LogTide
v0.8.3
Released
Feature

Comprehensive Audit Logging & OIDC Brand Icons

Major expansion of the audit trail system covering all critical platform actions for GDPR/SOC2 compliance, OIDC provider brand icons, and fixes for date formatting localization and data availability routing.

  • Audit logging for log access, auth events, identity management, provider config, settings, and sessions
  • OIDC login page shows brand icons for well-known providers (Google, Microsoft, GitHub, GitLab, Okta, Auth0, Keycloak, Authentik)
  • Backend auto-detects OIDC provider icon from issuer URL
  • Date/number formatting now respects user's browser/system locale
  • Fixed data-availability endpoint for ClickHouse and MongoDB storage engines

Added

  • Comprehensive Audit Logging: major expansion of the audit trail system to cover all critical platform actions for improved compliance (GDPR/SOC2) and security monitoring.
    • Log Access Auditing: every log search, trace view, context lookup, single log detail view, and live stream connection is now recorded with user identity, IP address, and query parameters.
    • External Authentication Auditing: successful logins via OIDC and LDAP providers are now tracked, including new user registration events.
    • Identity Management Auditing: linking and unlinking of external identities (Google, GitHub, LDAP, etc.) to user accounts is now recorded.
    • Authentication Provider Auditing: all administrative actions on auth providers (create, update, delete, reorder) are now fully audited with configuration change summaries.
    • System Settings Auditing: any changes to global platform settings (auth mode, signup status, default users) are now tracked with before/after metadata.
    • Session Auditing: viewing of active session lists and individual session event timelines is now recorded.
    • Audit metadata now includes detailed context like search queries (q), filter parameters, and updated keys for configuration changes.
  • OIDC login page now shows brand icons for well-known providers (Google, Microsoft/Azure, GitHub, GitLab, Okta, Auth0, Keycloak, Authentik); unknown providers fall back to the generic icon
  • Backend auto-detects the provider icon from the issuer URL when creating or updating an OIDC provider, with name/slug matching as fallback for self-hosted setups

Fixed

  • Date and number formatting localization: removed hardcoded locales (it-IT, en-US) from the frontend (SIEM, Search, Admin, etc.) to ensure the application automatically respects the user’s browser/system language settings.
  • GET /api/v1/projects/data-availability returned logs: [] (and incorrect traces/metrics) when STORAGE_ENGINE=clickhouse or mongodb; the endpoint now routes all three checks through the reservoir so they hit the correct backend