Calendar audit log

View and track changes to user events in Google Calendar

This feature isn't available in the legacy free or Government edition of G Suite or G Suite Essentials. Compare editions

You can track changes to calendars, events, and subscriptions in your Google Calendar audit log. You can also track the email notifications associated with these actions in the audit log. This information is helpful when you troubleshoot issues or when your users notice discrepancies or unexpected changes to their calendars, shared calendars, or specific calendar events. Log entries usually appear within one half-hour of the user action.

Open the Calendar audit log

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in

  2. From the Admin console Home page, go to Reports.
  3. On the left, under Audit, click Calendar.
  4. (Optional) To customize what you review, on the right, click Manage columns "", select the columns that you want to see or hide, and click Save.

Data you can view

Data Type Description
Activity name The action that was logged, such as adding or deleting calendars, events, guests, or subscriptions to event reminders and notifications. For details, see Activity names.
Activity description Details of the event described in the Activity name field.
User User who triggered the logged action.
Calendar ID ID of the calendar where the logged action happened.
Event title Title of the calendar event.
Event ID ID of the calendar event.
Message ID ID of the email notification.
Recipient email Recipient of the email notification.
Remote EWS URL

The URL of the Exchange Web Services (EWS) endpoint. Available only when Calendar Interop is turned on.

Error code Error code associated with an unsuccessful request. Available only when Calendar Interop is turned on.
Requested window start Start of the time window for an availability lookup. Available only when Calendar Interop is turned on.
Requested window end End of the time window for an availability lookup. Available only when Calendar Interop is turned on.
API kind API through which the logged action was made. Options include:
  • Android (first- and third-party calendar applications)
  • CalDAV (usually Apple devices)
  • Calendar API
  • Calendar for iOS
  • Calendar Web
  • Gmail ICS Parser (event emails from other calendar systems)
  • Events from Gmail
  • EWS (used by Calendar Interop)
User agent User agent software associated with the calendar event.
Date Date and time the event occurred (displayed in your browser's default time zone).
IP address Internet Protocol (IP) address associated with the logged action. Usually reflects the user's physical location, but could be a proxy server or a virtual private network (VPN) address.

Details on activity names

At Add a filter, select an Activity name to filter data for that event. The audit report will show log entries for each time that event occurred during the time range that you set. The event names are self-explanatory. For example, if you select Calendar created, your report will show a log entry for each time a user created a calendar.

When and how long is data available?

See Data retention and lag times.

Related topics

Google, G Suite, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.

Was this helpful?
How can we improve it?