Workspace Audit Log Export

The Export Audit Log provides detailed records of all activity conducted within the Workspace. This report allows the Workspace Administrator to confirm successful logins, monitor member access, and track login frequency, with each export including core details such as timestamps, usernames, and event types. A dropdown selection determines whether the export contains Member Authentication logs or Other Audit Logs.

Role Permissions

1. Workspace Administrator: Accesses Settings >> Data >> Export Data >> Audit Log and exports both Member Authentication Log and Other Audit Log reports for the Workspace.

Audit Log Export Settings

The following fields configure an Audit Log export:

1. Export Format: Determines whether the exported file is generated in Excel or CSV format.
2. Audit Log Types: Selects the type of audit log to be exported — Member Authentication Log or Other Audit Logs.
3. Filter by Date Range: Enabling this switch adds start and end date fields to export data for a specific time period. Leaving the switch off exports all data from the beginning up to the current date.
4. Timezone: Selects the timezone in which all exported data is displayed.

Selecting Export generates the file and makes it available for download.

Member Authentication Log

The Member Authentication Log contains comprehensive records of all authentication activity within the Workspace. The Workspace Administrator can use this report to verify successful or failed logins, the type of member access to the Workspace, and the frequency of member logins.

The exported Excel or CSV file includes the following fields:

1. Date/Time: The date and time of the member's login.
2. IP: The network IP address of the member.
3. Type: The authentication result — Authentication Success or Authentication Failure.
4. Mechanism: The mechanism used to authenticate, including EMAIL_PASSWORD, SSO_MULTIPASS, SSO_COOKIE, SSO_SAML, SOCIAL, FACEBOOK, YAMMER, GOOGLE, EMAIL_TOKEN, API_KEY, GLOBAL_API_KEY, OAUTH_TOKEN, and SUDO.
5. Source Name: The member's profile name if access was granted; blank if the email or password combination was incorrect; or "Forgotten member" if the member was banned or removed.
6. Source Email: The email address the member registered with the Workspace.
7. Via Identity Type: Indicates whether the member authenticated using Email or Social Login.
8. Via Identity: The member's email address when Via Identity Type is Email, or a link to the member's profile page on the social platform when Via Identity Type is a social login.
9. Target Name: The member's profile name if the target email is registered with the community; blank if the email address is invalid.
10. Target Email: The email address of the member at the time of login.
11. Failed Attempt Count: The number of failed authentication attempts recorded when multiple failed attempts occur.
12. Last Attempt: The date and time of the most recent successful or failed login attempt.

Other Audit Logs

The Workspace Administrator can select All or choose specific Audit Log Types from the dropdown. Exporting the selected types provides direct access to only the audit logs needed for review.

After selecting the Audit Log Types and configuring the remaining fields, selecting Export generates the file and makes it available for download.

The exported sheet includes the following columns:

1. Date and Time: The date and time the event occurred.
2. IP Address: The IP address of the member who made the change or update.
3. URL: The Workspace URL where the change or update was made.
4. User: The name of the member who made the change or update.
5. Assigner Email: The email address of the member who assigned or unassigned another member, when applicable.
6. Action Source: The source from which the change or update was made.
7. Audit Type: The specific feature that was changed or updated.
8. Object Class: The name of the class in the IdeaScale system that corresponds to the action taken. For example, changing a funnel name triggers the class called FunnelData, which is logged in this column.
9. Object Name: The name of the component in IdeaScale on which the action was performed. For example, changing the name of a funnel called Customer Experience logs Customer Experience in this column.
10. Old Value: The value that existed before the action was performed. For example, changing a funnel name from Customer Experience to Customer Success logs Customer Experience as the Old Value.
11. New Value: The value that exists after the action was performed. For example, changing a funnel name from Customer Experience to Customer Success logs Customer Success as the New Value.
12. Assignee Email: The email address of the assignee, displayed when a member is assigned or unassigned.
13. Delta: The difference between the Old Value and New Value for the logged action. For example, this column reflects the difference between a member's two most recent successful login times.
14. Trace ID: A unique, system-generated string used to search for a particular log entry.
15. Session ID: The browser session ID of the member at the time the action was performed.

Frequently Asked Questions

What is the difference between the Member Authentication Log and Other Audit Logs?

The Member Authentication Log records login-related activity, including successful and failed authentication attempts, the mechanism used, and login frequency. Other Audit Logs record broader workspace activity, such as configuration changes, including the old and new values for each change.

What happens if Filter by Date Range is left off?

Leaving the Filter by Date Range switch off exports all available data from the beginning up to the current date, rather than limiting the export to a specific time period.

What file formats are available for the exported Audit Log?

The Audit Log can be exported in either Excel or CSV format, selected using the Export Format field.

Can more than one Audit Log Type be exported at once?

Yes. The Other Audit Logs dropdown allows selecting All audit log types together, or choosing specific types individually to narrow the export to only the logs needed.

Why might Source Name and Source Email differ from Target Name and Target Email in the Member Authentication Log?

Source Name and Source Email reflect the outcome of the authentication attempt and appear blank or show "Forgotten member" when access was not granted. Target Name and Target Email always reflect the email address used at the time of login. The two sets of fields match only when authentication is successful.

Related Articles

• Help Article for Workspace Exports Overview
• Help Article for Export Member Data
• Help Article for Export Log