Get audit logs for your company

Retrieve member audit events for your company for up to 30 consecutive days. If you don’t define a specific time range using the filter[date][since] and filter[date][until] fields, the API returns events from the past 7 days.


Note: The full list of parameters was implemented June 1, 2021. Requests prior to this date may not contain all available audit log parameters.

Entity can be one of the following: APIKEY, BILLING_GROUP, COMPANY, EMAIL, HUB, MURAL, REFCODE, ROOM, SLACK_COMMAND, TEMPLATE, USER, WORKSPACE

List of attributes response:
actor
The entity that performed the action (APIKEY, USER, COMPANY).
action
The type of action performed.
affected
The entity that was affected by the action.
company
The company that the entity belongs to.
date
The date and time (UTC) when the action occurred.
destination
The target location of the affected entity.
email
The email address of the entity.
id
A unique identifier for this specific action occurrence.
ip
The source IP address of the requesting entity.
snapshotDate
The date and time (UTC) of the last time this entry was extracted
name
The name of the entity.
origin
The source location of the affected entity.
type
The entity type.
List of actions:
ABORT_VOTING_SESSION
Aborted voting session
ACCEPT_MEMBERSHIP
Accepted membership request to join workspace
ACCEPT_REACTIVATION_REQUESTS
Accepted reactivation requests
ACCEPT_TERMS_AND_CONDITIONS
Accepted terms and conditions
ACCESS_AUDIT_LOG
Accessed audit log
ACCESS_DENIED
Access denied
ACCESS_REPORTS_MURALS
Access Reports Murals
ACCESS_REPORTS_QEMS
Access Reports QEMs
ACCESS_REPORTS_ROOM_MEMBERSHIPS
Access Reports Room Memberships
ACCESS_REPORTS_ROOMS
Access Reports Rooms
ACCESS_REPORTS_TEMPLATES
Access Reports Templates
ACCESS_REPORTS_USERS
Access Reports Users
ACCESS_REPORTS_WORKSPACE_MEMBERSHIPS
Access Reports Workspace Memberships
ACCESS_REPORTS_WORKSPACES
Access Reports Workspaces
ACTIVATE_CONTENT_KEY
Activated top-level CEK (Content Encryption Key)
ACTIVATE_DATA_KEY
Activated a DEK (Data Encryption Key) for a mural, template, etc.
ADD_COMPANY_ADMINS
Added more than one company administrator
ADD_COMPANY_CLIENT_APPS
Added company client applications
ADD_COMPANY_DOMAINS
Added company domains
ADD_COMPANY_MEMBER
Added a company member
ADD_FACILITATOR
Added facilitator
ADD_FAVORITE_CUSTOM_TEMPLATE
Added favorite custom template
ADD_FAVORITE_GLOBAL_TEMPLATE
Added favorite global template
ADD_FAVORITE_ROOM
Added room as favorite
ADD_FAVORITE
Added favorite
ADD_GLOBAL_ADMIN
Added global admin
ADD_GROUP_MEMBER
Added a user to a group
ADD_IMAGE
Added image to mural
ADD_INTEGRATION
Added integration
ADD_RECENT
Added mural to recent
ADD_SLACK_TO_PROFILE
Added Slack to profile
ADD_VISITOR_PASSWORD
Added a visitor password for accessing a mural
ADD_WORKSPACE_ADMIN
Added admin to mural or room via direct link
ADD_WORKSPACE_TO_GROUP
Added a workspace to a group
AI_AUTO_CLUSTER
Clustered widgets with AI
AI_ENHANCE
Enhanced widgets with AI
AI_GENERATE_IDEAS
Generated ideas with AI
AI_SUGGEST_TITLE
Suggested title with AI
