Log Streams
Auth0's log streaming service allows you to export tenant logs to a log analysis service. You can choose the content type and form and preview the payload using the Auth0 Dashboard. Log streaming allows you to react to log events like password changes or new registrations with your own business logic. Using the Auth0 Dashboard and API, you can pause a stream, view and update settings, and check the health of the stream.
You can create a new log stream in the Auth0 Dashboard using one of the services we support or you can configure a stream to a service you already use with a custom webhook.
Supported log streaming services
We support a variety of log streaming services through the Auth0 Marketplace, including:
Datadog (Auth0 also provides Datadog dashboard templates you can use. To learn more, read Use Auth0 Dashboard Templates with Datadog.
Splunk (Auth0 also provides a dashboard that you can use to visualize the data from your Auth0 tenant. The app allows you to use recommended aggregations from Auth0, or to use them as a starting point to create your own custom visualizations. To learn more, read Use Auth0 App for Splunk.)
Sumo Logic (Auth0 provides an Auth0 App for Sumo Logic which creates a dashboard that you can use to visualize the data from your Auth0 tenant. The dashboard allows you to monitor the health of the login traffic for a tenant. The app allows you to use recommended aggregations from Auth0, or to use them as a starting point to create your own custom visualizations. To learn more, read Use Auth0 App for Sumo Logic.)
Delivery attempts
Auth0 uses a streaming mechanism that delivers each log to your server as it is triggered in our system. We guarantee logs are delivered at least once.
When a log is triggered:
We attempt to deliver the log to your server up to three times.
If we fail to reach your server by the third attempt, we log an error visible in the Health view for the log stream.
We restart this process for any errored log until the problem is resolved.
If we fail to reach your server for 7 consecutive days, we'll automatically pause the stream. You'll need to resolve the issue, and then resume the stream manually.
Log retention
Your Auth0 log retention period depends on your subscription level.
If there is an issue where your server does not receive logs sent from Auth0, you can delete the stream and then recreate it with the Starting Cursor field set to a specific day and time within the retention period.