Viewing the audit log for changes

Fastpath: Admin Center > Account > Audit log > Audit log

The audit log shows various changes in your Zendesk account since the account was created. It saves a record of these changes indefinitely, and you can view the entire change history. You can view the audit log in Admin Center or via the Support API.

This article contains the following sections:

• About audit log changes
• Viewing the audit log in Admin Center
• Filtering the audit log
• Exporting the audit log

About audit log changes

The audit log shows changes to account information and settings, users, apps, web widget, business rules, tickets, and organizations. For each entry in the audit log, the following information is included:

Column	Description
Time	Time and date the event occurred
Actor	User or system that caused the event
IP address	IP address of the user who caused the event
Item	Object changed by the actor
Activity type	Type of action for the event (Created, Updated, Deleted, Exported, or Signed in)
Activity	Details about the event

In the Zendesk API and Zendesk Support, audit log timestamps appear in Coordinated Universal Time (UTC). In Admin Center, audit log timestamps are shown in your account's time zone. See Setting your account's time. If you are unsure of what time audit log is using, hover your mouse pointer over the information icon in the Time column heading.

Viewing the audit log in Admin Center

From the Audit Log page in Admin Center, you can view the audit log as a whole, sort the log by time, filter the list, or export a copy of the log.

To view the audit log

• In Admin Center, click Account in the sidebar, then select Audit log > Audit log.

Note: When an admin changes an agent's Support role, the change to the Support role will be attributed to the admin as the actor in the audit log. Any associated changes, such as roles in other products or ticket restrictions, will be attributed to the system user.

For example, when an admin changes an agents custom role and the new custom role includes editor access to Explore, you'll see two changes in the audit logs:

• The change to the Support role (the admin is attributed)
• The change to the Explore role (the system user is attributed)

Filtering the audit log

Often, only part of the picture is available when you visit the audit log. For example, you might know when something changed (but not what) or who changed something (but not when). Since the audit log can include a large volume of events, filtering makes it easier to find what you’re looking for.

While top audit events are available as filters, not all event types can be filtered. Additional audit events will be added over time.

To filter the audit log

1. In Admin Center, click Account in the sidebar, then select Audit log > Audit log.
2. Click the Time column to sort the entries by date.
3. To use more filters, click Filter.

   Additional filters appear in a side drawer.

   

4. To find entries within a specific date range, enter a Start date and End date.

5. Enter a name in the Actor field to filter by the people or systems responsible for the activities.

6. Select an Activity type to filter entries by the action type (Created, Updated, Deleted, Exported, or Signed In).
7. Use the filters in the Item section to filter by a specific setting, user, or business rule that has changed.
   1. In the Type field, select or search the generic item type you want to filter by (for example, "Trigger").
   2. In the Names field, select or search for the specific items you want to filter by (for example, the trigger named "Notify assignee of comment update").
8. Click Apply filters.

Exporting the audit log

You can export a CSV formatted copy of the audit log. If you filter the list before starting the export, the CSV file is also filtered this way. The exported copy is emailed to your primary Zendesk email address.

To export a copy of the audit log

1. In Admin Center, click Account in the sidebar, then select Audit log > Audit log.
2. Filter the audit log as needed.
3. Click Email CSV.