Events
The Events page allows you to see all user and admin events from your Keycloak clusters. You can search through the events, filter by type, and view detailed information about each authentication event.
Viewing Events
From the Events page, you can:
- View all authentication events across your clusters
- Toggle between user events and admin events
- Search and filter through event history
- Export events for analysis
- Monitor events in real-time with Live Tail mode
Time Range Selection
The available time ranges depend on your subscription plan:
- Trial: Last 7 days
- Developer: No access to events
- Launch: Last 7 days
- Business: Last 30 days
- Enterprise: Last 90 days with custom date ranges
Event Details
Click the eye icon next to any event to see its detailed information, including timestamps, user details, IP addresses, and event-specific data.
Event Types
User Events
Monitor user-related activities:
- Login attempts
- User registrations
- Password changes
- Role assignments
- Access events
Admin Events
Track administrative changes:
- Realm changes
- Client modifications
- User management
- Role updates
- Policy changes
Searching Events
You can search and filter events by:
- Event type
- User information
- Status
The search bar will apply a full text search to the event details.
Event Webhooks
Send real-time Keycloak events to your applications via HTTP webhooks. Events are automatically enriched with IP geolocation and user-agent data, signed with HMAC-SHA256, and delivered with auto-retry.
For full documentation, see the Webhooks feature page.