ARCHIVE_MURAL
Archived mural
CHAT
Sent a chat message
CONVERT_TO_GUEST_INVITATION
Converted an invitation to a guest invitation
CONVERT_TO_GUEST
Converted user to guest
CONVERT_TO_MEMBER_INVITATION
Converted an invitation to a member invitation
CONVERT_TO_MEMBER
Converted user to member
CREATE_ACCOUNT
Created account
CREATE_CLIENT_APP
Created a client app
CREATE_COMPANY_API_KEY
Created company API key
CREATE_COMPANY
Created company
CREATE_CONTENT_ENCRYPTION_KEY
Created a CEK (Content Encryption Key)
CREATE_DATA_ENCRYPTION_KEY
Created a DEK (Data Encryption Key)
CREATE_EMAIL_CODE
Created an email code
CREATE_EMBED_KEY
Created an embed token
CREATE_FOLDER
Created a folder
CREATE_GROUP
Created a group
CREATE_KMS_CLOUD_CONFIG
Created cloud KMS (Key Management Service) configuration
CREATE_MFA_SECRETS
Created Multi-Factor Authentication secrets
CREATE_MURAL_CONTENT
Created mural content
CREATE_MURAL
Created mural
CREATE_OR_UPDATE_USER_QUEST
Created or updated user Quest schema
CREATE_ROOM
Created room
CREATE_SNIPPET
Created snippet
CREATE_SSO_CONFIG
Created Single Sign-On config
CREATE_TEMPLATE_CONTENT
Created template content
CREATE_TEMPLATE
Created template
CREATE_USER_PROFILE
Created user profile
CREATE_USER_SESSION
Created user session
CREATE_VISITOR_TOKEN
Created visitor token
CREATE_WORKSPACE
Created workspace
DEACTIVATE_CONTENT_KEY
Deactivated top-level CEK (Content Encryption Key)
DEACTIVATE_DATA_KEY
Deactivated a DEK (Data Encryption Key) for a mural, template, etc.
DEACTIVATE_USER_FROM_WORKSPACE
Deactivated a user from the workspace
DELETE_ACCOUNT
Deleted user account in product
DELETE_CLIENT_APP
Deleted client app
DELETE_COMPANY_API_KEY
Deleted company API key
DELETE_FOLDER
Deleted a folder
DELETE_GROUP
Deleted a group
DELETE_INTEGRATION
Deleted integration
DELETE_MFA_SECRETS
Deleted Multi-Factor Authentication secrets
DELETE_MULTIPLE_VOTING_SESSION
Deleted mutiple voting session
DELETE_MURAL_EMBED_KEY
Deleted all embed keys for a mural
DELETE_MURAL_MEMBER
Deleted mural member
DELETE_MURAL
Deleted mural
DELETE_PENDING_INVITATION
Deleted pending invitation
DELETE_ROOM_MEMBER
Deleted a room member
DELETE_ROOM
Deleted a room
DELETE_TEMPLATE_EMBED_KEY
Deleted all embed keys for a template
DELETE_TEMPLATE
Deleted a template
DELETE_USER_SESSIONS
Deleted user sessions
DELETE_USER
Deleted user via SCIM
DELETE_WORKSPACE_MEMBER
Deleted a workspace member
DELETE_WORKSPACE
Deleted a workspace
DEVICE_REGISTERED
Registered a device
DISABLED_FILE_RESTRICTION_DOWNLOAD
Disabled file restriction for downloads
DISABLED_FILE_RESTRICTION_UPLOAD
Disabled file restriction for uploads
DOWNLOAD_QEMS_REPORT_CSV
Download QEMs report CSV
DUPLICATE_MURAL
Duplicated mural
DUPLICATE_ROOM
Duplicated room
EDIT_SNIPPET
Edited snippet
ENABLED_AUTOMATIC_PROVISIONING_CUSTOM_SUPPORT_LINK
Enabled automatic mode of provisioning with custom link for the support page
ENABLED_AUTOMATIC_PROVISIONING_CUSTOM_SUPPORT_PAGE
Enabled automatic mode of provisioning with custom content for the support page
ENABLED_AUTOMATIC_PROVISIONING
Enabled automatic mode of provisioning through SCIM
