Converge
EN
Create account

ACCOUNT AND ADMIN

Audit log

What the company audit log records, who can see it, how to filter it by person, action and date, and how CSV export works.

Last edited

Overview

The audit log records who did what in your company, when, and from where. Converge writes an entry for sign-ins, team and role changes, seats, licence requests, project saves and deletions, reviews and sign-off, comments, API keys and exports. Entries are written by the server, in the same database transaction as the change they record where possible, and the app cannot edit or delete them.

Open Team → Audit log. You need the View audit log permission (Owner and Admin have it by default). Without it, the tab is dimmed and says why.

What each entry holds

Column Content
When Date and time of the action
Who The member's name, Converge staff, or System for automatic steps
Action A lower-case name such as team.role_change
Detail A readable summary: what changed, before and after values, role names; internal ids are left out
From The network address of the request; hover for the browser

The actor's name and email are copied onto the entry when it is written, so it still reads correctly after the person leaves. Values whose names look secret (passwords, tokens, keys, hashes, cookies) are replaced with [redacted] before storage.

Recorded actions

Actions are grouped in families. Filtering by a family name (for example team) matches every action in it.

Family Actions
auth auth.login, auth.login_failed, auth.logout, auth.email_verified, auth.password_reset_requested, auth.sessions_revoked
user user.profile_update, user.password_change, user.password_change_failed, user.password_reset
team team.invite, team.invite_accepted, team.role_change, team.update, team.remove
role role.create, role.update, role.reset, role.delete
seat seat.acquire, seat.release, seat.force_release
licence licence.request, licence.request_cancel, licence.request_approve, licence.request_decline, licence.grant, licence.update, licence.revoke
project project.create, project.update, project.delete, project.version_create, project.review_submit, project.review_approve, project.review_reject, project.review_withdraw, project.comment_create, project.comment_resolve, project.comment_reopen
api_key api_key.create, api_key.revoke, api_key.use (first use, then at most once an hour per key)
audit audit.export
tenant tenant.signup, tenant.trial_started, tenant.database_created, and staff changes to the company such as plan, status or trial

Notes on specific entries:

  • project.update records each changed field: module, field, old value and new value, for the first 50 changes of a save, with the total count.
  • seat.acquire is written when a seat is taken, not when another tab of the same person reuses it. A seat ended because the person lost the module permission is recorded as seat.release with the reason permission_removed.
  • project.review_submit and project.review_approve record the SHA-256 fingerprint of the version's data.
  • auth.login_failed records the email typed and whether the account exists, so you can spot attempts against your members.

Filter the log

Use the filter bar above the table, then select Search:

Filter What it matches
User One member, or Anyone
Action An exact action (licence.grant) or a family (licence). The field suggests families as you type.
From, To A date range, inclusive, in UTC
Search Free text in the action, detail or network address

The log shows 50 entries per page, newest first, with the total count. Use the arrows to page through.

Export to CSV

Select Export CSV to download every entry that matches the current filters. Export is an Enterprise plan feature; on other plans the button is disabled and says so.

  • The CSV columns are: time_utc, actor_type, actor_id, actor, actor_email, action, target_type, target_id, ip, user_agent, detail.
  • A cell that starts with =, +, - or @ is prefixed with ' so a spreadsheet does not run it as a formula.
  • One export holds up to 10,000 entries. Narrow the filters (for example by date) to export more.
  • The export itself is recorded as audit.export, with the row count and the filters used.

Scope

The company log shows only your company's entries. The server pins every query to your company, whatever the request asks for.

Converge staff work in a separate admin portal. Their changes to your company (licences granted or revoked, plan or status changes, trial extensions) appear in your log with Converge staff as the actor. Staff names and network addresses are not shown in the company log.