Is there an existing issue for this?

• I have searched the existing issues

Current Behavior

In our audit log, we have frequent "Connect" events such as "SSH session to 's workspace opened". It's possible to filter these with action:connect. However, adding a username filter always returns "No audit logs available".

Relevant Log Output

Expected Behavior

I would expect this to filter by the workspace owner if there's no metadata available on who initiated the connection.

Steps to Reproduce

1. Browse to audit log
2. Filter to only include connect events
3. Add a username filter

Environment

• Host OS: Linux
• Coder version: v2.22.1

Additional Context

No response