The Audit Log in the Admin Portal of Blink offers a breakdown of recent activity in Blink filtered by category with a brief description of the event, the user, and the date. Admins also have the option to see additional details for each event, such as the IP address, client type, and event ID.
This feature is available with all Blink subscriptions. |
In this article
Categories
Every event type is separated out by category in order to simplify navigation for admins. The current categories are as follows:
Event types
All events on Blink are grouped via the categories listed above in order to help admins find the information they need efficiently. See below for details on which events are in each category and what action each event description corresponds to in Blink.
Conversations
CONVERSATION_CREATED | This user has started a conversation/chat with another user or group |
CONVERSATION_RECIPIENTS_ADDED | The user has added people to a chat |
CONVERSATION_RECIPIENTS_REMOVED | The user has removed people from a chat |
CONVERSATION_UPDATED | The user has updated any part of a conversation such as marking messages as read, changing information for the chat itself, etc. This is a frequent event. |
CONVERSATION_DELETED | The user has deleted/removed a chat or channel |
MESSAGE_DELETED | The user has deleted a message they've sent in a chat or channel |
MESSAGE_UPDATED | The user has edited/updated a message they've sent in a chat or channel |
MESSAGE_SENT | The user has sent a message in a chat or channel they're a part of |
Groups
GROUP_CREATED | The user has created a new team/group in Blink. |
GROUP_UPDATED | The user has updated an existing team/group in Blink by changing permissions/access to the team, the description of the team, the team title, etc. |
Users
USER_CONNECTION_REQUESTED | The user has opened a new chat with a given user which adds them to their directory in the contact list. |
USER_CONNECTION_UPDATED | This code is no longer in use. If you see this in your audit log, please take a screenshot and contact our support team at support@joinblink.com |
USER_CONNECTION_HIDDEN | This code is no longer in use. If you see this in your audit log, please take a screenshot and contact our support team at support@joinblink.com |
USER_UPDATED | This user's profile information has been updated. |
Login and Registration
USER_REGISTERED | This user registered their profile by successfully logging in for the first time. |
USER_REQUESTED_PASSWORD_RESET | This user has requested a password reset. |
LOGIN_ATTEMPTED | The user attempted to login to Blink. |
Feed
USER_FEED_EVENT_SENT | A post was created on the Feed |
USER_FEED_EVENT_UPDATED | A post to the Feed was updated by this user. |
FEED_EVENT_LIKE_UPDATED | This user liked/reacted to a post on the Feed. |
Organization
ORGANISATION_TOKEN_GENERATED | A token to connect SCIM/AD sync in Blink has been created. |
ORGANISATION_TOKEN_DELETED | A token to connect SCIM/AD sync in Blink has been deleted. |
Flows (COMING SOON)
These events refer to Journeys (previously called flows) in the admin portal. See this article for more information on Journeys. Although these codes are not presently available in the audit log, they will be added in the future. Please contact us with any questions.
ORGANISATION_FLOW_CREATED | A new journey was created by this user in the admin panel. |
ORGANISATION_FLOW_DELETED | An existing journey was deleted by this user in the admin panel. |
ORGANISATION_FLOW_UPDATED | An existing journey was changed and/or updated by this user in the admin panel. |
SCIM
SCIM_GROUP_CREATED | A team managed via SCIM has been created. |
SCIM_GROUP_DELETED | A team managed via SCIM has been deleted. |
SCIM_GROUP_PATCHED | Similar to SCIM_GROUP_REPLACED. Some attributes of a SCIM group were updated. |
SCIM_GROUP_REPLACED | Similar to SCIM_GROUP_PATCHED. This indicates we received the whole object/group from the API which resulted in an update/updates for the group. |
SCIM_USER_CREATED | This user was created by the SCIM set up for the organization. |
SCIM_USER_DELETED | This user was deleted by the SCIM set up for the organization. |
SCIM_USER_PATCHED | This user was updated by the SCIM set up for the organization. Similar to SCIM_USER_REPLACED |
SCIM_USER_REPLACED | Some information for this user was updated via the SCIM set up for the organization. Similar to SCIM_USER_PATCHED |
SCIM_DELETE_USER_MAPPING | The SCIM mappings in place for syncing this user have been removed. |
Admin
Many events listed in this category are managed via our Blink team. Please reach out to our support team at support@joinblink.com if you see any events that you have questions about and we'd be happy to assist.
ORGANISATION_CREATED | The organization itself was created in our Blink system. This corresponds to the creation of your Blink instance. |
ORGANISATION_UPDATED | A change has been made to the organization itself in Blink, such as the name. |
FEATURE_FLAG_GRANTED | A requested feature has been enabled for your organization. |
FEATURE_FLAG_GRANT_DELETED | An existing feature has been disabled for your organization. |
ORGANISATION_DOMAINS_ADDED | An accepted domain has been added to your organization. These allow users to sign up without an invite as long as their email address is under the specified domain, such as @joinblink.com |
ORGANISATION_DOMAINS_DELETED | A previously accepted domain has been removed. |
ORGANISATION_POLICIES_UPDATED | A policy that users accept at the time of registration has been added, removed, or updated. |
ORGANISATION_SUBDOMAIN_UPDATED | A subdomain (for example, mycompany.joinblink.com) has been created/updated. |
ORGANISATION_TRIAL_UPDATED | A change has been made to a free trial for your organization. Usually, this would be a cancellation or extension. |
ALL_ORGANISATION_DEVICES_LOGGED_OUT | All users for an organization have been logged out by the system. |
ORGANISATION_FEED_EVENT_POST_TYPES_UPDATED | A Feed category has been added, updated, or removed for your organization. |
ORGANISATION_FOLDER_UNDELETED | Completed on the backend by our team. A deleted Hub folder has been recovered and restored in Blink. |
CONVERSATION_UNDELETED | Completed on the backend by our team. A deleted conversation has been recovered and restored in Blink. |
Billing
CHARGEBEE_SESSION_CREATED | An admin has accessed the Billing tab in the admin portal to manage the subscription for the organization. |
Pulling logs
Only users with Organization Admin permissions will have access to pull audit logs via the steps below.
Open the Admin portal from either the web or desktop application.
Scroll down on the left side to the section labeled Data Management and click on "Audit Log"
In the options box to the right, enter the date and time filters you'd like to apply. The system currently only supports pulling logs for 1 specific moment at a time.
Below the date and time, select the event category that best fits what information you're looking for or leave the category set as "All Events" to see everything. See the event types for assistance determining what events each category includes.
Select "Get logs" and a complete list of events, users, and dates will appear to the left. To access additional details, click the down arrow icon to the right as shown below.
