Audit Logs: What’s Included and Key Details

Audit Logs gives organizations a clear, searchable history of important actions and system events across their EasyDMARC environment. It is designed for customers that need stronger visibility, accountability, and support for security or compliance workflows.

The Audit Logs page is available from Organisation Settings. It provides a timestamped record of actions performed by users who are members of the organization.

Each log entry can include details such as:

• User name and email address
• Date and time of the action
• Action type
• Related entity, such as a domain, group, or user
• Country and IP address
• Platform

The page also includes a detailed action view so administrators can review activity with additional context.

Admin users can review audit activity by narrowing results with built-in filters.

Available filtering options include:

• Searching for actions performed by a selected user
• Filtering by action type
• Selecting a date range

These controls make it easier to investigate changes, review access activity, and trace configuration updates over time.

Audit log visibility depends on the customer plan.

• It is possible to pick the date range for which the audit logs are presented. Depending on the type of the plan, Customers get access to audit logs from the last

• MSP Plan → 3 months

• Custom Plan → 6 months

• Enterprise Plan → 12 months

Audit data is collected only for the period during which the customer has an eligible paid plan. Data collection starts as soon as one of the supported paid plans is activated. For existing customers, collection begins from the public release of Audit Logs.

Audit Logs stores a broad range of events across the platform.

• Added a domain
• Removed a domain
• Changed domain type
• Moved a domain to a group

• Created a group
• Deleted a group
• Edited a group

• Activated Managed DMARC
• Changed DMARC record value
• Enabled or disabled failure reports

• Added, removed, or updated an SPF source
• Updated SPF part type or value
• Enabled or disabled an SPF source

• Activated Managed DKIM
• Edited a DKIM record
• Deleted a DKIM record

• Invited a new user
• Changed permissions for an existing user
• Revoked a user’s access to the organization

• Added billing details
• Upgraded a product plan
• Requested cancellation
• Renewed a plan

• Created an alert
• Edited an alert
• Added a recipient to an alert
• Deleted an alert
• Disabled an alert
• Added or removed a domain
• Deleted alert logs
• Marked an alert log as resolved

• Created a scheduled report
• Added or removed a domain from a report
• Edited the report timezone
• Edited report frequency

• Changed names
• Logged in with a new device
• Logged out from a device
• Linked or unlinked accounts
• Activated or deactivated MFA
• Requested account termination
• Left the organization

• Completed SSO configuration
• Logged in with SSO
• Signed up with SSO

• Wrong login password
• Signed up for organization
• User dashboard logins and logouts

• Generated a token, including Pax8 or Acronis tokens
• Connected or disconnected integrations, including PSA integrations

• Uploaded a file for aggregate reports or TLS reports

• Added a domain or IP to monitoring
• Removed a domain or IP from monitoring

• Applied a label
• Removed a label
• Created a label
• Edited a label

Audit Logs is especially valuable for teams that need to understand who changed what and when.

Common use cases include:

• Investigating account or configuration changes
• Reviewing administrative activity across an organization
• Supporting internal security reviews
• Helping enterprise and MSP customers meet operational accountability requirements

For more information on how to access and navigate Audit Logs in your EasyDMARC account, please refer to this article.

Audit Logs provides administrators with a searchable record of important actions in EasyDMARC, including who made the change, when it happened, and what was affected. It is available under Organisation Settings, supports filtering by user, action type, and date range, and retains history based on the customer’s plan level.