Anypoint Platform audit logs and retention
What the Anypoint Platform audit logging service records and who can see it, how sign-in events are logged by identity type, how to configure retention, and how to export audit logs with Telemetry Exporter or pull them reliably through the Audit Log Query API.
Recognize the audit logging capabilities of Anypoint Platform.
~7 min read · 6 practice questions
What the exam expects
- Recognize what an Anypoint Platform audit log entry contains, including Anypoint Staff and connected app attribution.
- Determine who can view audit logs and why a business-group-scoped viewer sees only part of the history.
- Predict which sign-in events appear in the audit log for Anypoint Platform accounts, SAML, LDAP and OpenID Connect (OIDC) users.
- Configure audit log retention to meet a compliance period, with the right permissions, scope and timing.
- Design a reliable export or extraction of audit logs with Telemetry Exporter or the Audit Log Query API.
Audit logging service: a queryable, timestamped history of user interactions with objects in Anypoint Platform (Audit Logging). Audit Log Viewer: the permission, besides Organization Administrator, that opens the audit log UI and Query API (Audit Logging). Audit Log Config Manager: the permission that lets a user change the retention period (Audit Log Retention). Telemetry Exporter: the Anypoint Monitoring feature that sends audit logs to third-party observability tools (Audit Logging).
Sources for this section (2)
Key facts
- Detail
- One year; six years for organizations created before July 10, 2023
- Detail
- 30 to 2190 days
- Detail
- At least seven days ahead; starts 00:00:00 UTC
- Detail
- Audit Log Config Manager; Organization Administrator for the UI
- Detail
- Organization Administrator or Audit Log Viewer
- Detail
- Organization level only
- Detail
- Not recorded
- Detail
- mulesoft.audit.id
- Detail
- Truncated above 30KB compressed
- Detail
- Logged by Anypoint Staff
- Detail
- 700 per minute per IP in US; 40 in EU and Gov
- Why might a failed sign-in with a mistyped, nonexistent username leave no audit entry for an Anypoint Platform account?
- When can an organization configure its audit log retention period at all?
- Which products' audit entries carry an Environment value?
- What does the payload of an organization-creation audit entry contain?
The questions are free to read. Answers with their sources and self-grading are included with the pack.
Keep reading with the MuleSoft Platform Integration Architect pack
- Core concepts
- Exam traps
- Worked scenario
The pack includes:
- All 40 lessons of the MuleSoft Platform Integration Architect guide, with reading progress
- Interactive decision walks and step-by-step sequence steppers
- Practice exams purchase adds inline bank questions and topic practice (6 questions for this lesson)
- An official source cited for every claim
- An AI tutor that answers from the guide
- Choose guide-only, practice-only, or save $4 with both