Skip to main content

Add Stack Name to stack.sync.commit and stack.delete Audit Logs

Hi,

I'd like to request a feature enhancement for Spacelift audit logs. Currently, stack names are included in stack.update and stack.create audit logs, providing important context for these operations. However, the stack name is missing from stack.sync.commit and stack.delete audit logs.

This inconsistency makes it difficult to track and audit stack activities across different operation types. When reviewing audit logs for synchronization commits or deletions, we need to cross-reference with other sources to identify which stack was affected, which significantly impacts our ability to troubleshoot issues and maintain proper compliance records.

{"account":"glg","action":"stack.sync_commit","actor":"saml::xxxx","context":{"mutation":"stackSyncCommit"},"data":{"args":{"ID":"272054111736_datasync"}},"event_source":"spacelift","event_type":"audit_event","remoteIP":"202.142.117.226","timestamp":1745220683892,"timestamp_millis":1745220683892}

{"account":"glg","action":"stack.delete","actor":"spacelift","context":{"mutation":"stackDelete","runULID":"01JRBC295B1Z4X8XGM019RT9RC","stackSlug":"spacelift_stacks_677895703113"},"data":{"args":{"DestroyResources":null,"ID":"677895703113_gds_v3-i20"}},"event_source":"spacelift","event_type":"audit_event","remoteIP":"3.237.238.90","timestamp":1744138507179,"timestamp_millis":1744138507179}

Workaround
No Workarond for now
Problem
Status: 🗑️ Archived3 comments

Log in to comment and vote

Comments3

  • Black Breeze

    •

    Jun 10, 2025

    Assuming the problem was solved based on my response, archiving.

  • Black Breeze

    •

    May 8, 2025

    Thanks for the feedback!

    In audit logs, the data.args.ID field (e.g., 677895703113_gds_v3-i20) is the immutable stack identifier, and it’s the correct field to use for tracing activity. While the suffix is derived from the original stack name, we avoid including the current stack name directly in audit events because names can change over time—leading to potential confusion or inconsistency in forensic workflows.

  • Salmon Yogurt

    •

    Apr 25, 2025

    Please ignore the screenshot this was added by mistake.