Why can’t I find an action in the audit log?

The entry may not have been recorded yet (it can take a few minutes), it may concern a background job without its own entry, or it may already have expired after the retention period. Actions performed by your clients on your website are not part of the audit log: check the Timeline instead.

I see a sign-in from an unfamiliar location — should I worry?

Open the entry to check the IP address and its origin, and consider whether you were traveling or using a VPN. If you are in doubt, change your password and enable two-factor authentication (please refer to the help on two-factor authentication for more details!). Make sure to not share your own login and password, and use the team member feature instead if multiple persons need access to the account.

What does “PhotoDeck support” in the log mean?

It marks actions performed by our support staff while working on your account, typically at your request, for example to fix a configuration or investigate an issue. The action, its outcome and the resource concerned are recorded like for any other entry.

What is a Request ID?

A unique identifier shared by all the log entries produced by the same interaction (for example a page you opened, or an API request). Clicking on it filters the log to those entries, and including it in a support request lets us retrieve the exact technical trace of what happened.

What is the difference between the audit log and the Timeline?

The audit log records actions performed on your account in the admin space (by you, your team members, PhotoDeck support or through the API), while the Timeline shows your clients’ recent activity on your website.

The audit log

The audit log is your account’s activity log: a chronological, read-only record of the actions performed on your account, by you and your team members in your admin space, including through our API, and by PhotoDeck support. For each action, it shows what was done, who did it, when, from where, and whether it succeeded. You can open it under Avatar / Audit log.

It is particularly useful to understand what has happened on your account, to review who signed in and when, and to pinpoint a specific action when working with our support team.

What the audit log records

More than 200 different actions are tracked, each identified by a technical name such as media.created or gallery.shared:

Sign-ins and sign-outs, including failed sign-in attempts, and password or two-factor authentication changes
Account and subscription management: renewals, plan changes, termination…
Media library operations: uploads, metadata updates, deletions, exports, FTP inbox, integrations…
Galleries and collections: settings, sharing, comments…
Website design and content: pages, menus, SEO, redirections, visuals…
Selling: pricing, shipping and tax profiles, coupons, payment setup, orders, lab orders, quotations, clients…
Requests to download your account data, and developer API applications

What the audit log does not record

The audit log covers your admin space. It does not record what your clients and other visitors do on your public website: their visits, selections, downloads and orders are available in the Timeline and in your website statistics instead (please refer to the help on website activity for more details!). Some tasks are also performed in the background without their own entry: please refer to the help on background jobs for more details!

Understanding an entry

Entries are listed with the most recent first (new ones may take a few minutes to appear); click on one to open its details:

Field	What it tells you
When	Date and time of the action.
Who	The person who performed the action: you or a team member by name, or PhotoDeck support, System or Deleted user when nobody in your account performed it.
Action	The action’s technical name, color-coded by outcome.
Outcome	`success`, `failure` or `error`. Failures often indicate a refused security check (wrong password, incorrect one-time code…): repeated failures for actions you did not initiate deserve a closer look.
Resource	The item concerned (a media, a gallery, an order, a user…), clickable to open it, or marked “DELETED” when the item no longer exists.
Application	The API application used, when the action was performed through our developer API.
IP address	The network address the action was performed from, and its origin (country, region) — only shown for entries linked to a user of your account.
Request ID	The unique identifier of the interaction that produced the entry.
Request parameters	The request’s parameters as JSON, with sensitive values removed and long values truncated.

Filtering the audit log

Use the filters at the top of the page to narrow down the list:

Team member (account holder only): show the actions of one team member, or of everybody.
Action: pick a specific action type, or a family such as media.* to match all media-related actions.
Request ID: show only the entries produced by one specific interaction.

The account holder sees the whole log for the account. Team members can open it too, but only see their own actions.

Pinpointing an action for support

When something unexpected happened on your account (a gallery was deleted, a setting changed…), one entry is often all our support team needs to give you a precise answer:

Under Avatar / Audit log, locate the entry by date, person or action type.
Click on it to open its details, and check what was done, by whom, and from where.
Copy the Request ID and include it in your support request: it identifies the exact interaction and lets us retrieve everything related to it on our side.
Done! If you cannot find the entry, the date and time of the action together with the user concerned are usually enough for us to locate it.

Retention policy

Log entries are kept for one month (three months on some accounts); the exact period that applies to your account is displayed at the bottom of the Audit log page. Detailed request parameters are always cleared after one month: older entries remain, but without their parameters. Past that, entries are deleted automatically. Entries cannot be modified or deleted manually, and there is no export facility — but you can filter and consult the log at any time while entries are retained.

FAQ

Why can’t I find an action in the audit log?
The entry may not have been recorded yet (it can take a few minutes), it may concern a background job without its own entry, or it may already have expired after the retention period. Actions performed by your clients on your website are not part of the audit log: check the Timeline instead.
I see a sign-in from an unfamiliar location — should I worry?
Open the entry to check the IP address and its origin, and consider whether you were traveling or using a VPN. If you are in doubt, change your password and enable two-factor authentication (please refer to the help on two-factor authentication for more details!). Make sure to not share your own login and password, and use the team member feature instead if multiple persons need access to the account.
What does “PhotoDeck support” in the log mean?
It marks actions performed by our support staff while working on your account, typically at your request, for example to fix a configuration or investigate an issue. The action, its outcome and the resource concerned are recorded like for any other entry.
What is a Request ID?
A unique identifier shared by all the log entries produced by the same interaction (for example a page you opened, or an API request). Clicking on it filters the log to those entries, and including it in a support request lets us retrieve the exact technical trace of what happened.
What is the difference between the audit log and the Timeline?
The audit log records actions performed on your account in the admin space (by you, your team members, PhotoDeck support or through the API), while the Timeline shows your clients’ recent activity on your website.