---
title: "Audit logs"
description: "Calico Cloud audit logs record changes to network policies, tiers, network sets, host endpoints, and other resources across connected clusters."
product: "Calico Cloud"
version: "v23.0.1"
section: "Observability"
canonical_url: "https://docs.tigera.io/calico-cloud/observability/elastic/audit-overview"
---

# Audit logs

## Big picture

Calico Cloud audit logs provide security teams and auditors historical data of all changes to resources over time.

## Concepts

### Resources used in audit logs

Calico Cloud audit logs are enabled by default for the following resources:

- Global networkpolicies
- Network policies
- Staged global networkpolicies
- Staged networkpolicies
- Staged Kubernetes network policies
- Global network sets
- Network sets
- Tiers
- Host endpoints

### Audit logs in the web console

Calico Cloud audit logs are displayed in the Timeline dashboard in the web console. You can filter logs, and export data in .json or .yaml formats.

![audit-logs](https://docs.tigera.io/assets/images/audit-logs-7b3d418ce8b1b523012e7a79d531e024.png)

Audit logs provide the core data for compliance reports.

![compliance-reports](https://docs.tigera.io/assets/images/configuration-compliance-5b72e093c1f763b1ccfbb42113656b08.png)

## Required next step

**Kubernetes resources** are also used in compliance reports and other audit-related features, but they are not enabled by default. You must enable Kubernetes resources through the Kubernetes API server. If you miss this step, some compliance reports will not work, and audit trails will not provide a complete view to your security team.

- [Enable Kubernetes audit logs](https://docs.tigera.io/calico-cloud/observability/kube-audit.md)