Skip to main content
The Archives page in the Matcher UI lets you browse completed audit-log archives for the current tenant. It is a retrieval page: Matcher archival-worker configuration controls archive creation, retention, and storage lifecycle; those settings are not changed here.

Accessing the Archives page


Navigate to Matcher → Reporting → Archives in the left sidebar. You need archive read access to open the page; administrators also have access.

Filters


Use the covered-date filters at the top of the page to find archives whose entire covered period is inside a specific window. This is containment, not overlap: an archive is returned only when its covered start is on or after Covered from and its covered end is on or before Covered to. Click Apply filters to run the search. Both dates are required, and Covered from must be before or equal to Covered to. Applying a new range returns to the first results page.
When the page loads, the default covered window ends on the current UTC date and starts 90 days earlier. Adjust the dates to narrow or widen it.

Archive table


Matcher Archives list showing completed audit-log archives filtered by date range

Figure 1. The Archives list.

The table lists only Complete archives and displays the following columns: The page requests 25 archives at a time. Use Previous and Next below the table to page through results; Next is available only when the service reports another page.

Storage metadata

The Storage column identifies the archive’s object-storage class. STANDARD, STANDARD_IA, and ONEZONE_IA are immediately readable; INTELLIGENT_TIERING moves objects between tiers; and GLACIER_IR is instant-retrieval cold storage. GLACIER and DEEP_ARCHIVE require a restore before download.

Downloading an archive


If you have archive download access, click Download on a row to prepare that archive’s download. Matcher makes this request only after you click the control. On success, it returns a time-limited presigned URL, its UTC expiration timestamp, and the archive’s sha256: checksum; the UI opens a safe download URL and displays the checksum so you can verify the downloaded bytes. The default presign duration is one hour (archival.presign_expiry_sec defaults to 3,600 seconds). It can be changed through archival configuration and is capped at seven days. For GLACIER and DEEP_ARCHIVE, restore the object before downloading it. If object storage is unavailable, Matcher cannot prepare the download and the UI shows an error.