Availability of this feature depends on your MoEngage plan and may require a paid add-on. To check what’s available for your plan, refer to Plans and Pricing. To get this feature, contact your MoEngage Customer Success Manager (CSM) or the Support team.

Audit logs are a central place to record a trail of all actions and changes, such as user logins and configurations, that occur within your MoEngage workspace. They help you understand what changes were made, when they were made, and who made them. The following are some examples of audit logs:

A user logging into the account
A user editing the account
A user creating a content block
A user editing an alert

Only admins can view and download the audit logs.
Audit logs will track the events after you enable the audit logs feature for your workspace.
The Teams is only visible when the feature is enabled for your account. (This specifies the team to which the user belongs when the particular action is performed.)
No user can modify or update audit logs.

View Audit Logs

To view audit logs, perform the following steps:

On the left navigation menu in the MoEngage UI, navigate to Settings> Account > Audit logs. The Audit logs page appears.

On the Audit logs page, the data is displayed in a tabular format, with columns containing details related to each activity performed by the user or team.

Columns	Description
Time	This specifies the timestamp by capturing the specific day, month, and year when a particular action is performed.
Teams	This specifies the team to which the user belongs when a particular action is performed.
Entity	This specifies the type of event when the particular action is performed.
Activity	This specifies the summary when the particular action is performed.
Action	This specifies the type of task performed, such as CREATE, UPDATE, DELETE, EXPORT, INVITE, Campaign duplicated, Campaign resumed, Campaign archived, Campaign unarchived, or Campaign paused.
Actor	This specifies the email ID of the user who performed the particular action.
IP	This specifies the IP address of the system the user used to perform the particular action.

Events Captured in Audit Logs

This section helps you understand the events or activities performed for each module within your workspace:

Identity and Access Management

Entity, Module, or Object	Activity or Event	Revised Description
User (login/logout/change workspace)	Create Update Delete	A user logged in to the workspace. The user switched to a different workspace. A user logged out of the workspace.
Security Settings Note: The Login Settings is now renamed to Security Settings	Update	Login settings were updated (for example, MoEngage access enabled or login type changed to SSO).
Firewall	Create Update Delete	An IP address was added to the firewall. For more information, refer An existing IP address in the firewall was updated. An IP firewall rule was deleted.
Role	Create Update Delete	A new user role was created. The description or permissions for a user role were updated. A user role was deleted.
User Management	Update Delete	A user’s assigned role was changed. A user’s access was revoked, or their account was permanently deleted.
Team Management	Create Update Delete	A user was invited to join a team. A user was added to a team, or existing team details were updated. A team was deleted.
Authentication [System for Cross-domain Identity Management (SCIM)]	Create Update Delete	A SCIM access token was generated, or SCIM was enabled for the workspace. The SCIM configuration for the workspace was updated. SCIM was disabled for the workspace.
Alert Management - Billing	Create	A new billing alert was created.
SSO	Update	The Single Sign-On (SSO) configuration was updated.
API Keys	Create Update Delete	An API key was created: `API key with name {{key-name}} and auth type {{Basic/OAuth 2.0/AWS STS}} created`. An API key was regenerated: `API key with name {{key-name}} and auth type {{Basic/OAuth 2.0/AWS STS}} regenerated`. For an AWS STS key, MoEngage logs the secret change separately as `MOE-APPSECRET for API key with name {{key-name}} and auth type AWS STS regenerated`. The ARN list of an AWS STS key was changed: `ARN for API key with name {{key-name}} and auth type AWS STS updated`. An API key was archived: `API key with name {{key-name}} and auth type {{Basic/OAuth 2.0/AWS STS}} archived`. Note: Descriptions use the short auth type names `Basic`, `OAuth 2.0`, and `AWS STS`. Audit logs record that a key was updated, but not which API groups were added or removed. To see the current scope of a key, open View key details.

File Import

Entity, Module, or Object	Activity or Event	Description
Data Import	Create Edit Delete	A data import named `{{import-name}}` (`{{User - Anonymous/Registered / Event/ Aux-data}}`) was created via channel `{{S3/SFTP/CSV}}` by `{{uid}}`. The data import `{{import-name}}` (`{{User - Anonymous/Registered / Event/ Aux-data}}`) was edited by `{{uid}}`. The data import `{{import-name}}` (`{{User - Anonymous/Registered / Event/ Aux-data}}`) via channel `{{S3/SFTP/CSV}}` was deleted by `{{uid}}`.

