Search
Clear search
Close search
Google apps
Main menu

Google Apps is now G Suite. Same service, new name. More about the name change.

Calendar audit log

View changes to your users’ calendars, events, and subscriptions

This feature isn't available in the legacy free edition of Google Apps or the government edition of G Suite.

As a G Suite administrator, you can track changes to calendars, events, and subscriptions for users in your domain in the Google Calendar audit log. You can also troubleshoot when your users notice discrepancies and unexpected changes to their calendars, shared calendars, or specific calendar events. Log entries usually appear within half an hour of the user action.

Step 1: Open your Calendar audit log

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console dashboard, go to Reports.

    To see Reports, you might have to click More controls at the bottom.

  3. Click Calendar.
  4. On the toolbar, click Select columns Select columns. Then select the data you want to show in your log.
  5. See below for how to interpret and customize log data.

Step 2: Understand Calendar audit log data

Data you can view
Data Type Description
Activity name The action that was logged, such as adding or deleting calendars, events, guests, or subscriptions to event reminders and notifications. See Activity name descriptions for details.
Activity description Details of the event described in the Activity name field.
User Email address of the user who triggered the event.
Calendar ID Name of the calendar in which the event resides.
Event title Title of the calendar event.
Event ID ID number of the calendar event.
API kind API through which the change was made. Options include:
  • Unknown
  • API V3 (usually Android)
  • Web
  • GData (usually older Android devices)
  • iCal (event invitations from other calendar systems)
  • CalDAV (usually Apple® devices)
User agent User agent software associated with the calendar event.
Date Date and time the event occurred (displayed in your browser's default time zone).
IP address Internet Protocol (IP) address that you use to sign in to the Admin console. This might reflect your physical location, but it can be something else like a proxy server or a Virtual Private Network (VPN) address.
Activity name descriptions

Here are types of activity that are available under the Activity name column (see above):

Activity name Description
Calendar access level(s) changed Log entry for each time a calendar access level changes.
Calendar country changed Log entry for each time a calendar country changes.
Calendar created Log entry for each time a calendar is created.
Calendar deleted Log entry for each time a calendar is deleted.
Calendar description changed Log entry for each time a calendar description is changed.
Calendar location changed Log entry for each time a calendar location is changed.
Calendar time zone changed Log entry for each time a calendar time zone is changed.
Calendar title changed Log entry for each time a calendar title is changed.
Event created Log entry for each time an event is created.
Event deleted Log entry for each time an event is deleted.
Event guest added Log entry for each time a guest is added to an event.
Event guest removed Log entry for each time a guest is removed from an event.
Event guest response changed Log entry for each time a guest response changes for an event.
Event modified Log entry for each time an event is modified. This generic entry is only shown when no more specific action log entries are available.
Event removed from trash Log entry for each time an event is permanently removed from the calendar trash.
Event restored Log entry for each time an event is restored from the calendar trash.
Event start time changed Log entry for each time an event start time is changed.
Event title modified Log entry for each time an event title is modified.
Subscription created Log entry for each time a subscription is created.
Subscription deleted Log entry for each time a subscription is deleted.

Step 3: Customize and export your audit log data

Filter the audit log data by user or activity

You can narrow your audit log to show specific events or users. For example, find all log events for when users created or deleted a calendar, or find all Calendar activity for a particular user.

  1. Open your Calendar audit log as shown above.
  2. If you don't see the Filters section, click Filter Filter.
  3. Enter or select the criteria for your filter. You can filter on any combination of the data you can view in the log.
  4. Click Search.

Export your audit log data

You can export your Calendar audit log data to a Google Sheet, or download it to a CSV file.

  1. Open your Calendar audit log as shown above.
  2. (Optional) To change the data to include in your export, on the toolbar, click Select columns Select columns.
  3. On the toolbar, click Download Download.

You can export up to 210,000 cells. The maximum number of rows depends on the number of columns you select.

Change how much data you show

You won’t see complete data up to the present day. Instead, activity in recent days might only be partially reported while it’s still being collected. To choose an end date for collecting data and see the most recent date full data is available:

  1. At the top, next to the calendar, click the Down arrow Down Arrow.
  2. In the calendar, choose an end date for collecting data in your report.

    A green background marks the latest date when all data are collected. You can select a date after that, but later days might report only partial data.

For details on exactly when data becomes available and how long it's retained, see Data retention and lag times.

Step 4: Set up email alerts

You can easily track specific Calendar activities by setting up alerts. For example, get an alert whenever someone creates or deletes a calendar.

  1. Open your Calendar audit log as shown above.
  2. If you don't see the Filters section, click Filter Filter.
  3. Enter or select the criteria for your filter. To set up an alert, you can filter on any combination of the data you can view in the log except date and time range.
  4. Click Set Alert.
  5. In the Set alert: Calendar box, enter a name for the alert.
  6. Check the box to deliver the alert to the account super administrators.
  7. Enter the email addresses of any other alert recipients.
  8. Click Save.

To edit your custom alerts, see Administrator email alerts.

Was this article helpful?
How can we improve it?
Sign in to your account

Get account-specific help by signing in with your G Suite account email address, or learn how to get started with G Suite.