Audit Trail (This Company)
The Audit Trail is a read-only record of who changed what, and when, across every audited part of your company. It is an append-only history β entries are never edited or removed β so you can review activity, investigate a change, or confirm an action took place.
This is the company-scoped audit log: it shows only the activity that belongs to the company you are signed in to. (A separate cross-company view that spans every company on the installation lives in the Developer portal β see Audit Trail (All Companies).)
Overview
Every audited action in ANTE β a record being created, updated, deleted, or restored, plus key events such as logins, filing approvals, and exports β is captured as a single audit event. The Audit Trail page lets you browse those events for your company, narrow them down with filters, and open any event to see exactly what changed.
Each row answers four questions at a glance:
- When the action happened
- Who performed it (the actor)
- Which module it belongs to
- What was affected (the entity) and what action was taken
When you open the page it shows activity from the last 7 days by default, with the newest events first.
Who Can View It
The Audit Trail is permission-controlled. You need the Audit Trail view permission to open the page. If you don't have it, the page shows a message explaining that you don't have permission to view the audit trail. Ask your administrator if you need access.
How to Open the Audit Trail
- Go to Settings β System Settings β Audit Trail.
- The page loads showing the most recent events from the last 7 days.
Page Layout
The page is a single table of audit events with a toolbar above it.
- Export CSV button (top right) β downloads the currently-filtered activity as a CSV file you can open in Excel. It respects the date range and every filter you have applied, so you can produce a maintenance-activity report for any period.
- Date range filter β two date pickers (a Start date and an End date) that set the time window for the events shown.
- Search box β searches event labels (for example, an employee name or a document number).
- More filters button β opens a dialog with the additional, less-frequently-used filters. A small number badge appears next to it when one or more of those hidden filters is active.
- Column visibility / fullscreen controls β standard table tools to show or hide columns and expand the table to fill the screen. Fullscreen remembers your choice for this table while you stay on the same browser tab, and resets to normal view once you exit fullscreen or open a new tab.
- Events table β the list of matching audit events.
- Newer / Older footer β page through the results (see Paging Through Results).
Table Columns
| Column | Description |
|---|---|
| Timestamp | The date and time the event occurred, newest first. |
| Actor | The account that performed the action. If there is no actor, the entry is marked system (an automated process performed it). |
| Module | The business area the event belongs to (for example, HR, Payroll, Accounting). |
| Action | What was done, shown as a colored badge (for example, Created, Updated, Deleted, Login successful). |
| Entity | What was affected β a readable label on the top line, with the entity type and a shortened ID underneath. |
Action Badge Colors
The Action badge is color-coded so you can scan for important events quickly:
| Color | Meaning | Examples |
|---|---|---|
| Green (success) | A record was added or an action succeeded | Created, Restored, Login successful, Filing approved, Role granted |
| Red (error) | A record was removed or an action failed | Deleted, Login failed, Filing rejected, Role revoked |
| Orange (warning) | A record was changed | Updated |
| Grey (neutral) | Other events | Logged out, Password changed, Export generated, and similar |
Filtering Events
The Audit Trail can grow very large, so filters are the main way to find what you need. Filters apply immediately as you change them β the table updates live.
Date Range (on the toolbar)
Use the two date pickers in the toolbar to set a Start date and an End date. The defaults show the last 7 days. The end date is treated as the full day (everything that happened that day is included).
Search Label (on the toolbar)
Type into the search box to match against an event's display label β for example, an employee's name or a document number. This is a partial-text search, so you don't need the exact wording.
More Filters (in the dialog)
Click More filters to open a dialog with these additional filters:
| Filter | What it does |
|---|---|
| Module | Limit to one business area. Search-as-you-type and clearable. |
| Action | Limit to one action type (Created, Updated, Login successful, etc.). Search-as-you-type and clearable. |
| Actor | Limit to events performed by one account. Type to search for a person or account by name. |
| Entity type | The kind of record affected (for example, Employee or Purchase order). |
| Entity id | The exact identifier of a single record. This is an exact match. |
Filters in this dialog stay active after you close it. The dialog provides:
- Reset β clears the five filters in this dialog (Module, Action, Actor, Entity type, Entity id). It does not change the date range from the toolbar. Reset is only available when at least one of these filters is set.
- Done β closes the dialog. Your filters remain applied.
When any of these hidden filters is active, a small count badge appears next to the More filters button on the toolbar, so you don't forget that a hidden filter is narrowing the list.
