Audit logs - End user

Each user can access the audit logs of their account in their Preferences. Audit logs show every single action that happens in the account, including each login attempt, changes to settings or work on documents. Things such as sharing a document, when a document has been seen, signed, rejected, or when a new template has been created or used are all recorded.

Audit logs.png
Audit logs
Audit log detail.png
Audit log detail

Exporting audit logs

Above the settings icon for adjusting table columns is a button to Export the audit logs. They are exported in a CVS format and contain all related information about each audit log.

Export.png
Export audit logs

The export will contain a maximum of 10 000 lines of the most recent logs.

Audit log filters

When you are looking for specific types of audit logs, or specific information, you have the option of filtering the logs. As there is quite a lot of information recorded in the logs, there are also many ways of filtering the information. Several filters can also be applied at the same time to further specify your requirements.

When you open a specific audit log detail, by clicking on the three dots at the end of the line of each detail, you can choose a specific log detail that you either wish to include or exclude in a filtered search.

Include or exclude value.png
Include or exclude a value

With each filter added, you can also switch the toggle to exclude any given value, instead of including it in the search.

Exclude the value.png
Exclude a value

A default filter you can add is Performed by, where you input a specific user and you will be shown all actions performed by that user (only with internal users).

performed by.png
Performed by


Below is a table detailing all other filters available, what information can be input, and what information the filters target.

Add other filters.png
Add other filters

Some filters are only available for organization admins as the information they filter is related to administration.

Level 1 Filter

Level 2 Filter

Level 3 Filter

Additional information to input

Filter description

Timestamp

x

x

Select date range

Shows all audit logs which were recorded during the specified time range

Change subject

x

x

Dropwdown of all the types of subject of changes; subject value (the specific name, email address, etc.); event (dropdown of all available events for the specific subject type)

Filters all audit logs that contain a change of the specified subject

Log details

Connection

IP

Specific IP address

Shows logs with the selected IP address



User agent

Specific browser user agent string

Actions taken in a browser using a specific user agent



Browser

Type of browser

Actions taken in a specific browser



Browser version

Version of a browser

Actions taken in a specific version of a browser



Operating system

Specific operating system

Actions taken on a specific operating system



Platform

Overall device platform (Microsoft Windows, Linux, iPhone, Apple Mac)

Actions taken on a device using the given platform



Is mobile phone

true x false

Actions taken/not taken on a mobile phone



Is tablet

true x false

Actions taken/not taken on a tablet



Is desktop

true x false

Actions taken/not taken on a desktop



Location - country

Specific country

Actions taken in a specific country (based on IP address)



Location - region

Specific region

Actions taken in a specific region (based on IP address)



Location - city

Specific city

Actions taken in a specific city (based on IP address)



Location - Country code

Specific country code

Actions taken in a specific country code (based on IP address)


Authentication

Phone

Phone number

All authentication attempts using the given phone?



Provider

External provider name (UAEPass, Nafath, Microsoft)

Authentication attempts made using the given provider



Email

Email address

All authentication attempts using the given email?



3rd party authenticator

Dropdown - sms, email, totp

Any authentication done by the specified autenticator



Username and password

Username and password

Any authentication done by the specified username



Successful login

true x false

All successful/unsuccessful login attempts



Unlocked

true x false

All successful/unsuccessful 3rd party verification attempts


User

User status

Dropdown: newly created, active, password change requested, suspended

Selected changes made to members of an organization



Password changed

true x false

changes made to password / changes made to preferences without change of password



3rd party authenticator

Dropdown: sms, email, totp

All logs where the user changed their 3rd party authentication options to the given value



Phone

Phone number

All logs where the user changed their phone number to the given value



Email

Email address

All logs where the user changed their email to the given value



Delegation changed

true x false

Log where delegation was changed/ logs where delegation was not changed



Stamp changed

true x false

changes made to stamp/ changes to preferences without stamp change



Signature changed

true x false

changes made to signature / changes to preferences without signature change



Initials changed

true x false

changes made to initials / changes to preferences without initials change



Recovery codes changed

true x false

changes to recovery codes / changes to preferences


Rights

(Admins only)

Added users


Specific user/s

Any addition of users containing the specified user/s



Removed users

Specific user/s

Any removal of users containing the specified user/s



Added groups

Specific group/s

Any addition of groups containing the specified group/s



Added rights

Specific right/s

Any addition of rights containing the specific right/s



Removed groups

Specific group/s

Any removal of groups containing the specific group/s



Removed rights

Specific right/s

Any removal of rights containing the specific right/s


Notification

Type

Dropdown: email, sms

All notifications sent of the specific type



Template

Notification template

All instances of sent notifications of the template



Recipients

Specific recipients

All notifications sent to specified recipients



Successful

true x false

All notifications successfully / unsuccessfully sent


Subscription

(Admins only)

Assigned to type

dropdown: user, group

All events where subscription was assigned to a user/group


Plan

(Admins only)

Edition

Edition name

All events where plan edition was changed



Status

Edition status

All events where plan status was changed


Settings

Type

Dropdown: tenant, group, organization, user

All changes to a specified type of settings


Document

Created by

Specific user

All instances of documents created by the specified user/s



Document title

Precise title of document

Logs pertaining to a document with that title



Original title

Precise original title of document

Logs pertaining to a document with that title


Generic

Added keys

Specific keys which changed in the subject object.

Logs of an event which changed these precise keys.
To be used by advanced users.



Edited keys



Deleted keys



Modified keys


Language

Key

Specific translation key

Actions which changed a translation value with the given key

Adjustable columns

There are four columns containing basic details about each audit log: Performed by, Event, What changed and Details. By clicking the settings icon in the top right corner right above the audit logs you can customize which columns are visible and their order.

More information about columns is on the page detailing document statuses.

Columns in audit logs.png