Module 10 · Advanced · 7 min read

The audit trail

You will be able to: Read the Audit Log and its filters; Use a document's Timeline; Know what is logged and what is not.

  • Read not done yet
  • Self-check: not taken not done yet
  • Lesson complete not done yet

An audit trail answers: who did what, and when. In Zeyto, whenever someone saves, changes or removes a record, or presses an action such as Submit, one line is written to the Audit Log. Requests refused for a missing permission or licence are logged too. The screen is read-only and needs the security.view permission.

Reading a line

ColumnMeaning
TimeDate and time in your company format and time zone
FormThe screen the record belongs to, for example Sales Invoice
ActionCreate, Update, Delete, Submit, Cancel, Approve, Restore, Purge or Denied
Done ByThe user name, or system
ChangesA summary such as 2 changed; click the row for the Old Value and New Value of each field
The Activity Log screen with the period, event, form and user filters and the read-only list of actions showing time, form, action, record, done by and device.

Admin, Activity Log: every action, read-only.

Admin, Activity Log: every action, read-only.

Fields that changed are marked and listed first. A dash under Old Value means none was recorded. Old values are kept for the main masters and for documents. Passwords, PINs and keys are replaced by *** before anything is saved.

Finding who changed something

  1. Set From and To (the screen starts with the last 30 days).
  2. Narrow by User, Event or Entity if you can, or paste a Transaction Id.
  3. Press Apply. Nothing is searched until you press it.
  4. Click the row and read the detail panel. Export CSV, XLSX or PDF if you need to keep it.
Who changed the price?A cashier says item A100 was always AED 4.50, but today it sells at 45.00. Set Entity to items, the dates around today, press Apply and click the Update row for A100. The detail shows Rate Old Value 4.50, New Value 45.00, Done By the user and the time. You now know who and when, and can talk to them.

One document's story

Open the saved document and press More ▾ ▸ Timeline. It shows edits (with Show changes), submit and cancel, ledger and stock postings, receipts or payments applied, linked documents, approvals, sends and files. Anyone who may open the document may open its Timeline, and the Add comment box leaves a note for colleagues.

A submitted sales invoice with the More menu open and the Timeline entry showing the story of one document.

More, Timeline: the story of one document.

More, Timeline: the story of one document.

What is not here

  • Plain reading is not logged, although some report runs appear because they are sent as requests.
  • Sign-ins are on the Sign-in activity tab of Users & Permissions, not in the Audit Log. Password changes and resets are in both places.
  • The screen shows the newest 500 matching lines; narrow the dates for older ones.
Watch outThe log is only as good as the logins: if two people share one user name, the log cannot tell them apart.
TipReview weekly: Purge and Restore actions, role and user changes, price list changes, cancelled documents and Denied lines.

Try it in the demo

  1. Open the Audit Log screen (Security & System in Settings) and press Apply with the default dates.
  2. Click any Update row and compare Old Value and New Value.
  3. Open a saved sales invoice, press More ▾ ▸ Timeline and use the Money and Documents filters.
Open the live demo

Public demo company, sign in as admin / demoAdmin123. Data refreshes nightly.

Key takeaways
  • Every save, change, removal and action is logged with who and when.
  • Old and new values are kept for masters and documents; secrets show as ***.
  • Timeline gives the story of a single document.
  • Sign-ins have their own tab.

Check yourself

3 questions on this lesson. Not timed, not the exam, and you can try again. Score 60% or more, and read the lesson, to complete it.

1. What can you change on the Audit Log screen?

2. Which details can an Audit Log line show you?

Select all that apply.

3. Where do you see everything that happened to one particular invoice, including approvals and postings?

Practice questions for this module · Printable study sheet