Activity Log
See who created, updated, or deleted data in your organization and when, review member login records, and export logs to Excel for audit retention.
The Activity Log records every creation, update, and deletion of data in your organization, as well as member logins. Each record includes the operation time, the member who performed it, the source IP address, and the changes made. Organization administrators can use it to trace who changed an AI assistant's settings and when; security auditors can export records for a selected period to Excel for audit retention.
Who Can Use It
A role must have Activity Log Permission under Organization Permissions to see Activity Log in Organization Settings. Exporting and Export Records use the same permission.
Roles with the parent Organization Permissions also receive Activity Log Permission.
Organization owners have this permission by default.
For instructions on configuring permissions, see Role and Permission Management.
How to Access It
In the left menu, click Organization Settings → Activity Log.
Recorded Events
Each record shows an "Operation Type" and a "Resource Type." For example, an operation type of "Update" and a resource type of "AI Assistant" indicate that a member changed an AI assistant's settings.
Operation Types
Create
Data is created, such as an AI assistant, knowledge base, or role
Update
The contents or settings of existing data are changed
Delete
Data is deleted
Login
A member logs in to the admin console and enters this organization, or switches to this organization in the admin console
The activity log records only operations that change data and logins. Simply opening a page or viewing data does not create a record.
Resource Types
The resource type identifies the kind of data involved in an operation. The filter dropdown lists only resource types that have actually appeared in this organization. Common types include:
AI assistants
AI assistant, AI assistant tool, AI assistant connector, AI assistant skill, AI assistant knowledge base
Knowledge bases
Knowledge base, knowledge base file, knowledge base file tag, FAQ, FAQ tag
Conversations and contacts
Conversation platform, contact, contact conversation platform
Organization and members
Organization, member, member time-off period, login record
Roles
Role, role member, role permission, role AI assistant, role knowledge base, role conversation platform, role database, role available LLM
Tools and data
Tool, connector, skill, SQL database, service account
Viewing and Filtering Records
The list is sorted from newest to oldest. The columns are described below:
Operation Timestamp
The time the event occurred, displayed in the browser's time zone
User
The name and Email of the member who performed the operation; left blank for system events with no associated member
Resource Type
The kind of data involved in the operation
Operation Type
Create, update, delete, or login, shown in different colors
Details
For "Update" events, lists changes as "Field: New value" (up to 300 characters; hover to view the full text); other events show "-"
IP Address
The source IP address of the operation
Filters
Four filters are available above the list. Changing any filter updates the list immediately:
Start Date / End Date: Includes records on both the start and end dates.
Select User: Lists organization members' names and Email addresses; enter a keyword to search.
Select Resource Type: View changes to a specific kind of data, such as "Role."
Select Operation Type: Create, update, delete, or login.
Click Reset Filters to clear all conditions at once.
Viewing Event Details
Click the eye icon in the Actions column at the far right of the list to open Activity Log Details:
Basic Information
Operation Timestamp, Operation Type (shown as an English code, such as UPDATE), Object Model, and Object ID
Context Information
User, Organization, IP Address, Request Method, and API Path; login events instead show User, Organization, IP Address, and Login Method (the code identifying the account's authentication source, such as maiagent or saml)
Change Details
Shown only for "Update" events: lists each changed field (by its field code) with its Old Value and New Value
Exporting Activity Logs
Exports are processed in the background. After creating an export, you can continue using other pages. Once processing finishes, download the Excel file from Export Records.
Export Status
Export Records lists the Status, Record Count, File Size, Processing Duration, Created At, and Completed At for each export. Use the refresh icon (Refresh) in the upper right to update the list.
Pending
The export has been created and is queued for processing
Processing
The file is being generated
Completed
Ready to download
Failed
An error occurred during processing (the system automatically retries first), or processing has not finished within 2 hours; click View Error Details to see the cause
While you are on the Export Records page, when an export you created finishes, the message "Export request completed. You can now download the file" appears, and an "Export Completed" browser notification is sent (browser notifications must be allowed). If the export fails, the message "Export request failed. Please view the error details" appears.
Export Records lists activity log exports for the entire organization, including exports created by other members. All members with Activity Log Permission can view and download them. Exported files contain member Email addresses, IP addresses, and data contents. Store them according to your company's information security policies.
Exported File Contents
The format is Excel (
.xlsx), and the filename isevents_export_<組織 ID>_<日期時間>.xlsx.Each row contains one event, sorted from newest to oldest. If more than 50,000 records match the filters, only the latest 50,000 are included.
Column names are in English. The main columns are:
ID
Event ID
Timestamp
Event time in ISO 8601 UTC format (ending in +00:00)
User
Email of the member who performed the operation
Resource Type
System code for the resource type, such as chatbots.Chatbot
Object ID
ID of the data involved in the operation
Operation
Operation type code: create, update, delete, or login
Diff Preview
The complete contents of the data at the time of the event (JSON format); left blank for login events
Request Method
Request method, such as POST or PATCH
Login Method
Authentication source code for login events
IP Address
Source IP address
Data Retention
Activity logs only accumulate: the admin console provides no function to delete or edit them, and the system also blocks record deletion at the database level. Even organization owners cannot remove a record. Records are not automatically cleared over time. To retain data for a specific period, filter by date and export it.
FAQ
Why Can't I Find a Setting Change I Just Made in the Activity Log?
The activity log synchronizes every 10 minutes. Wait a little before refreshing. Exported files use the same data, so operations you have just completed also appear in exports only after synchronization.
What If I Need to Export More Than 50,000 Records?
Each export is limited to 50,000 records. If the limit is exceeded, only the latest 50,000 are included. Narrow the date range (for example, export one month at a time) and export in batches.
Why Do Exported Timestamps Differ from the Screen by Several Hours?
The exported Timestamp is in UTC, while the screen displays times in the browser's time zone. For example, for Taiwan time (UTC+8), add 8 hours to the exported timestamp to get the time shown on screen.
What Should I Do If Exports Keep Failing?
In Export Records, click View Error Details to check the cause. Exports that have not finished within 2 hours are marked Failed. Narrow the date range and export again. If failures continue, provide the error details to customer support for troubleshooting.
Last updated
Was this helpful?