Using the Audit Log

This task is for users with the OC System Administrator or OC Site Manager roles.

The Audit Log logs system events on your site so you can track down specific actions taken if you need to know more about them. The Audit Log displays each activity by the type of action taken, when it was taken, and who made that action.

Please note that this is a low-level audit and does not always give specifics. Finding the exact event you're looking for can also be tricky, as almost all actions will trigger an item on the audit log, and some will trigger multiple events. For example, saving your Site Settings will log many activities, and a user logging in will trigger a change to that user, but pushing a page to Publish in a workflow will not trigger an action in the log.

The Audit Log is best used as an investigation tool if, for example, something is accidentally deleted rather than as a robust reporting tool.

How to Use the Audit Log

You'll find the log by going to More > Audit Log from the main menu. You can filter your search by Component type, Action, Name, User, Dates, Group, and System Changes. To see all actions taken, select Search without using any filters. You can also Export To XSL or Export To CSV to download your log as a spreadsheet.

The log table will show five columns: one for Component type, Name, Username, Time, and Action. Next to each column name are arrows you can select to change the order of entries. Each column can be switched to alphabetical order and then reversed, except for the Time column, which switches between chronological and reverse-chronological order.

These are the filters you can use to search events:

• Component type: This filter refers to the aspect of the product being worked on, such as a Page or User. Action will be logged when a Component type has been created, saved, or deleted from the database. Not all of these will be relevant to general reporting tasks, but some are important to understand:
  • Admin Access: Logs when a user accesses the admin
  • Configuration: Logs when a user configures something in the admin 
  • File: Use when looking for a change made to a file in your Files Library
  • Form: Use when looking for a change or response made to a form
  • Group: Use when looking for changes to a specific site, such as changing the domain.
  • Page: Use when looking for a change made to a page or a page that's been created.
  • Role: Use when looking for changes made to a role or a role that has been created.
  • Theme: Use when a theme has been created or updated.
  • User: Use when looking for a change made to a user. Please note the system will log a difference when a user logs into the admin.
  • Workflow: Use when looking for changes made to a workflow. Please note that this will not log when a page has been published or deleted through a workflow.
• Action: This filters the type of action taken, such as:
  • Create: A component is created in the system, such as a page, language variant, theme, content type, or field template.
  • Update: When a component is updated in the system. Please note that an Update action will be logged any time you Save something, and there may be multiple entries when you Save settings of any sort.
  • Delete: When a component is permanently removed from the system, such as a page, language variant, theme, or file. 
  • Publish: When a component is published on the system, such as a page or file.
  • Archive: A component is archived in the system, such as a page or file.
• Name: This filters the name of the Component type you're looking for, such as a Page name, file name, the name of a Field, or Content type.
• User: This filters the username of the user who completed the action. 
• Dates: This filters the log by date. You can use the From and To fields to filter by a date range or exact date and time.
• Group: This filters by the sites you have. Just select the correct Site name from the drop-down menu. Please note that you cannot view actions across multiple sites simultaneously.
• Show System Changes: This includes changes our system has made, such as syncing Azure AD. Please note there is no way to show only system changes.