Features & Benefits

Usage Analytics

Client logs
All requests to Cloudsmith generate log entries. Use our browser-based tools, API, or log exports to monitor usage and derive insight.
Client logs API
Access your client logs programmatically through our RESTful API. Integrate Cloudsmith with third-party analysis tools and workflows.
Automated client log exports
Export your log data to a destination bucket on an agreed schedule. Bring raw log files into your analysis pipelines.
Usage dashboard
Use our web-based usage dashboards and filters to monitor activity in your workspace. Track down problems and derive insights quickly.
Entitlement token logs
Monitor usage of your read-only entitlement tokens with details logs and analytics. Keep track of which tokens, and customers, are driving demand for your packages.
Features & Benefits

Audit Trail

Audit logs
Our audit logs capture events related to user creation, authentication, configuration changes at workspace and repository level. Use the audit log to monitor events and identify patterns of interest.
Audit logs API
Get programmatic access to changes made in your Cloudsmith workspace.
Package audit logs
Track modifications made to packages as they move through Cloudsmith
Resources

Related observability and governance resources

blog

Introducing Cloudsmith’s Advanced Observability Suite for Enterprise Artifact Management

As software complexity advances, understanding what’s happening across every part of your software supply chain becomes crucial. You need to see where artifacts are used, how secure they are, and whether they meet compliance standards. The ability to capture this is known as observability. Observability goes beyond data collection to provide essential insights that help teams understand, troubleshoot, and enhance complex systems. It enables engineers to ask critical questions, anticipate issues, and respond proactively—fostering resilience and reliability. Overcoming the Challenges of Limited Observability Without good observability, teams are often left in the dark, relying on incomplete data and reactive troubleshooting when issues arise. This can lead to longer downtime, unexpected costs, and missed security risks, as there’s no clear visibility into where problems occur or why. The lack of insights also makes it harder to anticipate trends, manage resources efficiently, and ensure compliance, ultimately compromising system reliability and customer trust. Knowing this, we wanted to take a step forward and create a solution that provided a quick turnaround on insights that drive immediate corrective action. As a result, Cloudsmith has launched an advanced observability suite, offering enterprises unparalleled insights into their software supply chain. With a fully redesigned user experience, customers can now make data-driven decisions more effectively, managing artifacts with greater precision and control. Enhanced Observability for Usage Management Cloudsmith’s advanced observability features give engineering managers and DevOps teams the insights needed to monitor and manage artifact quality and usage across their systems. These tools are built to handle complex, large-scale environments, helping teams track trends, accurately attribute costs, and proactively address risks—essential for maintaining control over a dynamic software supply chain. "Cloudsmith's analytics and alerts are instrumental in helping us manage our usage more effectively and plan for increases in demand for software artifacts,...We can catch unexpected spikes in artifact consumption, improving our security posture and avoid usage surprises at the end of the month" Dave Bresci, Senior Manager, SRE, PagerDuty. Cloudsmith’s new observability suite offers several key features geared to upgrading observability: Detailed Usage Analytics: Granular dashboards and reports provide a clear view of consumption patterns over time, enabling informed resource management. Security and Compliance Insights: A centralized dashboard for policy violations, vulnerability data, and license tracking offers a straightforward way to assess and address organizational risks. Monitoring Alerts: Real-time notifications ensure that critical information on usage and policy adherence reaches the right teams when it’s needed most. These features equip teams with the context and control required to navigate complex, large-scale environments effectively. The new suite comes with a fully redesigned user experience, featuring streamlined navigation, enhanced performance, and a data-rich interface packed with deeper insights. Cloudsmith has tailored these improvements to ensure smooth, efficient access to critical data, making it well-suited for large-scale enterprise operations. With this suite, organizations are empowered to navigate challenges confidently, drive smarter decision-making, and ensure their software supply chain remains both agile and secure.This isn’t just a tool - it’s a strategic advantage. Unlock the full potential of your software supply chain with Cloudsmith’s advanced observability suite. See firsthand how our powerful analytics and real-time insights can help you optimize artifact usage, anticipate risks, and maintain compliance across your systems. Schedule a demo today to explore how Cloudsmith can give your team the visibility and control needed to drive smarter, data-driven decisions. Book a Demo Today and discover how Cloudsmith’s observability suite can transform your software management process and help you stay ahead of potential issues in your supply chain.

