Tableau Audit user downloads

Tableau Server and Tableau Cloud provide auditing capabilities that can help track user activities, including exporting data. To detect or list users who have downloaded/exported data, you can use the following approaches:


1. Using Tableau’s Administrative Views


Tableau Server and Tableau Cloud offer built-in administrative views to monitor user activities. The “Actions by All Users” or similar admin dashboards include data about downloads:

• Navigate to the Admin Insights section in Tableau Server/Cloud.

• Look for actions such as “Export Data” or “Download Crosstab.”

• Filter the data to identify the users and their activity timestamps.


2. Using Tableau Server Repository (PostgreSQL Database)


Tableau Server stores detailed event logs in its repository (PostgreSQL database). You can query the repository to identify users who downloaded/exported data. Use a query similar to:


SELECT 

  u.name AS username,

  w.name AS workbook_name,

  v.name AS view_name,

  eh.timestamp AS event_time,

  eh.action AS action

FROM 

  historical_events eh

JOIN 

  users u ON eh.user_id = u.id

JOIN 

  views v ON eh.target_id = v.id

JOIN 

  workbooks w ON v.workbook_id = w.id

WHERE 

  eh.action = 'export.crosstab' -- or 'export.data' depending on the action

ORDER BY 

  event_time DESC;


Note: Access to the Tableau repository requires enabling repository access via Tableau Server settings.


3. Using Tableau’s Event Logs


Tableau generates event logs for all user activities. You can parse these logs to find export/download events. The logs are located in the Tableau Server’s logs directory. Search for keywords like "export.crosstab" or "export.data" in the logs.


4. Custom Tableau Dashboard for Monitoring Exports


Create a custom dashboard for monitoring exports by connecting to the Tableau Server repository. Use visualizations to track user activity, including export/download actions.


5. Third-Party Tools or APIs


If you prefer more granular monitoring, use:

• Tableau REST API: Fetch audit data using the Query Workbook or View Activity endpoints.

• Tableau Metadata API: Extract detailed information about user interactions and exported data.


Prerequisites:

• Admin or Site Admin access is required for the repository or admin views.

• Enable Auditing in Tableau Server to ensure activity logs are captured.


Would you like help setting up a specific method?



From Blogger iPhone client