Review & export the audit trail

Filter the organization-wide audit trail to answer a specific question, then produce a defensible export for an inspection — from one tamper-evident place.

The audit trail is captured automatically and tamper-evidently as people work across every module. This admin area is where you review the consolidated record and produce it for an inspection — not where you assemble it, because it assembles itself. For what each entry means, see The audit trail; the admin reference is Audit logs.

Review the trail

The whole point of a consolidated trail is being able to ask it a question instead of scrolling it.

Before you start Open Administration and go to Audit logs. You'll need administrator access.

  1. Review audit activity across the organization.
  2. Filter to the question you're answering — by action, by user, or by date — rather than reading an undifferentiated log.
  3. Use this to investigate a record's history, confirm who did what in a period, or check the activity around a controlled change.

Result A targeted view of exactly the activity you need. See Audit logs.

Export for an inspection

When an auditor asks for evidence, the trail leaves the system as an artifact you can defend.

  1. Narrow the trail to the scope the inspection calls for — the period, users, and actions in question.
  2. Export the audit activity.
  3. Because the trail is captured automatically as actions happen, the export reflects what genuinely occurred rather than a reconstruction — which is what gives it weight.

Result A defensible evidence artifact that stands up in an inspection.

Note The trail is tamper-evident: entries can't be edited or deleted, not even by an administrator. That's the point, not a limitation — an auditor can rely on the log precisely because no one can curate it before it's reviewed. Treat the export as something to produce, never something to clean up. What each entry captures is detailed in The audit trail.

Where to go next

The compliance meaning of the trail — what it proves and what each entry records — is in The audit trail. For operational, technical logging, which is separate from this compliance trail, see System logs.

Was this helpful?