Audit log

The audit log answers three questions about your company’s activity: who, what and when. It records changes, but also sensitive reads, such as who downloaded a document or looked at salaries.

OrganizationAuditAudit log

Before you start

Viewing the log is Enterprise-only: the audit add-on is sold only on that plan, which already includes it. Orquiva keeps recording activity on every plan; what Enterprise adds is being able to see it. See Billing, plan and modules.

You also need to be an Admin or have the audit log permission in your role. See Roles and permissions.

What gets recorded

Tab	What it collects
Settings	Departments, positions, roles, folders, time-off types, sub-companies, company details and individual permissions
Employees	New hires, deletions, reactivations, invitations and profile changes, field by field
Time off	Approvals and rejections, including an admin's decisions on their own time off
Clock-ins	Clock-in corrections approved and rejected
Documents	Uploads, downloads and openings of each document
Salaries	Salary changes and lookups: the year's list and one person's history
Billing	Seat increases and decreases, plan and subscription changes
Logins	Successful logins and failed attempts, with the email used
Security	Two-step verification enabled, disabled or regenerated, password changes and password policy changes

All brings them together, including two categories without their own tab: company setup and integrations.

Each row is a sentence with the change in it, for example “Ana changed field email from luis@mail.com to lgomez@company.com for employee Luis Gómez.” Automatic actions show The system as the actor. If someone opens the same document several times within a minute, it’s recorded once.

Find an event

The table brings events in batches of 50, newest first, and the search box only looks at what’s already loaded. That’s why Load more matters: a search with no results may just mean the event is further back.

Take it out of Orquiva

Click Export CSV. You get every event in the chosen tab and period that matches the search, not just the rows loaded on screen, up to 10,000 rows, in four columns: Date, Category, Who and Summary. There’s no need to click Load more first. While the file is being prepared the button shows it’s working, and you’re told if it fails.

What happens next

Looking at the log changes nothing and notifies no one. The table only has Date and Summary: there’s no detail panel, because the summary already carries the old and new values.

If something goes wrong

I don’t see Audit under Organization. Your company isn’t on Enterprise, or your role doesn’t have the audit log permission. The first is changed in Billing, plan and modules; the second in Roles and permissions.

I’m looking for a change and it doesn’t show up. Widen the Period, switch to All and click Load more: the search box only looks at what’s loaded.

The CSV has fewer rows than I expected. The export applies the tab, Period and search you have set: widen the period, switch to All or clear the search box. A single file also holds at most 10,000 rows; if your period has more, export it in shorter stretches.

An SSO change doesn’t show up. Single sign-on configuration isn’t recorded in the log.