Activity log
The activity log is a record of changes made in a workspace: who edited, added or deleted knowledge (snippets, Q&A pairs, sources, chunk edits, connector imports), who changed settings or team access, and when. It helps you answer "who changed this answer?" and gives your auditors an export they can keep.
Who can see it
Only the workspace owner and teammates with the Admin role. Members and viewers don't see the Settings entry, and the API refuses them.
Viewing activity
Open Settings → Activity log. Entries are newest first. Use Show to narrow to knowledge base changes or to past exports, and From / To to pick a date range. Click Load more to page back further.
Exporting
Click Export CSV or Export JSON Lines. An export uses the filters you have set:
- At most 90 days per export. With no dates set, you get the last 30 days.
- At most 50,000 entries per export. If a range has more, choose a shorter range.
- You can export a few times every 10 minutes. If you hit the limit, wait a few minutes.
- CSV cells that a spreadsheet could read as a formula are prefixed with
', so opening the file is safe. - Every export is itself recorded in the activity log.
What an entry contains
Time (UTC), the action, whether it succeeded, who did it, and the item it applied to (an id). What is not included:
- No content. Knowledge text, answers, questions and file names are not stored in the log.
- No IP addresses.
- No visitor details. Any detail that isn't a number or a short id is shown as
[redacted]. - People outside your team (for example AskVault support acting on your behalf, or a removed account) are shown as a generic label without a name or email. Your own teammates, current and former, are shown by name and email.
Entries are kept for 365 days.
API
Both endpoints need an owner or admin session.
GET /api/workspaces/{workspace_id}/audit-log?since=&until=&action=&cursor=&limit=returns{ "items": [...], "next_cursor": "..." }.limitis at most 200. Passnext_cursorback ascursorfor the next page.actionmatches exactly, or as a prefix when it ends in.(for examplekb.).GET /api/workspaces/{workspace_id}/audit-log/export?since=&until=&action=&format=csv|jsonlstreams the file.
Related guides
- Team management, for roles that can see the log.
- Conversation audit log, for per-conversation history.
- Security overview, for how AskVault protects your data.