> ## Documentation Index
> Fetch the complete documentation index at: https://ownpay.org/docs/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> OwnPay is licensed under AGPL-3.0 and is completely free - no licensing fees.
> Production docs URL: https://ownpay.org/docs - append .md to any page URL for clean markdown.
> OwnPay requires PHP 8.3+, MySQL/MariaDB, and Redis.
> MCP server available at https://ownpay.org/docs/mcp for programmatic documentation queries.
> Use root-relative links (e.g. /quickstart) for internal navigation - do NOT include /docs prefix.
> Plugin development: consult /developer/plugins/ pages for correct interfaces and manifests.
> Canonical locations: API auth = /api/authentication, webhook verification = /api/webhooks, rate limits = /resources/rate-limiting, transaction statuses = /fundamentals/payment-flow.
> The documentation uses the Diataxis framework: Tutorials (learning), How-to (tasks), Reference (lookup), Explanation (understanding).

# Audit Log

> Review a chronological log of all staff actions for compliance, accountability, and security investigation.

The Audit Log records every significant action performed by staff members in the admin panel. It is your primary tool for compliance reporting, security investigations, and accountability tracking.

## What is logged

OwnPay logs the following action categories:

* **Authentication** - Logins, logouts, failed attempts, 2FA events
* **Financial** - Payment creations, manual refunds, ledger adjustments
* **Configuration** - Settings changes, gateway modifications, brand updates
* **Data** - Customer creation, invoice generation, export actions
* **System** - Plugin installs, addon activations, system updates

## Log entry fields

Each audit log entry contains:

| Field          | Description                                                   |
| -------------- | ------------------------------------------------------------- |
| **Timestamp**  | Exact date and time (in your configured timezone)             |
| **User**       | Staff member who performed the action                         |
| **Action**     | The type of action (for example, `payment.refund.create`)     |
| **Entity**     | The affected resource (for example, transaction ID, brand ID) |
| **Changes**    | JSON diff of before and after values for update actions       |
| **IP Address** | The IP address of the requester                               |

## Search and filter

Use the search bar to find entries by **user name**, **action type**, or **entity ID**. Combine with the date range picker and action category dropdown to narrow results.

<Info>
  Audit log queries use a full-text index on the changes field, so searching for specific values within change diffs is fast even with millions of entries.
</Info>

## Export

Click **Export CSV** to download the currently filtered log entries. Exports include all fields and are useful for external compliance reviews or archiving.

<Warning>
  Exported CSV files contain sensitive data including IP addresses and change diffs. Store exports securely and do not commit them to version control.
</Warning>

## Retention policy

Audit logs are retained indefinitely by default. If your compliance requirements mandate a specific retention period, you can configure automatic pruning in **Settings > Advanced > Audit Log Retention (days)**. Set to `0` to disable automatic pruning.

## Related Pages

* [Dashboard](/docs/reports/dashboard) - High-level metrics and quick links
* [Balance Verification](/docs/reports/balance-verification) - Reconcile your double-entry ledger
* [Disputes](/docs/reports/disputes) - Track chargebacks and dispute outcomes


## Related topics

- [Security and Compliance](/docs/resources/security-compliance.md)
- [Login](/docs/security/login.md)
- [Features and Capabilities](/docs/resources/features.md)
- [My Account](/docs/security/my-account.md)
- [Dashboard](/docs/reports/dashboard.md)