Audit log
Every change, import, run, approval, push and resolution in your workspace, with who did it and the before and after. Filter it on screen or export it as CSV.
The audit log records every create, amend, import, run, approval, push, resolution and connection change in your workspace. Each entry says when it happened, who did it, what they did, which record it touched, and the values before and after.
Open Audit log in the sidebar. Everyone in the workspace can read it: admins, approvers and analysts.
What an entry shows
| Column | What it holds |
|---|---|
| When | Date and time of the action. |
| Who | The person's email, or the name of an automatic process (below). |
| Action | A code such as line.approved or usage.imported. |
| Entity | The kind of record and the start of its ID, such as billing_line 3f2a91c0. |
| Change | Details opens the values before and after, where the action has them. |
For a line decision, for example, the details show the line's status and version before, and the new status, version, note and amount after.
What is logged
| Area | Actions |
|---|---|
| Contracts | contract.created, contract.amended, contract.references_updated, contract.customer_mapped, contract.archived, contract.restored, contract.delete_scheduled |
| Usage | usage.imported, usage.import_failed, usage.import_voided, usage.unmapped_resolved |
| Billed amounts | billed.imported |
| Runs | run.completed, run.failed |
| Lines | line.approved, line.held, line.rejected, line.released, line.pushed, line.invoiced, line.voided_externally, line.requeued |
| Exceptions | exception.resolved, exception.assigned, exception.suppressed |
| Statements | statement.generated, statement.shared, statement.share_revoked |
| Connections | connection.created, connection.revoked, connection.webhook_secret_set, connection.ingest_token_created, connection.ingest_token_revoked, salesforce.synced |
| Invoices | invoice.paid |
| Team | user.invited, user.joined, user.role_changed, user.removed |
| Workspace and settings | workspace.created, settings.updated, settings.alerts, settings.billing_system, logo.updated, logo.removed |
| Subscription | billing.subscription_updated |
Settings changes record the old and new values of the workspace name, currency, close time zone, scheduled close day, four-eyes rule, statement footer and collection method.
Keys, secrets and tokens are never written to the log. A connection entry records that a connection was made or revoked, not the credential.
Automatic actions
Some entries aren't made by a person. They show the process's name in the Who column:
| Who | What it records |
|---|---|
| scheduled close | Runs started by the scheduled close. |
| Stripe webhook | Lines marked invoiced or voided, and invoices paid, as Stripe reports them. |
| NetSuite poll | Lines marked invoiced after the daily NetSuite check. |
| Salesforce sync | The daily Salesforce CPQ sync, and the contracts it creates or amends. |
Plan changes from your subscription are recorded under the name of the payment provider that handles TrueUpp's billing.
Filtering
Filter by Area (the first part of the action code, such as line or exception), by Who (part of an email or process name), and by a From and To date. The page shows the 300 most recent entries that match. To see more, narrow the filters or export.
Export
Export CSV on the audit log page, or Settings › Data, downloads the whole log for the workspace, newest first, with columns at, actor, action, entity_type, entity_id, before and after. The before and after values are JSON. Times are in UTC. The export ignores the filters on screen.
Changes and retention
Entries can't be edited or deleted in the app. If someone is removed from the workspace, their past entries keep their email.
The audit log is kept for the life of the workspace. When a cancelled workspace's data is deleted, 30 days after the paid term ends, the audit log is deleted with it. Export it first if you need to keep it. See exporting and deleting data.