Event Log

The Event Log is a searchable, filterable, real-time audit trail of everything happening on your Aforo platform. It's stored for fast aggregation queries over months of data.

Event Categories

Category	Examples
API	`request.success`, `request.error`, `rate_limit.hit`
Billing	`invoice.created`, `payment.received`, `subscription.changed`
Auth	`login.success`, `login.failed`, `api_key.created`, `api_key.revoked`
System	`service.started`, `deploy.completed`, `health_check.failed`
Usage	`event.ingested`, `threshold.exceeded`, `anomaly.detected`
Support	`ticket.created`, `ticket.escalated`, `ticket.resolved`

Event Severity

Level	Color	When Used
`INFO`	Blue	Normal operations
`WARN`	Yellow	Threshold breaches, approaching limits
`ERROR`	Orange	Failed operations, retryable errors
`CRITICAL`	Red	Outages, data loss risk, security events

Searching Events

Use the Event Log's search interface to filter by:

Full-text — search event payloads for any string
Event type — filter to specific event types
Severity — show only WARNING+ events
Actor — filter by user ID, API key, or system component
Target — filter by entity type (subscription, invoice, product) and ID
Time range — from/to with second-level precision
Correlation ID — trace a request across multiple services

Live Stream

Switch to Live Stream mode to watch events in real time:

Events appear automatically via Server-Sent Events (SSE)
Color-coded by severity
Pause/resume without losing events
Auto-reconnects if the SSE connection drops

curl -N https://analytics.aforo.ai/api/v1/events/stream \
  -H "Authorization: Bearer $AFORO_API_KEY" \
  -H "X-Tenant-Id: $TENANT_ID" \
  -H "Accept: text/event-stream"

Saved Presets

Save commonly used filter combinations as presets for quick access:

"All auth failures today"
"CRITICAL billing events this week"
"My API key activity"

Event Payload

Each event contains:

{
  "eventId": "evt_abc123",
  "tenantId": "tenant_xyz",
  "eventType": "payment.received",
  "source": "billing",
  "severity": "INFO",
  "actorType": "SYSTEM",
  "actorId": "billing-pipeline",
  "targetType": "INVOICE",
  "targetId": "inv_def456",
  "payload": {
    "amount": 450.00,
    "currency": "USD",
    "invoiceId": "inv_def456",
    "customerId": "cust_ghi789"
  },
  "correlationId": "req_jkl012",
  "createdAt": "2026-04-17T14:32:01Z"
}

Data Retention

Events are retained for 365 days. After 365 days, events are automatically purged.

ℹ

For compliance purposes requiring longer retention, Aforo can archive events to your S3 bucket or preferred long-term storage. Contact support to set this up.