Viewing the audit log for changes

Fastpath: Admin Center > Account > Audit log > Audit log

The audit log shows various changes in your Zendesk account since the account was created. It saves a record of these changes indefinitely, and you can view the entire change history. You can view the audit log in Admin Center or via the Support API.

This article contains the following sections:

• About the audit log changes
• Viewing the audit log in Admin Center
• Filtering the audit log
• Exporting the audit log

About the audit log changes

There are two key things to understand about the audit log: the types of changes captured and the details provided for each log entry.

Changes captured in the audit log

The audit log shows changes to the following areas:

• Account information and settings
• Users
• Apps
• Web Widget
• Business rules
• Ticket settings
• Organizations

Audit log entries

For each entry in the audit log, the following information is included:

Column	Description
Time	Time and date the event occurred
Actor	User or system that caused the event
IP address	IP address of the user who caused the event
Item	Object changed by the actor
Activity type	Type of action for the event (Created, Updated, Deleted, Exported, or Signed in)
Activity	Details about the event

In the Zendesk API and Zendesk Support, audit log timestamps appear in Coordinated Universal Time (UTC). In Admin Center, audit log timestamps are shown in your account's time zone. See Setting your account's time. If you are unsure of what time the audit log is using, hover your mouse pointer over the information icon in the Time column heading.

Viewing the audit log in Admin Center

From the Audit Log page in Admin Center, you can view the audit log as a whole, sort the log by time, filter the list, or export a copy of the log.

To view the audit log

• In Admin Center, click Account in the sidebar, then select Audit log > Audit log.

Filtering the audit log

Often, only part of the picture is available when you visit the audit log. For example, you might know when something changed (but not what) or who changed something (but not when). Since the audit log can include a large volume of events, filtering makes it easier to find what you’re looking for.

While top audit events are available as filters, not all event types can be filtered. Additional audit events will be added over time.

Tip: If you repeat the same audit log filters, bookmark them in your web browser after you apply them. The filter displays in the URL.

To filter the audit log

1. In Admin Center, click Account in the sidebar, then select Audit log > Audit log.
2. Click the Time column to sort the entries by date.
3. To use more filters, click Filter.

   Additional filters appear in a side drawer.

   

4. To find entries within a specific date range, enter a Start date and End date.

5. Enter a name in the Actor field to filter by the people or systems responsible for the activities.

6. Select an Activity type to filter entries by the action type (Created, Updated, Deleted, Exported, or Signed In).
7. Use the filters in the Item section to filter by a specific setting, user, or business rule that has changed.
   1. In the Type field, select or search the generic item type you want to filter by (for example, "Trigger").
   2. In the Names field, select or search for the specific items you want to filter by (for example, the trigger named "Notify assignee of comment update").
8. Click Apply filters.

Exporting the audit log

You can export a CSV formatted copy of the audit log. If you filter the list before starting the export, the CSV file is also filtered this way. The exported copy is emailed to your primary Zendesk email address.

To export a copy of the audit log

1. In Admin Center, click Account in the sidebar, then select Audit log > Audit log.
2. Filter the audit log as needed.
3. Click Email CSV.