Audit Log Checking and the Log Lists
In the audit logs of Kintone, you can view who and when performed what kind of actions on Kintone.
The audit logs are exported to Kintone Users & System Administration.
Checking the Audit Log
-
Click the setting button
on the upper right of the screen, and then click
.
-
Under "Audit Logs", click View & Download.
-
Specify filter conditions as much as possible and click View.
Filtered logs will be displayed at the bottom of the page. -
To check the details of the log, click the i icon.
-
Set or export audit logs as necessary.
Audit Logs
App Settings
The following table describes log entries that are generated from actions on app settings:
| Level | Module | Action | Log Details | Description of the Action |
|---|---|---|---|---|
| Notice | App management | App update | app id: [app ID], app name: [app name], record comment: [true/false] | Enabling/disabling comments on records |
| Notice | App management | App update | app id: [app ID], app name: [app name], record history: [true/false] | Enabling/disabling tracking of change history of records |
| Notice | App management | App update | app id: [app ID], app name: [app name], bulk delete: [true/false] | Enabling/disabling bulk deletion of records |
| Information | App management | App create | app name: [app name], app group id: [app group ID] | Creating an app |
| Information | App management | App create from template file | file name = [app name], template name: [comma-separated list of template names], app group id = [app group ID] | Importing a template file from the Marketplace to add an app |
| Information | App management | App delete | If you deleted an app: app id: [app ID], app name: [app name] If you deleted multiple apps in bulk: app id: [app ID], app name: [app name], (app id: [app ID], app name: [app name]), (..... |
Deleting apps |
| Information | App management | App restore | If you restored an app: app id: [app ID], app name: [app name] If you restored multiple apps in bulk: app id: [app ID], app name: [app name], (app id: [app ID], app name: [app name]), (..... |
Restoring apps |
| Information | App management | App update | app id: [app ID], app name: [app name], target: general | Changing the "Appearance" settings of an app*1 |
| Information | App management | App update | app id: [app ID], app name: [app name], target: form | Changing the form settings |
| Information | App management | App update | app id: [app ID], app name: [app name], target: view | Adding, changing, or duplicating a view |
| Information | App management | App update | app id: [app ID], app name: [app name], target: notification | Changing the notification settings |
| Information | App management | App update | app id: [app ID], app name: [app name], target: title | Changing the record title settings |
| Information | App management | App update | app id: [app ID], app name: [app name], target: category | Changing the category settings |
| Information | App management | App update | app id: [app ID], app name: [app name], target: report | Adding, changing, or duplicating a graph |
| Information | App management | App update | app id: [app ID], app name: [app name], target: status | Changing the process management settings |
| Information | App management | App update | app id: [app ID], app name: [app name], target: action | Adding, changing, or deleting an action |
| Information | App management | App update | app id: [app ID], app name: [app name], target: app acl | Changing the app permission settings |
| Information | App management | App update | app id: [app ID], app name: [app name], target: record acl | Changing the record permission settings |
| Information | App management | App update | app id: [app ID], app name: [app name], target: field acl | Changing the field permission settings |
| Information | App management | App update | app id: [app ID], app name: [app name], target: info | Changing "Misc Settings" |
| Information | App management | App update | app id: [app ID], app name: [app name], record duplication: [true/false] | Enabling/disabling duplicate feature of records |
| Information | App management | App update | app id: [app ID], app name: [app name], target: resource | Changing the "Localization" settings |
| Information | App management | App update | app id: [app ID], app name: [app name], target: customize | Changing the "JavaScript and CSS Customization" settings |
| Information | App management | App update | app id: [app ID], app name: [app name], target: plugin | Adding, deleting, and enabling/disabling the plug-in, or changing the plug-in settings |
| Information | App management | App update | app id: [app ID], app name: [app name], target: api token | Changing the "API Token" settings |
| Information | App management | App update | app id: [app ID], app name: [app name], target: webhook | Changing the "Webhooks" settings |
| Information | App management | App update | app id: [app ID], app name: [app name], target: theme | Changing the "Design Theme" settings |
| Information | App management | App update | app id: [app ID], app name: [app name], target: icon | Changing an app icon*2 |
| Information | App management | App report delete | app id: [app ID], app name: [app name], report id: [graph ID], report name: [graph name] | Deleting a graph |
| Information | App management | App view delete | app id: [app ID], app name: [app name], view id: [view ID], view name: [view name] | Deleting a view |
| Information | App management | App change discard | app id: [app ID], app name: [app name] | Cancelling changes to app settings |
| Information | App management | App change deployed | app id: [app ID], app name: [app name] | Applying changes to app settings |
| Information | App management | Add slack integration | app id: [app ID], app name: [app name], slack workspace: [URL of the integrated Slack] | Integrating with a Slack Workspace |
| Information | System administration | Template download | If download is succeeded: Following two logs are written.
