Calendar audit log

View and track changes to user events in Google Calendar

You can track changes to calendars, events, and subscriptions in your Google Calendar audit log. You can also track the email notifications associated with these actions in the audit log. This information is helpful when you troubleshoot issues or when your users notice discrepancies or unexpected changes to their calendars, shared calendars, or specific calendar events. Log entries usually appear within one half-hour of the user action.

Open the Calendar audit log

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Reports.
  3. On the left, under Audit log, click Calendar.
  4. (Optional) To customize what data you see, on the right, click Manage columns "". Select the columns that you want to see or hideand thenclick Save.

Data you can view

The Calendar audit log provides the following information:

Data Type Description
Activity name The action that was logged, such as adding or deleting calendars, events, guests, or subscriptions to event reminders and notifications. For details, go to Activity names.
Activity description Details of the event described in the Activity name field
User User who triggered the logged action
Calendar ID ID of the calendar where the logged action happened
Event title Title of the calendar event
Event ID ID of the calendar event
API kind API through which the logged action was made. Options include:
  • Android (first- and third-party calendar applications)
  • CalDAV (usually Apple devices)
  • Calendar API
  • Calendar for iOS
  • Calendar Web
  • Gmail ICS Parser (event emails from other calendar systems)
  • Events from Gmail
  • EWS (used by Calendar Interop)
User agent User agent software associated with the calendar event
Recipient email Recipient of the email notification
Message ID ID of the email notification
Remote EWS URL

The URL of the Exchange Web Services (EWS) endpoint.
Available only when Calendar Interop is turned on.

Error code Error code associated with an unsuccessful request.
Available only when Calendar Interop is turned on.
Requested window start Start of the time window for an availability lookup.
Available only when Calendar Interop is turned on.
Requested window end End of the time window for an availability lookup.
Available only when Calendar Interop is turned on.
Date Date and time the event occurred (displayed in your browser's default time zone)
IP address Internet Protocol (IP) address associated with the logged action. Usually reflects the user's physical location, but could be a proxy server or a virtual private network (VPN) address.

Details on activity names

At Add a filter, select an Activity name to filter data for that event. The audit log shows entries for each time that event occurred during the time range that you set. The event names are self-explanatory. For example, if you select Calendar created, your report will show a log entry for each time a user created a calendar.

When and how long is data available?

Go to Data retention and lag times.

Related topics



Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.

Was this helpful?
How can we improve it?

Need more help?

Sign in for additional support options to quickly solve your issue

Search
Clear search
Close search
Google apps
Main menu
Search Help Center
true
73010
false