This feature isn't available in the legacy free or Government edition of G Suite or G Suite Essentials. Compare editions
You can track changes to calendars, events, and subscriptions in your Google Calendar audit log. You can also track the email notifications associated with these actions in the audit log. This information is helpful when you troubleshoot issues or when your users notice discrepancies or unexpected changes to their calendars, shared calendars, or specific calendar events. Log entries usually appear within one half-hour of the user action.
From the Admin console Home page, go to Reports.
- On the left, under Audit, click Calendar.
(Optional) To customize what you review, on the right, click Manage columns , select the columns that you want to see or hide, and click Save.
Review ways to filter and export log data and create alerts.
Data you can view
|Activity name||The action that was logged, such as adding or deleting calendars, events, guests, or subscriptions to event reminders and notifications. For details, see Activity names.|
|Activity description||Details of the event described in the Activity name field.|
|User||User who triggered the logged action.|
|Calendar ID||ID of the calendar where the logged action happened.|
|Event title||Title of the calendar event.|
|Event ID||ID of the calendar event.|
|Message ID||ID of the email notification.|
|Recipient email||Recipient of the email notification.|
|Remote EWS URL||
The URL of the Exchange Web Services (EWS) endpoint. Available only when Calendar Interop is turned on.
|Error code||Error code associated with an unsuccessful request. Available only when Calendar Interop is turned on.|
|Requested window start||Start of the time window for an availability lookup. Available only when Calendar Interop is turned on.|
|Requested window end||End of the time window for an availability lookup. Available only when Calendar Interop is turned on.|
|API kind||API through which the logged action was made. Options include:|
|User agent||User agent software associated with the calendar event.|
|Date||Date and time the event occurred (displayed in your browser's default time zone).|
|IP address||Internet Protocol (IP) address associated with the logged action. Usually reflects the user's physical location, but could be a proxy server or a virtual private network (VPN) address.|
At Add a filter, select an Activity name to filter data for that event. The audit report will show log entries for each time that event occurred during the time range that you set. The event names are self-explanatory. For example, if you select Calendar created, your report will show a log entry for each time a user created a calendar.