Skip to content

Audit Log

The Audit Log page provides a chronological record of all administrative actions taken in your organization. This page is visible to admins only.

What is logged

Every significant action in your organization is recorded:

EventDescription
User invitedA team member invitation was sent
User joinedA team member accepted their invitation
User removedA team member was removed from the organization
Role changedA team member's role was updated
Device registeredA new device was registered
Device deactivatedA device was deactivated
Device activatedA device was reactivated
Vendor config createdA vendor configuration was added
Vendor config updatedA vendor configuration was modified
Vendor config deletedA vendor configuration was removed
Group createdA group was created
Group updatedA group's name or description was changed
Group deletedA group was deleted
Member added to groupA team member was added to a group
Member removed from groupA team member was removed from a group
Config assigned to groupA vendor config was assigned to a group
Config unassigned from groupA vendor config was removed from a group
Plan changedThe organization's billing plan changed
Organization claimedA new admin claimed an auto-created organization

Viewing the audit log

  1. Go to Audit Log from the sidebar.
  2. Events are listed newest-first.
  3. Use the event type filter to narrow results.
  4. Each entry shows the timestamp, event type, user who performed the action, and relevant details.

Retention

Audit log entries are retained indefinitely for your organization.

PocketSOC Documentation