Set up log streams to monitor Zap activity

Log streams send real-time webhook notifications to your endpoint when events occur in your Zapier account. You can use log streams to track Zap run success and failure rates, monitor configuration changes like new connections or Zap updates, build monitoring dashboards, and set up automated alerting.

Available on plans:

Free

Professional

Team

Enterprise

Prerequisites

• Enterprise plan.
• Super admin, or owner role.
• An HTTPS endpoint that can receive POST requests.

Available event types

Log streams support two categories of events:

• Asset management events: Track configuration changes such as Zaps created, connections updated, variables changed, and account membership updates.
• Execution log events: Track Zap run outcomes including success, error, and halted statuses.

Note

Set up log streams as early as possible. Log streams only capture events that occur after creation, so you need to configure them on day one to build a complete history in your SIEM or monitoring software.

Asset management events

Execution log events

Create a log stream

1. Go to the Admin Center by clicking the Admin Center icon in the left sidebar.
2. In the admin settings sidebar, select Log streams under the Insights section.
3. Click Create log stream.
4. In the Name field, enter a descriptive name for your log stream (for example, "Production Error Alerts").
5. In the Destination URL field, enter the HTTPS endpoint URL where you want to receive webhook notifications.
6. (Optional) In the Secret field, click Generate to create a secure random secret, or enter your own secret (minimum 16 characters). Use this secret to verify webhook signatures.
7. In the Events section, select the event types you want to receive notifications for.
8. Click Save.

Your log stream is now active and will start sending webhook notifications when the selected events occur.

Manage log streams

After you create a log stream, it appears in the log streams list. The list displays each log stream's state, event count, and creation date.

You can take the following actions on a log stream:

• Edit: Update the name, destination URL, secret, or event selections.
• Pause: Temporarily stop webhook delivery without deleting the log stream.
• Delete: Permanently remove the log stream.

Event payload

When an event occurs, Zapier sends a JSON payload to your log stream's destination URL. The payload structure differs based on the event category.

{
  "event_id": "3564c9da-b3a5-43d3-b671-ef19f5eccf03",
  "actor": {
    "type": "user",
    "id": "01009a9b-a5a4-85b4-b5a9-e94998489e2b"
  },
  "where": {
    "id": "03d62d5d-26e7-87b2-a4c6-967869a8be1a",
    "type": "account"
  },
  "when": {
    "timestamp": "2025-08-26T09:52:50.625Z",
    "timestamp_ms": 1756201970625
  },
  "what": {
    "action": "zap.created",
    "name": "Zap created"
  },
  "affected_object": {
    "id": "00000000-0000-c000-8000-000293850453",
    "type": "zap",
    "name": "(Copy) mindesign webinar - 5 min before"
  },
  "context": {
    "app_name": "Zoom",
    "app_version": "2.25.0"
  }
}

{
  "actor": {
    "id": "014ed0bb-cd81-82bc-a951-a00906b04e70",
    "type": "user"
  },
  "where": {
    "id": "0331f89b-ac40-8bdf-8ed8-af90110062d1",
    "type": "account"
  },
  "what": {
    "action": "zap.owner_changed",
    "name": "Zap owner changed"
  },
  "affected_object": {
    "id": "00000000-0000-c000-8000-000366644697",
    "type": "zap",
    "name": "Marketing AI Agent #1 — Customer feedback triage"
  },
  "what_changed": {
    "change_type": "previous_value new_value",
    "object": {
      "previous_value": {
        "id": "014ed0bb-cd81-82bc-a951-a00906b04e70",
        "type": "user"
      },
      "new_value": {
        "id": "015a0266-b8e0-89f6-b1ca-f20efd684448",
        "type": "user"
      }
    },
    "scalar": null
  },
  "context": {
    "ip_address": "203.0.113.7"
  },
  "when": {
    "timestamp": "2026-06-01T16:03:58.069Z",
    "timestamp_ms": 1780329838069
  }
}

{
  "version": "1.0.0",
  "asset_type": "zap",
  "asset_id": "123456",
  "run_id": "abc-def-ghi-789",
  "status": "success",
  "started_at": "2025-01-15T10:30:00Z",
  "error_message": null
}

Verify webhook signatures

When you create a log stream with a secret, Zapier signs each webhook request with an HMAC-SHA256 signature. Verify these signatures to confirm that incoming requests are from Zapier.

Each webhook request includes two headers:

To verify the signature:

1. Extract the signature and timestamp from the request headers.
2. Construct the signed message by combining the timestamp and JSON body: {timestamp}.{request_body}.
3. Compute the HMAC-SHA256 hash using your secret.
4. Compare your computed signature with the X-Zapier-Signature header value using a constant-time comparison function.

import hmac
import hashlib

def verify_webhook_signature(request_body, signature, timestamp, secret):
    message = f"{timestamp}.{request_body}"

    computed_signature = hmac.new(
        key=secret.encode("utf-8"),
        msg=message.encode("utf-8"),
        digestmod=hashlib.sha256
    ).hexdigest()

    return hmac.compare_digest(computed_signature, signature)

const crypto = require('crypto');

function verifyWebhookSignature(body, signature, timestamp, secret) {
  const message = `${timestamp}.${body}`;

  const computedSignature = crypto
    .createHmac('sha256', secret).update(message).digest('hex');

  return crypto.timingSafeEqual(
    Buffer.from(signature),
    Buffer.from(computedSignature));
}

import (
    "crypto/hmac"
    "crypto/sha256"
    "encoding/hex"
    "fmt"
)

func verifyWebhookSignature(body string, signature string, timestamp string, secret string) bool {
    message := fmt.Sprintf("%s.%s", timestamp, body)

    h := hmac.New(sha256.New, []byte(secret))
    h.Write([]byte(message))
    computedSignature := hex.EncodeToString(h.Sum(nil))

    return hmac.Equal([]byte(signature), []byte(computedSignature))
}

Note

Always use constant-time comparison functions (hmac.compare_digest() in Python, crypto.timingSafeEqual() in Node.js, hmac.Equal() in Go) to prevent timing attacks. Do not use standard string comparison operators.

Signature verification tips

• Use the raw request body. Do not parse and re-serialize the JSON. Formatting differences will cause verification to fail.
• UTF-8 encode all strings when computing the signature.
• Store your secret securely. Do not commit it to version control or expose it in client-side code.

Common use cases

• Error alerting: Get notified when Zap runs fail. Track error patterns and identify which Zap workflows need attention.
• Success rate metrics: Build dashboards showing Zap reliability over time. Calculate success rates and measure automation health.
• Automated recovery: Trigger workflows when Zap issues occur. For example, create support tickets when Zap workflows are halted, or start investigation workflows for persistent errors.

Troubleshooting

Webhook signature verification fails

• Verify you're using the raw request body string, not a parsed and re-serialized JSON object.
• Confirm all strings are UTF-8 encoded when computing the signature.
• Check that the timestamp value matches exactly what's in the X-Zapier-Timestamp header.
• Confirm you're using the same secret that was set when you created the log stream.

Webhook not received

• Verify your log stream is in an active state, not paused.
• Confirm you're subscribed to the event type you expect (for example, zap_execution.error).
• Verify your destination URL is correct and accessible from the internet.
• Confirm your destination URL uses HTTPS.

Limitations

• Log streams deliver events in real time, starting from when the log stream is created. Historical data is not available.

Related resources

• Review your account in the Admin Center
• Use the audit log to review your account activity
• View and manage your Zap history