ENABLED_FILE_RESTRICTION_DOWNLOAD
Enabled file restriction for downloads
ENABLED_FILE_RESTRICTION_UPLOAD
Enabled file restriction for uploads
ENABLED_MANUAL_PROVISIONING
Enabled manual mode of provisioning
END_VOTING_SESSION
Ended voting session
ENQUEUE_WIDGET
Added a widget to widget queue
EXPORT_MURAL_DATA
Exported mural data
EXPORT_MURAL_IMAGE
Exported mural as an image
EXPORT_MURAL_PDF
Exported mural as a pdf
FAILED_LOGIN_INVALID_PASSWORD
Failed to login because of invalid password
FETCH_ENTITY
Fetched entity
FILE_PREVIEW
Added file to mural
FIX_MURAL_MEMBERS
Fixed mural members
FREE_TRIAL_EXPIRED
Free trial expired
GENERATE_MURAL_INVITE_LINK
Generated a mural invite link
GENERATE_ROOM_INVITE_LINK
Generated a room invite link
GENERATE_WORKSPACE_INVITE_LINK
Generated a workspace invite link
IMPERSONATE_USER
Impersonated another user
INVITE_MEMBER
Invited a member to destination
JOIN_ROOM
Joined a room
JOIN_WORKSPACE
Joined workspace
LEAVE_MURAL
Member left a mural
LEAVE_ROOM
Left a room
LEAVE_WORKSPACE
Member left a workspace
MEMBER_LIMIT_REACHED
Reached member limit
MODIFIED_FILE_RESTRICTION_DOWNLOAD_EXTENSIONS
Modified file restriction download extensions
MODIFIED_FILE_RESTRICTION
Modified file restriction
MOVE_COMPANY_MEMBER
Moved a company member
MOVE_FOLDER
Moved a folder
MOVE_MURAL_CONTENT
Moved mural content
MOVE_MURAL
Moved a mural
MOVE_ROOM
Moved a room
MOVE_WORKSPACE
Moved workspace
MURAL_UPGRADED
User upgraded automatically to new mural version
PRIVATE_TIME_BEGIN
Private time began
PRIVATE_TIME_END
Private time ended
PUSH_TO_HUB
Pushed mural to Microsoft Surface Hub
REACTIVATE_MEMBER
Activated a suspended member
REGISTER_CUSTOMER_MANAGED_KEY_ENCRYPTION_KEY
Registered a customer-managed key
REJECT_MEMBERSHIP
Rejected a membership request
REJECT_REACTIVATION_REQUESTS
Rejected reactivation requests
REMOVE_COMPANY_ADMINS
Removed more than one company adminstrator
REMOVE_COMPANY_CLIENT_APPS
Removed company client applications
REMOVE_COMPANY_DOMAINS
Removed company domains
REMOVE_COMPANY_MEMBER
Removed a company member
REMOVE_FAVORITE_ROOM
Removed room from favorites
REMOVE_FAVORITE
Removed favorite
REMOVE_GLOBAL_ADMIN
Removed global admin
REMOVE_GROUP_MEMBER
Removed a user from a group
REMOVE_GROUP_USER_TYPE
A 'user type' was removed from a group
REMOVE_MURALS_FROM_PROFILE
Removed murals from profile
REMOVE_PARTIAL_MEMBER
Removed partial member
REMOVE_PASSWORD_RESET_TOKEN
Removed password reset token
REMOVE_ROOM_INVITE_LINK
Removed a room invite link
REMOVE_VISITOR_PASSWORD
Removed visitor password for mural
REMOVE_WORKSPACE_FROM_GROUP
Removed a workspace from a group
RENAME_MURAL
Renamed a mural
RENAME_ROOM
Renamed a room
RENAME_WORKSPACE
Renamed a workspace
REQUEST_ACCOUNT_REACTIVATION
Requested account reactivation
REQUEST_MEMBERSHIP
Requested to become a member of a destination
REQUEST_REACTIVATION
Requested reactivation
RESEND_INVITE_MEMBER
Resent member invite
RESET_PASSWORD
Reset password
RESET_VISITOR_LINK
Reset visitor link
SEEN_CHAT
Viewed chat
SEEN_MURAL
Viewed mural
SEND_EXPORTS_EMAIL
