Audit log
The audit log is a record of what happened in your HIVE workspace - who did it, what they did, and when. Use it to answer “who changed this?”, to review sign-in activity, or to hand an auditor a CSV.
Where it lives
Section titled “Where it lives”Open Settings and choose the Audit Log tab.
What’s recorded
Section titled “What’s recorded”Every event is filed under one of four categories:
| Category | Covers |
|---|---|
| Content | What your team creates, changes, and publishes, and the answers to post approval requests |
| Auth | Successful sign-ins - password, Microsoft, and SSO |
| Connection | Connecting, reconnecting, and disconnecting platforms |
| Admin | Workspace and settings changes |
Each row shows:
- When - the date and time, in your own time zone.
- Actor - who did it, with their email. Someone who answered a post approval request is marked Contact - see Post approvals.
- Action - the specific event, as a short code such as
post.published. - Category - one of the four above.
- Target - what was acted on, and its type.
- IP - the address the request came from.
- Details - choose View to open the full event, including the fields the table doesn’t have room for.
Some events carry more detail than others, so a dash just means HIVE has nothing recorded for that column.
A YouTube post is recorded when its upload ends. HIVE sends a YouTube video in the background, so its post.published or post.failed event is written when YouTube has the whole video or the upload fails, which can be hours after someone published it. That event names the person who created the post as the actor, whoever published or approved it, and its IP is a dash.
Post approvals
Section titled “Post approvals”Sending a post for approval, and every answer to it, is recorded under Content:
| Action | Recorded when | Actor |
|---|---|---|
post.approval_requested | Someone sends a post for approval | The person who sent it |
post.approval_approved | An approver approves the post | The approver |
post.approval_rejected | An approver sends the post back | The approver |
post.approval_cancelled | A request is withdrawn, including by discarding the draft | The person who withdrew it |
An approver is one of your contacts in Settings → Contacts, not a member of your team, so they have no HIVE account. They’re shown by the name and email you have for them, with a Contact badge beside the name, and in View their user ID is a dash. If an approver sends a post back with a note, the note isn’t copied into the audit log - the event only records whether there was one.
When an approval releases the post, the events it writes at that moment - post.published or post.failed for a post that goes out straight away, post.scheduled for one with a date - show system as the actor, because nobody on your team released it by hand. YouTube is the exception, as described above. The post.approval_approved event beside them names the approver. Opening one of those events with View shows the user ID as “deleted user”; that doesn’t mean anyone’s account was removed. A dated post that later goes out at its scheduled time is recorded like any other scheduled post, under the person who created it.
Inbox settings
Section titled “Inbox settings”A change to Inbox settings in the Unified Inbox is recorded under Admin as settings.inbox_reply_scope_changed, with the admin who saved it as the actor and your company as the target. View shows the choice before and after: workspace is Any of your connected accounts and receiving_account is Only the account that received the comment. Saving without changing the choice records nothing.
Finding an event
Section titled “Finding an event”The log is paginated - 25 at a time, with Previous and Next - and three filters narrow it:
- Category - pick one, or All categories.
- Action - type an action code (for example
post.published) and press Enter. - Date range - pick a range, or Clear dates to go back to everything.
When nothing matches you’ll see “No audit events match these filters.”
Export to CSV
Section titled “Export to CSV”Choose Export CSV to download the log as a spreadsheet-friendly file.
- A date range is optional. With none picked, you get the whole log - everything HIVE still holds, which is up to 12 months. The line under the filters says so: “Exports the full log; select a date range to narrow it (max 366 days).”
- A range can cover at most 366 days - the date picker won’t let you pick a day further back than that.
- Your category and action filters apply to the export too, so you get exactly what you’re looking at.
Retention
Section titled “Retention”HIVE retains audit events for 12 months. The retention period is fixed for every workspace, so there’s nothing to set up.
Events older than 12 months are deleted daily, and that can’t be undone, so export anything you need to keep for longer.