Audit log

The audit log is the system’s record of every change, sign-in and settings update: who did what, and when, newest first. Use it to investigate an unexpected change, to trace the history of a SIM card or an invoice, or to check the security events of an account.

From the side menu, open Settings › Audit log.

What’s on this screen

Search by record or user
Filters: User, Event, Record (the kind of record, such as SIM card, Assignment, Employee, Provider, Plan, Invoice, Invoice line, Invoice attachment, User or Role) and Date range.
Export Excel: downloads the entries as shown.

Columns

Date and time
User: who made the change, or System for automatic tasks.
Event: such as Created, Updated, Deleted, Signed in, Signed out, Imported, Password changed, Settings changed, Test email sent, Access changed, API token created, API token revoked, Two-factor sign-in turned on, Two-factor sign-in turned off or Recovery codes renewed.
Record: the kind of record, with its name underneath (a link to it when it still exists).
Changes: the number of fields changed.

Security events show when something may be wrong with an account: Sign-in paused (wrong passwords), Two-factor sign-in paused (wrong codes) and Signed out (wrong passwords). Entries carried over from the first version of the system start with Legacy:.

How to see the details of a change

Use the search and filters to narrow the list.
Click an entry. The Audit entry panel shows the Date and time, User, Event, Record and IP address, and a Changes table with each Field and its value Before and After.

When an event has no field values (a sign-in, for example), the panel shows No field values were recorded for this event. A settings change lists only the names of the settings changed, never a password.

Required permission

Audit log › View, for the screen and for Export Excel.