Understand the structure of audit log events for agents in your enterprise.
Enterprise owners
feature
copilot
Copilot
reference
You can apply the actor:Copilot filter to your enterprise audit log to view agentic activity over the last 180 days. The following key fields can help you interpret agentic events:
Field
Description
Example value
action
The action performed by the agent, such as creating a pull request.
pull_request.create
actor_is_agent
Indicates whether the actor is an AI agent. This will always be true for agentic audit log events.
true
agent_session_id
A unique identifier linking to the specific agent session that generated the event. This field only appears when the event is the result of an agent session.