Retrieving Audit Events - Retrieving Audit Events - The Administration Portal allows account administrators to retrieve audit events that occurred within a specific date range. - Content Innovation Cloud - Content Innovation Cloud Administration Portal - Current/Content-Innovation-Cloud-Administration-Portal/yox1685624657286 - Current - Current

The Administration Portal allows account administrators to retrieve audit events that occurred within a specific date range.

1. Open the Administration Portal.
2. Select the Account tab under the banner.
   The Account Details page is displayed.
3. In the sidebar, click Audit.
   The Audit page is displayed. By default, the page lists account-level events for the current date.
4. Click the Open Filters button () in the upper-right corner of the Audit page.
   The Filters pane is displayed.
5. Under Event Source, select Account or Environment.
   • Select Account to retrieve events recorded at the account level. Examples include local login attempts and user account updates.
   • Select Environment to retrieve events recorded for a specific environment. Select the environment from the drop-down list provided.
6. Under Time Period, enter a date range using the Start Date and End Date fields.
   Tip: Click the Open Calendar button () to select a date from a calendar. The expected date format is displayed under each field.
7. Enter a time period using the Start Time and End Time fields provided.
   If you do not enter specific times, the search uses a default start time of 12:00 AM and a default end time of 11:59 PM.
   Tip: Click the Open Timepicker Options button () to select a time from a list. The expected time format is displayed under each field.
8. Click Apply.

   The event list displays the following details for audit events that satisfy your search criteria:

   Column	Description
   Event	The user-friendly name of the event.
   Reference	The API scope and object ID of a related object, if applicable. The related object may be a parent of the object acted upon or another object related to the event. To copy this information, click the Copy button on the right side of the column.
   Date	The date and time of the event, using the time zone set on your device.
   Author	The user or system component that performed the action. Also called the actor of the audit event. For interactive (human) users, this column displays the email address of the user followed by the user ID. For service users (including internally managed service users), this column displays the service user name followed by the service user ID. For system components, this column displays the system name followed by System. For more information about identifying the actor in an audit event, see Audit Event Actor Identities. To copy information from this column, click the Copy button on the right side of the column, and then select the value you want to copy.
   Details	A button that allows you to view the complete event details in JSON format. Click the Show Event Details button () to display the Event Details dialog box. For help understanding the event details, see Audit Event Details.

9. Browse or export the event list using the following tools:
   • To view the next page of the event list, click the Next Page button at the bottom of the page.
   • To change the number of events displayed per page, select an appropriate number from the Items per page drop-down list in the lower-right corner of the page.
   • To export details for all audit events that meet your criteria, see Exporting Audit Events.