Audit logs

As an admin, here you can access a detailed overview of all actions and changes in the application throughout your organization.

Aufit logs.png
Organization audit logs

When you are looking for specific types of audit logs, or specific information, you have the option of filtering the logs. As there is quite a lot of information recorded in the logs, there are also many ways of filtering the information. Several filters can also be applied at the same time to further specify your requirements.

Apply filters.png
Apply filters

When you open a specific audit log detail, by clicking on the three dots at the end of the line of each detail, you can choose a specific log detail that you either wish to include or exclude in a filtered search.

Include or exclude a value.png
Include or exclude a value

With each filter added, you can also switch the toggle to exclude any given value, instead of including it in the search.

Exclude value.png
Exclude a given value

A default filter you can add is Performed by, where you input a specific user and you will be shown all actions performed by that user (only with internal users).

Below is a table detailing all other filters available, what information can be input, and what information the filters target.

Level 1 Filter

Level 2 Filter

Level 3 Filter

Additional information to input

Filter description

Timestamp

x

x

Select date range

Shows all audit logs which were recorded during the specified time range

Change subject

x

x

Dropwdown of all the types of subject of changes

Filters all audit logs that contain a change of the specified subject

Log details

Connection

IP

Specific IP address

Shows logs with the selected IP address



User agent

Specific browser user agent string

Actions taken in a browser using a specific user agent



Browser

Type of browser

Actions taken in a specific browser



Browser version

Version of a browser

Actions taken in a specific version of a browser



Operating system

Specific operating system

Actions taken on a specific operating system



Platform

Overall device platform (Microsoft Windows, Linux, iPhone, Apple Mac)

Actions taken on a device using the given platform



Is mobile phone

true x false

Actions taken/not taken on a mobile phone



Is tablet

true x false

Actions taken/not taken on a tablet



Is desktop

true x false

Actions taken/not taken on a desktop



Location - country

Specific country

Actions taken in a specific country (based on IP address)



Location - region

Specific region

Actions taken in a specific region (based on IP address)



Location - city

Specific city

Actions taken in a specific city (based on IP address)



Location - Country code

Specific country code

Actions taken in a specific country code (based on IP address)


Authentication

Phone

Phone number

All authentication attempts using the given phone?



Provider

External provider name (UAEPass, Nafath, Microsoft)

Authentication attempts made using the given provider



Email

Email address

All authentication attempts using the given email?



3rd party authenticator

Dropdown - sms, email, totp

Any authentication done by the specified autenticator



Username and password

Username and password

Any authentication done by the specified username



Successful login

true x false

All successful/unsuccessful login attempts



Unlocked

true x false

All successful/unsuccessful 3rd party verification attempts


User

User status

Dropdown: newly created, active, password change requested, suspended

Selected changes made to members of an organization



Password changed

true x false

changes made to password / changes made to preferences without change of password



3rd party authenticator

Dropdown: sms, email, totp

All logs where the user changed their 3rd party authentication options to the given value



Phone

Phone number

All logs where the user changed their phone number to the given value



Email

Email address

All logs where the user changed their email to the given value



Delegation changed

true x false

Log where delegation was changed/ logs where delegation was not changed



Stamp changed

true x false

changes made to stamp/ changes to preferences without stamp change



Signature changed

true x false

changes made to signature / changes to preferences without signature change



Initials changed

true x false

changes made to initials / changes to preferences without initials change



Recovery codes changed

true x false

changes to recovery codes / changes to preferences


Rights

(Admins only)

Added users


Specific user/s

Any addition of users containing the specified user/s



Removed users

Specific user/s

Any removal of users containing the specified user/s



Added groups

Specific group/s

Any addition of groups containing the specified group/s



Added rights

Specific right/s

Any addition of rights containing the specific right/s



Removed groups

Specific group/s

Any removal of groups containing the specific group/s



Removed rights

Specific right/s

Any removal of rights containing the specific right/s


Notification

Type

Dropdown: email, sms

All notifications sent of the specific type



Template

Notification template

All instances of sent notifications of the template



Recipients

Specific recipients

All notifications sent to specified recipients



Successful

true x false

All notifications successfully / unsuccessfully sent


Subscription

(Admins only)

Assigned to type

dropdown: user, group

All events where subscription was assigned to a user/group


Plan

(Admins only)

Edition

Edition name

All events where plan edition was changed



Status

Edition status

All events where plan status was changed


Settings

Type

Dropdown: tenant, group, organization, user

All changes to a specified type of settings


Document

Created by

Specific user

All instances of documents created by the specified user/s



Document title

Precise title of document

Logs pertaining to a document with that title



Original title

Precise original title of document

Logs pertaining to a document with that title


Generic

Added keys

Specific keys which changed in the subject object.

Logs of an event which changed these precise keys.
To be used by advanced users.



Edited keys



Deleted keys



Modified keys


Language

Key

Specific translation key

Actions which changed a translation value with the given key

You can also export the audit logs from the application - in the top right corner is a export button. Up to 10 thousand latest audit logs will be exported. Or, you can export a filtered view of specific logs, also up to 10 thousand records. The logs are exported in a .csv file.

Export audit logs.png
Export audit logs

The columns with information about audit logs can be adjusted, you can choose which columns are visible and adjust their width. A more detailed description of columns and how to work with them can be found in our Status Overview.

Adjustable columns.png
Adjustable columns