Audit Log Checking and the Log Lists

In the audit logs of Kintone, you can view who and when performed what kind of actions on Kintone.
The audit logs are exported to Kintone Users & System Administration.

Checking Audit Logs

  1. Click the setting menu Gear icon on the upper right side of the screen, and click Kintone Users & System Administration. Image

  2. Under "Audit Logs", click View & Download.
    Image

  3. Specify filter conditions as much as possible and click View. Image

    Filtered logs will be displayed at the bottom of the page.

  4. To check the details of the log, click the i icon.

  5. Set or export audit logs as necessary.

Audit Logs List

App Settings

The following table describes log entries that are generated from actions on app settings:

Level Module Action Log Details Description of the Action
Notice App management App update app id: [app ID], app name: [app name], record comment: [true/false] Enabling/disabling comments on records
Notice App management App update app id: [app ID], app name: [app name], record history: [true/false] Enabling/disabling tracking of change history of records
Notice App management App update app id: [app ID], app name: [app name], bulk delete: [true/false] Enabling/disabling bulk deletion of records
Information App management App create app name: [app name], app group id: [app group ID] Creating an app
Information App management App create from template file file name = [app name], template name: [comma-separated list of template names], app group id = [app group ID] Importing a template file from the Marketplace to add an app
Information App management App delete app id: [app ID], app name: [app name]
or
app ids: [[comma-separated list of app IDs]], app names: [[comma-separated list of app names]]
Deleting apps
Information App management App restore app id: [app ID], app name: [app name] Restoring apps
Information App management App update app id: [app ID], app name: [app name], target: general Changing the "Appearance" settings of an app*1
Information App management App update app id: [app ID], app name: [app name], target: form Changing the form settings
Information App management App update app id: [app ID], app name: [app name], target: view Adding, changing, or duplicating a view
Information App management App update app id: [app ID], app name: [app name], target: notification Changing the notification settings
Information App management App update app id: [app ID], app name: [app name], target: title Changing the record title settings
Information App management App update app id: [app ID], app name: [app name], target: category Changing the category settings
Information App management App update app id: [app ID], app name: [app name], target: report Adding, changing, or duplicating a graph
Information App management App update app id: [app ID], app name: [app name], target: status Changing the process management settings
Information App management App update app id: [app ID], app name: [app name], target: action Adding, changing, or deleting an action
Information App management App update app id: [app ID], app name: [app name], target: app acl Changing the app permission settings
Information App management App update app id: [app ID], app name: [app name], target: record acl Changing the record permission settings
Information App management App update app id: [app ID], app name: [app name], target: field acl Changing the field permission settings
Information App management App update app id: [app ID], app name: [app name], target: info Changing "Misc Settings"
Information App management App update app id: [app ID], app name: [app name], target: resource Changing the "Localization" settings
Information App management App update app id: [app ID], app name: [app name], target: customize Changing the "JavaScript and CSS Customization" settings
Information App management App update app id: [app ID], app name: [app name], target: plugin Adding or deleting a plug-in, or changing the plug-in settings
Information App management App update app id: [app ID], app name: [app name], target: api token Changing the "API Token" settings
Information App management App update app id: [app ID], app name: [app name], target: webhook Changing the "Webhooks" settings
Information App management App update app id: [app ID], app name: [app name], target: theme Changing the "Design Theme" settings
Information App management App update app id: [app ID], app name: [app name], target: icon Changing an app icon*2
Information App management App report delete app id: [app ID], app name: [app name], report id: [graph ID], report name: [graph name] Deleting a graph
Information App management App view delete app id: [app ID], app name: [app name], view id: [view ID], view name: [view name] Deleting a view
Information App management App change discard app id: [app ID], app name: [app name] Cancelling changes to app settings
Information App management App change deployed app id: [app ID], app name: [app name] Applying changes to app settings
Information App management Add slack integration app id: [app ID], app name: [app name], slack workspace: [URL of the integrated Slack] Integrating with a Slack Workspace

*1: This entry is generated when "Save" is clicked on the "Appearance" setting screen.
*2: This entry is not generated when an app icon is changed from "Appearance".

