Add Stack Name to stack.sync.commit and stack.delete Audit Logs
Hi,
I'd like to request a feature enhancement for Spacelift audit logs. Currently, stack names are included in stack.update and stack.create audit logs, providing important context for these operations. However, the stack name is missing from stack.sync.commit and stack.delete audit logs.
This inconsistency makes it difficult to track and audit stack activities across different operation types. When reviewing audit logs for synchronization commits or deletions, we need to cross-reference with other sources to identify which stack was affected, which significantly impacts our ability to troubleshoot issues and maintain proper compliance records.
{"account":"glg","action":"stack.sync_commit","actor":"saml::xxxx","context":{"mutation":"stackSyncCommit"},"data":{"args":{"ID":"272054111736_datasync"}},"event_source":"spacelift","event_type":"audit_event","remoteIP":"202.142.117.226","timestamp":1745220683892,"timestamp_millis":1745220683892}
{"account":"glg","action":"stack.delete","actor":"spacelift","context":{"mutation":"stackDelete","runULID":"01JRBC295B1Z4X8XGM019RT9RC","stackSlug":"spacelift_stacks_677895703113"},"data":{"args":{"DestroyResources":null,"ID":"677895703113_gds_v3-i20"}},"event_source":"spacelift","event_type":"audit_event","remoteIP":"3.237.238.90","timestamp":1744138507179,"timestamp_millis":1744138507179}
- Workaround
- No Workarond for now
- Problem
Log in to comment and vote
Comments3
Black Breeze
Jun 10, 2025
Assuming the problem was solved based on my response, archiving.
Black Breeze
May 8, 2025
Thanks for the feedback!
In audit logs, the
data.args.IDfield (e.g.,677895703113_gds_v3-i20) is the immutable stack identifier, and it’s the correct field to use for tracing activity. While the suffix is derived from the original stack name, we avoid including the current stack name directly in audit events because names can change over time—leading to potential confusion or inconsistency in forensic workflows.Salmon Yogurt
Apr 25, 2025
Please ignore the screenshot this was added by mistake.