# `aaa.audit_events`

Note

The schema for `aaa.audit_events` is coming soon.

## Purpose

The **audit events** dataset captures a complete trail of actions across Coralogix features by combining a consistent envelope with an action-specific payload so teams can **prove who did what and when**, monitor API usage and errors, investigate security and compliance issues, and reconstruct resource changes over time.

## Next steps

Review alert evaluation and trigger metadata with [`alerts.history`](https://coralogix.com/docs/user-guides/data-layer/system_dataspace/alerts-history/index.md).