Skip to main content

The Clerk Dashboard offers three types of logs, each covering a different kind of activity:

LogUse it to investigateExample events
Application LogsAuthentication and user activity within an instanceSign-ins, sign-ups, sessions, user updates, and Organization changes
Email LogsDelivery of transactional emails sent through ClerkAccepted, delivered, deferred, bounced, and dropped emails
Admin LogsConfiguration and administrative changes made from the Clerk Dashboard, Backend API, or Platform APIInstance settings, domains, secrets, Roles, Permissions, and integrations

Viewing and filtering logs

Each log page displays a reverse-chronological feed of events. The available filters differ by log type.

You can filter Application Logs by:

  • Event type: The type of event (e.g., user.created, sign_in.completed). Supports trailing wildcards (e.g., sign_in.*).
  • User ID: The ID of a user (e.g., user_123). Includes events the user triggered and events in which they were acted upon.
  • Identifier: An email address, phone number, username, or Web3 wallet. The value must match the stored identifier exactly. If multiple users have it, events involving all of them are included.
  • Actor: The user or API key that triggered the event.
  • Subject: The ID of the resource being acted upon (e.g., a user ID or Organization ID).
  • IP address: The IP address the event originated from.
  • Trace ID: The distributed trace ID, for correlating events across systems.
  • Device: The device ID.
  • Session ID: The ID of a session (e.g., sess_123). Includes events triggered by requests made with that session, but excludes events triggered outside it, such as the sign-in that created it.
  • Date range: The time window to search.

Note

User ID and Identifier each find events where a user was the actor or the subject. You can use only one of these filters at a time, and neither can be combined with Actor or Subject. Selecting a filter hides the incompatible options. Actor and Subject can be used together.

For a complete list of event types, see Supported events.

You can filter Email Logs by:

  • Event type: The delivery outcome or interaction (e.g., bounced, delivered).
  • Recipient: The recipient's email address.
  • IP address: The IP address associated with the event.
  • Message ID: A specific message, to follow every event for it.
  • Date range: The time window to search.

For a complete list of event types, see Supported events.

You can filter Admin Logs by:

  • Event type: The type of event (e.g., oauth_application.updated, domain.created). Supports trailing wildcards (e.g., oauth_application.*).
  • Instance: The instance the action targeted.
  • Application: The application the action targeted.
  • Actor: The actor that triggered the event — a Dashboard user, an instance , or a Platform API access token.
  • IP address: The IP address the action originated from.
  • Date range: The time window to search.

For a complete list of event types, see Supported events.

Log detail view

Select any log entry to view its full details, including:

  • Event metadata: Fields such as event type and timestamp. Other fields vary by log type; for example, Email Logs include the recipient, message ID, and delivery status.
  • Payload: Additional event data as a JSON object, when available.

Plans and retention

Availability and log retention depend on your plan:

PlanApplication LogsEmail LogsAdmin Logs
Hobby1 day1 dayNot available
Pro7 days7 daysNot available
Business30 days30 days30 days
EnterpriseCustomCustomCustom

These retention periods apply to both production and development instances.

Important

Admin Logs record events starting August 24, 2026. Actions taken before this date are not available, regardless of your plan's retention period.

Feedback

What did you think of this content?

Last updated on