Team auditing in Document360 lets you track every action your team members perform within a project — from publishing an article to changing portal settings — along with who performed the action and when. It provides a complete, timestamped activity log that supports accountability, compliance oversight, and incident recovery. You can also use Audit configuration to selectively monitor only the event categories that matter to your project, so the audit log stays focused and actionable.
When to use team auditing
Use team auditing in the following situations:
- Trace unintended changes — Find out who deleted or modified an article so you can restore it using backup and restore or version history.
- Compliance and oversight — Monitor sensitive areas of your project, such as user and security settings or SSO configuration changes, to meet internal governance requirements.
- Release review — Audit documentation changes made during a product release cycle to confirm what was published, renamed, or reordered.
Before you begin
Only users with the Owner or Admin role, or a custom role with team auditing access, can view and update team auditing settings.
How to access team auditing
-
Navigate to Settings () > Knowledge base portal in the left navigation bar.
-
In the left navigation pane, select Team auditing.
The audit log appears, showing all user activity with the event name, the user who performed it, the date and time, and the language.
Only 20 audit records are displayed at a time. Scroll to the bottom and click Load more to view the next set of 20 entries.
-
Use the filters to narrow down the audit data:
Filter Description Events Filter by specific action types performed in a given area of the project. Audit date Filter by a time period: 1 year, 3 months, 30 days, 7 days, or a custom date range. Activity by user Filter by a specific team member. The Events filter covers all tracked areas of your project — including documentation editor actions, Drive activities, knowledge base site settings changes, widget settings, user and security management, and portal configuration. You can also filter by a specific user to view only their activity.
-
Click Refresh at the top to load the latest activity.
-
Click Export CSV to download the current filtered report to your device.
You can open the exported CSV file in Microsoft Excel, OpenOffice Calc, Google Docs, or any compatible CSV tool.
How to configure audit settings
Audit configuration lets you choose which event categories are logged, keeping your audit data focused.
- Navigate to Settings() > Knowledge base portal in the left navigation bar.
- In the left navigation pane, select Team auditing.
- Go to the Audit configuration tab.
- To monitor all project events, turn on the All events toggle.
- To monitor only specific areas, turn on the toggle for one or more of the following event categories:
Documentation editor
Tracks events related to the documentation editor, such as:
- Article visibility changed
- Article settings updated
- Article slug updated
- Article title updated
- Article published
- Article created
- Article renamed
- Article deleted
- Article forked
- Article version deleted
- Bulk delete article versions
- Updated translation status
- Articles reordered
- Article contributors updated
- Article workflow status updated
- Article workflow due date updated
- Article workflow assignee updated
- Category created
- Category type updated
- Category settings updated
- Category slug changed
- Category contributors updated
- Category deleted
- Category renamed
- Categories reordered
- Category published
- Category forked
- Category version deleted
- Bulk delete category versions
- Category workflow status updated
- Category workflow due date updated
- Category workflow assignee updated
- Category visibility changed
- Article review reminder status updated
- Article pushed to Crowdin
- Categories/Articles restored
- Categories/Articles permanently deleted
- Recycle bin emptied
- Shared article created
- Share link generated
- Share link deleted
- Clone article created
- Removed reference article
- Added glossary
- Updated glossary
- Deleted glossary
- Imported glossary
- Multiple shared article created
- Article publish later canceled
- Article scheduled for publish
Drive
Tracks events related to Drive actions, such as:
- Folder added
- Folder renamed
- Folder deleted
- File(s) added
- File updated
- File(s) deleted
Knowledge base portal settings
Tracks portal-specific activities, such as:
- Workspace updated
- Workspace deleted
- Workspace created
- Workspace display order changed
- Plan tier changed
- Payment details updated
- Project general settings updated
- Backup created
- Backup restored
- Notification channel deleted
- Notification channel created
- Notification channel updated
- Addons purchased
- Subscription created
- API token added
- API token deleted
- Extension token generated
- Extension token deleted
- Crowdin token added
- Crowdin token deleted
- Email domain deleted
- Email domain added
- Email address added
- Email user name added
- Email address updated
- Email user name updated
- Display workspaces as menu
- Subscription cancellation initiated
Knowledge base site settings
Covers site-specific activities, such as:
- Site design settings updated
- Custom JavaScript updated
- Custom CSS updated
- Article settings updated
- Project sub-domain updated
- Integration created
- Integration deleted
- Integration updated
- Home page builder restored
- Home page builder settings updated
- Robots.txt updated
- Site domain updated
- Cookie consent enabled
- Cookie consent disabled
