> ## Documentation Index
> Fetch the complete documentation index at: https://docs.nebius.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Logs in Key Management Service

Key Management Service (KMS) keeps logs of actions that are performed on symmetric and asymmetric keys. You can view and analyze these logs as events in the [Audit Logs](/audit-logs/index) service.

KMS only supports *control plane logs*. They describe key management and lifecycle events, such as [creating](/kms/manage/create), [updating](/kms/manage/update), [deleting](/kms/manage/delete-restore) or [rotating](/kms/manage/rotate) a key.

## How to view logs

<Tabs group="interfaces">
  <Tab title="Web console">
    1. In the sidebar, go to <Icon icon="https://mintcdn.com/nebius-ai-cloud/1Ha0sWR6e1mnIaHS/_assets/sidebar/administration.svg?fit=max&auto=format&n=1Ha0sWR6e1mnIaHS&q=85&s=e6411dc023fd6972922c0a12a59ccf21" width="16" height="16" data-path="_assets/sidebar/administration.svg" /> **Administration** → **Audit Logs**.
    2. Select the region to search for KMS audit events.
    3. Select **Control plane**.
    4. Filter events by the `KMS` service. If this filter is not displayed, click **Filters** and then select **Service**.
  </Tab>

  <Tab title="CLI">
    Run [nebius audit v2 audit-event list](/cli/reference/audit/v2/audit-event/list):

    ```bash theme={null}
    nebius audit v2 audit-event list \
       --parent-id <tenant_ID> \
       --start <time_in_ISO_8601> \
       --end <time_in_ISO_8601> \
       --filter "service.name='KMS'" \
       --event-type control_plane \
       --region <region_ID>
    ```

    In the command, specify:

    * `--parent-id`: [Tenant ID](/iam/get-tenants#cli).
    * `--start`: Start time for the search, in the [ISO 8601](https://www.iso.org/iso-8601-date-and-time-format.html) format.
    * `--end`: End time for the search, in the ISO 8601 format.
    * `--region`: [Region](/overview/regions) to search for KMS audit events.
    * `--filter`: Filter expression. Set it to `service.name='KMS'` to return only KMS events. For more information, see [How to filter audit events](/audit-logs/events/filter).
    * `--event-type`: Type of audit event. Set it to `control_plane` because KMS only supports control plane logs.
  </Tab>
</Tabs>

For more details, see [Viewing events in Audit Logs](/audit-logs/events/view).

Parameters of an action, such as creating a key, are returned in the `.request.parameters` field of the Audit Logs event. For example:

```json theme={null}
{
  "request": {
    "parameters": {
      "metadata": {
        "id": "<key_ID>",
        "parent_id": "<project_ID>",
        "name": "<key_name>",
        "resource_version": "0",
        "labels": {}
      },
      "spec": {
        "description": "<key_description>",
        "algorithm": "<key_algorithm>"
      }
    }
  }
}
```

For more details, see [Structure and fields of events in Audit Logs](/audit-logs/events/reference).