Skip to main content
The Archives page in the Matcher UI lets you browse completed audit-log archives for the current tenant. It is a retrieval page. Matcher archival-worker configuration controls archive creation, retention, and storage lifecycle. You cannot change those settings here.

Accessing the Archives page


Navigate to Matcher → Reporting → Archives in the left sidebar. You need archive read access to open the page. Administrators also have access.

Filters


Use the covered-date filters at the top of the page to find archives whose entire covered period is inside a specific window. This is containment, not overlap. An archive appears only when its covered start is on or after Covered from and its covered end is on or before Covered to. Click Apply filters to run the search. You must set both dates, and Covered from must be before or equal to Covered to. Applying a new range returns to the first results page.
When the page loads, the default covered window ends on the current UTC date and starts 90 days earlier. Adjust the dates to narrow or widen it.

Archive table


Matcher Archives list showing completed audit-log archives filtered by date range

Figure 1. The Archives list.

The table lists only Complete archives and displays the following columns: The page requests 25 archives at a time. Use Previous and Next below the table to page through results. Next is available only when the service reports another page.

Storage metadata

The Storage column identifies the archive’s object-storage class. The STANDARD, STANDARD_IA, and ONEZONE_IA classes are immediately readable. The INTELLIGENT_TIERING class moves objects between tiers. The GLACIER_IR class is instant-retrieval cold storage. The GLACIER and DEEP_ARCHIVE classes require a restore before download.

Downloading an archive


If you have archive download access, click Download on a row to prepare that archive’s download. Matcher makes this request only after you click the control. On success, it returns a time-limited presigned URL, its UTC expiration timestamp, and the archive’s sha256: checksum. The UI opens a safe download URL and displays the checksum, so you can verify the downloaded bytes. The default presign duration is one hour (archival.presign_expiry_sec defaults to 3,600 seconds). You can change it through archival configuration, and the cap is seven days. For GLACIER and DEEP_ARCHIVE, restore the object before downloading it. If object storage is unavailable, Matcher cannot prepare the download and the UI shows an error.