blog

Datadog Integration Update: Vulnerability Scanning and Audit Logs

The team at Cloudsmith is always looking for ways our customers and community can leverage adjacent technologies within the DevOps and application development ecosystem to secure the software supply chain. Cloudsmith developed the first integration with Datadog, the Cloud Monitoring as a Service solution, a few years ago! That integration was the first step in helping the community leverage both solutions simultaneously, strength for strength. We are excited to introduce the latest enhancement to the community integration, Security Scanning and Audit Logs. In the initial release, Ciara Carey published a blog post describing the integration between Datadog and Cloudsmith and how it allows developers to monitor the health and performance of their software packages by highlighting the most common metrics, all from the Datadog UI. The initially supported metrics are detailed below: Storage Used - The percentage of storage used Bandwidth Used - The percentage of bandwidth used Token Count - The number of token in an organization Token Bandwidth Used - The total bandwidth used by tokens Token Download Total - The total downloads used by tokens Next Steps and Expanding Scope During the January 2023 Cloudsmith Webinar, the discussion covered a variety of topics but some of the overarching themes were reducing complexity and security. These themes are popular amongst developers, and Cloudsmith is committed to building meaningful solutions for our great customers and community. The next step in this journey is providing additional Cloudsmith visibility in Datadog. Vulnerability Scanning Cloudsmith Vulnerability Scanning will automatically scan supported package types for CVEs upon package upload. As you can see from the image above, all results from this capability can now be seen via the Datadog dashboard. This is in addition to existing capabilities within the Cloudsmith Web UI, the Cloudsmith API, and as Webhooks. The Cloudsmith Security Scan drives other actions including quarantining a package, preventing users and systems from downloading the compromised package. Audit Logs The audit logs feature allows you to monitor all activity performed by the system, users or services in Cloudsmith, including creating or deleting a repository, modifications to repository settings, package deletions and quarantines, and more. Now alerts can be set up in Datadog based on the audit log data to receive notifications when suspicious activity is detected. Conclusion The addition of vulnerability scanning and audit logs to the Datadog-Cloudsmith integration provides developers with even more tools to monitor the health and security of their software packages. One of the biggest challenges developers and teams are struggling with is tooling or screen fatigue. By combining these features with Datadog's monitoring capabilities, developers can stay on top of any issues and ensure their packages are secure and reliable within the tool or screen that makes the most sense to them. For the initial setup instructions for the Datadog-Cloudsmith integration, please refer to our previous blog post.

changelog

Boost compliance and security with Audit Logs

We're pleased to announce the release of Cloudsmith's audit logs feature to general availability. With audit logs, organizations have a historical record of activity within their Cloudsmith organization for compliance and troubleshooting purposes. Audit logs capture all actions performed by the system, users, and service accounts. This allows an organization's owners and managers to view and track what changes were made, the date when a change was made, and who initiated the change. This functionality is helpful when a user needs to troubleshoot a specific issue, such as when modifications to a retention rule took place for example. Check out our documentation for more information

Frequently Asked Questions

Q&A related to our observability features. Book a demo with our team to get answers tailored to your situation.
  1. For a complete list of items captured in our audit log see our technical documentation.

  2. Yes. Addition, deletion, modification of user account are captured in our audit log. Changes to the composition of teams are also logged.

  3. Cloudsmith retains audit logs for one year. Your plan sets how far back you can review and search them: 30 days on Pro, 60 days on Ultra, and a custom period of up to one year on Enterprise.

  4. Yes. Ultra and Enterprise plans include API access to audit logs.

  5. Cloudsmith can periodically export your log data to an S3 bucket or Azure blob storage.

  6. Client logs give you one view of package usage across your workspace. Filter by package format, repository, user, IP address or entitlement token, then export the data for analysis.

  7. The Usage page shows client statistics for your workspace or repository, covering delivery summary, package delivery and artifact data totals for the current billing cycle.

  8. Yes. Filter usage by entitlement token to review access patterns, and search tokens by downloads, clients and bandwidth since their last usage reset.

  9. Yes. The Datadog integration sends workspace audit log entries and vulnerability scan results to Datadog as events, so you can set up monitors and alerts alongside the rest of your infrastructure.

  10. Log exports to S3 default to JSON, and you can also choose CSV or Apache style formats. You can export audit logs and client logs, ready for your own analysis pipelines.

We are here to help!
Speak with one of our experts to see Cloudsmith’s feature set in action and get tailored advice to fit your use case