Actions on App Records

The following table describes log entries that are generated from actions on app records:

Level Module Action Log Details Description of the Action
Information App operation Record file upload app id: [app ID], app name: [app name], record id: [record ID], filename: [file name] Attaching a file
Information App operation Record file download app id: [app ID], app name: [app name], record id: [record ID], filename: [file name]
Downloading an attachment
Information App operation Record comment delete app id: [app ID], app name: [app name], record id: [record ID], comment id: [comment number] Deleting a comment
Information App operation Record delete app id: [app ID], app name: [app name], record id: [[comma-separated list of record IDs]] Deleting records
Information App operation Record bulk delete app id: [app ID], app name: [app name] Deleting records in bulk*1
Information App operation Record import app id: [app ID], app name: [app name] Importing a file to add or update records*1
Information App operation Record export app id: [app ID], app name: [app name] Exporting records to a file*1
Information App operation Report export app id: [app ID], app name: [app name] Exporting a graph to a file*1
Information App operation Exported file download app id: [app ID], app name: [app name], filename: [file name] Downloading an exported file of records
Information App operation Webhook notify

When the notification succeeded:
app id: [app ID], app name: [app name], record id: [record ID], notification id: [notification ID], event type: {ADD_RECORD / ADD_RECORD_COMMENT / UPDATE_RECORD / UPDATE_STATUS / DELETE_RECORD}, server url: [destination server URL], status code: [notification status code]

When the notification failed due to an error with Kintone:
app id: [app ID], app name: [app name], record id: [record ID], notification id: [notification ID], event type: {ADD_RECORD / ADD_RECORD_COMMENT / UPDATE_RECORD / UPDATE_STATUS / DELETE_RECORD}, server url: [destination server URL], error type: CLIENT_ERROR, error message: [error message]

When the notification failed due to an error with the receiving Web service:
app id: [app ID], app name: [app name], record id: [record ID], notification id: [notification ID], event type: {ADD_RECORD / ADD_RECORD_COMMENT / UPDATE_RECORD / UPDATE_STATUS / DELETE_RECORD}, server url: [destination server URL], error type: SERVER_ERROR, status code: [HTTP status code of the notification]
Sending a Webhooks notification
Information App operation Send slack dm

When the notification succeeded:
app id: [app ID], app name: [app name], record id: [record ID], slack subdomain: [receiver Slack subdomain], user: [login name of the user], Email: [e-mail address of the user], status code: [response status code from Slack API]

When the notification failed due to an error with Kintone:
app id: [app ID], app name: [app name], record id: [record ID], slack subdomain: [receiver Slack subdomain], user: [login name of the user], Email: [e-mail address of the user], error type: CLIENT_ERROR, error message: [error message]

When the notification failed due to an error with the receiver Slack:
app id: [app ID], app name: [app name], record id: [record ID], slack subdomain: [receiver Slack subdomain], user: [login name of the user], Email: [e-mail address of the user], error type: SERVER_ERROR, status code: [response status code from failed Slack API], error message: [error message]
Sending a Slack notification

*1: The "Source" is displayed as "127.0.0.1" regardless of the device on which the action was performed.

Portal

The following table describes log entries that are generated from actions in the portal:

Level Module Action Log Details Description of the Action
Information Portal operation Portal announcement file download filename: [file name] Downloading files or images attached to the announcement, or displaying them in a slide show

People

The following table describes log entries that are generated from actions in People:

Level Module Action Log Details Description of the Action
Information People operation People comment file download user: [login name], comment url: [post/comment URL], filename: [file name] Downloading files or images attached to the post or comment, or displaying them in a slide show

Messages

The following table describes log entries that are generated from actions on messages:

Level Module Action Log Details Description of the Action
Information Message operation Message comment file download users: [[comma-separated list of login names]], comment url: [post URL], filename: [file name] Downloading files or images attached to the post, or displaying them in a slide show

Spaces

The following table describes log entries that are generated from actions in spaces:

