Review the audit log and export evidence

See who did what, prove the log was not changed and hand evidence to your auditors.

Steps

1. 1

   Open Admin console › Activity & reports › Audit log to see every admin action, share, secret reveal and sign-in event.

2. 2

   Filter by person, vault, action or date.

3. 3

   Choose Verify integrity to check the hash chain: any edited or deleted entry shows up.

4. 4

   Export CSV or JSON for your auditors, or stream events to your SIEM continuously.