The MDM audit log keeps a record of every administrative action taken in device management. Use it to see who changed what, and when, or to produce evidence for a compliance review.
Feature/Functionality
Overview
The audit log covers every action an administrator performs in the device management area of the console. That includes:
- Changes to policies and profiles
- Remote commands such as wipe, lock and unenrol
- Enrolment and unenrolment events
- Software deployment actions
- Changes to settings
How to use
- Go to Devices > Audit Logs.
- Narrow the list by date range, action type or administrator.
- Export the results to CSV when you need them for compliance reporting.
Tips and Best Practices
- Filter before you export. A date range and an action type give you a CSV that answers the question, not the whole history.
- Filter by administrator to review one person's actions. This is the fastest way to check what a specific admin did.
- Check the log after sensitive actions. Wipes, locks and unenrolments are all recorded, so you can confirm who triggered them.
Troubleshooting and FAQ
Troubleshooting
- You cannot find an action you expected. Widen the date range and remove any action type or administrator filter, then search again.
FAQ
-
Which actions does the audit log record?
Administrative actions in device management: policy and profile changes, remote commands, enrolment and unenrolment events, software deployments and settings changes.
-
Can I export the log?
Yes. Export it to CSV for compliance reporting.
-
How long are audit log entries kept?
For questions about retention or export, contact support@factorial.it.