skills.rest
nimdvir
nimdvirCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

notion-audit-log

Reference Notion Enterprise audit log events, SIEM streaming, filtering, and CSV export.

1|Updated May 26, 2026
Search Tags:#compliance#notion#enterprise#siem#audit log#csv export#security events
One-click install
npx skills add https://github.com/nimdvir/dima-publishing --skill notion-audit-log-nimdvir
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: notion-audit-log
Source: https://github.com/nimdvir/dima-publishing/tree/main/.agents/skills/notion-audit-log
Command: npx skills add https://github.com/nimdvir/dima-publishing --skill notion-audit-log-nimdvir

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Security and compliance teams on Notion Enterprise need to know exactly which workspace activities are logged, how to filter and export audit events, and how to stream them into a SIEM, but the event catalog is large and scattered across admin settings. ## Core Features & Use Cases - Event Catalog Reference: Complete listing of page, data source, teamspace, workspace, account, and custom agent events recorded in the audit log. - SIEM Integration Guidance: Steps to configure a custom SIEM webhook so audit events stream as JSON payloads in real time. - Filtering & CSV Export: Instructions for filtering by date, person, event type, and related actions, plus exporting up to 365 days of events to CSV. - Use Case: A compliance officer preparing for a security review asks which page permission changes are logged, then exports a filtered CSV of the last quarter's sharing events for auditors. ## Quick Start Ask which Notion audit log events cover external sharing and how to export them to CSV for a compliance review.

Frequently Asked Questions about notion-audit-log

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I access the Notion audit log?▼

Open the workspace switcher, go to Settings, then Admin, then Audit log. Access requires the organization owner role on the Notion Enterprise Plan, and events are retained for 365 days from the upgrade date.

How do I stream Notion audit logs to a SIEM?▼

Go to Settings, then Connections, then Custom SIEM integration, and enter the webhook URL from your SIEM account. All audit events are then sent to that endpoint as JSON payloads in real time.

What events does the Notion audit log record?▼

It records page events, data source events, teamspace membership changes, workspace security settings, account login and MFA activity, and custom agent configuration and run events. Each category includes creation, deletion, permission, and sharing actions.

How far back does Notion audit log export go?▼

CSV exports cover up to 365 days back, ending 2 hours before the export time. Export regularly to preserve historical data beyond the retention window.

Is the Notion audit log available on all plans?▼

No, the audit log is an Enterprise Plan only feature. It also requires the organization owner role to view events, configure SIEM streaming, or export CSV data.

Related Skills

Explore More Legal & Compliance Skills→
ContractorKeithContractorKeith

atlassian-admin

Automate Atlassian administration tasks across Jira, Confluence, and Bitbucket.

Community
Advanced
starwreckntxstarwreckntx

Security Information & Event Management Agent

Aggregate and correlate logs from multiple sources to detect security incidents.

Community
Basic
BagelHoleBagelHole
46

azure-monitor-audit

Configure Azure Monitor diagnostic settings to export activity logs to Log Analytics.

Community
Intermediate
automatedigitalautomatedigital
1

notion

Interact with Notion workspaces via curl and the Notion API.

Official
Intermediate