# Platform Audit Logs ## Introduction With Platform Audit Logs, WorkOS automatically sends supported Audit Log events to your customer's audit trail and SIEM provider. These events appear alongside custom events emitted by your application. Simply go to the [WorkOS Dashboard](https://dashboard.workos.com/environment/audit-logs) to enable Platform Audit Logs. Captured events count toward your Audit Logs usage and billing. See [Audit Logs pricing](https://workos.com/pricing). ## Supported Events Platform Audit Logs currently support the events below, with more to come. If there's an event you'd like us to add, please reach out to us at [support@workos.com](mailto:support@workos.com) or in your team's WorkOS Slack channel. | Action | Activity | | --- | --- | | Session Created | A WorkOS-managed session is created through a supported operation. | | Session Revoked | A WorkOS-managed session is revoked through a supported operation. | | Organization Membership Created | A WorkOS organization membership is created through a supported operation. | | Organization Membership Updated | A WorkOS organization membership is updated through a supported operation. | | Organization Membership Deleted | A WorkOS organization membership is deleted through a supported operation. | ## Enable Platform Audit Logs Platform Audit Logs are turned off by default. Capture is configured per environment and applies to all organizations in that environment. To enable Platform Audit Logs: 1. Open [Audit Logs](https://dashboard.workos.com/environment/audit-logs) and select [Platform schemas](https://dashboard.workos.com/environment/audit-logs?tab=platform-logs). 2. Review the available event types, then select **Enable platform schemas**. Enabling Platform Audit Logs does not retrieve past activity. ## View, export, and stream events WorkOS adds Platform Audit Log events to your customer's audit trail alongside custom Audit Log events. You can view, export, and stream them in the same ways, using the WorkOS Dashboard, Admin Portal, and Log Streams. These events follow the organization's existing [Audit Logs retention settings](https://workos.com/docs/audit-logs#retention-and-export). - [Admin Portal](https://workos.com/docs/audit-logs/admin-portal) lets your customers view and export their organization's events. - You can export events as CSV through the Dashboard or API. See [Exporting Events](https://workos.com/docs/audit-logs/exporting-events). - Use [Log Streams](https://workos.com/docs/audit-logs/log-streams) to send Audit Log events to your customer's configured SIEM.