Skip Navigation

View and filter the administrator audit events

The following task is for viewing and filtering the administrator event audit log only. To view the security audit event log, see Export security audit events to a .csv file.
  1. On the menu bar, click 
    Audit and Logging
    System audit
  2. Click 
  3. Choose a category and date range. Click 
  4. Under 
    , click a category to expand it. 
    : Under the 
     category, a role named Work Apps is displayed if a user is accessing work apps from their device. Work Apps is not an existing role; it is assigned dynamically to add the minimum set of permissions to access the user's work apps.
  5. Select the filters that you want to apply and click 
  6. Optionally, in the right pane, click  . Select the columns that you want to view.
  7. If necessary, do one of the following: 
    • To remove a filter, click   beside the filter that you want to remove.
    • To clear all filters, click 
      Clear all