The audit log provides a system-level view of activities performed by technicians   within your Atera account. The logs cannot be edited, and therefore function   as an audit trail.

Notes

• Audit logs are kept for varying periods of time across different plans: one     month for the Professional plan, 6 months for the Expert plan, 12 months     for the Master plan, and a full 7 years for the Enterprise plan.  
• Audit logs display times based on your computer's local timezone.  

Notes

• Audit logs are kept for varying periods of time across different plans: one     month for the Pro plan, 6 months for the Growth plan, 12 months for the Power     plan, and a full 7 years for the Superpower plan.  
• Audit logs display times based on your computer's local timezone.  

Review audit log activity

  See a chronological record of key actions in your account so you can verify what   happened and when.

To view the audit log:

Go to Admin > Users and security >   Audit log.

The Audit log page appears.

Filter the audit log

Sort and narrow by log type, technician, and count, or use the search bar to   find specific technicians, event titles, sites, or devices.

Sort and narrow by log type, technician, and count, or use the search bar to   find specific technicians, event titles, customers, or devices.

To filter or search the audit log:

1. Use the Search bar to find actions related to specific technicians,   event titles, sites, or devices.

1. Use the Search bar to find actions related to specific technicians,   event titles, customers, or devices.

2. Click Filters to refine results by Sort by, Log type, Technician,   and Item count.

• Sort By: Select Descending (newest first) or Ascending (oldest     first).  
• Log Type: Select Login, Created, Modified, Deleted, Remote     actions, or View data.  
• Technician: View actions for all technicians or select     one.  
• Item count: Show up to 20, 50, 100, 200 results.  

3. Use the Date range selector to choose a time period.

Audit log event types

The Audit log records technician and system activity across your account. Examples   of logged events include (but are not limited to):

• Login & Access: Technician       login activity    
• User & Permission Changes: Technician       creation; Role and permission changes    
• Device & Customer Changes: Device       deletion, or reassignment; Customer creation, modification, or deletion    
• Device & Site Changes: Site       deletion, or reassignment; Site creation, modification, or deletion    
• Remote Actions: Remote       connection sessions (e.g., Splashtop, AnyDesk, etc.); File transfer actions;       Remote command execution    
• Configuration Changes: Patch       management policy updates; Automation profile changes; Alert threshold       modifications    

Export the audit log

Export the audit log as a CSV to share it, archive it, or run deeper analysis   in Excel/Sheets (for audits, reviews, or investigations).

Note: The export will reflect any filters you've set.

To export the audit log:

1. Click Export.

2. In the download prompt, choose a location on your computer, and rename the   file (if needed). Then click Save.

3. Open the downloaded CSV file in your preferred app.