app id: [app ID], template name: [template name] |
Downloading an app as a template |
| Information | App management | App move started | app id: [app ID], app name: [app name], source space id: [source space ID], source space name: [source space name], destination space id: [destination space ID], destination space name: [destination space name] | Changing the space where the app belongs to |
*1: This entry is generated when "Save" is clicked on the "Appearance" setting screen.
*2: This entry is not generated when an app icon is changed from "Appearance".
Actions on App Records
The following table describes log entries that are generated from actions on app records:
| Level | Module | Action | Log Details | Description of the Action |
|---|---|---|---|---|
| Information | App operation | Record file upload | app id: [app ID], app name: [app name], record id: [record ID], filename: [file name] | Attaching a file |
| Information | App operation | Record file download | app id: [app ID], app name: [app name], record id: [record ID], filename: [file name] |
Downloading an attachment |
| Information | App operation | Record comment delete | app id: [app ID], app name: [app name], record id: [record ID], comment id: [comment number] | Deleting a comment |
| Information | App operation | Record delete | app id: [app ID], app name: [app name], record id: [[comma-separated list of record IDs]] | Deleting records |
| Information | App operation | Record bulk delete | app id: [app ID], app name: [app name] | Deleting records in bulk*1 |
| Information | App operation | Record import | app id: [app ID], app name: [app name] | Importing a file to add or update records*1 |
| Information | App operation | Record export | app id: [app ID], app name: [app name] | Exporting records to a file*1 |
| Information | App operation | Report export | app id: [app ID], app name: [app name] | Exporting a graph to a file*1 |
| Information | App operation | Exported file download | app id: [app ID], app name: [app name], filename: [file name] | Downloading an exported file of records |
| Information | App operation | Webhook notify |
When the notification succeeded: When the notification failed due to an error with Kintone: app id: [app ID], app name: [app name], record id: [record ID], notification id: [notification ID], event type: {ADD_RECORD / ADD_RECORD_COMMENT / UPDATE_RECORD / UPDATE_STATUS / DELETE_RECORD}, server url: [destination server URL], error type: SERVER_ERROR, status code: [HTTP status code of the notification] |
Sending a Webhooks notification |
| Information | App operation | Send slack dm |
When the notification succeeded: When the notification failed due to an error with Kintone: app id: [app ID], app name: [app name], record id: [record ID], slack subdomain: [receiver Slack subdomain], user: [login name of the user], Email: [e-mail address of the user], error type: SERVER_ERROR, status code: [response status code from failed Slack API], error message: [error message] |
Sending a Slack notification |
*1: The "Source" is displayed as "127.0.0.1" regardless of the device on which the action was performed.
Portal
The following table describes log entries that are generated from actions in the portal:
| Level | Module | Action | Log Details | Description of the Action |
|---|---|---|---|---|
| Information | Portal operation | Portal announcement file download | filename: [file name] | Downloading files or images attached to the announcement, or displaying them in a slide show |
People
The following table describes log entries that are generated from actions in People:
| Level | Module | Action | Log Details | Description of the Action |
|---|---|---|---|---|
| Information | People operation | People comment file download | user: [login name], comment url: [post/comment URL], filename: [file name] | Downloading files or images attached to the post or comment, or displaying them in a slide show |
Messages
The following table describes log entries that are generated from actions on messages:
| Level | Module | Action | Log Details | Description of the Action |
|---|---|---|---|---|
| Information | Message operation | Message comment file download | users: [[comma-separated list of login names]], comment url: [post URL], filename: [file name] | Downloading files or images attached to the post, or displaying them in a slide show |
Space
The following table describes log entries that are generated from actions in spaces:
| Level | Module | Action | Log Details | Description of the Action |
|---|---|---|---|---|
| Information | Space management | Space add | space id: [space ID], space name: [space name] | Creating a space or a guest space |
| Information | Space management | Space update | space id: [space ID], space name: [space name] | Changing the space settings |
