# Team activity ## Overview Team activity provides an audit trail of activity across your WorkOS team. Use it to understand who or what changed a resource, what changed, and when the action occurred. Team activity records actions involving team members, organizations, API keys, connections, webhooks, AuthKit settings, and other resources. Each event includes: - **Action**: the type of activity that occurred. - **Actor**: the identity, credential, team, or system that performed the action. - **Targets**: the resources affected by the action. - **Occurred at**: the date and time of the action. - **Details**: additional event data provided as JSON. Team activity is available to team Admins. To enable it for your team, [contact WorkOS support](mailto:support@workos.com?subject=Enable%20Team%20Activity). ## View team activity After team activity is enabled, open [*Settings > Team activity*](https://dashboard.workos.com/settings/team/activity) in the WorkOS dashboard. Events are shown in reverse chronological order. You can search events, filter them by event type or a date range within the previous 90 days, and select an event to inspect its metadata and JSON details. ## Log streaming Log streaming continuously sends team activity events to a destination you manage. Use it to centralize WorkOS activity with your other security and operational data. The supported destinations and payload formats are the same as those described in the [Log Streams documentation](https://workos.com/docs/audit-logs/log-streams), including SIEM providers, data warehouses, object storage, and generic HTTPS endpoints. To enable team activity log streaming, [contact WorkOS support](mailto:support@workos.com?subject=Enable%20Team%20Activity%20Log%20Streaming).