> AI agents: this is one page from Mammoth Analytics documentation. The index of all pages as Markdown is https://mammoth.io/docs/llms.txt. Append `.md` to any docs URL, or send `Accept: text/markdown`, to get Markdown.

# Use the Mammoth Activity Log as an audit log

> Review who did what in Mammoth with the Activity Log: events recorded, filters by event, category and author, CSV or XLSX export, and history kept per plan.

The Activity Log is Mammoth's audit trail: a record of who did what, when and on which resource in your workspace. Open it with **Monitor** in the left sidebar, then the **Activity Log** tab. Workspace Owners and Workspace Members can view and export it; your project role doesn't affect access, and how far back it reaches depends on your plan.

For day-to-day use of the log, see [Activity log](https://mammoth.io/docs/learn/automate/activity-log/).

## Open the Activity Log

1. Click **Monitor** in the left sidebar.
2. Select the **Activity Log** tab.

![Activity Log table with Date, Events, Details, Object, Category, and Author columns and an Export button](https://mammoth.io/docs/images/20260423_100519_activity-log-event-detail.webp)

## What the Activity Log records

| Category | Events logged |
| --- | --- |
| **Dataset** | Create, rename, duplicate, delete, add data, combine, replace, delete batches, suspend and resume batches |
| **View** | Create, rename, delete, rerun |
| **Pipeline** | Add, edit, rename, delete, suspend and restore tasks and actions |
| **Automation** | Create, edit, rename, delete, update |
| **Connector** | Create, edit and delete connections |
| **Project** | Create, rename, delete, property updates |
| **Folder** | Create, rename, delete |
| **Dashboard** | Publish, unpublish, share, update dashboard access, export dashboard |
| **Parameter** | Create, edit and delete parameters, parameter groups and snippets; rerun stale pipelines after a parameter or snippet changes |
| **Workspace** | Rename workspace, invite users, remove users, delete invites, update two-factor enforcement |
| **Data Retention** | Create, edit, delete and run retention policies; retention approval requests |

Across categories, the log also records moving an item to trash (for example *Move dataset to trash*), restoring it (for example *Restore dashboard*) and archiving it.

Each entry shows:

| Column | What it shows |
| --- | --- |
| **Date** | When the action happened |
| **Events** | The action type, for example *Create dataset* or *Edit automation* |
| **Details** | A description including resource names |
| **Object** | The affected resource, with a link |
| **Category** | The resource type, colour coded |
| **Author** | The workspace member who did it |

## Choose the time range

The log defaults to **Last 30 days**. Use the date control to choose **Today**, **Yesterday**, **Last 7 days**, **This week**, **Last week**, **Last 30 days**, **Last 3 months**, **Last 6 months**, **This quarter**, **Last quarter**, **Year to date (YTD)** or **Custom**.

## Filter the log by event, category or author

Use the column header controls:

| Filter | Options |
| --- | --- |
| **Events** | A specific action type |
| **Category** | Automation, Connector, Dashboard, Data Retention, Dataset, Folder, Parameter, Pipeline, Project, View, Workspace |
| **Author** | A specific team member |

You can combine filters, and they also apply when you export.

## Review who was invited to or removed from the workspace

1. Filter **Events** to *Invite users to workspace*, *Remove user from workspace* and *Delete invite*.
2. Read each entry's timestamp and author.

If Mammoth turns on workspace-wide 2FA for your workspace on request, the **Workspace** category shows it with the detail "Two-factor authentication is now required for all users", and "Two-factor authentication is no longer required" when it's turned off. See [Security](https://mammoth.io/docs/learn/workspace/security/).

## Export the audit log

1. Click **Export** (top right). The **Export file as...** menu opens.
2. Choose **CSV**, **XLSX** or **Mammoth Dataset**.
3. Click **Confirm**.

Mammoth exports the log with your active filters and date range applied. Clear all filters before exporting to get the full log for the selected period.

| Format | Use case |
| --- | --- |
| **CSV** | Spreadsheet review, bulk analysis, external audit tools |
| **XLSX** | Excel-compatible reporting |
| **Mammoth Dataset** | Load into a project to query and analyse with pipelines |

## Limits: how far back the log reaches

| Plan | Activity Log history |
| --- | --- |
| Free | 7 days |
| Starter | 90 days |
| Team | 1 year |
| Pro | 3 years |

Older activity isn't available on your plan. Mammoth shows a banner in the Activity Log when your plan limits the history.

## Troubleshooting

| Symptom | Cause | Fix |
| --- | --- | --- |
| Recent events are missing | The date range defaults to **Last 30 days** | Widen the range for older activity |
| The export is incomplete | Active filters apply to the export | Reset all filters before exporting |
| Older events are missing | Your plan limits how far back the log reaches | See the history table above |
| The **Activity Log** tab is missing | Only Workspace Owners and Workspace Members see it | Ask your Workspace Owner to check your role |

## Related

- [Activity log](https://mammoth.io/docs/learn/automate/activity-log/): the Monitor page in day-to-day use.
- [Security: sign-in, data security and compliance](https://mammoth.io/docs/learn/workspace/security/): how the log supports compliance.
- [Invite and manage workspace members](https://mammoth.io/docs/learn/workspace/invite-and-manage-members/): the invites and removals the log records.
- [Workspace and project roles, permissions and custom roles](https://mammoth.io/docs/learn/workspace/members-and-roles/): who can view and export the log.

---
Source: https://mammoth.io/docs/learn/workspace/audit-logs.md · Updated: 2026-11-08