Who did what, on the record.
Every sign-in, change and security event is logged with the user, the time and the IP address.
One trail across every entity.
Each entry shows the time, the user or System, the action, the resource it touched and the IP address. Expand a row to see exactly what changed. Counts at the top track total logs, today's activity, auth events and changes.
Narrow to what you need.
Filter by action, by resource type and by a date range, or search the log to find a person or a record. Sign-ins, creates, updates and deletes each carry their own label.
Filter by user & module
/admin/audit — filters
Hand auditors the file.
Export the trail as a CSV for the period you filtered to. It downloads dated so you can attach it straight to an audit or keep it for your records.
Export for auditors
CSV export of the trail
Audit Logs works with what you already run.
Common questions
What gets logged?
User and admin activity plus security events — sign-ins and sign-outs, creates, updates and deletes, and access, password and permission changes. Each entry records the user, the time, the resource and the IP address.
Can I filter and search the log?
Yes. Filter by action, by resource type and by a start and end date, or use the search box to find a person or record. The trail is tenant-wide, so it covers every entity in one place.
Can I export it for an audit?
Yes. Export the trail to CSV for the date range you’ve filtered to; the file downloads dated so you can attach it to an audit or file it.
Know who changed what.
Turn on the trail and every sign-in, change and security event is on the record.