Audit logs require the Business plan. If you are on the Free, Solo, or Team plan and need audit logging for compliance purposes, upgrade your plan to unlock this feature.
What is logged
Knoq writes an audit entry for every admin action and member lifecycle event. Each entry records the event type, the actor who triggered it, the affected subject, and the timestamp.| Event type | Description |
|---|---|
member.joined | A member accepted an invitation and joined the organization |
member.removed | An admin removed a member from the organization |
member.invite_sent | An admin sent an invitation to an email address |
member.invite_resent | An admin resent an invitation (token was rotated) |
member.invite_revoked | An admin revoked a pending invitation |
member.invite_expired | An invitation expired without being accepted |
sso.configured | An admin saved a new SSO provider configuration |
sso.enforced | An admin enabled or disabled SSO enforcement |
session.cancelled | A chat session was cancelled by the user or an admin |
admin.impersonation | A platform admin accessed your organization for support purposes |
Viewing the audit log
The audit log is accessible to all admins in your organization.Go to Admin > Audit Log
In the sidebar, click Admin, then select Audit Log. The log opens with the most recent entries at the top.
Filter the log
Use the filter controls to narrow the results:
- Date range — restrict entries to a specific period
- Event type — show only a particular category of events (for example, all
sso.*events) - Member — show only events involving a specific member’s email or user ID
Log retention
The audit log is append-only. Entries are written once and cannot be modified or deleted by anyone, including platform admins. This design ensures the log remains a trustworthy record for compliance purposes. Knoq retains audit log entries for the lifetime of your organization. There is no rolling deletion window — events from the day you enabled the Business plan remain accessible alongside the most recent entries.Exporting logs
You can download the complete audit log, or a filtered subset of it, for use in external compliance tooling, SIEM systems, or internal record-keeping.Apply any filters
Use the date range, event type, and member filters to scope the export to the records you need. An unfiltered export includes every entry in the log.
Choose a format
Select Export as CSV or Export as JSON depending on how you intend to process the data.