# Audits

Lenses audits all user actions. Audit events can be viewed in Lenses and also sent to two channels, **Splunk** and **Webhook**.

{% hint style="success" %}
For version below Lenses 6.0 omit the environment selection.

Audits can also written to a file by setting a file path in the **lenses.audit.to.log.file** option in **lenses.conf.** Lenses will then write audit entries to disk as JSON for collection by your log aggregation systems.
{% endhint %}

## Viewing audit logs in Lenses

Go to **Environments->\[Your Environment]->Audit Logs**. Lenses will display the activity including, who performed the action and when. Details can also be viewed (dependent on the action).

<figure><img src="/files/uTXcL8wYNVNRpZps7Gpd" alt=""><figcaption></figcaption></figure>

## Sending audit logs to Splunk

To send audit logs to Splunk, you first need a Splunk connection.

1. Go to **Environments->\[Your Environment]->Configuration** and select **Splunk** and enter your required details in the editor.
2. Go to **Environments->\[Your Environment]->Audits->Channels** and create a new channel with your connection.

## Sending audit logs to a Webhook

First, you need a Webhook connection.

1. Go to **Environments->\[Your Environment]->Configuration** and select **Webhook** and enter your required details in the editor.
2. Go to **Environments->\[Your Environment]->Audits->Channels** and create a new channel with your connection.

Enter:

1. Choose a name for your Channel instance.
2. Select your connection.
3. Set the HTTP method to use.
4. Set the Request path. A URI-encoded request path, which may include a query string. Supports alert-variable interpolation.
5. Set the HTTP Headers
6. Set the Body payload

{% hint style="info" %}
Lenses can also audit users' access to data and send events to multiple channels at the same time.
{% endhint %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.lenses.io/latest/devx/6.1/user-guide/self-service-and-governance/audits.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.