Level Module Action Log Details Description of the Action
Information Space management Space add space id: [space ID], space name: [space name] Creating a space or a guest space
Information Space management Space update space id: [space ID], space name: [space name] Changing the space settings
Information Space management Space delete If the app was not placed in a space:
space id: [space ID], space name: [space name]
If the app was placed in a space:
space id: [space ID], space name: [space name], (app id: [app ID], app name: [app name]), (.....
Deleting a space*1
Information Space management Space restore If the app was not placed in a space when deleting the space:
space id: [space ID], space name: [space name]
If the app was placed in a space when deleting the space:
space id: [space ID], space name: [space name], (app id: [app ID], app name: [app name]), (.....
Restoring the space
Information Space operation Space join space id: [space ID], space name: [space name] Joining a space*1
Information Space operation Space leave space id: [space ID], space name: [space name] Leaving a space*1
Information Space operation Space body file download space id: [space ID], space name: [space name], filename: [file name]
Downloading a file uploaded to the body of the space, or displaying attached images in a slide show
Information Space operation Thread body file download space id: [space ID], space name: [space name], thread id: [thread ID], thread name: [thread name], filename: [file name]
Downloading a file uploaded to the body of the thread, or displaying attached images in a slide show
Information Space operation  Thread comment file download  space id: [space ID], space name: [space name], thread id: [thread ID], thread name: [thread name], comment url: [post/comment URL], filename: [file name]
Downloading a file uploaded to a post or comment of the thread, or displaying attached images in a slide show
Information Space template Space Template add space template id: [space template ID], space template name: [space template name] Creating a space template

*1 This entry is also generated when "Space Management" on the system administration screen is used to change the members of a space or delete a space.

Guest Spaces

The following table describes log entries that are generated from actions in guest spaces:

Level Module Action Log Details Description of the Action
Notice Guest management Invite guest space id: [space ID], space name: [space name], Email: [[comma-separated list of e-mail addresses]] Sending guests invitation e-mails
Notice Guest operation Integrate account domain id: [domain ID of the guest space that was joined] A user joining a guest space of a different domain
Notice Guest operation Guest download file login name: [login name of the guest user], app id: [app ID], app name: [app name], record id: [record ID], filename: [file name], space id: [space ID], space name: [space name]
A guest downloading an attachment*1
Notice Guest operation Guest export record login name: [login name of the guest user], app id: [app ID], app name: [app name] A guest exporting records to a file*2
Notice Guest operation Guest integrate account login name: [login name of the guest user], domain id: [home domain ID] A guest signing up (with their existing Kintone account)*3
Information Space management Space add space id: [space ID], space name: [space name] Creating a space or a guest space
Information Guest operation Guest sign up login name: [login name of the guest user], space id: [space ID], space name: [space name] A guest signing up (with a new guest account)*3
Information Guest operation Guest join space login name: [login name of the guest user], space id: [space ID], space name: [space name] A guest joining a space
Information Guest operation Guest withdraw login name: [login name of the guest user], space id: [space ID], space name: [space name] A guest leaving a space
Information Guest operation Guest login login name: [login name of the guest user] A guest logging in
Information Guest operation Guest logout login name: [login name of the guest user] A guest logging out
Information Guest operation Guest Email update login name: [login name of the guest user], new login name: [login name of the guest user] A guest changing their e-mail address
Information Guest operation Guest password update login name: [login name of the guest user] A guest changing their password
Information Guest operation Guest send email login name: [login name of the guest user] Sending an e-mail for a guest to reset their password
Information Guest operation Guest reset password login name: [login name of the guest user] A guest resetting their password

*1: After the update on December 10, 2017, the same log entries as the ones for normal users are generated.
*2: The "Source" is displayed as "127.0.0.1" regardless of the device on which the action was performed.
*3: For details, see "Log Entry That is Generated When a Guest Signs Up".

