# Audits

Lenses audits all user actions. Audit events can be viewed in Lenses and also sent to two channels, **Splunk** and **Webhook**.

{% hint style="info" %}
Audits can also be written to a file by setting a file path in the **lenses.audit.to.log.file** option in **lenses.conf.** Lenses will then write audit entries to disk as JSON for collection by your log aggregation systems.
{% endhint %}

## Audit Connections

To send audits entries to an external system, you first need to tell each Lenses agent when it can send them to, these are audits connections, defined in the [provisioning file](https://docs.lenses.io/latest/deployment/configuration/agent/automation).

You can integrate and send alerts to:

1. Splunk
2. Webhooks

You can configure the provisioning file by selecting  `Environments & Topics` option from the left sidebar, expand the environment node and select the the `Configuration` node. You can then edit, test and apply the provisioning file againts the connected agent.

## Audit Channels

Once you have audit connections configured, you can then create audit channels. Channels form the link to the connection, you can create multiple channels per connection.

Select the `Environments & Topics` option from the left sidebar, expand the environment node you are interested in and select the `Audit Logs` node, this will open the listing of audit events.

Select the channels sub tab so view existing channels. You can either then edit the channel or create a new channel.

<figure><img src="/files/ubQTIPV72VCwHViG8w5a" alt=""><figcaption></figcaption></figure>

### Viewing audit logs in Lenses

Select the `Environments & Topics` option from the left sidebar, expand the environment node you are interested in and select the `Audit logs` node, this will open the listing audit events.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.lenses.io/latest/user-guide/using/governance/audits.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.