Google Meet audit log

As an administrator, you can track video-meeting activity in your organization using the Google Meet audit log. For example, you can find out when a user starts a meeting, where they’re joining meetings from, and who was in a meeting.

Need help during a meeting or for a specific meeting? 

You can troubleshoot meetings in real time using the Meet quality tool. Go to Track meeting quality and statistics.

Open the Meet audit log

1. Sign in to your Google Admin console.

   Sign in using your administrator account (does not end in @gmail.com).

2. From the Admin console Home page, go to Reports.
3. On the left, under Audit log, click Google Meet.

4. (Optional) To customize what data you see, on the right, click Manage columns . Select the columns that you want to see or hideclick Save.

5. (Optional) Review ways to filter and export log data and create alerts.

Data you can view

The Google Meet audit log provides the following information:

Data type	Description
Date	Date and time of the event (displayed in your browser's default time zone)
Event name	The action that was logged, such as a device (endpoint) leaving a meeting
Event description	Details about the action
Meeting code	Code for the meeting, for example, abc-hexp-tqy. Recurrent meetings have the same meeting code.
Participant identifiers	Information about meeting participants. See participant identifiers. Note: Participants who use a phone for audio and a separate device for video are listed twice in the activity logs: once for their video connection and once for their phone connection.

Participant identifiers

Participant identifiers in the Google Meet audit log help you understand who joined meetings inside and outside your organization (internal and external meetings). Depending on the participant and meeting type, information in the log might be:

• Shown as clear text—Displayed as unmasked, readable text.
• Obscured—Displayed with asterisks (*) to mask the information. For example, an obscured email address might include these characters:  li***@s***.com.
• Not shown—Information that's not displayed in the log.

The following table shows the participant identifiers available in the log. It also helps you understand what's available to other organizations when people from your organization join in their meetings. 

Identifier	Information available for participants
Phone number	Obscured for all
Email & device ID	Internal & external participants in your organization's meetings: Shown as clear text External participants in external meetings: Obscured
Name	Shown as clear text for all
Country, region, and IP address	Internal participants in your organization's meetings: Shown as clear text External participants in any meeting: Not shown
Organizer email	Organizers of meetings inside your organization: Shown as clear text Organizers of meetings outside your organization: Obscured

Note: When the participant is an anonymous user, the Participant identifier field is blank and the Participant Name field will have the name submitted by the user.

Filter by Activity name

At Add a filter, select an Activity name to filter data for that event. The audit log shows entries for each time that event occurred during the specified time range.

Activity name	Description
Abuse report submitted	Details on participants who report abusive behavior, including a description of the abuse. You might also get the email address or phone number of removed and reported participants. Note: If the participant was removed and there is no description of abuse, you will not get log data.
Endpoint left	The endpoint left a video meeting.
Livestream watched	The viewer watched a livestream of a meeting on view page.

Event names

Most event names are self-explanatory. However, you might get more detailed entries, such as:

Activity name	Description
Network congestion ratio	Percentage of time that the network prevented a device from sending higher-quality video due to insufficient or unstable bandwidth, such as high or unstable jitter. Watch this metric to detect network regression in your organization.
Jitter	Variation of the latency on packets flowing between Google servers and a device in a video meeting. In an ideal network, packets come at a constant interval. In reality, the network introduces a variety of delays, which cause the packets to come at irregular intervals.
Network round trip time	Length of time it takes for a packet to travel to Google servers and come back, in milliseconds (ms).
Bitrate	Amount of audio or video information received or sent, in kilobits per second (KBps).
Estimated download bandwidth or Estimated upload bandwidth	Approximate amount of network bandwidth used to send and receive audio, video, and presentation data, in kilobits per second (KBps).

When and how long is data available?

Go to Data retention and lag times.

Get other Meet data

• For exact call times, including cost, go to the Voice audit log.
• Review events and parameters for various types of Google Meet Audit activity events using APIs in the Google Workspace Admin SDK.

Related topics

• Available audit logs
• Filter & export log data & create alerts