| Information | Space management | Space delete | If the app was not placed in a space: space id: [space ID], space name: [space name] If the app was placed in a space: space id: [space ID], space name: [space name], (app id: [app ID], app name: [app name]), (..... |
Deleting a space*1 |
| Information | Space management | Space restore | If the app was not placed in a space when deleting the space: space id: [space ID], space name: [space name] If the app was placed in a space when deleting the space: space id: [space ID], space name: [space name], (app id: [app ID], app name: [app name]), (..... |
Restoring the space |
| Information | Space operation | Space join | space id: [space ID], space name: [space name] | Joining a space*1 |
| Information | Space operation | Space leave | space id: [space ID], space name: [space name] | Leaving a space*1 |
| Information | Space operation | Space body file download | space id: [space ID], space name: [space name], filename: [file name] |
Downloading a file uploaded to the body of the space, or displaying attached images in a slide show |
| Information | Space operation | Thread body file download | space id: [space ID], space name: [space name], thread id: [thread ID], thread name: [thread name], filename: [file name] |
Downloading a file uploaded to the body of the thread, or displaying attached images in a slide show |
| Information | Space operation | Thread comment file download | space id: [space ID], space name: [space name], thread id: [thread ID], thread name: [thread name], comment url: [post/comment URL], filename: [file name] |
Downloading a file uploaded to a post or comment of the thread, or displaying attached images in a slide show |
| Information | Space template | Space Template add | space template id: [space template ID], space template name: [space template name] | Creating a space template |
*1 This entry is also generated when "Space Management" on the system administration screen is used to change the members of a space or delete a space.
Guest Space
The following table describes log entries that are generated from actions in guest spaces:
| Level | Module | Action | Log Details | Description of the Action |
|---|---|---|---|---|
| Notice | Guest management | Invite guest | space id: [space ID], space name: [space name], Email: [[comma-separated list of e-mail addresses]] | Sending guests invitation e-mails |
| Notice | Guest operation | Integrate account | domain id: [domain ID of the guest space that was joined] | A user joining a guest space of a different domain |
| Notice | Guest operation | Guest download file | login name: [login name of the guest user], app id: [app ID], app name: [app name], record id: [record ID], filename: [file name], space id: [space ID], space name: [space name] |
A guest downloading an attachment*1 |
| Notice | Guest operation | Guest export record | login name: [login name of the guest user], app id: [app ID], app name: [app name] | A guest exporting records to a file*2 |
| Notice | Guest operation | Guest integrate account | login name: [login name of the guest user], domain id: [home domain ID] | A guest signing up (with their existing Kintone account)*3 |
| Information | Space management | Space add | space id: [space ID], space name: [space name] | Creating a space or a guest space |
| Information | Guest operation | Guest sign up | login name: [login name of the guest user], space id: [space ID], space name: [space name] | A guest signing up (with a new guest account)*3 |
| Information | Guest operation | Guest join space | login name: [login name of the guest user], space id: [space ID], space name: [space name] | A guest joining a space |
| Information | Guest operation | Guest withdraw | login name: [login name of the guest user], space id: [space ID], space name: [space name] | A guest leaving a space |
| Information | Guest operation | Guest login | login name: [login name of the guest user] | A guest logging in |
| Information | Guest operation | Guest logout | login name: [login name of the guest user] | A guest logging out |
| Information | Guest operation | Guest Email update | login name: [login name of the guest user], new login name: [login name of the guest user] | A guest changing their e-mail address |
| Information | Guest operation | Guest password update | login name: [login name of the guest user] | A guest changing their password |
| Information | Guest operation | Guest send email | login name: [login name of the guest user] | Sending an e-mail for a guest to reset their password |
| Information | Guest operation | Guest reset password | login name: [login name of the guest user] | A guest resetting their password |
*1: After the update on December 10, 2017, the same log entries as the ones for normal users are generated.
*2: The "Source" is displayed as "127.0.0.1" regardless of the device on which the action was performed.
*3: For details, see "Log Entry That is Generated When a Guest Signs Up".
