The activity feed can be exported as a CSV file for offline review, compliance documentation, or to feed into your own SIEM.
How to export
Open the Activity section in the portal. Set any filters you want (category, search), the export respects whatever filter is currently active. Click "↓ Export CSV". The file downloads immediately. The filename includes your organization ID prefix and today's date.
What is included
Each row contains the timestamp, actor (name and email, or "System"), action, category, target type, target ID, IP address, and a JSON blob of details. The CSV is encoded as UTF-8 and every field is properly quoted, so it opens cleanly in Excel, Google Sheets, and BI tools.
Scope of the export
Admins export the full organization feed. Members export only their own actions. Filters (category, search) apply before the 10,000-row cap is enforced, so narrow filters let you reach older events.
The export is itself audited
Every time someone exports the activity CSV, a data.audit_log_exported event is written to the feed with the row count and filter used. This creates a clean paper trail for audit reviews.
Detailed reference
What you can expect
- UTF-8 CSV with quoted fields for Excel/Sheets compatibility
- Full metadata per row: timestamp, actor, action, target, IP, details JSON
- Filter-aware export (category, search both honored)
- Self-auditing: the export itself writes a data.audit_log_exported event
- Filename includes organization ID prefix and ISO date
Limits
- Maximum 10,000 rows per export, narrow the filter for older events
- No PDF or Excel native formats, CSV only
- No scheduled or automated exports, each export is a manual click
What to do
- Set a category filter before exporting if you only need one slice
- Use the search box to scope by actor email or action keyword
- Keep exports in a secure location, they contain PII (actor emails, IPs)
If something looks off
If your export is missing rows you know happened, confirm your filter is not hiding them and check that you are signed in as an admin (members only see their own events).
Important context
Exports contain personally identifiable information (team member emails, IP addresses). Handle them as confidential. They are the authoritative record of portal activity and can be used in compliance reviews, incident investigations, and customer audits.
Last updated 2026-04-13