Skip to content

Audit Trail

Audit Trail

The Audit Trail is a record of meaningful actions taken inside OTS Signs — sign-ins, uploads, permission changes, role grants, settings changes, and so on. It’s the answer to “who did this and when?”.

Where to find it: sidebar → Admin group → Audit Trail.

The audit trail captures application-level events. Each entry has:

  • Time — when it happened (your local time zone in the table).
  • Actor — who did it.
  • Action — what category of event it was (see below).
  • Resource — what was acted on (for example, a layout, a user, a folder permission).
  • IP Address — where the request came from.

Common action categories include:

CategoryExamples
loginSuccessful and failed sign-ins.
uploadMedia upload completed or failed.
mediaMedia item deleted.
folder_permissionFolder access granted or revoked.
userUser created, updated, deactivated.
roleRole granted to or revoked from a user or group.
settingsA customer-wide setting changed.

The action column uses color-coded badges so you can spot patterns at a glance — blue for sign-ins, green for content uploads, purple for permission changes, amber for role changes, and so on.

A filter bar sits above the table:

FilterWhat it does
FromShow only entries from this date and time onward.
ToShow only entries up to this date and time.
ActorSearch by actor name. Updates as you type.
ActionPick a specific action (for example, role.granted) or leave at “All actions”.

Filters apply immediately and can be combined. Pagination resets to the first page whenever you change a filter.

Entries are returned 50 at a time. Use the Previous and Next buttons at the bottom of the page to move through the results. The total entry count and current page position are shown next to the pagination controls.

Use the Export CSV button at the top of the page (next to the filters) to download the current filtered result set — up to 10,000 rows — as a CSV file. The file is named with today’s date so multiple exports don’t overwrite each other.

The export includes time, actor, action, item, item ID, and IP address. It does not include extra system details attached to each entry.

Entries are kept for as long as the Audit log retention setting in Access Management → Settings allows. The default is 365 days; the minimum is 30. Once an entry passes the retention window, it is removed automatically and can’t be recovered. Export anything you need to keep for longer.

Filter by action media.deleted (or the layout-related action) and search for the layout name in the actor column or scan the resource column for the matching ID.

”Has anyone been granted Admin in the last week?”

Section titled “”Has anyone been granted Admin in the last week?””

Set From to seven days ago, leave To blank, and set Action to role.granted. Look for entries where the resource is the Admin role.

”I think someone is signing in from an unusual location”

Section titled “”I think someone is signing in from an unusual location””

Filter on login.success for the user in question and look at the IP Address column over a few days. Anomalies tend to stand out.

Set the date range you need, leave other filters at their defaults, and click Export CSV. Store the file with your other compliance records — the in-app audit log will eventually age out.

  • Access Management — where the retention setting lives.
  • Reports — for content-playback statistics rather than user actions.