# Application Logs The [**Logs**](https://dashboard.clerk.com/~/application-logs) page of the Clerk Dashboard provides a detailed audit trail of events that occur within your instance. Application Logs track actions such as sign-ins, sign-ups, user updates, organization changes, and more — enabling debugging, compliance, and observability. ## Viewing and filtering logs The Application Logs page displays a reverse-chronological feed of events. You can narrow the results using the following filters: - **Event type**: Filter by event type (e.g., `user.created`, `sign_in.completed`). Supports trailing wildcards (e.g., `sign_in.*`). - **Actor**: Filter by the user or API key that triggered the event. - **Subject**: Filter by the resource ID being acted upon (e.g., a user ID or organization ID). - **Trace ID**: Filter by distributed trace ID for correlating events across systems. - **Device**: Filter by device ID. - **Date range**: Set a time window to scope the results. For a complete list of event types, see [Supported events](#supported-events). ## Log detail view Select any log entry to view its full details, including: - **Event metadata**: Event type, timestamp, actor, subject, and source. - **Payload**: The full event data as a JSON object, containing the state of the resource at the time of the event. ## Plans and retention Application Logs retention depends on your [plan](https://clerk.com/pricing){{ target: '_blank' }}: | Plan | Retention period | | -------------- | ---------------- | | **Hobby** | 1 day | | **Pro** | 7 days | | **Business** | 30 days | | **Enterprise** | Custom | Retention periods apply equally to production and development instances. ## Supported events The following tables list all event types that can appear in Application Logs, organized by category. Use these identifiers when filtering logs in the Clerk Dashboard. ### Sign-up events | Event type | Description | | ------------------------------------ | ------------------------------------------ | | `sign_up.created` | Sign-up was created | | `sign_up.completed` | Sign-up was completed | | `sign_up.updated` | Sign-up was updated | | `sign_up.failed` | Sign-up failed | | `sign_up.email_address.created` | Email address was added to sign-up | | `sign_up.phone_number.created` | Phone number was added to sign-up | | `sign_up.web3_wallet.created` | Web3 wallet was added to sign-up | | `sign_up.username.created` | Username was added to sign-up | | `sign_up.password.created` | Password was added to sign-up | | `sign_up.unsafe_metadata.created` | Unsafe metadata was added to sign-up | | `sign_up.legal_accepted` | Legal terms were accepted for sign-up | | `sign_up.invitation.accepted` | Invitation was accepted for sign-up | | `sign_up.external_account.connected` | External account was connected for sign-up | | `sign_up.saml_account.connected` | SAML account was connected for sign-up | #### Enumeration events | Event type | Description | | ------------------------------------------ | --------------------------------------------- | | `sign_up.enumeration_target.email_address` | Sign-up attempted with existing email address | | `sign_up.enumeration_target.phone_number` | Sign-up attempted with existing phone number | | `sign_up.enumeration_target.web3_wallet` | Sign-up attempted with existing web3 wallet | | `sign_up.enumeration_target.username` | Sign-up attempted with existing username | #### Verification events | Event type | Description | | --------------------------------------------------------- | --------------------------------------------------- | | `sign_up.email_address.verification.code_sent` | Verification email code was sent for sign-up | | `sign_up.email_address.verification.code_attempt_invalid` | Invalid verification email code attempt for sign-up | | `sign_up.email_address.verified` | Email address was verified for sign-up | | `sign_up.email_address.verification.link_sent` | Verification email link was sent for sign-up | | `sign_up.phone_number.verification.code_sent` | Verification phone code was sent for sign-up | | `sign_up.phone_number.verification.code_attempt_invalid` | Invalid verification phone code attempt for sign-up | | `sign_up.phone_number.verified` | Phone number was verified for sign-up | #### CAPTCHA events | Event type | Description | | -------------------------- | ------------------------ | | `sign_up.captcha.required` | Sign-up requires CAPTCHA | | `sign_up.captcha.passed` | Sign-up CAPTCHA passed | | `sign_up.captcha.failed` | Sign-up CAPTCHA failed | | `sign_up.captcha.skipped` | Sign-up CAPTCHA skipped | ### Sign-in events | Event type | Description | | ---------------------------------------- | ----------------------------------------------------------- | | `sign_in.created` | Sign-in was created | | `sign_in.completed` | Sign-in was completed | | `sign_in.failed` | Sign-in failed | | `sign_in.transfer.completed` | Sign-in was completed via transfer | | `sign_in.invitation.accepted` | Invitation was accepted for sign-in | | `sign_in.user_locked` | Sign-in was blocked because user is locked | | `sign_in.identifier_blocked` | Sign-in was blocked by allowlist/blocklist | | `sign_in.already_signed_in` | Sign-in was rejected because user is already signed in | | `sign_in.enterprise_connection_required` | Sign-in was rejected — must use enterprise connection email | #### Password events | Event type | Description | | ------------------------------ | ------------------------------------------------------------------------------- | | `sign_in.password.failed` | Password attempt failed during sign-in | | `sign_in.password.pwned` | Password found in public breach database (HIBP) during sign-in | | `sign_in.password.compromised` | Password flagged for mandatory reset by admin or instance policy during sign-in | #### Verification events | Event type | Description | | --------------------------------------------------------- | --------------------------------------------------- | | `sign_in.email_address.verification.code_sent` | Verification email code was sent for sign-in | | `sign_in.email_address.verification.link_sent` | Verification