System Administration

The following table describes log entries that are generated from actions in System Administration:

Level Module Action Log Details Description of the Action
Notice System administration Admit creation space granted users: [[login name, department code, group code]], revoked users: [[login name, department code, or group code]] Changing the settings of the Create Guest Space permissions
Notice System administration Guest user two-step verification enabled / disabled Changing the guest authentication settings
Notice System administration New design setting update design setting: {FORCE_OLD/FORCE_NEW/PER_USER}, users: [[login name, department code, or group code]] Switching between new and old designs
Notice System administration Feature update mail notification: {true/false} (include official api: {true/false}), space: {true/false}, guest space: {true/false}, people: {true/false}, mail type: {text/html}, allow mail type personalization: {true/false}, mail personal setting:{none/mention} Enabling/disabling features
Notice System administration Mobile setting update default view: [PC/MOBILE], user setting: [true/false] Changing the default setting for the view on mobile browsers
Information System administration App group delete app group id: [app group ID], app group name: [app group name] Deleting an app group
Information System administration Template import (template id: [template ID], template name: [template name]), filename: [file name] Importing a file to add an app template
Information System administration Template export (template id: [template ID], template name: [template name]), filename: [file name] Exporting an app template to a file
Information System administration Plug-in installed plugin id: [plug-in ID], plugin name: [plug-in name] Installing a plug-in
Information System administration Plug-in removed plugin id: [plug-in ID], plugin name: [plug-in name] Uninstalling a plug-in
Information System administration App list export filename: [file name] Downloading an app list
Information Space template Space Template import name: [template name] Importing a file to add a space template
Information Space template Space Template export name: [template name] Exporting a space template to a file
Information Space template Space Template delete name: [template name] Deleting a space template
Information Guest management Guest status update login name: [login name of the guest user], status: [true/false] Changing the status (active or inactive) of a guest
Information Guest management Delete guest login name: [login name of the guest user] Deleting a guest

User Invitation

The following table describes log entries that are generated from actions during user invitation.

Level Module Action Log Details Description of the Action
Notice System administration Invite users user names: [[comma-separated list of user names]], Emails: [[comma-separated list of e-mail addresses]] Inviting users from the user invitation dialog box

Actions with API

The following table describes log entries that are generated from actions with API.

Level Module Action Log Details Description of the Action
Information API operation App create app id: [app ID], app name: [app name] Using API to create an app
Information API operation App deploy app id: [comma-separated list of app IDs], revert: {true/false} Using API to activate app settings
Information API operation App update app id: [app ID], app name: [app name]
Using API to change the Appearance settings
Information API operation App permission update Current Environment:
app id: [app ID], app name: [app name]

Test Environment:
app id: [app ID], app name: [app name], preview
Using API to change permissions for App
Information API operation Form update app id: [app ID], app name: [app name], field code: [comma-separated list of field codes] Using API to add fields
Information API operation Form update app id: [app ID], app name: [app name], field code: [comma-separated list of field codes] Using API to change the field settings
Information API operation Form update app id: [app ID], app name: [app name], field code: [comma-separated list of field codes] Using API to delete fields
Information API operation Form update app id: [app ID], app name: [app name] Using API to change the form layout
Information API operation Field permission update Current Environment:
app id: [app ID], app name: [app name]

Test Environment:
app id: [app ID], app name: [app name], preview
Using API to change permissions for fields
Information API operation App view update app id: [app ID], app name: [app name], views: [comma-separated list of existing views] Using API to change the view settings
Information API operation App customize update app id: [app ID], app name: [app name] Using API to change the JavaScript and CSS customization settings
Information API operation Record add app id: [app ID], app name: [app name], record id: [record ID] Using API to add a record
Information API operation Record add app id: [app ID], app name: [app name], record id: [comma-separated list of record IDs] Using API to add records in bulk
Information API operation Record update app id: [app ID], app name: [app name], record id: [record ID] Using API to update a record (when the record number is used as the key for the update)
Information API operation Record update app id: [app ID], app name: [app name], field: [field code], value: [key value] Using API to update a record (when a value other than the record number is used as the key for the update)
Information API operation Record update app id: [app ID], app name: [app name], record id: [comma-separated list of record IDs], record key: [comma-separated list of UpdateKey values] Using API to update records in bulk
Information API operation Record permission update Current Environment:
app id: [app ID], app name: [app name]

