Groups audit log

View changes to groups, group memberships, and group messages

You can track changes to groups, group memberships, and group messages for users in your organization using the Google Groups audit log. You can also troubleshoot when users in your domain notice discrepancies and unexpected changes to their group activities. Entries usually appear within half an hour of the user action.

Types of changes you can track

  • Group creation and deletion—You can verify that a group exists and was not recently deleted.
  • Member addition and removal—If a user didn't receive a group message, you can check the audit log to see if the user is a group member. If the user was removed, the audit log also shows who removed them and when.
  • Group posting permission changes—Users may unexpectedly receive a bounce message saying that they're not permitted to post. The audit log shows any changes to the posting permissions that would prevent the user to post.
  • Spam moderation settings—If messages are sent to the moderation queue instead of being posted, the audit log will show if message moderation was a recent settings change.

The Groups audit log is only for the Google Groups interface. It logs both user and admin actions executed using the Google Groups interface. Google Groups actions performed by administrators using the Admin console or the Admin SDK directory API are only logged in the Admin audit logs.

Open the Groups audit log

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Reports.
  3. On the left, under Audit, click Groups.
  4. (Optional) To customize what you review, on the right, click Manage columns Manage columns, select the columns that you want to see or hide, and click Save.

Data you can view

Data Type Description
Event name The action that was logged, such as adding or deleting calendars, events, guests, or subscriptions to event reminders and notifications.
Event description Details of the event described in the Activity name field.
User User who triggered the logged action.
Date Date the logged action occurred.

Event names

At Add a filter, select an Event name to filter data for that event. The audit report shows log entries for each time the particular event occurred during the time range that you set. Most event names are self-explanatory.

When and how long is data available?

See Data retention and lag times.

Related topics

Was this helpful?
How can we improve it?