System Administration
The following table describes log entries that are generated from actions in System Administration:
| Level | Module | Action | Log Details | Description of the Action |
|---|---|---|---|---|
| Notice | System administration | Admit creation space | granted users: [[login name, department code, group code]], revoked users: [[login name, department code, or group code]] | Changing the settings of the Create Guest Space permissions |
| Notice | System administration | Guest user two-step verification | enabled / disabled | Changing the guest authentication settings |
| Notice | System administration | New design setting update | design setting: {FORCE_OLD/FORCE_NEW/PER_USER}, users: [[login name, department code, or group code]] | Switching between new and old designs |
| Notice | System administration | New feature update | import creation and modification data fields disabled: {true/false}, notify newer record comment disabled: {true/false}, grayed out inline edit and delete icons disabled: {true/false}, favorite spaces disabled: {true/false}, field width adjust disabled: {true/false}, extend DATE_FORMAT limits disabled: {true/false}, new feature disabled by default: {true/false}, change space where app belongs to enabled: {true/false} | Changing "Updating Options" settings |
| Notice | System administration | Feature update | mail notification: {true/false} (include official api: {true/false}), space: {true/false}, guest space: {true/false}, people: {true/false}, mail type: {text/html}, allow mail type personalization: {true/false}, mail personal setting:{none/mention} | Changing "Feature Activation" settings |
| Notice | System administration | Mobile setting update | default view: [PC/MOBILE], user setting: [true/false] | Changing the default setting for the view on mobile browsers |
| Information | System administration | App group delete | app group id: [app group ID], app group name: [app group name] | Deleting an app group |
| Information | System administration | Template import | (template id: [template ID], template name: [template name]), filename: [file name] | Importing a file to add an app template |
| Information | System administration | Template export | (template id: [template ID], template name: [template name]), filename: [file name] | Exporting an app template to a file |
| Information | System administration | Plug-in installed | plugin id: [plug-in ID], plugin name: [plug-in name] | Installing a plug-in |
| Information | System administration | Plug-in removed | plugin id: [plug-in ID], plugin name: [plug-in name] | Uninstalling a plug-in |
| Information | System administration | Plugin list export | filename: [file name] | Downloading a list of plug-ins |
| Information | System administration | App list export | filename: [file name] | Downloading an app list |
| Information | System administration | Space list export | filename: [file name] | Downloading a list of spaces |
| Information | Space template | Space Template import | name: [template name] | Importing a file to add a space template |
| Information | Space template | Space Template export | name: [template name] | Exporting a space template to a file |
| Information | Space template | Space Template delete | name: [template name] | Deleting a space template |
| Information | Guest management | Guest status update | login name: [login name of the guest user], status: [true/false] | Changing the status (active or inactive) of a guest |
| Information | Guest management | Delete guest | login name: [login name of the guest user] | Deleting a guest |
User Invitation
The following table describes log entries that are generated from actions during user invitation.
| Level | Module | Action | Log Details | Description of the Action |
|---|---|---|---|---|
| Notice | System administration | Invite users | user names: [[comma-separated list of user names]], Emails: [[comma-separated list of e-mail addresses]] | Inviting users from the user invitation dialog box |
Actions with API
The following table describes log entries that are generated from actions with API.
| Level | Module | Action | Log Details | Description of the Action |
|---|---|---|---|---|
| Information | API operation | App create | app id: [app ID], app name: [app name] | Using API to create an app |
| Information | API operation | App deploy | app id: [comma-separated list of app IDs], revert: {true/false} | Using API to activate app settings |
| Information | API operation | App update | app id: [app ID], app name: [app name] |
Using API to change the Appearance settings |
| Information | API operation | App permission update | Current Environment: app id: [app ID], app name: [app name] Test Environment: app id: [app ID], app name: [app name], preview |
Using API to change permissions for App |
| Information | API operation | Form update | app id: [app ID], app name: [app name], field code: [comma-separated list of field codes] | Using API to add fields |
| Information | API operation | Form update | app id: [app ID], app name: [app name], field code: [comma-separated list of field codes] | Using API to change the field settings |
| Information | API operation | Form update | app id: [app ID], app name: [app name], field code: [comma-separated list of field codes] | Using API to delete fields |
| Information | API operation | Form update | app id: [app ID], app name: [app name] | Using API to change the form layout |
| Information | API operation | Field permission update | Current Environment: app id: [app ID], app name: [app name] Test Environment: app id: [app ID], app name: [app name], preview |
Using API to change permissions for fields |
| Information | API operation | App view update | app id: [app ID], app name: [app name], views: [comma-separated list of existing views] | Using API to change the view settings |
| Information | API operation | App report update | app id: [app ID], app name: [app name], reports: [comma-separated list of existing graphs] | Using API to change the graph settings |
