> ## Documentation Index
> Fetch the complete documentation index at: https://docs.nebius.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Viewing events in Audit Logs

An *audit event* is a data record that captures something that happened in Nebius AI Cloud, along with metadata that provides additional context. The metadata shows how events relate to resources or to each other. Each event in Audit Logs has a JSON representation that conforms to the [CloudEvents specification](https://github.com/cloudevents/spec/blob/main/cloudevents/spec.md).

You can use the Nebius AI Cloud web console or CLI to view and filter audit events for your [tenant](../../iam/overview#tenants).

## Prerequisites

Make sure you are in a [group](/iam/authorization/groups/index) that has the `admin` role within your tenant; for example, the default `admins` group. You can check this in the [Administration → IAM](https://console.nebius.com/iam) section of the web console.

## How to view events

<Tabs>
  <Tab title="Web console">
    In the sidebar, go to <Icon icon="https://mintcdn.com/nebius-ai-cloud/1Ha0sWR6e1mnIaHS/_assets/sidebar/administration.svg?fit=max&auto=format&n=1Ha0sWR6e1mnIaHS&q=85&s=e6411dc023fd6972922c0a12a59ccf21" width="16" height="16" data-path="_assets/sidebar/administration.svg" /> **Administration** → **Audit Logs**. To work with the events on this page, you can do the following:

    * On the **Logs** tab:
      * Select the event type: **Control plane** or **Data plane**. Control plane events track management operations on resources (such as creating or deleting virtual machines). Data plane events track data access operations (such as reading or writing objects in Object Storage).
      * View event JSONs. To do this, click <Icon icon="https://mintcdn.com/nebius-ai-cloud/1Ha0sWR6e1mnIaHS/_assets/button-expand.svg?fit=max&auto=format&n=1Ha0sWR6e1mnIaHS&q=85&s=dbf113a30d45e5d3157fc27a243ae1ad" width="24" height="24" data-path="_assets/button-expand.svg" /> in an event's row.
      * Filter events by period or [by using filters](./filter#how-to-filter-events-in-the-web-console). Click <Icon icon="https://mintcdn.com/nebius-ai-cloud/1Ha0sWR6e1mnIaHS/_assets/sliders.svg?fit=max&auto=format&n=1Ha0sWR6e1mnIaHS&q=85&s=6a3b573e93de12fd69146532fd9d3089" width="16" height="16" data-path="_assets/sliders.svg" /> **Filters** and select the filters you need.

    * On the **Metrics** tab:
      * Select the event type: **Control plane** or **Data plane**.
      * View the number of events processed per second in a specific region and time period.
      * Only for data plane events, view information related to quota usage. For more information, see [Quotas in Audit Logs](/audit-logs/resources/quotas-limits).
  </Tab>

  <Tab title="CLI">
    1. To copy the ID of the required tenant, view your list of tenants:

       ```bash theme={null}
       nebius iam tenant list
       ```

    2. Get all events in the tenant:

       ```bash theme={null}
       nebius audit v2 audit-event list \
          --parent-id <tenant_ID> \
          --start <time_in_ISO_8601> \
          --end <time_in_ISO_8601>
       ```

       Start and end dates are required and must be in the [ISO 8601](https://www.iso.org/iso-8601-date-and-time-format.html) format. For example, to get all the events that happened in March 2025, run the following command:

       ```bash theme={null}
       nebius audit v2 audit-event list --parent-id <tenant_ID> \
         --start 2025-03-01T00:00:00Z \
         --end 2025-04-01T00:00:00Z
       ```

    3. (Optional) By default, only control plane events are shown.

       * **Control plane events** (default): Track management operations on resources, such as creating, updating or deleting virtual machines, clusters, or other infrastructure resources.

       * **Data plane events**: Track data access operations, such as reading or writing objects in Object Storage buckets.

       To view data plane events, specify `data_plane` in the `--event-type` parameter:

       ```bash theme={null}
       nebius audit v2 audit-event list \
          --parent-id <tenant_ID> \
          --start <time_in_ISO_8601> \
          --end <time_in_ISO_8601> \
          --event-type data_plane
       ```

    4. (Optional) To narrow down events, use [filters](./filter#how-to-filter-events-by-using-the-cli).
  </Tab>
</Tabs>