Exports email was sent
SEND_GUEST_DOMAIN_RESTRICTION_EMAIL
Guest domain restriction email was sent
SEND_JOIN_MURAL_INVITATION
Join mural invitation was sent
SEND_MFA_DISABLED_EMAIL
Multi-Factor Authentication disabled email was sent
SEND_MFA_ENABLED_EMAIL
Multi-Factor Authentication enabled email was sent
SEND_RESET_PASSWORD
Reset password was sent
SEND_USED_ALL_RECOVERY_CODES
All used recovery codes were sent
SEND_VERIFY_EMAIL_WITH_CODE
Email verification with code was sent
SEND_VERIFY_EMAIL
Email verification was sent
SET_COLLAB_STATUS
Collaboration status was set
SET_TEMPLATE_WIDGETS
Template widgets was set
SIGN_IN_FAILURE
Sign in failed
SIGN_IN
Signed in
SIGN_OUT
Signed out
SIGN_UP
Signed up
SOFT_LIMIT_USER_HIT
Soft limit reached for user
START_VOTING_SESSION
Started voting session
SUBSCRIPTION_SUSPENDED
Suspended subscription
SUSPEND_USER
Suspended a member
SUSPEND_USERS
Suspended members
SYNC_COMPANY_MEMBERS
Synced company members
SYNC_COMPANY_WORKSPACES
Synced company workspaces
SYNC_WITH_CONTENTFUL
Synced with Contentful
TIMER_START
Started timer
TIMER_STOP
Stopped timer
TRANSFER_OWNERSHIP
Transferred entity ownership
UNSUSPEND_USER
Unsuspended a member
UNSUSPEND_USERS
Unsuspended members
UPDATE_ACTIVITY
Updated activity
UPDATE_CLIENT_APP
Updated client app
UPDATE_COMPANY_MEMBER
Updated company member information
UPDATE_COMPANY_SETTINGS
Updated company settings
UPDATE_COMPANY_SSO
Updated company Single Sign-On
UPDATE_COMPANY
Updated company information
UPDATE_EMBED_KEY_STATUS
Updated status of an embed key
UPDATE_FOLDER
Updated folder
UPDATE_GLOBAL_ADMIN
Updated global admin
UPDATE_GROUP_NAME
Updated a group name
UPDATE_GROUP_PERMISSIONS
Updated permissions of a group
UPDATE_GROUP_USER_TYPE
A 'user type' was added to a group
UPDATE_MEMBER_EMAIL_SCIM
Updated member email via SCIM
UPDATE_MEMBER_FIRSTNAME
Updated member first name
UPDATE_MEMBER_LASTNAME
Updated member last name
UPDATE_MURAL_LINK
Updated mural link
UPDATE_MURAL_MEMBER_SETTINGS
Updated member settings of a mural
UPDATE_MURAL_MEMBER
Updated mural member
UPDATE_MURAL_MIGRATION
Updated mural migration
UPDATE_MURAL_PROPERTY
Updated properties of a mural
UPDATE_ORGANIZATION
Updated organization
UPDATE_PARTNER
Updated partner
UPDATE_PROFILE
Updated profile
UPDATE_ROOM_MEMBER_SETTINGS
Updated room member settings
UPDATE_ROOM_MEMBER
Updated room member
UPDATE_ROOM
Updated room
UPDATE_SHARE_SETTINGS
Updated share settings
UPDATE_TEMPLATE_PROPERTY
Updated template property
UPDATE_USER_LICENSE
Updated user license
UPDATE_WIDGET
Updated an existing widget
UPDATE_WORKSPACE_BILLING_EMAIL
Updated workspace billing email
UPDATE_WORKSPACE_MEMBER_SETTINGS
Updated workspace member settings
UPDATE_WORKSPACE_MIGRATION
Updated workspace migration
UPDATE_WORKSPACE_OWNER
Updated the workspace owner
UPDATE_WORKSPACE_SETTINGS
Updated the workspace settings
VERIFY_EMAIL_WITH_CODE_RETRY
Verified a member email by code retry
VERIFY_EMAIL_WITH_CODE
Verified a member email by code
VERIFY_EMAIL
Verified a member email
VISITOR_CREATED_ACCOUNT
Account created by visitor

Language
Authorization
Header