Audit Log
Who did what in your organization, with filters, details and export.
On this page
The Audit log in the Organization section of Settings shows who did what in your organization, newest first. Organization admins and people with the Audit log admin right can open it, and each organization sees only its own events.
What Is Recorded
The audit log records actions in these areas:
| Area | Examples |
|---|---|
| Datarooms | Datarooms created, changed, deleted or opened; members added or removed; roles changed. |
| Files | Files, images and websites uploaded or added, read, downloaded, moved or deleted; files generated by AITEZA. |
| Chat | Chats created, changed or deleted; messages sent. |
| Relay | External shares created, activated or deactivated; guests invited or their access revoked; files uploaded by guests, including rejected uploads and uploads with malware. |
| Workflows | Workflows created, changed, deleted or run, including failed runs. |
| Administration | Sign-ins and sign-outs; invitations; changes to people, groups, roles and admin rights; account actions; changes to models, integrations, the document style and preferences; connections to integrations; API keys created or revoked and changes to their monthly limit; exports of the audit log and the usage. |
| Other | Everything else, for example requests that were denied, also those made with an API key. |
For chats, the audit log records that something happened, for example that a message was sent and with which model. It does not record the name of the chat or the text of the messages.
Reading the List
Events are grouped by day (“Today”, “Yesterday”, then the date). Each row shows the time, a short sentence such as “File uploaded: offer.pdf” and the person who acted.
If an action did not succeed, the row ends with a word:
- Failed: the action failed, for example a workflow run that ended with an error.
- Blocked: AITEZA refused the action, for example because access was denied, or because a guest’s upload was rejected or contained malware.
Older events load as you scroll down. You can also select Load older events.
Filtering
| Filter | What it does |
|---|---|
| Time range | Last 24 hours, Last 7 days, Last 30 days or Custom range with From and To. A custom range can cover at most 30 days. |
| Person | Everyone, or one person of the organization. For a group, only its members are offered. |
| Areas | One or more of the areas listed above, or All areas. |
| Only failures | Shows only failed and blocked actions. |
| Search | Searches file names, usernames and IDs. Search for a person’s username, not their display name. |
Clear filters resets all filters. Each view covers at most 30 days. To look at an earlier period, choose a custom range. Longer ranges are rejected with the message “This time range cannot be shown. Choose at most 30 days.”
Live Updates
When the time range includes the present, new events appear at the top of the list automatically. This is the case for the preset ranges and for custom ranges that include today. A status next to the buttons at the top shows Live while this is the case.
- Select Pause to stop the list from changing while you read it, and Resume to continue.
- While the browser tab is in the background, live updates pause. When you return, the list catches up.
- If the connection is interrupted, the status shows Reconnecting…. If live updates stop, the status says so; select Resume to start them again.
Live updates are not available for custom ranges that end before today.
Event Details
Select an event to open its details:
- Action: what happened, together with its technical action code.
- Person: who did it.
- Affected: the dataroom, file, person or other item concerned, where known.
- Area, Result and Time.
- Details: further information about the event as name and value pairs.
- Event ID: select Copy to copy it, for example for a support request.
Exporting
Export CSV downloads the events that match the current filters as a CSV file, up to 10,000 events. Every export is itself recorded in the audit log.
Audit Log of a Group
Organization admins, people with Audit log for the whole organization and group admins with Audit log can look at the events of a single group. Choose the group in the Group selector at the top of the page; Whole organization shows all events again. If you can see only one group, there is no selector and the page shows this group right away. The page description then names the group, for example “What the current members of Sales did, newest first.”
For a group, the list shows only the events of people who are members of the group right now:
- Their events are shown also from the time before they joined the group.
- Events of former members are not shown.
- The Person filter offers only the group’s members. When you choose another group, it returns to Everyone.
- Live updates, event details and Export CSV work as for the whole organization. The audit log records the export together with the group.
- A group without members shows no events.
See Admin Rights and Group Admins.
When the List Is Not Shown
- “The audit log is unreachable right now.” The events cannot be loaded at the moment. Select Try again later.
- “Audit logging is turned off”: your installation does not record an audit log.
- If you are an admin of several organizations and none is selected, the page asks you to choose the organization whose audit log you want to see. Select Switch organization (see Working in Several Organizations).
