Audit Graph Studio Events

Graph event auditing captures Graph Studio activity, enabling administrators to monitor user behavior and investigate actions performed in the application. Only the ADMIN user and users granted the GRAPH_ADMINISTRATOR role can enable or disable event auditing.

Event auditing is configured as a database graph setting. To enable it, add the following setting into the ADB_GRAPH_SETTINGS$ table:

INSERT INTO ADB_GRAPH_SETTINGS$ VALUES ('GRAPH_STUDIO_EVENT_AUDITING',
    'TRUE');

When event auditing is enabled, Graph Studio records events for the following operations:

• User logins and logouts.

• Compute environment creation, restart, and deletion.

• Graph creation, updates, loading into or unloading from memory, and deletion.

• Data Definition Language (DDL) operations.

• PGX session creation and retrieval.

• PGX graph retrieval and loading into memory.

• PGX PGQL retrieval and execution.

When auditing is enabled, Graph Studio creates the ADB_GRAPH_AUDIT_LOGS$ table and the read-only ADB_GRAPH_AUDIT_LOGS_VIEW view under GRAPH$METADATA.

The ADMIN user and users with GRAPH_ADMINISTRATOR role can access audit data through ADB_GRAPH_AUDIT_LOGS_VIEW.

SELECT * FROM GRAPH$METADATA.ADB_GRAPH_AUDIT_LOGS_VIEW;

The view provides a stable interface for consuming applications. The underlying ADB_GRAPH_AUDIT_LOGS$ table may change without affecting the applications that query the view.

Only the Graph Studio administrators can delete audit-log records from the underlying table:

DELETE FROM GRAPH$METADATA.ADB_GRAPH_AUDIT_LOGS$;