Data Management

Entity	Activity or Event	Description
Data Management	Update Update Update Update Update Update Update Update Update	Visibility changed to `{{On/Off}}` for user attribute/event `{{user-attribute name/ event name}}`. Status changed to `{{Allow/Block}}` for user-attribute/event `{{user-attribute name/ event name}}`. Description/Display name changed to `{{description/display name}}` for user-attribute/event `{{user-attribute name/ event name}}`. PII Masking changed to `{{On/Off}}` for event-attribute `{{event attribute name}}` of event `{{event name}}`. PII Masking changed to `{{On/Off}}` for user-attribute `{{user attribute name}}`. Encryption changed to `{{On/Off}}` for user-attribute `{{user attribute name}}`. Encryption changed to `{{On/Off}}` for event-attribute `{{event attribute name}}` of event `{{event name}}`. Data type pinned as `{{Data type}}` for event-attribute `{{event attribute name}}` of event `{{event name}}`. Data type pinned as `{{Data type}}` for user-attribute `{{user attribute name}}`.

Segment

Entity, Module, or Object	Activity or Event	Description
Custom Segment	Create Edit Archive Unarchive	A new custom segment was created by the user. An existing custom segment was edited by the user. A custom segment was archived by the user. A custom segment was unarchived by the user.

Analytics

Entity, Module, or Object	Activity or Event	Description
Chart	Create Update Update Delete	A new chart was created. An existing chart was updated. The chart update failed. A chart was deleted.
Behavior chart	Create	A new Behavior chart was created.
Funnel chart	Create	A new Funnel chart was created.
Retention Chart	Create	A new Retention chart was created.
Session and Source Chart	Create	A new Session and Source chart was created.
User paths	Create	A new User Paths chart was created.
Dashboard	Create Update Update Delete	A new custom dashboard was created. An existing custom dashboard was updated. The custom dashboard update failed. A custom dashboard was deleted.
Dashboard Subscription	Create Update Update Delete	A new dashboard subscription was created. An existing dashboard subscription was updated. The dashboard subscription update failed. A dashboard subscription was deleted.

Campaign Management

Entity, Module, or Object	Activity or Event	Description
Content Blocks	Create/Publish Edit Delete	A new content block was created or a draft was published. Note: When a draft content block is published, it is recorded as a CREATE event. An existing content block was edited. A content block was deleted.
UTM Parameters	Enable Disable Update	A UTM parameter was enabled. A UTM parameter was disabled. The UTM parameter settings were updated.
Tags	Create Edit Delete	A new tag was created. An existing tag was edited. A tag was deleted.
Category	Create Edit Delete	A new category was created. An existing category was edited. A category was deleted.
Content API	Create Update	A new Content API was created. An existing Content API was updated.
Global Control Group	Create Update Delete Enable	A new Global Control Group was created. The Global Control Group settings were updated. The Global Control Group was deleted. The Global Control Group was enabled or disabled. Turn on or turn off the Status toggle of a Global Control Group at Settings > Advanced settings > Control groups > Global control group details.
Reports	Create Edit Stop Delete	A new report was created. An existing report was edited. A running report generation was stopped. A report was deleted.

Campaign Creation

Entity, Module, or Object	Activity or Event	Description
Create new campaign	Publish Save as draft Send for approval	The campaign was published. The campaign was saved as a draft. The campaign was sent for approval.
Draft	Edit Delete Publish	The campaign draft was updated. The campaign draft was deleted. The campaign draft was published.
Send for approval	Reject Approve Edit Publish	The campaign was rejected by an approver. The campaign was approved. The campaign, currently under review, was edited. The approved campaign was published.
Under review	Duplicate	The campaign, currently under review, was duplicated.
Reject campaign	Duplicate Edit	The rejected campaign was duplicated. The rejected campaign was edited.
Approve campaign	Publish	The approved campaign was published.
Publish campaign	Edit Duplicate Pause	The published campaign was edited. The published campaign was duplicated. The published campaign was paused.
Pause campaign	Duplicate Edit Resume Archive	The paused campaign was duplicated. The paused campaign was edited. The paused campaign was resumed. The paused campaign was archived.
Archive campaign	Duplicate Unarchive	The archived campaign was duplicated. The archived campaign was unarchived.
Unarchive campaign	Duplicate Edit Resume Archive	The unarchived campaign was duplicated. The unarchived campaign was edited. The unarchived campaign was resumed. The unarchived campaign was archived.
Resume campaign	Duplicate Edit Pause	The active campaign was duplicated. The active campaign was edited. The active campaign was paused.
Edit campaign	Send for approval Publish	The edited campaign was sent for approval. The edited campaign was published.
WhatsApp Sender Details	Add Update Delete	A new WhatsApp sender was added. An existing WhatsApp sender’s details were updated. An existing WhatsApp sender was deleted.