Modules You Can Filter By
| Module | Covers |
|---|---|
| Authentication | Logins, logouts, password changes |
| HR | Employee and HR records |
| Payroll | Payroll processing and payslips |
| Attendance | Timekeeping and attendance |
| Accounting | Accounting records |
| Treasury | Treasury and funds |
| Sales | Sales activity |
| Purchasing | Purchasing activity |
| Inventory | Inventory activity |
| Assets | Asset records |
| CRM | Customer relationship records |
| Project | Project records |
| Workflow | Workflow and approvals |
| Filing | Filings and approvals |
| Content | Content (CMS) records |
| Settings | Configuration changes |
| System | System-level events |
Actions You Can Filter By
| Action | Meaning |
|---|---|
| Created | A new record was added |
| Updated | An existing record was changed |
| Deleted | A record was removed |
| Restored | A previously removed record was brought back |
| Login successful | A user signed in |
| Login failed | A sign-in attempt was rejected |
| Account locked | An account was temporarily locked after repeated failed sign-in attempts |
| Logged out | A user signed out |
| Password changed | An account password was changed |
| Filing approved | A filing was approved |
| Filing rejected | A filing was rejected |
| Export generated | A data export was produced |
| Role granted | A role was assigned |
| Role revoked | A role was removed |
| Timekeeping submitted for payroll | Timekeeping was sent to payroll |
| Payroll processing started | A payroll run began |
| Payslip released | A payslip was released |
| Employee terminated | An employee was terminated |
Viewing Event Details
Click any row to open the Audit event dialog with the full detail of that event.
At the top, the dialog shows:
- The date and time of the event
- The entity affected (its label, type, and ID)
- Module, Action, and Actor
- IP address and Request identifier, when these were recorded
- An Extra section with any additional details captured for the event, when present
Below that, three tabs let you inspect what changed:
| Tab | What it shows |
|---|---|
| Diff | A side-by-side, field-by-field comparison of what changed β each field marked as Changed (old value β new value), Added (new value only), or Removed (old value only). Unchanged fields are hidden so only the differences stand out. If nothing differs, the dialog says no field-level changes were detected. |
| Before | The full record as it was before the action. |
| After | The full record as it was after the action. |
The Diff tab opens by default.
Paging Through Results
The footer below the table shows how many rows are currently displayed and provides two controls:
- β Newer β go back to the previous (more recent) page of results.
- Older β β load the next (older) page of results.
A control is disabled when there is no page to move to in that direction, or while a page is loading. Changing any filter starts you back at the first (most recent) page.
Common Tasks
Find Out Who Changed a Specific Record
- Open Settings β System Settings β Audit Trail.
- If the change is older than a week, widen the date range in the toolbar.
- Click More filters.
- Set Entity type to the kind of record (for example, Employee), and optionally paste the record's Entity id for an exact match.
- Click Done.
- Review the matching events β the Actor column shows who made each change.
- Click a row to see the Diff of exactly what changed.
Review One Person's Activity
- Open the Audit Trail.
- Set the date range you want to review.
- Click More filters, then in the Actor field type the person's name and select their account.
- Click Done.
- The table now shows only events performed by that account.
Investigate Failed Logins
- Open the Audit Trail and set the date range to cover the period in question.
- Click More filters.
- Set Module to Authentication and Action to Login failed.
- Click Done.
- Review the results β each row's detail dialog shows the IP address recorded for the attempt, when available.
See Exactly What Changed in an Update
- Find the Updated event you're interested in (filter by Action = Updated if helpful).
- Click the row to open the Audit event dialog.
- Stay on the Diff tab to see each changed field with its old and new value.
- Switch to Before or After to see the complete record state at each point in time.
Tips
- Start with the date range. The list only shows the last 7 days by default, so widen the range before assuming an event is missing.
- Watch the filter badge. The number next to More filters tells you hidden filters are still narrowing the list β clear them with Reset if results look incomplete.
- Use the Diff tab first. It hides everything that didn't change, so the actual edit is easy to spot.
- Append-only. The audit trail can't be edited from this page β it is a permanent record, which is exactly what makes it useful for reviews and investigations.
Related Pages
- Audit Trail (All Companies) β the Developer-portal view of the same activity, spanning every company on the installation
- Roles β manage roles and permissions, including who can view the Audit Trail
π‘ Note: The Audit Trail is a read-only, append-only history scoped to your company. Use it to answer "who did this, and when?" β it doesn't let you undo or change anything, only review what happened.