About this block

Audit Search Panel is the compliance search surface for the Acme workspace, leading with a filter bar (Actor by name or email, Action type as a namespace picker like member.* or sso.*, and Date range) followed by a results table. Each row shows actor name and email, the action in a monospace chip (api_key.rotate, billing.plan_change), the target in mono (acme-corp, key_9kz2wm), a short timestamp, the originating IP, and a Success or Denied outcome badge. Export CSV sits in the panel header. The description is direct: Every action taken in the Acme workspace, immutable and tamper-evident.

Audit rows are one typed array from the shared Acme people set. The mono action chip plus IP column is the pair that makes this useful in a real compliance review, not just an internal admin table.

When to use

Reach for this block on the workspace security or audit settings page, wired to your append-only audit log endpoint. Scope the action type picker to your actual event namespaces and add pagination when the result set grows beyond one page.

A natural flow around it on an Application Pro page:

Before

• App shell
• Settings pages

After

• Content flags table
• Reports

What you can display

One strong use is the workspace-level compliance search. Other audit panel configurations:

• Resource-scoped log. Filtered to a single API key or integration, action type pre-selected.
• Denied actions only. Date range defaulted to 24 hours, outcome filter locked to Denied.
• Data export log. Actions scoped to export.* events for data privacy reviews.

Tip: the audit log description is the one place in the app where calling something immutable and tamper-evident is not overstatement; it builds trust with security-minded admins at the exact moment they need it.