- Cookie consent updated
- Smart bar added
- Smart bar updated
- Smart bar enabled
- Smart bar disabled
- Smart bar deleted
- Read receipt rule created
- Read receipt rule updated
- Read receipt rule deleted
- Ticket deflector deleted
- Ticket deflector added
- Ticket deflector updated
- Ticket deflector helpdesk added
- Ticket deflector helpdesk updated
- Ticket deflector helpdesk deleted
- Article redirection rule added
- Article redirect rule updated
- Article redirection rule(s) deleted
- Redirect rule(s) exported to CSV
- Redirect rules import requested
- Meta description generated
- Meta details updated
- Knowledge base builder updated
- Knowledge base builder published
- KB site 2.0 published
- KB site 2.0 preview created
Knowledge base widget settings
Tracks widget-related actions, such as:
- Knowledge base widget settings updated
- URL mapping created
- URL mapping updated
- URL mapping deleted
- Knowledge base widget settings deleted
- Knowledge base widget settings created
Users & security settings
Includes user management activities, such as:
- Site visibility changed
- Role added
- Role updated
- Role deleted
- Security group added
- Security group updated
- Security group deleted
- Content access added
- Reader access added
- Content access updated
- Reader access updated
- Content access removed
- Reader access removed
- User added
- User updated
- User deleted
- IP restrictions updated
- IP restriction added
- IP restriction deleted
- Self sign up settings updated
- Import readers requested
- Import user requested
- Export user(s) to CSV
- Export reader(s) to CSV
- SSO configuration added
- SSO configuration updated
- SSO configuration deleted
- SSO users invited
- JWT created
- JWT regenerated
- JWT saved
- JWT updated
- JWT deleted
- Inheritance settings updated
- Reader account updated
- Reader account created
- Reader account deleted
- Convert to reader
- Convert to SSO user
- Convert to SSO reader
- Convert to user
Tools settings
Tracks actions such as:
- Project exported
- Project imported
- External project import requested
- Export PDF requested
- Export PDF content template added
- Export PDF content template updated
- Export PDF content template deleted
- Export PDF design template added
- Export PDF design template deleted
- Export PDF design template updated
- Article review reminder created
- Article review reminder updated
- Article review reminder deleted
- Content reuse variable added
- Content reuse variable updated
- Content reuse variable deleted
- Content reuse snippet added
- Content reuse snippet updated
- Content reuse snippet deleted
- Article template added
- Article template updated
- Article template deleted
- Tag added
- Tag updated
- Tag deleted
- Article imported
- Workflow status added
- Workflow status updated
- Workflow status deleted
- Workflow status reordered
- Find and replace
- Added glossary term suggestion
- Content reuse glossary suggested
- Updated glossary term suggestion
- Export PDF password removed
Best practices
- Enable selective audit categories rather than logging all events in large projects. This reduces log noise and makes it easier to find relevant entries.
- Export and archive CSV reports regularly if your project has compliance requirements.
- Filter by user before exporting when investigating a specific team member's activity, so the CSV contains only the relevant records.
FAQ
What is team auditing in the knowledge base portal?
Team auditing tracks actions performed by your users within a Document360 project — such as adding or updating articles and changing settings — along with who performed each action and when.
How do I export a specific user's auditing records?
Navigate to Settings > Knowledge base portal > Team auditing. Use the Activity by user dropdown to select the user, apply the Event and Audit date filters as needed, then click Export CSV.
How frequently is the audit data updated?
Audit data is updated in real time. Click Refresh to ensure you are viewing the latest activity.
Can I track when a category is cloned in team auditing?
No. Category cloning is not logged as an audit event. As a workaround, filter by the Clone article created event and look for articles that were inside the cloned category — this provides an indirect indication that a category clone occurred.
How do I find out who moved a category and when?
Navigate to Team auditing and filter the Events by Categories reordered, then click Apply. The log shows who performed the action and when. Note that the category name is only captured if drag-and-drop was used; the Move option does not record the category name.
Can I restrict access to team auditing for certain team members?
Yes. Access to team auditing is controlled by user roles and permissions. Only Owners, Admins, and users with a custom role that includes team auditing access can view or update the feature.
Can I recover deleted articles through team auditing?
No. Team auditing records what happened but does not provide recovery options. To restore deleted content, use the backup and restore or version history features.
Why does the article name show incorrectly in the audit log after a Word import?
If an article is renamed during the Word import process, the audit log captures the original Word file name rather than the updated name. To avoid this, complete the import first, then rename the article after import is done.
Can I monitor specific events instead of all project events?
Yes. In the Audit configuration tab, turn on the toggle for specific event categories — such as Documentation editor or Users & security settings — to monitor only those events.