# Audit log on queries done to contracts on Daml Hub or through Ledger API

**URL:** <https://forum.canton.network/t/audit-log-on-queries-done-to-contracts-on-daml-hub-or-through-ledger-api/4109>\
**Category:** App Development\
**Tags:** damlhub\
**Created:** [March 14, 2022, 4:55pm UTC](https://forum.canton.network/t/audit-log-on-queries-done-to-contracts-on-daml-hub-or-through-ledger-api/4109 "2022-03-14T16:55:01Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Luis\_Marado](https://yyz2.discourse-cdn.com/flex034/user_avatar/forum.canton.network/luis_marado/32/189_2.png) [@Luis\_Marado](https://forum.canton.network/u/Luis_Marado)\
**Post date:** [March 14, 2022, 4:55pm UTC](https://forum.canton.network/t/audit-log-on-queries-done-to-contracts-on-daml-hub-or-through-ledger-api/4109/1 "2022-03-14T16:55:01Z")

</div>

As a user of Daml Hub is there a way in which to extract an audit log of actions executed by this user through Daml Hub or the Ledger API (through the JSON API)?

Example: As an operator (with an “account@domain” on Daml Hub) I initiated workflows with another party on Daml Hub (from “anotherAccount@sameDomainAsAbove”) that provides access to various contracts to execute other workflows and gets visibility on contracts. Would there be a way in which the logs on operations executed by this other user through Daml Hub or directly to the Ledger API could be retrieved directly from Daml Hub for compliance purposes?

In this case I’d be interested in extracting an audit log of operations that do not have effects on the ledger (queries).

---

<div class="post-metadata">

**Author:** ![dtanabe](https://yyz2.discourse-cdn.com/flex034/user_avatar/forum.canton.network/dtanabe/32/91_2.png) [@dtanabe](https://forum.canton.network/u/dtanabe)\
**Post date:** [March 14, 2022, 7:51pm UTC](https://forum.canton.network/t/audit-log-on-queries-done-to-contracts-on-daml-hub-or-through-ledger-api/4109/2 "2022-03-14T19:51:44Z")

</div>

For the _write-side_, the transaction stream (available over the gRPC Ledger API) would be this audit log.

For the _read-side_, although we have an internal access logs, we unfortunately do not make these publicly available.

But as part of a potential feature request, could you outline more specifically what you are looking for?

---

<div class="post-metadata">

**Author:** ![Luis\_Marado](https://yyz2.discourse-cdn.com/flex034/user_avatar/forum.canton.network/luis_marado/32/189_2.png) [@Luis\_Marado](https://forum.canton.network/u/Luis_Marado)\
**Post date:** [March 15, 2022, 8:48am UTC](https://forum.canton.network/t/audit-log-on-queries-done-to-contracts-on-daml-hub-or-through-ledger-api/4109/3 "2022-03-15T08:48:51Z")

</div>

Essentially as part of a potential compliance requirement it could be deemed necessary to have a vision on what certain parties were querying.

E.g.: as an application manager I queried data on customer data held on a contract between the customer and the company (application manager queries in a “readAs company” manner or has direct access to the contract). The company may have to provide an audit on its employees actions on seeing sensitive information to regulators.

This would also include access through Daml Hub or directly through the Ledger API in case the application was to be deployed on Daml Hub