Journals
Journals record every change in Celestian: who, when, what, and what the content was before and after. A journal entry is written in the same transaction as its change, so there is no change without a record.
Where to see it
Section titled “Where to see it”- Workspace level: the Journals tab in Workspace Settings, for holders of
workspace.manage. - Per object: the Journals section on the detail of a device, channel, group, rule, custom node, report, and more; read permission on that object is enough.
What an entry contains
Section titled “What an entry contains”| Column | Description |
|---|---|
| Time | Relative, with the absolute time in a tooltip. |
| Actor | The account (ID and username at the time), or service for automatic processes, with the IP and user agent. |
| Action | For example device.created, device.key_changed, member.roles_changed, rule.updated, alarm.acknowledged. |
| Object | The object that changed. |
| Diff | A comparison of the before and after snapshots. |
Secrets (device keys, hashes, tokens, output credentials) never enter the journal.
Filters and export
Section titled “Filters and export”Filter by action prefix, actor, and time range. CSV export is at most 50,000 rows, with values starting with =, +, -, or @ neutralized. Pagination uses a cursor.
Retention
Section titled “Retention”180 days by default, cleaned up hourly. The server administrator can change it.