Audit log
The audit log lists what happened in your organisation: a member invited or removed, a role changed, a rule saved, a diagram shared, a sign-in refused. It names people and workspaces, never the content of a diagram. Owners, security administrators and auditors read it.
On this page
Before you start
- You are an owner, a security administrator or an auditor of the organisation. An auditor reads the log without any access to the diagrams.
- On your own, My diagrams has no audit log: its history shows what changed. See Save and restore versions.
Read the log
- Open the log
In the account menu, choose Organisation…, then Audit log. The page reminds you: The log names people and workspaces, never the content of a diagram.
- Filter
In Show, choose Everything, Members, Workspaces, Invitations, Account, Rules, Diagrams or Sign-ins.
- Read each line
Each line says When, Who, What and On what. A refused or failed action is tagged refused or failed. A person who left shows as Alex Morgan (no longer a member); an action of the system shows as iyedy. Earlier events loads older lines.
The newest events come first. Filtered on Members, the log shows the invitations accepted, the roles changed and the members removed.
What it records
| Filter | Examples |
|---|---|
| Members | a member added, suspended, removed, a role changed, an access request decided |
| Workspaces | a workspace created, renamed, archived, restored |
| Invitations | an invitation sent, resent, revoked |
| Account | the plan, seats, billing, account roles |
| Rules | a rule saved: the Assistant, the review policy, the title block, the contact |
| Diagrams | a diagram shared, an access removed, a read-only link created, a classification lowered |
| Sign-ins | sign-ins and refused sign-ins |
The log never holds the text of a diagram, a comment, a prompt or an answer.
How long it is kept
On Team, the log is kept one year. On Enterprise, the retention is set in your contract. Changing to a smaller plan never shortens what was already written. Keeping it for a shorter time asks a second owner or security administrator to approve: see Dual approval.
If it doesn't work
Audit log is not in the console
Your role does not read the log. Ask an owner to give you the Auditor role. See Roles and permissions.
“No event.”
Nothing matches the filter. Choose Everything, or load Earlier events.
“This section could not be read.”
Select Try again. If it keeps failing, write to support with the time it happened.
More cases: Organisation troubleshooting.
Was this page helpful?Your answer is anonymous and counts only if you accepted measurement.
What went wrong?
Don't write personal data.