

const useAuditStream = () => {
  const ws = useWebSocket('/ws/audit/stream');
  useEffect(() => {
    ws.onMessage((event) => {
      addEventToTimeline(JSON.parse(event.data));
    });
  }, []);
};

Access Control

RoleView Own EventsView All EventsExportConfigure Retention
Platform AdminYesYesYesYes
Tenant AdminYesTenant onlyTenant onlyNo
AuditorYesYesYesNo
UserOwn onlyNoNoNo