Skip to content

Audit log

The audit log records who changed what in your organization, and when. Use the Audit Log page to check a change, to answer a security question or to give an export to an auditor.

Availability: all profiles. Administrators only.

Prerequisites

  • You have the Owner or Admin role. Other users see Access Denied.

What the audit log records

The audit log records actions on settings, users and security, for example:

  • changes to configuration pages, such as voice settings, sign-in rules, AI automation settings, AI coverage and feature flags
  • users and roles: invitations, changes, deactivations and role assignments
  • API keys
  • file security: changes to the security settings, and quarantined files that were released or deleted
  • the private address list on the SSRF Allowlist page, and each workflow request that an entry on it allowed
  • configuration exports and imports on the Backup & Restore page
  • sign-in denials and access denials
  • sensitive reads, such as recording downloads and data exports
  • workflows: creating, editing and deleting a workflow
  • the knowledge base: articles and collections, the order of collections, tags, imports, approval steps, articles that the article creator saves to the AurionAI knowledge base, and images

Some changes are not in the audit log:

  • Changes to the approval rule of a collection, and articles that the article creator publishes to an external ticketing system.
  • Publishing, disabling and restoring a workflow. Each workflow keeps its own version history.
  • Events inside conversations, such as status changes and notes. These go to the conversation activity. Read Activity log.

To see which actions exist in your organization, open the action filter on the page. It lists only the actions that the log already holds.

Find an entry

  1. In the sidebar, select Configuration.
  2. Open the System category.
  3. Select Audit Log.
  4. Narrow the list with the filters:
    • the user filter, which starts at All users
    • the field Filter by actor ID (UUID): paste the complete ID of a user
    • the two date fields, or a preset: Today, Last 7 days or Last 30 days
    • the resource type filter, which starts at All resource types
    • the action filter, which starts at All actions
  5. Use Previous and Next to move through the pages. Each page shows 20 entries.

Audit Log page with the filters and a list of entries.

Read an entry

Each entry shows:

  • the action code, for example security_settings_updated, and a short description when one exists
  • the resource type
  • the date and time, to the second
  • the person who acted and their IP address. System means that AurionAI acted itself.

Two badges can appear:

  • Impersonated by: an AurionAI support person acted in your organization on behalf of the user.
  • via API key: the action came through an API key, not from a person in the browser. The user shown is the person who created the key.

Export the audit log

  1. Set the filters that you need.
  2. Select Export CSV.

AurionAI downloads a CSV file with the entries that match the filters, up to 10,000 entries. The file has these columns: ID, Timestamp, Tenant, User Email, Action, Resource Type, Resource ID, Changes, IP Address, Impersonated By and API Key.

Result

  • New entries appear in the log as soon as the action is complete.
  • Nobody can edit or delete entries from the dashboard.

If something goes wrong

  • Failed to load audit logs. Please try again. Reload the page.
  • Enter the complete actor ID to filter. The actor ID filter needs the complete ID. A part of an ID does not filter.
  • No audit logs found. No entry matches the filters. Widen the dates or reset the filters.
  • Failed to export audit logs Try again. If the error stays, narrow the filters.
  • You cannot find a change to an article or a workflow. Some workflow and knowledge base changes are not in the audit log; see the list above. For a workflow, open its version history.

Still stuck? Submit a request or .