Audit log

Audit recent changes

To audit changes in your content model, go to Environment settings > Audit log. The audit log stores changes made in the last 90 days. The audit log is split into two parts: Filters and Logs. You can filter events by:

• Date range – shows events that occurred within the selected time period. Select the start and end dates in From and To.
• What changed – shows events for the selected object types: content types, content type snippets, the asset type, content items, language variants, or API keys.
• How it changed – shows events for the selected actions: created, updated, deleted, restored, published, unpublished, or revoked.
• Actor type – shows events for the selected actor types: User, Aiko agent, Expert agent, Integration, or System.
• Who changed it – type a name and select from a filtered list of matching users, agents, or API keys that have already made a change in this environment.

The matching events then appear in Logs, for example, showing when a specific content type was updated and who made the change.

Find the changed object

Every log entry is about one type of object, such as a content type or a language variant. Use the What changed filter to show only the types you need. Here’s what you find for each type:

• API key – the revocation of an API key. You see who revoked it and when.
• Asset type – changes to the asset type. The log entry shows its name, codename, and object ID.
• Content item – changes to the item itself. The audit log shows when an item is created, deleted, or restored, and when its name, codename, or collection changes. These log entries show no language.
• Language variant – changes to the content of an item in one language. Each language gets its own log entries.
• Content type – changes to a content type. The log entry shows its name, codename, and object ID.
• Content type snippet – changes to a content type snippet. The log entry shows its name, codename, and object ID.

Find the type of change

Every log entry also tells you what happened to the object, for example, whether it was created, published, or deleted. Use the How it changed filter to show only the actions you need:

• Create – shows events where a new object was created.
• Delete – shows events where an object was deleted.
• Publish – shows events where a language variant was published, scheduled to publish, or removed from the publishing schedule.
• Restore – shows events where an object was restored from an earlier version or after deletion.
• Revoke – shows events where an API key was revoked and became invalid.
• Unpublish – shows events where a language variant was unpublished, scheduled to unpublish, or removed from the unpublishing schedule.
• Update – shows events where an object was updated or moved to a different workflow step, including archiving.

One action can add several log entries. When you create a content item, you get a log entry for the item and one for its language variant. When you delete a content item, you get a log entry for the item and one for each of its language variants.

Find the origin of changes

Every change in the audit log is attributed to an actor type that shows who or what made the change:

• User – a person made the change directly in the app. Appears with their name.
• Aiko agent – Aiko made the change at a user’s request. Appears as the user’s name followed by “via   Aiko”.
• Expert agent – an expert agent made the change automatically, according to its instructions. Appears as followed by the agent’s name.
• Integration – the change was made using an API key, either a Management API key or a Personal API key. Appears as the key’s name, or, for a personal key, as the user’s name followed by “via Integration”.
• System – Kontent.ai made the change automatically, for example, through scheduled publishing. Appears as “ System”.

Each log entry shows the actor type that made the change and the action performed: created, updated, deleted, restored, published, unpublished, or revoked. To see only the changes made by a specific person, agent, or API key, type the name in Who changed it and select it from the list.

Read a log entry

Every log entry describes a change in one sentence: the object and its language, the action, and who made the change. For example, “Language variant ‘Home page’ in English was published by Jan Novak”. Each log entry expands to show its details in up to three tables: What changed, How it changed, and Who changed it and when.

What changed

Shows the object the log entry is about:

• Object ID – the unique ID of the object.
• Name – the name of the content item or language variant.
• Codename – the codename of the object.
• Collection – the collection of the content item or language variant.
• Language – the language of the language variant.

How it changed

Shows the details of the action. The table appears only when the action has such details, for example, when a language variant moves to another workflow step or when a publish is scheduled:

• Workflow step – the Previous value and the New value of the step, and the Workflow it belongs to, for example, Draft and Archived in the Default workflow.
• Publish due – the scheduled publish time, in UTC. It also appears when the schedule ran or was removed.
• Unpublish due – the scheduled unpublish time, in UTC. It also appears when the schedule ran or was removed.
• Version – a link to the version of the language variant, for example, Show the updated version.
• Restored from – a link to the earlier version the language variant was restored from.
• Name, Codename, and Collection – the values before and after the change, when a content item is renamed or moved.

Who changed it and when

Shows who made the change and when:

• Actor type – the type of actor, for example, User or Integration.
• E-mail – the e-mail address, shown for users.
• Name – the name of the actor.
• Date – the date and time of the change, in UTC.