Workspace Audit log

Workspace admins can view a centralized stream of general user activity

Mikaela Friedrich avatar
Written by Mikaela Friedrich
Updated over a week ago

** This feature is currently only available on our Enterprise plan **

In this article:

What is the audit log? And why does it exist?

Audit logs are a centralized record of all user activity within a workspace. This audit trail can be helpful to prevent suspicious activity when it starts or play back account activity during an incident review.

Where can I find the audit log?

Workspace admins can access the audit log by clicking on Workspace Settings --> Security and selecting the Audit Log tab at the top of the page.

What activity is included in the audit log?

Multiple types of activity are included as part of the activity log including:

  • Information about users

    • A user was invited

    • A user logged in/out

    • A user's information was updated

    • A user was deleted

    • A user invited a guest to collaborate

  • Information about delegated access

    • A delegated user was created

    • A delegated user's access was revoked

    • When a delegate logged in/out as the delegator (i.e. access their account)

  • Any account changes

  • Integrations

    • Users activating/deactivating a user-level integration such as Slack, Asana, etc.

    • User activated/deactivating a workspace-level integration such as Jira, Salesforce, HubSpot, etc.

Can I filter for a specific person/activity?

Sure! By default the audit log it will show the entire workspace but you can filter this down to see at the user level

Or filter by a specific activity or activities, such as Delegated user enabled. The multi-select is great to look at complementary activities such as Users login/logout or Delegate access added/removed

How can I export the data?

Export the log as a CSV by clicking on the Export button in the upper right hand corner. Note: there is a 30-day max on the date range, so you'll only be able to export 30 days at a time.

Related Articles:

Did this answer your question?