Calendar audit log

This feature is not available in the legacy free edition of Google Apps. This feature is also not available in the government edition of Google Apps.

The Calendar audit log lets you track changes to calendars, events, and subscriptions for users in your domain, and troubleshoot when users in your domain notice discrepancies and unexpected changes to their calendars (or shared calendars) and to specific events on their calendars. Entries usually appear within half an hour of the user action.

To access the Calendar audit log, sign in to your Admin console, click Reports > Audit > Calendar. The page displays the following information:

Activity Name	The action that was logged, such as adding or deleting calendars, events, guests, or subscriptions to event reminders and notifications.
Calendar access level(s) changed	A log entry for each time a calendar access level changes.
Calendar country changed	A log entry for each time a calendar country changes.
Calendar created	A log entry for each time a calendar is created.
Calendar deleted	A log entry for each time a calendar is deleted.
Calendar description changed	A log entry for each time a calendar description is changed.
Calendar location changed	A log entry for each time a calendar location is changed.
Calendar timezone changed	A log entry for each time a calendar timezone is changed.
Calendar title changed	A log entry for each time a calendar title is changed.
Event created	A log entry for each time an event is created.
Event deleted	A log entry for each time an event is deleted.
Event guest added	A log entry for each time a guest is added to an event.
Event guest removed	A log entry for each time a guest is removed from an event.
Event guest response changed	A log entry for each time a guest response changes for an event.
Event modified	A log entry for each time an event is modified. This generic entry is only shown when no more specific action log entries are available.
Event removed from trash	A log entry for each time an event is removed from calendar trash
Event restored	A log entry for each time an event is restored from calendar trash
Event title modified	A log entry for each time an event title is modified.
Subscription created	A log entry for each time a subscription is created.
Subscription deleted	A log entry for each time a subscription is deleted.
Activity description	The details of the event described in the Activity name field.
User name	The email address of the user who triggered the event.
Calendar id	The name of the calendar in which the event resides.
Event title	The title of the calendar event.
Event id	The id number of the calendar event.
API Kind	The API through which the change was made. Choose between Unknown, API V3 (usually Android), Web, GData (usually older Android devices), iCal (event invitations from other calendaring systems), or CalDAV (usually Apple devices).
IP Address	The internet protocol (IP) address used by the administrator to sign in to the Admin console. This might reflect the administrator's physical location, but not necessarily. For example, it could instead be a proxy server or a virtual private network (VPN) address.
Date and time range	The date and time the event occurred (displayed in your browser's default timezone).

Use the Filters section at the side to configure the page to only display data that meets certain criteria. For example, the page can show events of a particular type, or events that occurred during a specific date range.

You can also use the Filters section to create and configure a custom alert. Custom alerts do not use the Date Range. Choose an event name from the drop-down list and your other filters, then click the SET ALERT button. In the Set alert: window you can add a custom alert name, check the Super Administrator(s) box, or add additional recipient user emails. After you configure your custom alert click the SAVE button. To edit your custom alerts, refer to Account activity alerts.

If you don't see the Filters section, click .
To change the columns the log displays, click . The page remembers the columns you choose and shows the same ones the next time you sign in. The columns are:
- User
- Calendar ID
- Event Title
- Event ID
- API Kind
- Date
- IP Address
The log shows near real-time data (as recent as the last few minutes) and keeps data from up to six months ago.

Name of Log or Report	Retention Time
Audit Log	6 months
Calendar audit log	6 months
OAuth Token audit log	6 months
Drive audit log (Google Apps Unlimited)	6 months
Account activity reports	6 months
Security reports	6 months
Groups audit log	6 months
API audit data	6 months
API reporting data	15 months

For other audit logs and reports not mentioned above the retention time should be 6 months.

Was this article helpful?

Jan	FEB	Mar
	07
2015	2016	2017