Audit logs
As an admin, here you can access a detailed overview of all actions and changes in the application throughout your organization.
Organization audit logs
When you are looking for specific types of audit logs, or specific information, you have the option of filtering the logs. As there is quite a lot of information recorded in the logs, there are also many ways of filtering the information. Several filters can also be applied at the same time to further specify your requirements.
Apply filters
When you open a specific audit log detail, by clicking on the three dots at the end of the line of each detail, you can choose a specific log detail that you either wish to include or exclude in a filtered search.
Include or exclude a value
With each filter added, you can also switch the toggle to exclude any given value, instead of including it in the search.
Exclude a given value
A default filter you can add is Performed by, where you input a specific user and you will be shown all actions performed by that user (only with internal users).
Below is a table detailing all other filters available, what information can be input, and what information the filters target.
Level 1 Filter | Level 2 Filter | Level 3 Filter | Additional information to input | Filter description |
|---|---|---|---|---|
Timestamp | x | x | Select date range | Shows all audit logs which were recorded during the specified time range |
Change subject | x | x | Dropwdown of all the types of subject of changes | Filters all audit logs that contain a change of the specified subject |
Log details | Connection | IP | Specific IP address | Shows logs with the selected IP address |
User agent | Specific browser user agent string | Actions taken in a browser using a specific user agent | ||
Browser | Type of browser | Actions taken in a specific browser | ||
Browser version | Version of a browser | Actions taken in a specific version of a browser | ||
Operating system | Specific operating system | Actions taken on a specific operating system | ||
Platform | Overall device platform (Microsoft Windows, Linux, iPhone, Apple Mac) | Actions taken on a device using the given platform | ||
Is mobile phone | true x false | Actions taken/not taken on a mobile phone | ||
Is tablet | true x false | Actions taken/not taken on a tablet | ||
Is desktop | true x false | Actions taken/not taken on a desktop | ||
Location - country | Specific country | Actions taken in a specific country (based on IP address) | ||
Location - region | Specific region | Actions taken in a specific region (based on IP address) | ||
Location - city | Specific city | Actions taken in a specific city (based on IP address) | ||
Location - Country code | Specific country code | Actions taken in a specific country code (based on IP address) | ||
Authentication | Phone | Phone number | All authentication attempts using the given phone? | |
Provider | External provider name (UAEPass, Nafath, Microsoft) | Authentication attempts made using the given provider | ||
Email address | All authentication attempts using the given email? | |||
3rd party authenticator | Dropdown - sms, email, totp | Any authentication done by the specified autenticator | ||
Username and password | Username and password | Any authentication done by the specified username | ||
Successful login | true x false | All successful/unsuccessful login attempts | ||
Unlocked | true x false | All successful/unsuccessful 3rd party verification attempts | ||
User | User status | Dropdown: newly created, active, password change requested, suspended | Selected changes made to members of an organization | |
Password changed | true x false | changes made to password / changes made to preferences without change of password | ||
3rd party authenticator | Dropdown: sms, email, totp | All logs where the user changed their 3rd party authentication options to the given value | ||
Phone | Phone number | All logs where the user changed their phone number to the given value | ||
Email address | All logs where the user changed their email to the given value | |||
Delegation changed | true x false | Log where delegation was changed/ logs where delegation was not changed | ||
Stamp changed | true x false | changes made to stamp/ changes to preferences without stamp change | ||
Signature changed | true x false | changes made to signature / changes to preferences without signature change | ||
Initials changed | true x false | changes made to initials / changes to preferences without initials change | ||
Recovery codes changed | true x false | changes to recovery codes / changes to preferences | ||
Rights (Admins only) | Added users | Specific user/s | Any addition of users containing the specified user/s | |
Removed users | Specific user/s | Any removal of users containing the specified user/s | ||
Added groups | Specific group/s | Any addition of groups containing the specified group/s | ||
Added rights | Specific right/s | Any addition of rights containing the specific right/s | ||
Removed groups | Specific group/s | Any removal of groups containing the specific group/s | ||
Removed rights | Specific right/s | Any removal of rights containing the specific right/s | ||
Notification | Type | Dropdown: email, sms | All notifications sent of the specific type | |
Template | Notification template | All instances of sent notifications of the template | ||
Recipients | Specific recipients | All notifications sent to specified recipients | ||
Successful | true x false | All notifications successfully / unsuccessfully sent | ||
Subscription (Admins only) | Assigned to type | dropdown: user, group | All events where subscription was assigned to a user/group | |
Plan (Admins only) | Edition | Edition name | All events where plan edition was changed | |
Status | Edition status | All events where plan status was changed | ||
Settings | Type | Dropdown: tenant, group, organization, user | All changes to a specified type of settings | |
Document | Created by | Specific user | All instances of documents created by the specified user/s | |
Document title | Precise title of document | Logs pertaining to a document with that title | ||
Original title | Precise original title of document | Logs pertaining to a document with that title | ||
Generic | Added keys | Specific keys which changed in the subject object. | Logs of an event which changed these precise keys. | |
Edited keys | ||||
Deleted keys | ||||
Modified keys | ||||
Language | Key | Specific translation key | Actions which changed a translation value with the given key |
You can also export the audit logs from the application - in the top right corner is a export button. Up to 10 thousand latest audit logs will be exported. Or, you can export a filtered view of specific logs, also up to 10 thousand records. The logs are exported in a .csv file.
Export audit logs
The columns with information about audit logs can be adjusted, you can choose which columns are visible and adjust their width. A more detailed description of columns and how to work with them can be found in our Status Overview.
Adjustable columns