| Information | API operation | App customize update | app id: [app ID], app name: [app name] | Using API to change the JavaScript and CSS customization settings |
| Information | API operation | Record add | app id: [app ID], app name: [app name], record id: [record ID] | Using API to add a record |
| Information | API operation | Record add | app id: [app ID], app name: [app name], record id: [comma-separated list of record IDs] | Using API to add records in bulk |
| Information | API operation | Record update | app id: [app ID], app name: [app name], record id: [record ID] | Using API to update a record (when the record number is used as the key for the update) |
| Information | API operation | Record update | app id: [app ID], app name: [app name], field: [field code], value: [key value] | Using API to update a record (when a value other than the record number is used as the key for the update) |
| Information | API operation | Record update | app id: [app ID], app name: [app name], record id: [comma-separated list of record IDs], record key: [comma-separated list of UpdateKey values] | Using API to update records in bulk |
| Information | API operation | Record permission update | Current Environment: app id: [app ID], app name: [app name] Test Environment: app id: [app ID], app name: [app name], preview |
Using API to change permissions for records |
| Information | API operation | Record delete | app id: [app ID], app name: [app name], record id: [comma-separated list of record IDs] | Using API to delete records in bulk |
| Information | API operation | Record status update | app id: [app ID], app name: [app name], record id: [record ID] | Using API to change the status of a record |
| Information | API operation | Record status update | app id: [app ID], app name: [app name], record id: [comma-separated list of record IDs] | Using API to change the status of records in bulk |
| Information | API operation | Record comment add | app id: [app ID], app name: [app name], record id: [record ID], comment id: [comment ID] | Using API to add a record comment |
| Information | API operation | Record comment delete | app id: [app ID], app name: [app name], record id: [record ID], comment id: [comment ID] | Using API to delete a record comment |
| Information | API operation | Record comment get | app id: [app ID], app name: [app name], record id: [record ID], comment id: [comma-separated list of comment IDs] | Using API to retrieve record comments in bulk |
| Information | API operation | Record assignees update | app id: [app ID], app name: [app name], record id: [record ID] | Using API to update record assignees |
| Information | API operation | Record file download | app id: [app ID], app name: [app name], record id: [record ID], filename: [file name] | Using an API to download record attachments |
| Information | API operation | Thread comment add | space id: [space ID], space name: [space name], thread id: [thread ID], thread name: [thread name], comment id: [comment ID] | Using API to add a comment to a thread in a space |
| Information | API operation | App status update | app id: [app ID], app name: [app name], enable: [Process Management availability], states: [list of status names after the update], actions: [list of action names after the update] | Using API to update the Process Management in bulk |
| Information | API operation | Space delete | If the specified space ID does not exist, or if "Activate Spaces" under "Feature Activation" on system administration screen is disabled: space id: [space ID] If the app was not placed in a space: space id: [space ID], space name: [space name] If the app was placed in a space: space id: [space ID], space name: [space name], (app id: [app ID], app name: [app name]), (.... |
Using API to delete a space |
| Information | API operation | Guests delete | guest user code: [comma-separated list of e-mail addresses] | Using API to delete guests |
| Information | API operation | Webhook notify |
When the notification succeeded: When the notification failed due to an error with Kintone: app id: [app ID], app name: [app name], record id: [record ID], notification id: [notification ID], event type: {ADD_RECORD / ADD_RECORD_COMMENT / UPDATE_RECORD / UPDATE_STATUS}, server url: [destination server URL], error type: SERVER_ERROR, status code: [HTTP status code of the notification] |
Using API to send a Webhooks notification |
| Information | API operation | Send slack dm |
When the notification succeeded: When the notification failed due to an error with Kintone: app id: [app ID], app name: [app name], record id: [record ID], slack subdomain: [receiver Slack subdomain], user: [login name of the user], Email: [e-mail address of the user], error type: SERVER_ERROR, status code: [response status code from failed Slack API], error message: [error message] |
Using API to send a Slack notification |
| Information | API operation | Cursor create | app id: [app ID], app name: [app name] | Using API to retrieve records in bulk |
| Information | API operation | Notification update | app id: [app ID], app name: [app name] | Using API to update reminder notifications settings for apps, records, or reminders. |
| Information | API operation | App action update | app id: [app ID], app name: [app name], actions: [comma-separated list of existing app actions] | Using API to change the app action settings |
Log Entry That Is Generated When a Guest Signs Up
A guest can sign up by using either of the following ways to join an invited guest space:
- Sign up with an existing Kintone account (when the invited guest is a user of Kintone under another domain)
- Sign up with a new guest account
When a guest signs up with their existing Kintone account, the action is logged as "Guest integrate account".
When a guest signs up with a new guest account, the action is logged as "Guest sign up".
When a guest signs up with their existing Kintone account, no charge is incurred for the guest.