The Audit Log Entry Generator produces batches of believable system audit-log records. It is built for engineers and compliance teams who need realistic event data to demo a SIEM, populate a security dashboard, or test audit-trail rendering and filtering without exposing any real activity.
How it works
The tool picks each field from curated banks — actors (including service accounts and a system principal), actions, resource paths, and outcomes weighted toward success with occasional failure and denied results. Each entry also gets a syntactically valid source IP and a realistic user-agent string.
Chronology is handled deliberately:
- A timestamp is drawn for each entry within the last seven days.
- All timestamps are sorted ascending before entries are assembled.
- Each entry is emitted with an ISO 8601
timestamp, so the array reads as a genuine append-only trail.
Click Generate audit log to redraw, and Copy JSON to export the array.
Tips and notes
- The success-weighted outcome mix means you will usually see a handful of
failureordeniedevents per batch — useful for testing alert rules and filters. - Generate up to 200 entries at a time; rerun and concatenate for larger logs.
- Action names follow a
domain.verbconvention (for examplepermission.grant), which maps cleanly onto most audit schemas. - All generation is local — no API key, no network call.