Documentation Index
Fetch the complete documentation index at: https://docs.arcuserp.com/llms.txt
Use this file to discover all available pages before exploring further.
Who Should Use This Page?
Audit Log is for owners, administrators, and compliance reviewers who need to review account activity, permission changes, exports, failed actions, configuration changes, and period-close activity.
- Admins use it to investigate access, settings, and workflow questions.
- Managers use it to confirm approvals, denials, exports, and failed actions.
- Finance reviewers use it during month-end, audit prep, and exception review.
- Support teams can ask for the entry ID or entry hash when investigating a specific action.
Open the Audit Log
- Open Admin.
- Choose Organization.
- Select Audit Log.
- Review the activity chart, severity summary, filters, and entry table.

Read the Overview
Start at the top of the page before narrowing the table. The chart and severity tiles help you spot unusual activity spikes, failures, warnings, or critical events.
- Activity chart: shows activity volume over the selected time window.
- Severity tiles: summarize info, notice, warning, and critical entries. Click a tile to filter by that severity.
- Date presets: switch between this hour, this day, this week, this month, all time, or a custom range.
- Page count: shows how many matching entries are available after filters are applied.
Use Filters
Filters help you move from a large activity history to the exact activity you need. The visible table updates after filter changes.

- Scope: choose all entity activity or only your own activity.
- Jump to my activity: quickly filters the log to your own actions.
- Jump to entity activity: clears the user jump and returns to broader entity activity.
- Severity: isolate info, notice, warning, or critical entries.
- Outcome: review successful, failed, or denied actions.
- Resource: focus on a type of record or configuration area.
- Action: focus on a specific action type, such as create, update, export, approve, or delete.
- User: review activity from one user when your role allows user filtering.
- IP address and Session ID: investigate activity from a specific device, browser session, or network source.
- Search: search actions, users, and resource names.
Save Filter Presets
Save filter presets for recurring review jobs. For example, create a preset for failed actions this week, permission changes, data exports, or critical settings activity.
- Set the date range and filters you want to reuse.
- Select Save current filters.
- Name the preset clearly.
- Use the saved preset chip the next time you need that view.
- Delete stale presets when they no longer match your review process.
Open an Audit Entry
Click a table row to open the entry drawer. The drawer is the best place to review a single event because it shows context beyond the table columns.

- Header chips: show severity, outcome, and event time.
- Description: summarizes what happened in plain language when available.
- User: shows the person or system actor associated with the event.
- Resource: shows the area or record affected by the action.
- Changes: shows before and after values when the event has change details.
- Metadata: shows extra event context when available.
- Session: shows IP, session ID, and browser context when available.
- Chain: shows integrity values used to verify that activity history remains consistent.
Share a Deep Link
When you open an audit entry, the browser URL updates to that entry. Copy that URL when another authorized admin needs to review the same event. The other person must still have permission to view the Audit Log.
Export Activity
Use the Export menu when a reviewer needs the current filtered activity outside Arcus. Exports use the filters currently on the page, so set the date, scope, and other filters before downloading.
- Export CSV: best for spreadsheet review, sorting, and simple audit packages.
- Export JSON: best for technical review or structured archival by your internal team.
Run Compliance Reports
Compliance reports are focused downloads for common review questions. Set the date range first, then open the Compliance menu and choose the report type.

- User Access Report: review access-related activity.
- Permission Changes: review role, permission, and access-control changes.
- Data Exports: review export activity.
- Failed Actions: review failed or blocked activity.
- Config Changes: review settings and configuration changes.
- Period Close Activity: review accounting close actions.
Verify Integrity
Verify Integrity checks whether the recorded activity chain and archived audit records are still consistent. This is a compliance review tool, not a filter.
- Select Verify Integrity.
- Wait for the verification to finish.
- Review the result modal.
- If the result is not valid, stop relying on exports from that period until an owner or Arcus support reviews it.
Common Investigations
- Who changed a setting? Filter by config actions, date range, and search terms from the setting name.
- Why was a user blocked? Filter by user, failed or denied outcome, and the time window of the report.
- Who exported data? Use the Data Exports compliance report or filter by export actions.
- Who changed permissions? Use the Permission Changes compliance report and compare it to User Management.
- What happened during close? Use Period Close Activity and review entries around the close request or approval time.
- Which activity came from one device? Filter by IP address or session ID when that context is available.
Common Blocks
- You cannot open Audit Log: your role may not include audit access. Ask an owner or admin to review your role.
- No entries appear: broaden the date range, clear user filters, clear search text, and return to entity activity.
- User filter is missing: your role may not allow viewing or filtering users.
- Export has fewer rows than expected: the export follows the current filters and date range.
- Entry drawer is empty after a shared link: the entry may be outside the current result set, archived differently, or not visible to your role.
- Integrity check fails: preserve the result, avoid overwriting evidence, and escalate to an owner or Arcus support.

