---
key: read-the-audit-log
title: Read the audit log
audience: staff
section: insights
routes: ["/settings/org/audit"]
permissions: ["audit.org.view"]
features: ["audit.org"]
since: 0.0.1
updated: 0.0.1
status: published
summary: Open the Audit Log to see who did what in Nova and when, narrow it by date, person, action or outcome, and open an event to see exactly what changed.
keywords: [audit trail, who changed, who deleted, history, sign-in history, security log, track changes, accountability, what happened]
related: [see-recent-activity-across-accounts, find-your-way-around, sign-in-to-nova, connect-an-ai-agent, review-a-technicians-day]
---

In the sidebar, open **Administration**, then choose **Audit Log** under **System**. The page address is `/settings/org/audit`. The page heading reads **Audit log**.

## Before you start

- Your admin has to give your role the audit log permission. Most technicians do not have it.
- The log records what people, connected apps and AI teammates did in Nova: sign-ins, changes to records, sends, denied attempts and errors.

## Steps

1. Press **View** beside **Filters**, then pick a ready-made view such as Operations, CRM, Files, Notes, Communications or Security. **All activity** searches everything. Removing the active view chip returns to **All activity**.
2. Press **Filters**. Under **Date range**, pick a preset such as **Today**, **Last 7 days** or **Last 30 days**, or **Custom** to set start and end times.
3. To follow one person, search for them under **Actor**. Under **Action**, type what you are looking for and pick from the recent actions, then choose **Exact** or **Prefix** under **Match mode** to match one action or a whole family.
4. Narrow further with **Outcome** (success, denied or error), **Category** and **Source**. Press **Advanced** for the subject, resource type and resource ID, or **IDs** for the rarely needed identifiers.
5. Press the apply button (the circular arrow, labelled **Apply filters**). Press **Clear** to remove every filter.
6. Change the order with **Sort**, for example **When (newest)**.
7. Press a row, or **View details** in its menu, to open the event. The drawer shows the **Actor**, the **Action**, the **Resource**, the **Request**, and under **Changes** the fields that changed with their old and new values.
8. Scroll down and press **Load more** for older events.

## What you see

- Columns: **When**, **Action**, **Resource**, **Actor**, **Outcome** and **Actions**. Press **Manage columns** to add columns such as **Event ID**, **Source**, **Reason** or **Request path**.
- A view sets its own filters. While one is active the filter panel reads **View filters are locked.**; you can still change the date range. Switch to **All activity** to edit everything.
- Times are shown in your organization's time zone. Its name appears as a badge on the date range picker.
- **Technician day** opens a separate page that lists everything one person did on one day ([[review-a-technicians-day]]).
- **Platform mode** appears only for Nova staff.

## If something looks different

- **No audit events match these filters.**: widen the date range or press **Clear**.
- **Unable to load audit events.**: press **Retry**, then refresh the page if it keeps failing.
- A message says the audit event link is invalid or the event does not exist: the link you followed points at an event outside your organization or one that has been removed.
- An action by a person you do not recognise: add the **Source** column. It says whether the event came from the screen, a connected app, an AI agent or Nova itself.

[[route:/settings/org/audit|Open the Audit Log]]