Review audit logs

• Latest Dynatrace
• How-to guide
• 1-min read
• Published Dec 03, 2025

Sensitive Data Center writes audit logs by ingesting logs into your Dynatrace tenant. This allows you to audit and download records of historical actions, such as request creation, request approval, and policy creation.

To view audit logs:

Audit logs include the action taken (for example, Approve deletion request), the user who took the action, a link to the affected request or policy, and (for export and deletion requests only) the user identifier the request is for.

You can also review Sensitive Data Center audit logs with the following DQL query. Replace privacy_audit with default_logs if you have not configured audit logging to the privacy_audit bucket:

fetch logs
| filter dt.system.bucket == "privacy_audit"
| filter log.source == "Sensitive Data Center"

Additionally, data deletion for deletion and cleanup requests is tracked in DATA_DELETION_EVENT events. These include the number of rewritten bytes, the user who triggered deletion (for deletions triggered for Sensitive Data Center deletion and cleanup requests, this will be the service user), and a masked copy of the query used for deletion. To review them, use the following query:

fetch dt.system.events
| filter event.kind == "DATA_DELETION_EVENT"