Test Environment:
app id: [app ID], app name: [app name], preview
Using API to change permissions for records
Information API operation Record delete app id: [app ID], app name: [app name], record id: [comma-separated list of record IDs] Using API to delete records in bulk
Information API operation Record status update app id: [app ID], app name: [app name], record id: [record ID] Using API to change the status of a record
Information API operation Record status update app id: [app ID], app name: [app name], record id: [comma-separated list of record IDs] Using API to change the status of records in bulk
Information API operation Record comment add app id: [app ID], app name: [app name], record id: [record ID], comment id: [comment ID] Using API to add a record comment
Information API operation Record comment delete app id: [app ID], app name: [app name], record id: [record ID], comment id: [comment ID] Using API to delete a record comment
Information API operation Record comment get app id: [app ID], app name: [app name], record id: [record ID], comment id: [comma-separated list of comment IDs] Using API to retrieve record comments in bulk
Information API operation Record assignees update app id: [app ID], app name: [app name], record id: [record ID] Using API to update record assignees
Information API operation Record file download app id: [app ID], app name: [app name], record id: [record ID], filename: [file name] Using an API to download record attachments
Information API operation Thread comment add space id: [space ID], space name: [space name], thread id: [thread ID], thread name: [thread name], comment id: [comment ID] Using API to add a comment to a thread in a space
Information API operation App status update app id: [app ID], app name: [app name], enable: [Process Management availability], states: [list of status names after the update], actions: [list of action names after the update] Using API to change the status of Process Management for apps under development in bulk
Information API operation Space delete If the specified space ID does not exist, or if "Activate Spaces" under "Feature Activation" on system administration screen is disabled:
space id: [space ID]
If the app was not placed in a space:
space id: [space ID], space name: [space name]
If the app was placed in a space:
space id: [space ID], space name: [space name], (app id: [app ID], app name: [app name]), (....
Using API to delete a space
Information API operation Guests delete guest user code: [comma-separated list of e-mail addresses] Using API to delete guests
Information API operation Webhook notify

When the notification succeeded:
app id: [app ID], app name: [app name], record id: [record ID], notification id: [notification ID], event type: {ADD_RECORD / ADD_RECORD_COMMENT / UPDATE_RECORD / UPDATE_STATUS}, server url: [destination server URL], status code: [status code of the notification]

When the notification failed due to an error with Kintone:
app id: [app ID], app name: [app name], record id: [record ID], notification id: [notification ID], event type: {ADD_RECORD / ADD_RECORD_COMMENT / UPDATE_RECORD / UPDATE_STATUS}, server url: [destination server URL], error type: CLIENT_ERROR, error message: [error message]

When the notification failed due to an error with the receiving Web service:
app id: [app ID], app name: [app name], record id: [record ID], notification id: [notification ID], event type: {ADD_RECORD / ADD_RECORD_COMMENT / UPDATE_RECORD / UPDATE_STATUS}, server url: [destination server URL], error type: SERVER_ERROR, status code: [HTTP status code of the notification]
Using API to send a Webhooks notification
Information API operation Send slack dm

When the notification succeeded:
app id: [app ID], app name: [app name], record id: [record ID], slack subdomain: [receiver Slack subdomain], user: [login name of the user], Email: [e-mail address of the user], status code: [response status code from Slack API]

When the notification failed due to an error with Kintone:
app id: [app ID], app name: [app name], record id: [record ID], slack subdomain: [receiver Slack subdomain], user: [login name of the user], Email: [e-mail address of the user], error type: CLIENT_ERROR, error message: [error message]

When the notification failed due to an error with the receiver Slack:
app id: [app ID], app name: [app name], record id: [record ID], slack subdomain: [receiver Slack subdomain], user: [login name of the user], Email: [e-mail address of the user], error type: SERVER_ERROR, status code: [response status code from failed Slack API], error message: [error message]
Using API to send a Slack notification
Information API operation Cursor create app id: [app ID], app name: [app name] Using API to retrieve records in bulk

Log Entry That is Generated When a Guest Signs Up

A guest can sign up by using either of the following ways to join an invited guest space:

  • Sign up with an existing Kintone account (when the invited guest is a user of Kintone under another domain)
  • Sign up with a new guest account

When a guest signs up with their existing Kintone account, the action is logged as "Guest integrate account".
When a guest signs up with a new guest account, the action is logged as "Guest sign up".

When a guest signs up with their existing Kintone account, no charge is incurred for the guest.