---
schema_version: "1"
id: b14f446affbb09245119e3baa926068f79f2b2933530cd01e2c05d8ff75241a3
title: Activity Log
collection: tableau
version: next
locale: en-us
portal_url: https://docs.salesforce.com/tableau/next/en-us/server-linux/activity_log_overview.md
canonical_url: https://help.tableau.com/v0.0/server-linux/en-us/activity_log_overview.htm
source_site: help.tableau.com
content_type: documentation
content_hash: 697ab8d94354390d20f09910f6f75ccc91f8d155ca2710b31d85e44ad969a2e2
description: Overview of Activity Log tenant and site events used to audit Tableau Cloud activity, with retention details.
---
[Skip to main content](#main-content)

# Activity Log

If you have Tableau Server with Advanced Management, Activity Log files are automatically recorded for detailed analysis and auditing.

Use these logs to:

- **View and analyze event data:** Access detailed event data for Tableau Server, capturing compliance information and tracking activities across your sites. All events include a timestamp and the ID of the actor, and if relevant, the ID of the affected content.
- **Audit permissions changes:** Track and audit permissions changes, such as adding or removing users from a group, moving content between projects, and explicitly changing content permissions. This is essential for implementing robust controls for compliance purposes.
- **Supplement Admin Views:** Enhance the information provided by Admin Views to track site activity and usage metrics. You can integrate Activity Log data with monitoring tools, such as Splunk or Amazon EventBridge to query log fields and answer questions like the last 10 actions taken by a user, who last performed an event on content, and what the last action on content was.

## Accessing Activity Log events

Activity Log events are stored in the `vizportal` and `vizqlserver` folders on the local hard drive. By default, the folders are located at `/var/opt/tableau/tableau_server/data/tabsvc/logs/`. Within each directory, you'll find files named `<process name>-cepp-canonical-events_*.log` that record events and operations for your deployment.

For a full list of Activity Log events, see [Activity Log Site Event Type Reference](https://help.tableau.com/v0.0/server-linux/en-us/activity_log_schema.htm).

## Other articles in this section