---
key: export-critical-alert-audit-history
title: Review and export the audit history
audience: staff
section: critical-alerts
routes: ["/critical-alerts/audit"]
permissions: ["critical_alerts.audit.view"]
features: ["critical_alerts.audit"]
since: 0.0.1
updated: 0.0.1
status: published
summary: See who changed which rule, source, destination or window and when, and download the whole history as a spreadsheet file.
keywords: [who changed, history, log, export csv, download, compliance, changes, paper trail]
related: [critical-alerts-guide, end-or-archive-a-suppression-window, review-critical-alert-analytics]
---

In the sidebar, open **Critical Alerts**, then **Setup**, then **Audit**. The page address is `/critical-alerts/audit`.

Every change to a source, destination, template, schedule, rule, recipe or suppression window, and every operator action on an incident, is written here.

## Before you start

- Your admin has to give your role permission to view the critical alert audit history. Exporting needs the separate export permission, and audit has to be included in your organization's plan.

## Steps

1. Open the page. The newest events are at the top.
2. Read each event: a badge for the action (such as create, update, publish or acknowledge), a badge for the kind of record, and the record's name.
3. Press **Export CSV** to download the history. Nova confirms "Audit export downloaded." and the file opens in any spreadsheet program.

## What you see

- The heading reads **Audit**, with **Export CSV** on the right.
- Events are listed as cards, not a table. There is no search box or filter on this page.

## If something looks different

- **Export CSV** fails with "Unable to export audit history.": your role may lack the export permission. Ask your admin.
- The page is missing from the sidebar: it only shows there when your company's menu size is **Everything** (see [[choose-your-menu-size]]); type its address instead. If it still will not open, your role lacks the audit permission, or your plan does not include it.

[[route:/critical-alerts/audit|Open Audit]]