Released
Audit log — filter + export is now available on all accounts at Grow tier and above. Navigate to the admin → Operations → Audit log to access the filter bar and Export button.
The problem this solves
Before this change, the audit log was a single chronological feed. Every entry since your site launched, newest first, no way to narrow it down. Running a monthly ops review meant scrolling back through hundreds of system events to find the twenty that mattered. Preparing a compliance report meant screenshots — one at a time, however many pages deep the relevant window sat.
For SGEN Digital' ops team, their quarterly compliance review had become a half-day exercise: load the log, scroll to the right week, screenshot a page, scroll more, screenshot again, repeat until the full range was documented. They weren't reviewing the log — they were manually building the record from it.
That workflow is now gone.
What changed
The audit log now has two new controls: a filter bar and an Export button.
Filter bar
Four filter dimensions, combinable:
| Filter | What it scopes |
|---|---|
| User | Events triggered by a specific admin account |
| Date range | Bounded window — start date, end date, or both |
| Event type | Category of action (login, content edit, settings change, user role change, etc.) |
| Affected resource | The specific page, post, user record, or setting touched |
Export button
Once you have the log scoped to the range you want, Export downloads the filtered result as a CSV file. The export includes every column the on-screen log shows: timestamp, user, event type, affected resource, and IP address. The filename carries the date range so the file is self-documenting in an archive folder.
Export is scoped to the current filter state. If no filters are active, the export covers your full audit history.
Before and after
Before: Chronological-only feed. No filtering. No export. Compliance reviews required manual scrolling + screenshots to build an evidence record.
After: Filter to the exact user, date window, event type, or resource — then export that scoped result as CSV in one click. The record is built for you.
Who benefits
Ops teams running monthly reviews — scope to a date range, export, done. The monthly ops record is a ten-second task instead of a forty-five-minute scroll session.
Compliance teams preparing audits — filter by event type to show only settings changes or user role modifications. Export as CSV and attach directly to the compliance package.
Security teams investigating incidents — filter by user + date range to reconstruct a specific session's activity trail without scrolling past unrelated events.
SGEN Digital — quarterly compliance walkthrough
SGEN ops lead, Rosa, runs a quarterly compliance review covering the previous three months of admin activity. Here is how she uses the updated log:
- Open the admin → Operations → Audit log.
- Set Date range to the quarter start and end dates.
- Set Event type to
Settings changeandUser role change— the two categories their compliance policy tracks. - Review the filtered list on screen. 47 entries for the quarter, down from 4,200 in the unfiltered feed.
- Click Export — downloads
audit-log-2026-01-01-2026-03-31.csv. - Attach the CSV to the quarterly compliance package.
Where to find it
the admin → Operations → Audit log
The filter bar sits directly above the log table. The Export button is in the top-right corner of the log panel, next to the entry count.
Access requires an admin account with Operations access. Account owners and admins have this by default. Role-restricted accounts will see the log but not the Export button if their role excludes data export.
Migration note
No action required. The filter and export controls appear automatically in the existing audit log view. All historic entries — everything logged since your account was created — are available to filter and export. No data was changed or removed.
Related
- Audit log how-to — full reference for what the audit log captures, retention policy, and role requirements
- Observability concept — how audit log, activity feeds, and system notifications fit together
- Disaster recovery concept — using audit log as part of a post-incident reconstruction workflow