email link was sent for sign-in | | `sign_in.email_address.verification.code_attempt_invalid` | Invalid verification email code attempt for sign-in | | `sign_in.email_address.verified` | Email address was verified for sign-in | | `sign_in.phone_number.verification.code_sent` | Verification phone code was sent for sign-in | | `sign_in.phone_number.verification.code_attempt_invalid` | Invalid verification phone code attempt for sign-in | | `sign_in.phone_number.verified` | Phone number was verified for sign-in | | `sign_in.web3_signature.failed` | Web3 signature verification failed during sign-in | #### Factor events | Event type | Description | | -------------------------------------- | -------------------------------- | | `sign_in.prepare_first_factor.failed` | First factor preparation failed | | `sign_in.prepare_first_factor.passed` | First factor preparation passed | | `sign_in.attempt_first_factor.failed` | First factor attempt failed | | `sign_in.attempt_first_factor.passed` | First factor attempt passed | | `sign_in.prepare_second_factor.failed` | Second factor preparation failed | | `sign_in.prepare_second_factor.passed` | Second factor preparation passed | | `sign_in.attempt_second_factor.failed` | Second factor attempt failed | | `sign_in.attempt_second_factor.passed` | Second factor attempt passed | #### CAPTCHA events | Event type | Description | | -------------------------- | ------------------------ | | `sign_in.captcha.required` | Sign-in requires CAPTCHA | | `sign_in.captcha.passed` | Sign-in CAPTCHA passed | | `sign_in.captcha.failed` | Sign-in CAPTCHA failed | | `sign_in.captcha.bypassed` | Sign-in CAPTCHA bypassed | ### User events | Event type | Description | | --------------------------------- | --------------------------------------------- | | `user.created` | User was created | | `user.updated` | User was updated | | `user.deleted` | User was deleted | | `user.banned` | User was banned | | `user.unbanned` | User was unbanned | | `user.locked` | User was locked | | `user.unlocked` | User was unlocked | | `user.metadata.updated` | User metadata was updated | | `user.credits.adjusted` | User credits were adjusted | | `user.password.verified` | User password was verified | | `user.password_compromised.set` | User password marked as compromised | | `user.password_compromised.unset` | User password no longer marked as compromised | | `user.totp_code.verified` | User TOTP code was verified | | `user.mfa.disabled` | User MFA was disabled | | `user.backup_codes.deleted` | All user backup codes were deleted | | `user.all_totps.deleted` | All user TOTPs were deleted | #### External account events | Event type | Description | | ------------------------------------- | --------------------------------------------------- | | `user.external_account.connected` | External account was connected to user account | | `user.external_account.disconnected` | External account was disconnected from user account | | `user.external_account.reauthorized` | External account was reauthorized for user account | | `user.external_account.token_revoked` | External account token was revoked | #### MFA events | Event type | Description | | --------------------------- | ---------------------------------------------------------- | | `user.totp.created` | TOTP (authenticator app) setup was initiated for user | | `user.totp.verified` | TOTP (authenticator app) was verified and enabled for user | | `user.totp.deleted` | TOTP (authenticator app) was removed from user account | | `user.backup_codes.created` | Backup codes were generated for user MFA recovery | #### Password events | Event type | Description | | ----------------------------- | --------------------------- | | `user.password.changed` | User password was changed | | `user.password.change_failed` | User password change failed | | `user.password.deleted` | User password was removed | #### Profile image events | Event type | Description | | ---------------------------- | ------------------------------ | | `user.profile_image.updated` | User profile image was updated | | `user.profile_image.deleted` | User profile image was deleted | #### Passkey events | Event type | Description | | ----------------------- | ------------------------------------- | | `user.passkey.created` | Passkey was created for user account | | `user.passkey.verified` | Passkey was verified for user account | | `user.passkey.updated` | Passkey was updated for user account | | `user.passkey.deleted` | Passkey was deleted from user account | ### Session events | Event type | Description | | ----------------------- | ------------------------- | | `session.created` | Session was created | | `session.ended` | Session ended | | `session.revoked` | Session was revoked | | `session.token.created` | Session token was created | ### SCIM events | Event type | Description | | ------------------------------- | ----------------------------- | | `scim.user.created` | SCIM user was created | | `scim.user.updated` | SCIM user was updated | | `scim.user.patched` | SCIM user was patched | | `scim.user.deleted` | SCIM user was deleted | | `scim.group_membership.changed` | SCIM group membership changed | | `scim.provisioning_failed` | SCIM provisioning failed | ### Organization events | Event type | Description | | ------------------------------- | ---------------------------------- | | `organization.created` | Organization was created | | `organization.updated` | Organization was updated | | `organization.deleted` | Organization was deleted | | `organization.logo.updated` | Organization logo was updated | | `organization.logo.deleted` | Organization logo was deleted | | `organization.metadata.updated` | Organization metadata was updated | | `organization.credits.adjusted` | Organization credits were adjusted | #### Membership events | Event type | Description | | ------------------------------------------ | -------------------------------------------- | | `organization_membership.created` | User was added as a member to organization | | `organization_membership.updated` | Organization membership was updated | | `organization_membership.deleted` | User was removed from or left organization | | `organization_membership.metadata.updated` | Organization membership metadata was updated | #### Invitation events | Event type | Description | | ---------------------------------- | --------------------------------------------- | | `organization_invitation.created` | Organization invitation was created | | `organization_invitation.accepted` | User accepted invitation to join organization | | `organization_invitation.revoked` | Organization invitation was revoked | #### Membership request events | Event type | Description | | ------------------------------------------ | -------------------------------------------- | | `organization_membership_request.accepted` | Organization membership request was accepted | | `organization_membership_request.rejected` | Organization membership request was rejected | #### Suggestion events | Event type | Description | | ---------------------------------- | --------------------------------------------- | | `organization_suggestion.accepted` | User accepted suggestion to join organization | #### Domain events | Event type | Description | | ------------------------------------------------------- | ------------------------------------------------------------- | | `organization_domain.created` | Domain was added to organization | | `organization_domain.deleted` | Domain was removed from organization | | `organization_domain.updated` | Organization domain was updated | | `organization_domain.enrollment_mode.updated` | Enrollment mode was updated for organization domain | | `organization_domain.affiliation_verification.prepared` | Affiliation verification was prepared for organization domain | | `organization_domain.affiliation.verified` | Organization domain affiliation was verified | ### Billing events | Event type | Description | | --------------------------------------------------------- | ---------------------------------------------------------- | | `user.subscription_item.canceled` | User canceled subscription | | `user.subscription_item.free_trial.extended` | Free trial was extended for user subscription | | `user.subscription_item.price_transition.created` | Price transition was created for user subscription | | `user.checkout.created` | User created checkout | | `user.checkout.confirmed` | User confirmed checkout | | `user.payment_method.created` | User created payment method | | `user.payment_method.initialized` | User initialized payment method setup | | `user.payment_method.deleted` | User deleted payment method | | `user.default_payment_method.set` | User set default payment method | | `organization.subscription_item.canceled` | Organization subscription was canceled | | `organization.subscription_item.free_trial.extended` | Free trial was extended for organization subscription | | `organization.subscription_item.price_transition.created` | Price transition was created for organization subscription | | `organization.checkout.created` | Organization checkout was created | | `organization.checkout.confirmed` | Organization checkout was confirmed | | `organization.payment_method.created` | Payment method created for organization | | `organization.payment_method.initialized` | Payment method setup initialized for organization | | `organization.payment_method.deleted` | Payment method deleted for organization | | `organization.default_payment_method.set` | Default payment method set for organization | ### Email address events | Event type | Description | | ------------------------ | -------------------------- | | `email_address.created` | Email address was created | | `email_address.verified` | Email address was verified | | `email_address.updated` | Email address was updated | | `email_address.deleted` | Email address was deleted | ### Phone number events | Event type | Description | | ----------------------- | ------------------------- | | `phone_number.created` | Phone number was created | | `phone_number.verified` | Phone number was verified | | `phone_number.updated` | Phone number was updated | | `phone_number.deleted` | Phone number was deleted | ### Web3 wallet events | Event type | Description | | ---------------------- | ------------------------ | | `web3_wallet.created` | Web3 wallet was created | | `web3_wallet.verified` | Web3 wallet was verified | | `web3_wallet.deleted` | Web3 wallet was deleted | ### OAuth events | Event type | Description | | ----------------------------- | -------------------------------- | | `oauth_authorization.granted` | OAuth authorization was granted | | `oauth_authorization.failed` | OAuth authorization failed | | `oauth_consent.denied` | OAuth consent was denied by user | | `oauth_token.created` | OAuth token was created | | `oauth_session.ended` | OAuth session ended | ### Invitation events | Event type | Description | | --------------------- | -------------------------------- | | `invitation.created` | Instance invitation was created | | `invitation.accepted` | Instance invitation was accepted | | `invitation.revoked` | Instance invitation was revoked | ### Actor token events | Event type | Description | | --------------------- | ----------------------- | | `actor_token.created` | Actor token was created | | `actor_token.revoked` | Actor token was revoked | ### Sign-in token events | Event type | Description | | ----------------------- | ---------------------------------- | | `sign_in_token.created` | Sign-in token was created for user | | `sign_in_token.revoked` | Sign-in token was revoked | ### Agent task events | Event type | Description | | -------------------- | ---------------------- | | `agent_task.created` | Agent task was created | | `agent_task.revoked` | Agent task was revoked | ### Waitlist events | Event type | Description | | ------------------------ | -------------------------------------------- | | `waitlist_entry.created` | Waitlist entry was created | | `waitlist_entry.deleted` | Waitlist entry was deleted | | `waitlist_entry.invited` | An invitation was sent to the waitlist entry | --- ## Sitemap [Overview of all docs pages](https://clerk.com/docs/llms.txt)