---
title: "Audit Log Knowledge Base Article | ThreatConnect"
slug: "audit-log"
description: "This article describes the Audit Log option on the side navigation bar of the Playbook Designer."
updated: 2022-08-30T15:07:47Z
published: 2022-08-30T15:07:47Z
canonical: "knowledge.threatconnect.com/audit-log"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://knowledge.threatconnect.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Audit Log

The **Audit Log** provides a detailed list of all changes made to a Playbook by users in the Organization. Click the ![Icon Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/audit-log-image-ncsp4hof.png)**Audit Log** button in the side navigation bar to display the **Audit Log** pane (Figure 1). You can search the Audit Log for specific records and use search terms to identify changes to a Playbook.

![](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/audit-log-image-2ixrphtb.png)

- **Search bar**: Use the search bar to search for any text in the columns in the table. For example, searching for **created** will identify records with the term “created” in any of the column fields (which, in this example, would result in the three records that have the term “created in the **Action** column).
- **Time**: This column provides date and time (MM-DD-YY HH:MM format) information for a change action.
- **Section**: This column provides information on what aspect of the Playbook design or functionality was changed.
- **Element**: This column provides information on the Playbook element that was modified.
- **Action**: This column describes the action that occurred: C**reated**, **Changed**, **Modified**, **Deleted**, **Activated**, or **Deactivated**.
- **User**: This column identifies the user that made the change.
- **Name**: This column provides the user-defined name of the Playbook element.
- **From**: For changes in the state of a single element, this column provides the state before the change was made. For **Connection** elements (i.e., a connection was made or broken between two Playbook elements), this column provides the name of the first element in the connection**.**
- **To**: For changes in the state of a single element, this column provides the state after the change was made. For **Connection** elements (i.e., a connection was made or broken between two Playbook elements), this column provides the name of the second element in the connection**.**

---

*ThreatConnect® is a registered trademark of ThreatConnect, Inc.*

20110-20 v.02.B