Agent activity

Description

Agent activity is the tenant-wide record of connector tool calls. Every call made by an agent, or by a person in chat, appears here whether it was allowed or blocked. Arguments are shown masked. The page is a read-only view in the Governance area.

If your organisation has a SIEM target, blocked calls are also sent there by default, with agent, person and rule (every call with the access event category). Arguments are masked and never sent to the SIEM. Records are kept for your organisation's request-log retention period.

It is available to users holding the request-logs permission (REQUEST_LOGS_VIEW). Anyone else who opens /agent-activity by direct URL is redirected to Chat (/easy). The server re-checks the permission on every request. Tenant roles only ever get records of their own organisation. A platform administrator has no organisation of their own: they first select one in the Tenant drop-down list, and until they do, the page asks them to pick a tenant and loads nothing. Their first pick keeps any filter already in the link (for example an agent's see all decisions link); switching to another tenant clears the connector, agent and person filters. The tenant choice is not kept when they leave the page, so after opening a record and going back they pick the tenant again.

Reading the list

Open Governance › Agent activity (user-block menu › Governance). Each row shows the agent, the connector and tool, the outcome, and the time. Rows from today show the time of day; older rows show the date and the time. Click a row to expand its masked arguments and the rule that applied.

Use the filters above the list:

Outcome — all, allowed, or blocked.
Agent — limit the list to one agent.
Person — limit the list to calls where this person is the owner or the acting user.
Connector — limit the list to one connector.
Time — the last 24 hours, 7 days (default), 30 days, or all time.

The filters are kept in the address (outcome, agent, person, connector, time), so a filtered view can be bookmarked or shared. An unknown or repeated value falls back to the default.

Select Load more to append older records. The list keeps the time window it opened with, so records do not shift while you page.

💡 Note: The list does not refresh by itself. Reload the page to see new activity.

Filter choices

The agent, person and connector choices are the ones that actually appear in the selected time window, loaded from the server; names are shown where known, otherwise the ID. The choices come from the most recent 20,000 records of the window and at most 200 entries per list. If a list was cut off, a hint says so; narrow the time window to see the rest. If the choices cannot be loaded, a message with Retry appears and the list itself keeps working.

Opening a single record

A record has its own address, /agent-activity/<id>. It opens already expanded, with the date and time of the call and a single Back to agent activity link. A record that does not exist, or belongs to another organisation, shows the same not-found message. Details are not available while you are viewing as another user.

Exporting to CSV

Select Export CSV to download the records that match the current filters as agent-activity-YYYY-MM-DD.csv. If the result is too large for one export, a message asks you to narrow the time window or add a filter. When the download starts, a confirmation names the file (Exported · agent-activity-YYYY-MM-DD.csv).

States

Loading — a placeholder list is shown while the records load.
No records yet — shown only when the time window is All time and no filter is set. If you may open Agents, an Open agents link is offered.
No matches — one sentence names the time window and outcome. With filters set, a Reset filters button clears them; with no filters set and a time window shorter than All time (for example the default last 7 days), a Show all time button widens the window instead.
No access — a message says you cannot view agent activity (403); there is no Retry, because retrying cannot help.
Viewing as another user — the list is not shown: "Details are not available while you are viewing as another user."
Not enabled — a message says agent activity is not enabled and to ask an admin to turn it on.
Error — a message with Retry; a failed load is never shown as an empty list.

Troubleshooting

Symptom	Cause	Fix
"You can't view agent activity · 403. Ask an admin for the permission to view request logs."	Your role lacks the request-logs permission.	Ask a tenant administrator.
"Agent activity is not enabled · ask an admin to turn it on."	The feature is switched off for your organisation.	Ask a tenant administrator.
"Agent activity could not be loaded."	A temporary server or network error. This is not an empty list.	Select Retry.
"No tool calls by agents or people yet."	Shown only when the time window is All time and no filter is set: no connector tool call was ever made.	Nothing to do, or select Open agents.
"No records for …" (for example "No records for the last 7 days · widen the time window or remove a filter.")	Nothing matches the selected time window and filters.	Select Reset filters (or Show all time when no filter is set and the window is shorter than all time), widen the time window or remove a filter.
"The request was rejected. Reset the filters and try again."	The filters in the page address were not valid.	Reset the filters.
"The filter choices could not be loaded."	The filter-choices request failed. The list is unaffected.	Select Retry.
"Too many records for one export."	The matching set exceeds the export limit.	Narrow the time window or add a filter.