Audit Log
M
Written by Margaret Greer
Updated over a week ago

The Audit Log in the Admin Portal of Blink offers a breakdown of recent activity in Blink filtered by category with a brief description of the event, the user, and the date. Admins also have the option to see additional details for each event, such as the IP address, client type, and event ID.

This feature is available with all Blink subscriptions.

In this article

Categories

Every event type is separated out by category in order to simplify navigation for admins. The current categories are as follows:

Event types

All events on Blink are grouped via the categories listed above in order to help admins find the information they need efficiently. See below for details on which events are in each category and what action each event description corresponds to in Blink.

Conversations

CONVERSATION_CREATED

This user has started a conversation/chat with another user or group

CONVERSATION_RECIPIENTS_ADDED

The user has added people to a chat

CONVERSATION_RECIPIENTS_REMOVED

The user has removed people from a chat

CONVERSATION_UPDATED

The user has updated any part of a conversation such as marking messages as read, changing information for the chat itself, etc. This is a frequent event.

CONVERSATION_DELETED

The user has deleted/removed a chat or channel

MESSAGE_DELETED

The user has deleted a message they've sent in a chat or channel

MESSAGE_UPDATED

The user has edited/updated a message they've sent in a chat or channel

MESSAGE_SENT

The user has sent a message in a chat or channel they're a part of

Groups

GROUP_CREATED

The user has created a new team/group in Blink.

GROUP_UPDATED

The user has updated an existing team/group in Blink by changing permissions/access to the team, the description of the team, the team title, etc.

Users

USER_CONNECTION_REQUESTED

The user has opened a new chat with a given user which adds them to their directory in the contact list.

USER_CONNECTION_UPDATED

This code is no longer in use. If you see this in your audit log, please take a screenshot and contact our support team at support@joinblink.com

USER_CONNECTION_HIDDEN

This code is no longer in use. If you see this in your audit log, please take a screenshot and contact our support team at support@joinblink.com

USER_UPDATED

This user's profile information has been updated.

Login and Registration

USER_REGISTERED

This user registered their profile by successfully logging in for the first time.

USER_REQUESTED_PASSWORD_RESET

This user has requested a password reset.

LOGIN_ATTEMPTED

The user attempted to login to Blink.

Feed

USER_FEED_EVENT_SENT

A post was created on the Feed

USER_FEED_EVENT_UPDATED

A post to the Feed was updated by this user.

FEED_EVENT_LIKE_UPDATED

This user liked/reacted to a post on the Feed.

Organization

ORGANISATION_TOKEN_GENERATED

A token to connect SCIM/AD sync in Blink has been created.

ORGANISATION_TOKEN_DELETED

A token to connect SCIM/AD sync in Blink has been deleted.

Flows (COMING SOON)

These events refer to Journeys (previously called flows) in the admin portal. See this article for more information on Journeys. Although these codes are not presently available in the audit log, they will be added in the future. Please contact us with any questions.

ORGANISATION_FLOW_CREATED

A new journey was created by this user in the admin panel.

ORGANISATION_FLOW_DELETED

An existing journey was deleted by this user in the admin panel.

ORGANISATION_FLOW_UPDATED

An existing journey was changed and/or updated by this user in the admin panel.

SCIM

SCIM_GROUP_CREATED

A team managed via SCIM has been created.

SCIM_GROUP_DELETED

A team managed via SCIM has been deleted.

SCIM_GROUP_PATCHED

Similar to SCIM_GROUP_REPLACED. Some attributes of a SCIM group were updated.

SCIM_GROUP_REPLACED

Similar to SCIM_GROUP_PATCHED. This indicates we received the whole object/group from the API which resulted in an update/updates for the group.

SCIM_USER_CREATED

This user was created by the SCIM set up for the organization.

SCIM_USER_DELETED

This user was deleted by the SCIM set up for the organization.

SCIM_USER_PATCHED

This user was updated by the SCIM set up for the organization. Similar to SCIM_USER_REPLACED

SCIM_USER_REPLACED

Some information for this user was updated via the SCIM set up for the organization. Similar to SCIM_USER_PATCHED

SCIM_DELETE_USER_MAPPING

The SCIM mappings in place for syncing this user have been removed.

Admin

Many events listed in this category are managed via our Blink team. Please reach out to our support team at support@joinblink.com if you see any events that you have questions about and we'd be happy to assist.

ORGANISATION_CREATED

The organization itself was created in our Blink system. This corresponds to the creation of your Blink instance.

ORGANISATION_UPDATED

A change has been made to the organization itself in Blink, such as the name.

FEATURE_FLAG_GRANTED

A requested feature has been enabled for your organization.

FEATURE_FLAG_GRANT_DELETED

An existing feature has been disabled for your organization.

ORGANISATION_DOMAINS_ADDED

An accepted domain has been added to your organization. These allow users to sign up without an invite as long as their email address is under the specified domain, such as @joinblink.com

ORGANISATION_DOMAINS_DELETED

A previously accepted domain has been removed.

ORGANISATION_POLICIES_UPDATED

A policy that users accept at the time of registration has been added, removed, or updated.

ORGANISATION_SUBDOMAIN_UPDATED

A subdomain (for example, mycompany.joinblink.com) has been created/updated.

ORGANISATION_TRIAL_UPDATED

A change has been made to a free trial for your organization. Usually, this would be a cancellation or extension.

ALL_ORGANISATION_DEVICES_LOGGED_OUT

All users for an organization have been logged out by the system.

ORGANISATION_FEED_EVENT_POST_TYPES_UPDATED

A Feed category has been added, updated, or removed for your organization.

ORGANISATION_FOLDER_UNDELETED

Completed on the backend by our team. A deleted Hub folder has been recovered and restored in Blink.

CONVERSATION_UNDELETED

Completed on the backend by our team. A deleted conversation has been recovered and restored in Blink.

Billing

CHARGEBEE_SESSION_CREATED

An admin has accessed the Billing tab in the admin portal to manage the subscription for the organization.

Pulling logs

Only users with Organization Admin permissions will have access to pull audit logs via the steps below.

  1. Open the Admin portal from either the web or desktop application.

  2. Scroll down on the left side to the section labeled Data Management and click on "Audit Log"

  3. In the options box to the right, enter the date and time filters you'd like to apply. The system currently only supports pulling logs for 1 specific moment at a time.

  4. Below the date and time, select the event category that best fits what information you're looking for or leave the category set as "All Events" to see everything. See the event types for assistance determining what events each category includes.

  5. Select "Get logs" and a complete list of events, users, and dates will appear to the left. To access additional details, click the down arrow icon to the right as shown below.

Did this answer your question?