Email Suppression Updates

Entity, Module, or Object	Activity or Event	Description
Channel Settings	Create Export	A suppression management file was uploaded A suppression management file was downloaded

Inform

Entity, Module, or Object	Activity or Event	Description
Campaign Activities	Create Alert Update Alert Archive Alert Pause Alert Resume Alert	A new alert was created. An existing alert was updated. An alert was archived. An active alert was paused. A paused alert was resumed.
Settings	Enable User attributes Disable User attributes Enable PII Purging in Inform Disable PII Purging in Inform	The use of user attributes in Inform was enabled. This is done by enabling the User attributes toggle at Settings > Miscellaneous > Inform. The use of user attributes in Inform was disabled. This is done by disabling the User attributes toggle at Settings > Miscellaneous > Inform. PII purging in Inform was enabled. PII purging in Inform was disabled.

Personalize

Entity, Module, or Object	Activity or Event	Description
New audience	Create/Publish	A new audience was created and published.
Draft experience	Create Update	A new experience draft was created. An existing experience draft was updated.
Experience	Create/Publish Update Paused Resume	A new experience was created and scheduled for delivery. An active experience was updated. An active experience was paused. A paused experience was resumed.

Landing Page

Entity, Module, or Object	Activity or Event	Description
New landing page	Create	A landing page was created.
New landing page draft	Create	A draft for the landing page was created.
Existing landing page draft	Update	The draft for the landing page was updated.
Landing page	Update Archive	The landing page was updated. The landing page was archived.
Landing page Status	Update	The status of the landing page was updated.

Alert Management

Entity, Module, or Object	Activity or Event	Description
Alert Destinations-SLACK	Create Update Delete	A destination was created. A destination was updated. A destination was deleted.
Alert Management-CAMPAIGN_STATS	Create Update Delete Subscribe_others Subscribe Unsubscribe	An alert was created. An alert was updated. An alert was deleted. The alert has new users added to its email subscriptions. A user was subscribed to an alert. A user was unsubscribed from an alert.

Template Management

Entity, Module, or Object	Activity or Event	Description
Directory	Create Move Edit Delete Share	A directory was created. A directory was moved. A directory was updated. A directory was deleted. A directory was shared.
Templates	Create Move Edit Delete Share	A template was created. A template was moved. A template was updated. A template was deleted. A template was shared.

Filter Audit Logs

MoEngage allows you to search and sort audit logs within the workspace based on your selected criteria. You can filter the audit logs in two ways:

Search Logs

On the left navigation menu in the MoEngage UI, navigate to Settings > Account > Audit logs. The Audit logs page appears.
In the Search logs by box, type the keyword, such as the Team, Entity, Activity, Action, Actor, or IP.
Press Enter.

Filter Logs

Click the Filter icon.

On the Filter dialog box, enter the following details:

Field	Description
Team(s)	Select the team to which the user belongs when the particular action is performed.
Action	Select the type of task performed.
Actor	Select the email ID of the user who performed the particular action.
Date time Range	Select the date range in which a particular action is performed.

Click Apply.

The audit logs are displayed based on your selected criteria.

Download Audit Logs

MoEngage allows you to export and download the audit log reports in CSV files. To download them, perform the following steps:

On the left navigation menu in the MoEngage dashboard, navigate to Settings > Account > Audit logs. The Audit logs page appears.
Filter the audit logs if required.
Click Export audit logs in the upper-right corner.
The audit log report is successfully sent to your email ID.

You can export and download the audit log reports in CSV files using the following file naming convention: WorkspaceName_ExportID_YYYY-MM-DD.
Audit logs are available for the last 90 days only.

​View Audit Logs

​Events Captured in Audit Logs

​Identity and Access Management

​File Import

​Data Management

​Segment

​Analytics

​Campaign Management

​Campaign Creation

​Email Suppression Updates

​Inform

​Personalize

​Landing Page

​Alert Management

​Template Management

​Filter Audit Logs

​Search Logs

​Filter Logs

​Download Audit Logs

View Audit Logs

Events Captured in Audit Logs

Identity and Access Management

File Import

Data Management

Segment

Analytics

Campaign Management

Campaign Creation

Email Suppression Updates

Inform

Personalize

Landing Page

Alert Management

Template Management

Filter Audit Logs

Search Logs

Filter Logs

Download Audit Logs