---
title: "Check the activity log"
description: "See who did what in your organization, including your IT provider's technicians, filter it, check that it has not been changed, and download it for an auditor."
url: "https://support.outpostplatform.com/portal-guide/activity-log/"
product: "depot"
type: "how-to"
status: "draft"
ai_summary: "Client portal users with View the audit log. Activity log lists sign-ins, changes to people, remote sessions, tickets, and the IT provider's technicians' work. Filter by who, action, and dates. Check the log is intact verifies the chain. Download as Spreadsheet (CSV) or JSON with fingerprints for offline checks, which needs Export the audit log."
source: "https://gitlab.com/outpostplatform/docs/-/edit/main/src/content/docs/portal-guide/activity-log.md"
license: "CC BY 4.0"
---

# Check the activity log

The activity log is your organization's record of who did what: your own
people in the portal, your IT provider's technicians working on your
systems, and automatic actions. Each entry is chained to the one before it,
so a change to an old entry would show. This page covers reading, checking,
and downloading it.

## Before you begin

- Reading the log needs **View the audit log**, and downloading it needs
  **Export the audit log**. The **Owner** role has both. **Read only** can
  read it.

## Read the log

Select **Activity log**. Each entry says what happened, who did it, and when.
Open an entry for its details: the exact time, who did it and in what role,
what it was done to, its action code, and how it was made, such as **via AI
assistant** for an app acting for someone.

- Sign-ins, invitations, role changes, remote sessions, and remote access
  given or ended appear as they happen.
- An entry about a ticket links to it with **Open the ticket**.
- A remote session that was recorded says **Recorded**. Ask your IT provider
  to see the recording.

Your IT provider decides whether its technicians appear by name or by a
number that stays the same for each technician.

## Filter the log

- **Who**: **Everyone**, **Your people**, your IT provider's technicians, or
  **System**.
- **Action**: such as **Sign-ins**, **Remote sessions**, **Remote access
  given**, **Invitations**, **Role changes**, **Access removed**, or **Tickets
  opened**.
- **From** and **To**: a date range.

Select **Clear filters** to see everything again.

## Check that the log is intact

Select **Check the log is intact**. The portal recomputes every entry's
fingerprint from the one before it.

- **The log is intact.** says how many entries were checked, and that nothing
  has been changed or removed.
- **The log does not check out** names the entry where the chain breaks.
  Contact your IT provider, and keep a downloaded copy.

## Download the log

Under **Download the log**, choose:

- **Spreadsheet (CSV)**, to read or filter it in a spreadsheet.
- **JSON with fingerprints**, for an auditor. Each entry carries its own
  fingerprint and the fingerprint of the entry before it, with the method
  named in the file, so anyone can check the chain later without the portal.

Downloads use the filters above, so set the dates first.

## Next steps

- [Manage your team](/portal-guide/manage-your-team/)
- [Manage your sign-in and security](/portal-guide/sign-in-and-security/)