Classroom log events

The audit log page has been replaced with a new audit and investigation page. For information about this change, go to Improved audit and investigation experience: What's new in Google Workspace

Important: You must have one of the Google Workspace for Education editions, or Google Workspace for Nonprofits, to access Classroom log event data.

You can use the audit and investigation page to run searches related to Classroom log events. There you can view a record of actions to analyze user activity in Classroom, such as:  

• Review common activities, such as who removed a student from a class or archived a class
• Troubleshoot common user scenarios  

Open the audit & investigation page

Access Classroom log event data

1. Sign in to your Google Admin console.

   Sign in using your administrator account (does not end in @gmail.com).

2. On the left, click ReportingAudit and investigationClassroom log events.

Filter the data

1. Open the log events as described above in Access Classroom log event data.
2. Click Add a filter, and then select an attribute.
3. In the pop-up window, select an operatorselect a valueclick Apply.
4. (Optional) To create multiple filters for your search:

   1. Click Add a filter and repeat step 3.
   2. (Optional) To add a search operator, above Add a filter, select AND or OR.
5. Click Search.

Note: Using the Filter tab, you can include simple parameter and value pairs to filter the search results. You can also use the Condition builder tab, where the filters are represented as conditions with AND/OR operators.

Attribute descriptions

For this data source, you can use the following attributes when searching log event data:

Attribute	Description
Actor	Email address of the user who performed the action—for example, the user who created the course, or the user who published an announcement
Actor group name	Group name of the actor
Actor organizational unit	Organizational unit of the actor
Add-on ID	Unique identifier for an add-on
Add-on title	Title of the add-on
Add-on attachment ID	Unique identifier for an add-on attachment
Add-on attachment title	Title of the add-on attachment
Add-on actor	The third party or user who performs the operation on the add-on attachment
Course ID	Unique identifier for a course
Course name	Name of the course
Course role	Whether a user is a student or teacher in a course
Course work title	Title of the course work
Course work type	Type of course work, such as Assignment or Question
Date	Date and time of the event (displayed in your browser's default time zone)
Document ID	Unique identifier for a submission
Due date	Date a student's work is due
Event	The logged event action, such as Course created or User joined course
Event source	Whether or not the source of the event is from an API
Guardians	Email addresses of the student's guardians
Has grade	Whether or not a submission has a grade
Impacted users	List of impacted email addresses
Invite status	Whether a course or role invite was accepted
IP address	The IP address used to sign in. Usually the address is the user's physical location. It can also be a proxy server or a Virtual Private Network (VPN) address.
Is late	Whether or not a submission is late
Join method	The way a user joined the course—for example, From an invitation or From a course code
Post ID	Unique identifier for a piece of course work
Previous course owner	The previous course owner's email address
Previous email	The user's previous email address
Submission state	Submission state of a course work—for example, Created, Turned in, Returned, Reclaimed by student, or Student edited after turn-in
Summaries status	Whether guardian summaries are enabled on the course

Filter data by class events

To see data related to class membership, class events, or class work, filter by event and then select an event value.

1. Open the log events as described above in Open Classroom log event data.
2. Click Add a filterEvent.
3. Select the operator.
4. From the drop down list, select a value.
5. Click Apply.

Export data to BigQuery

Important:

• You must have an Education Standard or Education Plus account.
• Your administrator must enable the option to export.

To export your data to BigQuery:

1. Sign in to your Google Admin console. 
   Sign in using your administrator account, not your personal Gmail account.
2. On the left, click Reporting  BigQuery Export.

Manage log event data

Manage search results column data

You can control which data columns appear in your search results.

1. At the top-right of the search results table, click Manage columns .
2. (Optional) To remove current columns, click Remove .
3. (Optional) To add columns, next to Add new column, click the Down arrow  and select the data column.
   Repeat as needed.
4. (Optional) To change the order of the columns, drag the data column names.
5. Click Save.

Export search result data

1. At the top of the search results table, click Export all.
2. Enter a name  click Export.
   The export displays below the search results table under Export action results.
3. To view the data, click the name of your export.
   The export opens in Google Sheets.

Create reporting rules

Go to Create and manage reporting rules.

When and how long is data available?

Go to Data retention and lag times.

Related resourses

• Data sources for the audit and investigation page