--- title: "Board Audit Logs – Track Administrative Actions and Security Events" slug: "audit-log" description: "The Audit logs keep track of events related to user accounts, connections and related system objects which are managed through Board's Subscription Hub. Filter by user, action or date, inspect details, and export records for compliance and troubleshooting" tags: ["Administrator", "Audit log", "User Metadata", "APIs for Audit Logs", "SCIM API"] updated: 2025-08-05T10:56:17Z published: 2025-08-05T10:56:17Z canonical: "help.board.com/audit-log" --- > ## Documentation Index > Fetch the complete documentation index at: https://help.board.com/llms.txt > Use this file to discover all available pages before exploring further. # Audit log - Applies to: All Board Cloud subscriptions ## WHAT: Audit Logs The Audit logs keep track of events related to user accounts, connections and related system objects which are managed through Board's Subscription Hub. All log files include additional information about these events, such as timestamp, log type (for the Full Audit API), action type, and additional details specific for each action type. The data is exported in TSV (tab-separated values) format. | Action type | Description | | --- | --- | | LOGIN | LOGIN events record the IP Address of the requester of every successful or failed attempt to login to or logout from a Board platform. - LOGIN_SUCCEEDED: The user logged in successfully, either with a locally verified password or through an external authentication mechanism. - LOGIN_FAILED: The user failed to connect for one of several reasons: wrong password, expired password, invalid credentials, external authentication error, invalid license, or account locked. - LOGOUT: The user logged out successfully. | | CONNECT_TO_PLATFORM | The user made an authorized connection to the specific Board platform. | | DISCONNECT_FROM_PLATFORM | The user was disconnected from the specific Board platform. These include automatic disconnections triggered by user inactivity. | | USER_CREATED | The user was created in the Subscription Hub for the specific Board platform. See [The Users section](https://help.board.com/docs/the-users-section). | | USER_UPDATED | The user had changes made to: - The license associated with the user (i.e. Developer/Power User/User/Lite), or - The roles associated with the user for the available Board Platform, or - One or more of the properties of the indicated user: email, name, phone, culture, office, user metadata, Office add-in flag, authentication type, password expiry option, disabled flag. | | USER_DELETED | The user has been deleted. | | USER_IMPORTED | The user was imported from an external source with access and authentication details included. Any import failures are tagged with USER_IMPORT_FAILED. See [Import users](https://help.board.com/docs/import-users). | | EXPORT_USERS | The administrator account and IP address of the connection requesting the data export. See [Export users](https://help.board.com/docs/export-users). | | USER_META_DATA_CREATED | A meta data field was created to store custom information about every user. See [The User metadata section](https://help.board.com/docs/the-user-metadata-section). | | USER_META_DATA_UPDATED | A meta data field about users was updated. | | USER_META_DATA_DELETED | A meta data field about users was deleted. | | PERMISSION_GROUP_CREATED | A permission group was created with a set of licenses, roles and platforms that will be inherited by any user assigned the permission group. Failed attempts are tagged with PERMISSION_GROUP_CREATE_FAILED. See [The Permission Groups section](https://help.board.com/docs/the-permission-groups-section). | | PERMISSION_GROUP_UPDATED | The permission group was updated. Failed attempts are tagged with PERMISSION_GROUP_UPDATE_FAILED. | | PERMISSION_GROUP_DELETED | The permission group was deleted. Failed attempts are tagged with PERMISSION_GROUP_DELETE_FAILED. | | PERMISSION_GROUP_SET_AS_DEFAULT | The permission group was assigned to be the default for new users. Failed attempts are tagged with PERMISSION_GROUP_SET_AS_DEFAULT_FAILED. | | REMOVE_DEFAULT_PERMISSION_GROUP | Removal of the default permission group for new users. Failed attempts are tagged with REMOVE_DEFAULT_PERMISSION_GROUP_FAILED. | | ROLE_CREATED | The new role was created as a collection of: folder security profiles, application profiles, database security profiles and/or selection security profiles and scripts. See [The Roles section](https://help.board.com/docs/the-roles-section). | | ROLE_UPDATED | The user role was updated with the attached modifications. | | ROLE_DELETED | The user role was deleted. | | APPLICATION_PROFILE_CREATED | The new application profile was created as a list of features for working with Capsules, Layouts, Presentations, and Procedures that are made available or denied for users assigned this application profile. See [The Features section](https://help.board.com/docs/the-features-section). | | APPLICATION_PROFILE_UPDATED | The application profile was updated with the attached modifications. | | APPLICATION_PROFILE_DELETED | The application profile was deleted. | | FOLDER_PROFILE_CREATED | The new capsule folder was created as a collection of capsules to be made available to users assigned this capsule folder. See [The Folder security section](https://help.board.com/docs/the-folder-security-section). | | FOLDER_PROFILE_UPDATED | The capsule folder was updated with the attached modifications. | | FOLDER_PROFILE_DELETED | The capsule folder was deleted. | | DATABASE_PROFILE_CREATED | The new data model profile was created as a list of access rights to data model design and internal selection security. See [The Database Security section](https://help.board.com/v14/docs/the-database-security-section#database-profile-options). | | DATABASE_PROFILE_UPDATED | The data model profile was updated with the attached modifications. | | DATABASE_PROFILE_DELETED | The data model profile was deleted. | | FEDERATION_CREATED | An administrator created a federation of the nominated Board platform. See [The Identity Provider Federation section](https://help.board.com/docs/the-identity-provider-federation-section). | | FEDERATION_UPDATED | An administrator updated a federation of the nominated Board platform. | | FEDERATION_DELETED | An administrator deleted a federation of the nominated Board platform. | | PLATFORM_CREATED | The nominated Board platform was created by an administrator. | | PLATFORM_UPDATED | The nominated Board platform was updated. | | PLATFORM_DELETED | The nominated Board platform was deleted. | | SYNC_TO_DB_SETTINGS_UPDATED | The automated synchronizations with external databases for user metadata have been modified. See [Sync to Data model](https://help.board.com/docs/sync-to-data-model). | | ENROLLMENT_SETTINGS_UPDATED | The nominated Board platform’s enrollment rules have been updated to customize the process that allows end users to request access to Board or to register directly in Board and access the configured platform. See [The Enrollment section](https://help.board.com/docs/the-enrollment-section). | | COLLABORATION_SETTINGS_UPDATED | The news feed, chat and discussion collaboration features of the nominated Board platform have been modified. See [Board Collaboration services](https://help.board.com/docs/board-collaboration-services). | | GENERAL_SETTINGS_UPDATED | The general settings for authentication and user communications of the nominated platform have been modified. See [The General settings section](https://help.board.com/v14/docs/en/the-general-settings-section). | ## HOW: Audit Logs The Audit log download button in the header of the Users section allows you to download Audit log files with a customized date range. Specifying a date range is mandatory. To **download Audit log entries in a file**, click on "AUDIT LOG" from the Users section of the Subscription Hub to open a popup window. ![contents/assets/images/audit.log.png](https://cdn.document360.io/8d6f1ae8-0cac-4d0d-a208-6245b83df94a/Images/Documentation/audit-log-image-aye3lo91.png) 1. Select the date range to restrict the size of the download. 2. Click the "DOWNLOAD" button to download the specified log collection set to your local system. > [!NOTE] > *The log files are contained in a compressed file with a ZIP extension.* **Audit Logs retained for 6 months only** The Audit Logs are automatically purged to delete entries that are older than 6 months. If it is important to retain the Audit Logs for longer periods, then regular exports and/or backups are the recommended solution. It is clearly not useful to specify a date range for the download that extends beyond 6 months in the past. ## HOW: Audit Log APIs These audit logs are also accessible by using eight APIs that have been provided for this purpose. To find out more about Board's APIs, read the [**Client API section**](/v14/docs/client-api-section), and about the [**Board SCIM API**](/v14/docs/board-scim-api-overview). Please see [**APIs for Audit Logs**](/v14/docs/apis-for-audit-logs) for complete details.