Using the Audit Log Viewer

The Audit Log viewer is the easiest way consume and understand your audit log data. This guide will walk you through the viewer’s features.

Overview

The viewer exposes four core features:

1. Search
2. Filters
3. Export
4. API Token Management.

Search

The search box allows for free-text search of all audit events, but also supports some structured search operators. Some example searches:

• edit – free text search
• action:users.list – search by action
• action:document.* location:Germany – search by action and location
• actor.id:[email protected] – search by actor id
• action:user.login,user.logout – seach by multiple actions

Filters

The filters section allows for filtering events by date range, and by Create/Read/Update/Delete actions.

Export

Save searches and export them to CSV using the “Exports” section.

API Tokens

Create and Manage Enterprise Audit Log Retrieval API tokens using the “API Tokens” section.

For a guide on using API Tokens, see Using the Enterprise Audit Log Retrieval API